What is fpsaud?

aubreyapple · 06-10-2012, 06:11 PM

I just started getting harassed by fpsaud attempting to contact fpdownload.macromedia.com but being blocked by Little Snitch. Is this legit or is it a virus? The location suggests it is another Adobe phone home thing because it is located here: /Library/Application Support/Adobe/Flash Player Install Manager/fpsaud. That said, there have been recent Adobe spoofs too, hence the question. Google search found nothing. The file is dated May 31.

NaOH · 06-10-2012, 06:21 PM

Apparently, that's part of the new Flash Player auto-update feature which was introduced with version 11.3. That was released just a couple days ago, so I'm guessing you have updated to that version. From what I've read, the update mechanism checks once a day.

https://groups.google.com/forum/#!ms...c/8ahrVMBxoLIJ

DeltaMac · 06-10-2012, 06:31 PM

I would say it's (probably) legit.
The latest Flashplayer (11.3) adds silent updates, and I expect that's part of the update process.
Adobe just added that, and silent updates would certainly need to contact the 'home' server, whatever that is. So, you can either allow that in Little Snitch, or go into your System Preferences/Flash Player/Advanced tab, and turn off the automatic updates, if you so choose.

@NaOH - is there supposed to be something legitimate at the Google link you provided? I just get a generic login for Google on that one.

Ah - never mind. the dude (me) just doesn't have a google account, my bad!

aubreyapple · 06-10-2012, 06:31 PM

Ah, thank-you. I think I may just leave it 'denied'... Interesting that fpsaud clearly appears in your reference but Google Search did not find it for me.

chinajon · 07-12-2012, 05:10 AM

Flash is a ubiquitous plugin that is used by thousands of sites. It is the mechanism by which the Malware was installed into OSX. Users went to a hacked site and were informed that they were using an old version of Flash and should update. They were sent to a fake site which uploaded the malware/hacked Flash.
Adobe has put the auto update into the new Flash to allow people to avoid clicking fake update buttons. I think it would be best to allow the Flash Updater to check for new updates. Adobe should let users of Flash know that they need not update manually any more.

chinajon · 07-12-2012, 05:28 AM

Flash is a ubiquitous plugin that is used by thousands of sites. It is the mechanism by which the Malware was installed into OSX. Users went to a hacked site and were informed that they were using an old version of Flash and should update. They were sent to a fake site which uploaded the malware/hacked Flash.
Adobe has put the auto update into the new Flash to allow people to avoid clicking fake update buttons. I think it would be best to allow the Flash Updater to check for new updates. Adobe should let users of Flash know that they need not update manually any more.

chinajon · 07-12-2012, 05:39 AM

fpsaud: Flash Player Secure Automatic Up Date

benwiggy · 07-12-2012, 08:59 AM

If you have Flash installed, and you want to get security updates as soon as they happen, then you should ALLOW this.
Getting the latest Flash updates will reduce the risk of malware, as soon as patches are released.

So: "better Flash security" on one side, versus "A program is checking something on the internet without my express permission!" on the other.

ankh · 03-02-2013, 06:29 PM

Quote:

Originally Posted by benwiggy


	If you have Flash installed, and you want to get security updates as soon as they happen, then you should ALLOW this. Getting the latest Flash updates will reduce the risk of malware, as soon as patches are released. So: "better Flash security" on one side, versus "A program is checking something on the internet without my express permission!" on the other.

Would you still say that today?
And how would you weigh the choice?

benwiggy · 03-03-2013, 01:47 AM

Quote:

Originally Posted by ankh


	Would you still say that today? And how would you weigh the choice?

Yes.
Personally, it doesn't bother me one little bit that processes may be checking things across the internet.
I would rather have an up-to-date version of Flash than worry about all the connections that something like LittleSnitch allows you to worry about.

06-10-2012, 06:11 PM	#1
aubreyapple All Star Join Date: Aug 2002 Posts: 561	What is fpsaud? I just started getting harassed by fpsaud attempting to contact fpdownload.macromedia.com but being blocked by Little Snitch. Is this legit or is it a virus? The location suggests it is another Adobe phone home thing because it is located here: /Library/Application Support/Adobe/Flash Player Install Manager/fpsaud. That said, there have been recent Adobe spoofs too, hence the question. Google search found nothing. The file is dated May 31.

06-10-2012, 06:31 PM	#3
DeltaMac League Commissioner Join Date: Jan 2002 Posts: 7,942	I would say it's (probably) legit. The latest Flashplayer (11.3) adds silent updates, and I expect that's part of the update process. Adobe just added that, and silent updates would certainly need to contact the 'home' server, whatever that is. So, you can either allow that in Little Snitch, or go into your System Preferences/Flash Player/Advanced tab, and turn off the automatic updates, if you so choose. @NaOH - is there supposed to be something legitimate at the Google link you provided? I just get a generic login for Google on that one. Ah - never mind. the dude (me) just doesn't have a google account, my bad! Last edited by DeltaMac; 06-10-2012 at 06:45 PM. Reason: added more bad info, eh?

Thread Tools
Show Printable Version Email this Page
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread:

06-10-2012, 06:21 PM	#2
NaOH Hall of Famer Join Date: Dec 2007 Posts: 3,641	Apparently, that's part of the new Flash Player auto-update feature which was introduced with version 11.3. That was released just a couple days ago, so I'm guessing you have updated to that version. From what I've read, the update mechanism checks once a day. https://groups.google.com/forum/#!ms...c/8ahrVMBxoLIJ

07-12-2012, 05:10 AM	#5
chinajon Triple-A Player Join Date: Jul 2006 Posts: 64	Flash is a ubiquitous plugin that is used by thousands of sites. It is the mechanism by which the Malware was installed into OSX. Users went to a hacked site and were informed that they were using an old version of Flash and should update. They were sent to a fake site which uploaded the malware/hacked Flash. Adobe has put the auto update into the new Flash to allow people to avoid clicking fake update buttons. I think it would be best to allow the Flash Updater to check for new updates. Adobe should let users of Flash know that they need not update manually any more.

07-12-2012, 05:28 AM	#6
chinajon Triple-A Player Join Date: Jul 2006 Posts: 64	Flash is a ubiquitous plugin that is used by thousands of sites. It is the mechanism by which the Malware was installed into OSX. Users went to a hacked site and were informed that they were using an old version of Flash and should update. They were sent to a fake site which uploaded the malware/hacked Flash. Adobe has put the auto update into the new Flash to allow people to avoid clicking fake update buttons. I think it would be best to allow the Flash Updater to check for new updates. Adobe should let users of Flash know that they need not update manually any more.

07-12-2012, 05:39 AM	#7
chinajon Triple-A Player Join Date: Jul 2006 Posts: 64	fpsaud: Flash Player Secure Automatic Up Date

07-12-2012, 08:59 AM	#8
benwiggy League Commissioner Join Date: Aug 2006 Posts: 5,039	If you have Flash installed, and you want to get security updates as soon as they happen, then you should ALLOW this. Getting the latest Flash updates will reduce the risk of malware, as soon as patches are released. So: "better Flash security" on one side, versus "A program is checking something on the internet without my express permission!" on the other.