EPDM Coatings
rvupgradestore.com Composet Products PO Box Zone
Over The Network Custom Yacht Interiors

Author Topic: Google Chrome malware...?  (Read 1550 times)

scottydl

  • Admin assist
  • ---
  • *
  • Posts: 7653
  • Central IL
Google Chrome malware...?
« on: February 25, 2017, 10:01:37 PM »
Today out of nowhere, a message popped up in Google Chrome that appeared to be malware... or ransonware to be more specific.  It was on our primary laptop at home, which had the lid open but nobody was using it and no programs were open.  With no user action, a Google Chrome window popped up with a long message that said something like "Your computer is locked, Windows has detected a problem, call 1-800-xxx-xxxx to resolve this issue" etc.  It was a long message on a large pop-up box, but that was the basic message.

I should have taken a photo or screenshot, but I didn't want to activate any executable viruses, so I went into Task Manager and terminated Google Chrome that way.  Plugged in a flash drive and external hard drive, and backed up everything important.  I then uninstalled Chrome, and started running virus scans. 

- AdAware quick scan, no threats found.
- Malwarebytes, 1 malware item found, but it had an Adaware file location so I'm guessing it was previously quarantined.
- Windows Defender, full scan, still working as I type (on another computer).

I don't use Google Chrome for regular browsing, and only downloaded it a month or so ago to be able to stream internet video onto our TV using a Google Chromecast.  So it's strange that Chrome is where that message popped up.  I'll plan to reinstall it with a new download, want to make sure everything suspicious is cleared out first.

I opened up some recent documents, and nothing (so far) seems to affected outside of Chrome.

Any other ideas?
Scott, wife, 3 boys... and the dog
- 2008 Forest River Wildwood 32BHDS
- 1995 Chevrolet Suburban C2500 tow vehicle
- 1994 Thor Residency motorhome... owned 2007-2012

rvannie23

  • ---
  • Posts: 184
Re: Google Chrome malware...?
« Reply #1 on: February 25, 2017, 10:11:15 PM »
Are you deeply opposed to switching to a mac?
2014 Laredo 274rb TT
2015 Duramax
FL - MS - TX

scottydl

  • Admin assist
  • ---
  • *
  • Posts: 7653
  • Central IL
Re: Google Chrome malware...?
« Reply #2 on: February 25, 2017, 11:12:38 PM »
Maybe sometime, but its not gonna happen today anyhow. ;)
Scott, wife, 3 boys... and the dog
- 2008 Forest River Wildwood 32BHDS
- 1995 Chevrolet Suburban C2500 tow vehicle
- 1994 Thor Residency motorhome... owned 2007-2012

rvannie23

  • ---
  • Posts: 184
Re: Google Chrome malware...?
« Reply #3 on: February 25, 2017, 11:19:27 PM »
Lol gotcha. Just saying! So much less effort and maintenance to take care of that kind of stuff...like ya know, basically none  ;D
If you google popular malware chrome seems to be under total attack right now via Wordpress sites. Sounds like your files are backed up and safe though, so you should be okay.
2014 Laredo 274rb TT
2015 Duramax
FL - MS - TX

Arch Hoagland

  • ---
  • Posts: 1409
  • Clovis CA
Re: Google Chrome malware...?
« Reply #4 on: February 26, 2017, 01:58:12 AM »
If it happens again go to another computer and type the message into Google Search.  You will probably see several other people have already had the problem and cured it.
2004 Monaco La Palma 36 DBD
W22, 8.1 gas,  Allison 1000 Transmission
7.1 MPG over 80,000 miles

2000 Lexus RX300, 4020lb
U.S. Gear Braking System

JFN

  • ---
  • Posts: 234
Re: Google Chrome malware...?
« Reply #5 on: February 26, 2017, 02:21:07 AM »
I have had it twice on different computers, I just close the window and went on with life.
John & Connie Neal
2006 Dodge 2500 5.9, PacBrake
Smarty Jr Tuned
2006 KZ 29.5' Durango
MaxBrake, Brake Controller
Pressure Pro TPMS
K6JFN

herekittykitty

  • ---
  • Posts: 442
  • Birch Bay, WA
Re: Google Chrome malware...?
« Reply #6 on: February 26, 2017, 03:50:43 AM »
I have had it twice on different computers, I just close the window and went on with life.

Yeah, I was going to say to the OP that that doesn't sound like malware or anything specific to Chrome. Just sounds like a pop-up that can be safely ignored. But how it "opened itself" is beyond me - I'm guessing maybe the browser was open but minimized and he didn't know it?

