I recently came across the file “FlashPlayer.exe” during the course of regular research.
The file had been distributed with the file name FlashPlayer.exe and not surprisingly, when executed, it shows the following GUI, partly written in Turkish:
Obviously, it’s disguised as an Adobe Flash Player 11 installer.
Here is more info about the file:
File Name: FlashPlayer.exe
File Size: 561,152
VirusTotal: Latest Report
Read the rest of analyze in Microsoft TechNet: http://blogs.technet.com/b/mmpc/archive/2013/03/26/there-was-a-flash-and-then-my-startpage-was-gone.aspx