Chrome and Malware detection

[wraith808]

I can't find the topic- but there was a topic that talked about unsigned executables being flagged as malicious in Chrome.  



After trying to download something from one of my cubbies from the web interface... and having it flagged, I had to figure out how to get this execrable behaviour under control.  And I found it.

From https://support.goog...oad_blocked&rd=1

Turn off phishing and malware detection

• Click the Chrome menu Chrome menu on the browser toolbar.
• Select Settings.
• Click Show advanced settings and find the "Privacy" section.
• Deselect the "Enable phishing and malware protection" checkbox.

Note: When you turn off these warnings you also turn off other malware and phishing alerts.

I like the idea of them... but the false positives really suck.  So what I did was turn it off... then downloaded my software.  Then turned it back on.

Figured this might help someone.

Oh, and for a laugh... at that link above, there's a little callout - How does downloads protection work?

To help protect you, Google maintains a list of websites that are known to host malicious downloads and a list of trusted software publishers.

Google warns you if you try to download something weird or something from a dangerous website.

Really, google?!?

[Renegade]

They have a similar message that blocks a download unless you specifically reaffirm it. It's used for uncommon downloads. I get those all the time, but haven't seen what you're seeing with it absolutely blocked. I've also downloaded software that is flagged as malware, but only gotten the "are you sure" warning.

[mouser]

I've seen it and I agree with wraith -- this is yet again a move by one of the big corporations to "protect" users by penalizing and scaring people about the software made by small independent coders.
It is an irresponsible act that inevitably penalizes the small guys and pushes everyone towards products made by large corporations with the clout and money to be whitelisted.

[Shades]

Use 'autoruns' from the Sysinternals Suite before you install Chrome. Repeat this after Chrome is installed. There are quite some additions. One of these is Google Update. When using 'autoruns' to disable it from running when Windows starts...you just get a new entry of Google Update, that is set to boot automatically. Repeat ad infinitum.

Technically Chrome is not malware, but accompanying Google software behaves just like it. So....pot calling kettle black?

[xtabber]

Use 'autoruns' from the Sysinternals Suite before you install Chrome. Repeat this after Chrome is installed. There are quite some additions. One of these is Google Update. When using 'autoruns' to disable it from running when Windows starts...you just get a new entry of Google Update, that is set to boot automatically. Repeat ad infinitum.

Technically Chrome is not malware, but accompanying Google software behaves just like it. So....pot calling kettle black?

-Shades (August 15, 2014, 02:30 PM)

That's as major reason why I will not run Chrome, except in a VM.

I've recently been playing with Opera 23, which is based on Chromium and almost as fast as Chrome, but without the baggage.  Furthermore, it can be run as a portable app from a USB or a hard drive.

Opera 2x is still a work in progress, ,missing some critical features, like print preview, and some of the things that make Opera 12 such a joy, like the Wand password manager.  It is, however, noticeably faster than Firefox or Opera 12, so I'm using it more and more for casual surfing and reading, even if it isn't ready yet to become my main browser.

[Renegade]

I've seen it and I agree with wraith -- this is yet again a move by one of the big corporations to "protect" users by penalizing and scaring people about the software made by small independent coders.
It is an irresponsible act that inevitably penalizes the small guys and pushes everyone towards products made by large corporations with the clout and money to be whitelisted.

-mouser (August 15, 2014, 12:32 PM)

I'm glad you said it. I'd devolve into a blithering rant.

BTW - You were far too kind in your assessment.

[Renegade]

Use 'autoruns' from the Sysinternals Suite before you install Chrome. Repeat this after Chrome is installed. There are quite some additions. One of these is Google Update. When using 'autoruns' to disable it from running when Windows starts...you just get a new entry of Google Update, that is set to boot automatically. Repeat ad infinitum.

Technically Chrome is not malware, but accompanying Google software behaves just like it. So....pot calling kettle black?

-Shades (August 15, 2014, 02:30 PM)

That's as major reason why I will not run Chrome, except in a VM.

I've recently been playing with Opera 23, which is based on Chromium and almost as fast as Chrome, but without the baggage.  Furthermore, it can be run as a portable app from a USB or a hard drive.

Opera 2x is still a work in progress, ,missing some critical features, like print preview, and some of the things that make Opera 12 such a joy, like the Wand password manager.  It is, however, noticeably faster than Firefox or Opera 12, so I'm using it more and more for casual surfing and reading, even if it isn't ready yet to become my main browser.

-xtabber (August 16, 2014, 10:59 AM)

THANK YOU FOR THAT POST!!!

I've flipped between browsers for ages, and have always loved Opera, but left it a while back for a few reasons. (And Firefox has just been too resource intense for a while - not that Chrome isn't a pig...)

Installed it. Set it as my default browser. Thanks.

I've been wanting to get off Chrome, but been lazy to look into things. -- Better to just figure out who the smart people in the forums are then leech off of their experiences.

[Renegade]

Oooh! Posting from Opera now after browsing a few pages. Very snappy. 

[Deozaan]

I've recently encountered this a lot while trying to download/play Ludum Dare 30 games, but having the downloads blocked by Chrome with seemingly no way to keep them anyway.

I turned to Twitter and was told about another partial workaround:

If you open your downloads page (Ctrl-J by default) you can click "Recover malicious file" to keep the file.

[wraith808]

I wish someone could make all of google's sites show up as malicious.  I really wish someone would.

[tomos]

I've recently encountered this a lot while trying to download/play Ludum Dare 30 games, but having the downloads blocked by Chrome with seemingly no way to keep them anyway.

-Deozaan (August 27, 2014, 05:44 PM)

I'm glad I never fully went down the Chrome road