The eagle eyes of Jim Hamm have found some valuable info on how to avoid malware. He sends this MacWorld article which describes the problem of a bogus Flash installer and gives a solution, along with a list of similar articles. One point is to make Safari safer by going to Safari > Preferences > General and unchecking where it says "Open 'Safe' files after downloading." This second article tells about safe downloading.