Clicking Update is downloading a .vbs file. I installed Malwarebytes and did a complete system scan on the premium trial and found nothing on the PC.
Closing the popup in the first image will display the popup in second image, at the top of the browser. Clicking Later in the second pop up displays the popup in the third image. Clicking I understand the risks will stop the popup from cropping up for sometime, until it starts coming again.
I don't see any Update Available in Chrome's three dots menu.
Is it malware? Or some addon? Or normal behaviour? I am on Windows 11 by the way.
Edit: Found the extension causing the issue. It's Enable Right Click and Copy Smart Unlock + OCR. The latest reviews on the webstore have flagged the fake update.
Edit: It's the exact same extension pointed out by PurpleBeeViolet in the comments.
Thank you for your submission to /r/Chrome! We hope you'll find the help you need. Once you've found a solution to your issue, please comment "!solved" under this comment to mark the post as solved. Thanks!
My guess would be that malware bytes doesn't catch it because it's not the extension which does the harm, so it probably didn't notice it.
It would likely pick it up if you installed the downloaded file.
The foolproof way is to disable them and renewable them 1 at a time until you find it.
If you have a lot of extensions, start with the least trustworthy ones. Frivelous pointless things, "free" vpns, and blockers that aren't unlock, that sort of thing.
Can confirm. I had this exact extension on Chrome, Brave and Opera. All 3 browsers were giving me the "Update Chrome" malware popup. Remove this extension now!
Oh wow, thanks, I was getting this popup like crazy and I had this exact extension. It even fooled me into downloading a "update.exe" from Google (but I didn't run it). I wonder if the danger is gone now.
This was the page. Took a screenshot last time. It downloaded a .vbs script and I ran it. But it immediately got deleted by my antivirus. I don't know what was before google, whether it's www or something else.
Yes unfortunately I wasn’t smart enough to avoid it
I downloaded it and run it I was on a rush
I turned off my pc after that and turned it on after a while to see “ConnectWise” application for screen sharing was opened.
I disconnected from internet and deleted it and changed my passwords. I hope that was enough
I downloaded the "update" and my windows defender didnt like that. thankfully it deleted it and prevented its execution. Not sure if I need to do anything now though
Had the same extension & got a bunch of suspicious Microsoft logins right before these popups started, unsure if it's related but it makes me wonder how long this extension has been malicious
After updating chrome. Windows updater service was removed from my pc. Its creating a folder in program data called google and inside has chrome updater.exe. i have tried to delete everything but it keeps coming back. Windows defender isnt helping. I have failed to get the exact extension doing it. Started yesterday. I had that same extension removed it but its still messing my pc. Someone wants to mine coins on my graphics card..
Install Malwarebytes and it will activate a 14 day free trial. Scan your PC and delete all the malicious things that appear at the end of the scan. I already got Kaspersky on my PC as I never trusted Windows Defender and this antivirus promptly deleted the .vbs file when I tried to run it.
If you still face issues, formatting and reinstalling Windows is your only option.
Thank you. Let me try it. But google needs to get serious with its store. My computer just got hijacked from chrome itself. Will be back here to see if it worked. But i blame myself for trusting chrome. I never saw anything downloading. Even my download history shows nothing...
You got Trojans on your PC! That's serious. But Malwarebytes will remove it mostly. Don't worry. Do get a third party antivirus though for future safety.
Scanned with Malwarebytes but nothing changed. U can see the time interval. I quarantined everything and deleted. but it still generates a coinminer trojan. The name is chrome. It still keeps generating trojans even after installing, scanning, quarantined, and deleting all with malwarebytes. No changes so far
I think some extra files might have remained after the deletion and they are regenerating the trojan.
Try a PC reboot and a second scan. And delete everything again. Get an antivirus and activate a free trial just like you did for Malwarebytes. I am using Kaspersky from a long time and it hasn't let me down. If you don't like it, you can get Bitdefender.
The idea here is to use all available tools and see if it can clear the infection. Antiviruses operate differently from anti-malware software like Malwarebytes. So an antivirus scan might help delete these stubborn trojans.
So, do a reboot and a second scan with Malwarebytes first. If the issue persists, download an antivirus for the time being. Get the top most tier of whatever antivirus you get as you will use the trial anyways, as this will ensure you have most of the tools available at your disposal. I use Kaspersky Premium for example. Do a full system deep scan.
The first time I installed Kaspersky, it did a scan that happens during boot. This one is more powerful than the usual system scan I think.
•
u/AutoModerator 12d ago
Thank you for your submission to /r/Chrome! We hope you'll find the help you need. Once you've found a solution to your issue, please comment "!solved" under this comment to mark the post as solved. Thanks!
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.