Skip to main content
To Customer Support To Customer Support

So, I started up my computer like usual and opened google chrome. Except I couldn’t? It was detected as unsafe by both windows firewall and webroot, webroot quickly gave a notification to uninstall the program. I believe it was along the lines of Win- something? I believe 32 and gave the path file of the apparent malware file. I have no downloaded anything on my computer besides discord, steam, and some minecraft files. And google chrome itself. I downloaded malwarebytes for a scan, and it found nothing, and did an optimize with webroot and found nothing. I’ve uninstalled Google Chrome as I couldn’t even open the app anymore. I have no idea what happened. Any help?

Hello @Username9999 

 

Please Save a Scan log and look near the bottom and post the detected file lines in the log!

https://docs.webroot.com/us/en/home/wsa_pc_userguide/wsa_pc_userguide.htm#UsingReportsAndViewers/SavingScanLogs.htm%3FTocPath%3DUsing%2520Reports%2520and%2520Viewers%7C_____1

 

Or Save a Threat Log and post the lines in the log: https://docs.webroot.com/us/en/home/wsa_pc_userguide/wsa_pc_userguide.htm#UsingReportsAndViewers/SavingThreatLogs.htm%3FTocPath%3DUsing%2520Reports%2520and%2520Viewers%7C_____2

 

Thanks,

Something like this:

 

Wed 2020-07-15 18:50:49.0208    Infection detected: C:\Users\Daniel\AppData\Local\Microsoft\Windows\INetCache\IE\PLAI0T5U\wirelessmons1].exe eSHA256: DEDF55DC620FAA77444840342DCF9155BBB6969A899E84A4A783505437CBC571] 7MD5: C34342D14B58AF6BD2E54C2E8BAB704F] 43/00080001] 0W32.Adware.Gen]

Wed 2020-07-15 18:50:49.0208    Infection found in realtime: C:\Users\Daniel\AppData\Local\Microsoft\Windows\INetCache\IE\PLAI0T5U\wirelessmonl1].exe 1UniqueID: DC55DFDE, MD5: C34342D14B58AF6BD2E54C2E8BAB704F, Size: 8192 bytes] b524289/00000003] 0W32.Adware.Gen]

This is what I have installed and no detection:

 

https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html

 

 

This is my threat log, like I said it detected google chrome as a virus for some reason. 

Automated Cleanup Engine
Starting Cleanup at 16/07/2020 - 22:03:16 GMT

Starting Routine> Removing C:\Program Files (x86)\Google\Chrome\Application\chrome.exe...#(PX5:  - MD5: 49B1FC2E069F75C4497A36931715230B - UniqueID: 5EBEDF9B)...
Deleting File> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Terminating Process> 9160 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Terminating Process> 3248 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Terminating Process> 3548 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Terminating Process> 8640 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Terminating Process> 2788 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Terminating Process> 2888 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Terminating Process> 2812 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Terminating Process> 9580 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Terminating Process> 9644 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Writing Registry Value> HKU\S-1-5-21-1794271715-2400498446-864197983-1002\Software\Microsoft\Internet Explorer\Main - Start Page
Deleting Registry Value> HKU\S-1-5-21-1794271715-2400498446-864197983-1002\Software\Microsoft\Internet Explorer\Main - Start Page
Writing Registry Value> HKU\S-1-5-21-1794271715-2400498446-864197983-1002\Software\Microsoft\Internet Explorer\Main - Default_Page_URL
Deleting Registry Value> HKU\S-1-5-21-1794271715-2400498446-864197983-1002\Software\Microsoft\Internet Explorer\Main - Default_Page_URL
 

Hello @Username9999  it could of been a False Positive as Webroot shows it good at this time and notice the date.

 

http://snup.webrootcloudav.com/SkyStoreFileUploader/upload.aspx

 

 

So IMO you can reinstall Google Chrome Release:  https://www.google.com/intl/en_us/chrome/

 

https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html

 

HTH,

Reply


Terms & Conditions