You are here

Trojaner in Google Chrome (downloaded @ portableapps.com)

6 posts / 0 new
Last post
mgutt
Offline
Last seen: 12 years 10 months ago
Joined: 2011-03-31 09:46
Trojaner in Google Chrome (downloaded @ portableapps.com)

After I received an Anti Virus message from Microsoft Essentials I deleted the complete Google Chrome portable apps folder. After restarting I downloaded Chrome Portable through the PortableApps Suite again. Directly after that the Anti Virus message came again:

Erkannte Elemente: PWS:Win32/Zbot

Warnstufe: Schwerwiegend

Kategorie: Kennwortstehlprogramm

Beschreibung: Dieses Programm ist gefährlich. Es zeichnet Benutzerkennwörter auf.

Empfohlene Aktion: Entfernen Sie diese Software unverzüglich.

Security Essentials hat Programme erkannt, die Ihre Privatsphäre gefährden oder Ihren Computer beschädigen könnten. Sie können auf die von diesen Programmen verwendeten Dateien weiterhin zugreifen, ohne sie zu entfernen (nicht empfohlen). Wählen Sie zum Zugreifen auf diese Dateien die Aktion "Zulassen" aus, und klicken Sie dann auf "Aktionen anwenden". Wenn diese Option nicht verfügbar ist, melden Sie sich als Administrator an, oder bitten Sie den Sicherheitsadministrator um Unterstützung.

Elemente:
file:G:\PortableApps\GoogleChromePortable\App\Chrome-bin\chrome.exe
filelocalcopy:\\?\c:\ProgramData\Microsoft\Microsoft Antimalware\LocalCopy\{D6134418-DC43-4185-96FF-652C8FCE75ED}-chrome.exe

Lesen Sie im Internet weitere Informationen zu diesem Element.

Maybe a second person can verify this issue.

regards,
Marc

EDIT: Maybe a general problem with Chrome and Essentials:
http://www.google.com/support/forum/p/Chrome/thread?tid=42d6ba02d7eed070...

Zach Thibeau
Zach Thibeau's picture
Offline
Last seen: 2 years 1 month ago
Developer
Joined: 2006-05-26 12:08
that is for sure a false

that is for sure a false positive, what the Google Chrome Portable installer does is pull the latest installer for Google chrome and extracts it to your flash drive or where you ever you have your platform installed to.

The only way it's infected is if your own system was infected or Google got hacked.

your friendly neighbourhood moderator Zach Thibeau

GeorgeChr
Offline
Last seen: 3 years 1 month ago
Joined: 2009-09-22 18:10
or the packer's system was

or the packer's system was infected

depp.jones
Offline
Last seen: 13 hours 43 min ago
DeveloperTranslator
Joined: 2010-06-05 17:19
No way, as Chrome Portable is

No way, as Chrome Portable is an online installer that downloads the official installer package from Google...

John T. Haller
John T. Haller's picture
Offline
Last seen: 2 hours 48 min ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Microsoft Security Essentials False Positive

It is a false positive within Microsoft Security Essentials that affects both Chrome and Chrome Portable. The issue was not present during release as MSSE is one of the antivirus products we scan each portable package and the file it downloads before release. The downloaded file is unaltered as it is file hashed at the time of packaging and scanning so if it were altered, the installer would have shown an error and refused to complete. Chrome's installer is signed by Google after they virus scan it (that's what the online installer downloads) and Chrome Portable's installer is signed by us after we scan, file hash and verify everything.

Sometimes, the impossible can become possible, if you're awesome!

vf2nsr
vf2nsr's picture
Offline
Last seen: 8 years 1 month ago
Developer
Joined: 2010-02-13 17:10
might

want to check this out from Ziff Davis, CNET has also reported on it.

Faulty Microsoft AV update nukes Chrome browser

“Be who you are and say what you feel because those who mind don't matter and those who matter don't mind.” Dr. Seuss

Log in or register to post comments