I know my cat has done some pretty messed-up things on my computer because he thinks it's fun to stretch out on the keyboard. I've had to Google how to FIX some of the stuff he's done.  :D
Karen and Teddy-the-Kitty
Mostly stationary for now in a 32' Class C (2013 Winnebago Access Premier)

blw2

  • ---
  • Posts: 2539
Re: Google Chrome malware...?
« Reply #7 on: February 26, 2017, 04:23:16 AM »
yeah, I'm certainly no expert, but form the sounds of it I would think it's probably nothing to do with chrome..... just an annoying window pop-up to close and move on with life (since you didn't execute anything form it)
I know back in the day, there used to be some good online malware scanners to run, if you thought there might be something on your machine.  You might want to do some research..... I used to listen to Kim Kommando on the radio, maybe she has something about it on her site.
http://www.komando.com

Someone mentioned mac.  I ran mac for several years.  Still have a couple.  They used to be very safe but with increased popularity I understand they are less so now.  Still a good platform and solid hardware, and probably still a lot better than windows in many ways....
But I switched to chromebook a few years ago and have no reason to look back. Does everything an average person needs, and little to no hassle with this kind of stuff.  and not that it's really necesary, but A complete full factory wipe reset of the machine just takes minutes, not the headache you'll get with a windows or mac.
Brad (DW + 3 kids)
13 Thor Chateau 31L Class C on Ford E-450
'06 Silverado
'05 Rockwood Freedom 1910 (5-1/2 years)
former tent campers

scottydl

  • Admin assist
  • ---
  • *
  • Posts: 7653
  • Central IL
Re: Google Chrome malware...?
« Reply #8 on: February 26, 2017, 05:39:35 AM »
Mine was definitely Google Chrome that opened up (spontaneously) and was displaying a message very similar to the one seen in this article.  I have no idea where it was picked up though, since the only two websites I think I've ever visited from Chrome are CBS.com and our church's site... both for streaming video content.

In any event, hopefully it's done and over with.  Tell you what, that warning sure got me to jump on an immediate data backup!  I am otherwise a procrastinator on that task most times.

If I can arrange a backup onto one of our other home computers (we have 3, networked via wifi to one another with a Windows Homegroup) for photos/music/videos, I may go with a Chromebook next time around for our "primary" laptop.
Scott, wife, 3 boys... and the dog
- 2008 Forest River Wildwood 32BHDS
- 1995 Chevrolet Suburban C2500 tow vehicle
- 1994 Thor Residency motorhome... owned 2007-2012

rockman

  • ---
  • Posts: 221
Re: Google Chrome malware...?
« Reply #9 on: February 26, 2017, 09:12:17 AM »
I started using Carbonite online backup a few years ago.  Cheap protection against ransomware, computer crashes etc.  There are other similar services out there like Idrive.  The initial back up will take some time (or in the case of Idrive, they send you a hard drive, you dump to it and send it back) then they just work in the background keeping you up to date on all your info.
Nick, Marian & our 3 fur babies
(make that 5, now have 2 kitties that go with us)
1995 Thor Residency 36M
460 Ford w/Banks Exhaust System
Hydraulic Jacks

John From Detroit

  • ---
  • Posts: 19627
  • ^My New Home^
    • Diabetics Forum
Re: Google Chrome malware...?
« Reply #10 on: February 26, 2017, 01:21:10 PM »
Have had it happen to me several times as I browse Publisher's Clearing House.

It is indeed a Scam, when the popup appears there is no Mal-ware other than, in some cases, the Pop Up itself,,, this may be so designed you can't get it to go away without a power down of the computer and a restart.. (Which is what I did to it. had to hard power down (Lean on power button for so many seconds or remove all sources of power)_ as it even disabled the START menu.

You click on the link, most any link, in the stupid thing and REAL malware is installed.

