Skip to main content
Customer Support Customer Support
Solved

Google Chrome detected as a virus?

U
Fresh Face

So, I started up my computer like usual and opened google chrome. Except I couldn’t? It was detected as unsafe by both windows firewall and webroot, webroot quickly gave a notification to uninstall the program. I believe it was along the lines of Win- something? I believe 32 and gave the path file of the apparent malware file. I have no downloaded anything on my computer besides discord, steam, and some minecraft files. And google chrome itself. I downloaded malwarebytes for a scan, and it found nothing, and did an optimize with webroot and found nothing. I’ve uninstalled Google Chrome as I couldn’t even open the app anymore. I have no idea what happened. Any help?

Best answer by TripleHelix

Hello @Username9999  it could of been a False Positive as Webroot shows it good at this time and notice the date.

 

http://snup.webrootcloudav.com/SkyStoreFileUploader/upload.aspx

 

 

So IMO you can reinstall Google Chrome Release:  https://www.google.com/intl/en_us/chrome/

 

https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html

 

HTH,

View original
TripleHelix
1 person likes this
  • TripleHelix
    TripleHelix
Did this help you find an answer to your question?

5 replies

TripleHelix
Moderator
Forum|alt.badge.img+63
  • TripleHelix
  • Moderator
  • 8958 replies
  • July 16, 2020

Hello @Username9999 

 

Please Save a Scan log and look near the bottom and post the detected file lines in the log!

https://docs.webroot.com/us/en/home/wsa_pc_userguide/wsa_pc_userguide.htm#UsingReportsAndViewers/SavingScanLogs.htm%3FTocPath%3DUsing%2520Reports%2520and%2520Viewers%7C_____1

 

Or Save a Threat Log and post the lines in the log: https://docs.webroot.com/us/en/home/wsa_pc_userguide/wsa_pc_userguide.htm#UsingReportsAndViewers/SavingThreatLogs.htm%3FTocPath%3DUsing%2520Reports%2520and%2520Viewers%7C_____2

 

Thanks,

Daniel - Microsoft MVP Consumer Security (2012-2016) Windows 10 Pro x64 for Workstations 22H2 on my Alienware 17R2 and Alienware 17R5 Laptops with Webroot SecureAnywhere Complete Beta Tester for PC & Android Moto G9 Plus OS 11. "Take Them to the Train Station" ¯\_(ツ)_/¯
ProTruckDriver
Jasper_The_Rasper
Ssherjj
4 people like this
  • ProTruckDriver
    ProTruckDriver
  • Jasper_The_Rasper
    Jasper_The_Rasper
  • Ssherjj
    Ssherjj
  • TripleHelix
    TripleHelix
TripleHelix
Moderator
Forum|alt.badge.img+63
  • TripleHelix
  • Moderator
  • 8958 replies
  • July 16, 2020

Something like this:

 

Wed 2020-07-15 18:50:49.0208    Infection detected: C:\Users\Daniel\AppData\Local\Microsoft\Windows\INetCache\IE\PLAI0T5U\wirelessmon[1].exe [SHA256: DEDF55DC620FAA77444840342DCF9155BBB6969A899E84A4A783505437CBC571] [MD5: C34342D14B58AF6BD2E54C2E8BAB704F] [3/00080001] [W32.Adware.Gen]

Wed 2020-07-15 18:50:49.0208    Infection found in realtime: C:\Users\Daniel\AppData\Local\Microsoft\Windows\INetCache\IE\PLAI0T5U\wirelessmon[1].exe [UniqueID: DC55DFDE, MD5: C34342D14B58AF6BD2E54C2E8BAB704F, Size: 8192 bytes] [524289/00000003] [W32.Adware.Gen]

Daniel - Microsoft MVP Consumer Security (2012-2016) Windows 10 Pro x64 for Workstations 22H2 on my Alienware 17R2 and Alienware 17R5 Laptops with Webroot SecureAnywhere Complete Beta Tester for PC & Android Moto G9 Plus OS 11. "Take Them to the Train Station" ¯\_(ツ)_/¯
ProTruckDriver
Jasper_The_Rasper
Ssherjj
4 people like this
  • ProTruckDriver
    ProTruckDriver
  • Jasper_The_Rasper
    Jasper_The_Rasper
  • Ssherjj
    Ssherjj
  • TripleHelix
    TripleHelix
TripleHelix
Moderator
Forum|alt.badge.img+63
  • TripleHelix
  • Moderator
  • 8958 replies
  • July 16, 2020

This is what I have installed and no detection:

 

https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html

 

 

Daniel - Microsoft MVP Consumer Security (2012-2016) Windows 10 Pro x64 for Workstations 22H2 on my Alienware 17R2 and Alienware 17R5 Laptops with Webroot SecureAnywhere Complete Beta Tester for PC & Android Moto G9 Plus OS 11. "Take Them to the Train Station" ¯\_(ツ)_/¯
ProTruckDriver
Jasper_The_Rasper
Ssherjj
5 people like this
  • ProTruckDriver
    ProTruckDriver
  • Jasper_The_Rasper
    Jasper_The_Rasper
  • Ssherjj
    Ssherjj
  • TripleHelix
    TripleHelix
  • DebE
    DebE
U
Fresh Face
  • Username9999
  • Author
  • Fresh Face
  • 2 replies
  • July 18, 2020

This is my threat log, like I said it detected google chrome as a virus for some reason. 

Automated Cleanup Engine
Starting Cleanup at 16/07/2020 - 22:03:16 GMT

Starting Routine> Removing C:\Program Files (x86)\Google\Chrome\Application\chrome.exe...#(PX5:  - MD5: 49B1FC2E069F75C4497A36931715230B - UniqueID: 5EBEDF9B)...
Deleting File> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Terminating Process> 9160 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Terminating Process> 3248 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Terminating Process> 3548 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Terminating Process> 8640 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Terminating Process> 2788 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Terminating Process> 2888 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Terminating Process> 2812 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Terminating Process> 9580 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Terminating Process> 9644 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Writing Registry Value> HKU\S-1-5-21-1794271715-2400498446-864197983-1002\Software\Microsoft\Internet Explorer\Main - Start Page
Deleting Registry Value> HKU\S-1-5-21-1794271715-2400498446-864197983-1002\Software\Microsoft\Internet Explorer\Main - Start Page
Writing Registry Value> HKU\S-1-5-21-1794271715-2400498446-864197983-1002\Software\Microsoft\Internet Explorer\Main - Default_Page_URL
Deleting Registry Value> HKU\S-1-5-21-1794271715-2400498446-864197983-1002\Software\Microsoft\Internet Explorer\Main - Default_Page_URL
 

Jasper_The_Rasper
1 person likes this
  • Jasper_The_Rasper
    Jasper_The_Rasper
TripleHelix
Moderator
Forum|alt.badge.img+63
  • TripleHelix
  • Moderator
  • 8958 replies
  • Answer
  • July 18, 2020

Hello @Username9999  it could of been a False Positive as Webroot shows it good at this time and notice the date.

 

http://snup.webrootcloudav.com/SkyStoreFileUploader/upload.aspx

 

 

So IMO you can reinstall Google Chrome Release:  https://www.google.com/intl/en_us/chrome/

 

https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html

 

HTH,

Daniel - Microsoft MVP Consumer Security (2012-2016) Windows 10 Pro x64 for Workstations 22H2 on my Alienware 17R2 and Alienware 17R5 Laptops with Webroot SecureAnywhere Complete Beta Tester for PC & Android Moto G9 Plus OS 11. "Take Them to the Train Station" ¯\_(ツ)_/¯
ProTruckDriver
Jasper_The_Rasper
Ssherjj
4 people like this
  • ProTruckDriver
    ProTruckDriver
  • Jasper_The_Rasper
    Jasper_The_Rasper
  • Ssherjj
    Ssherjj
  • TripleHelix
    TripleHelix

Reply


Terms & Conditions