I reported the ones I saw to the proper agency and no longer see those.. but I'm sure they will pop up again

The scammers actually pay for advertising believe it or not so they can scam you, Enough Byte it's profitable..... till that is they get caught.
Nothing adds excitement like something that is none of your business
My Home is where I park it.

rockman

  • ---
  • Posts: 221
Re: Google Chrome malware...?
« Reply #11 on: February 26, 2017, 01:59:02 PM »
The other way to close the window is open the task manager (alt, control, delete) and shut the browser window from there using the end process dialogue.  We use Firefox and occasionally get an official looking full page window opening that says you need to update your Firefox browser.  It has the Firefox logo etc. however if you look at the URL address bar, it is not Firefox, but rather some oddball web  site that wants to infect your computer.  I just X out and go about my business.  Firefox updates itself automatically . . .
Nick, Marian & our 3 fur babies
(make that 5, now have 2 kitties that go with us)
1995 Thor Residency 36M
460 Ford w/Banks Exhaust System
Hydraulic Jacks

Sun2Retire

  • Photo moderator
  • ---
  • *
  • Posts: 1843
Re: Google Chrome malware...?
« Reply #12 on: February 26, 2017, 03:39:05 PM »
I started using Carbonite online backup a few years ago.  Cheap protection against ransomware, computer crashes etc. 

I also use Carbonite, however I have often wondered if it provides any protection against ransomware. As I understand most ransomware, it encrypts all the files on your HDD. The files can be seen but cannot be opened. My concern is that Carbonite would simply copy (backup) the encrypted files, possibly even overwriting those already archived. This would leave one with nothing but a copy of the same unopenable files you already have on your HDD. I don't know one way or the other, but I'm thinking this may be true.

In addition to Carbonite, about once per month I make a drive image on a portable HDD, using Macrium Reflect free version. I then unplug the portable drive, and store it in our safe. At least I can fall back and lose nothing more than a month if disaster occurs.
« Last Edit: February 26, 2017, 04:39:19 PM by Sun2Retire »
Scott
2005 Newmar Dutch Star 3810, Spartan, Cat C7 350 "OURVEE"
Eezrv TPMS, VMSpc, 800W Solar
2002 Dodge RAM 1500 Quad Cab "RTOAD"
Stowmaster towbar & Brakemaster

LarsMac

  • ---
  • Posts: 375
  • Larry and Margo w/ Ami the tiny co-pilot
Re: Google Chrome malware...?
« Reply #13 on: February 26, 2017, 04:25:41 PM »
Today out of nowhere, a message popped up in Google Chrome that appeared to be malware... or ransonware to be more specific.  It was on our primary laptop at home, which had the lid open but nobody was using it and no programs were open.  With no user action, a Google Chrome window popped up with a long message that said something like "Your computer is locked, Windows has detected a problem, call 1-800-xxx-xxxx to resolve this issue" etc.  It was a long message on a large pop-up box, but that was the basic message.

I should have taken a photo or screenshot, but I didn't want to activate any executable viruses, so I went into Task Manager and terminated Google Chrome that way.  Plugged in a flash drive and external hard drive, and backed up everything important.  I then uninstalled Chrome, and started running virus scans. 

- AdAware quick scan, no threats found.
- Malwarebytes, 1 malware item found, but it had an Adaware file location so I'm guessing it was previously quarantined.
- Windows Defender, full scan, still working as I type (on another computer).

I don't use Google Chrome for regular browsing, and only downloaded it a month or so ago to be able to stream internet video onto our TV using a Google Chromecast.  So it's strange that Chrome is where that message popped up.  I'll plan to reinstall it with a new download, want to make sure everything suspicious is cleared out first.

I opened up some recent documents, and nothing (so far) seems to affected outside of Chrome.

Any other ideas?

That was not a Chrome thing, per se, but you picked it up from some site you visited. There is no actual infection, and you can just close Chrome. Though you want to delete your cookies and browser history to clean it out.
If you call that number, THAT is when you run into a problem. Don't do that.

2000 Itasca Sundancer 430V
2007 Saturn Vue

If you lose your sense of humor, it's just not funny anymore. - Wavy Gravy

DearMissMermaid

  • ---
  • Posts: 2105
  • Read my mis-adventures at DearMissMermaid.Com
    • DearMissMermaid.Com
Re: Google Chrome malware...?
« Reply #14 on: February 26, 2017, 07:32:28 PM »
I've had it happen to me a few times. The internet address I tried to copy and it was HUGE, like thousands of characters, it filled up like 2 pages, it was so long. Kinda scary!

No idea how it popped up out of nowhere.

Have also had the fake blue screen pop up with a toll free number and so on.

I backed up everything and I ran all the freebies including Trend House Call and the Malwear stuff etc.

https://www.trendmicro.com/en_us/forHome/products/housecall.html

I even ran House call on the deep scan which took all night and half the day.

I never seemed to find the culprit! But it stopped happening.

A friend of mine most unfortunately... an executive who retired who should have known better, DUH,  fell for the scam and CALLED the 800 number. They sold her a pile of goods and planted crap all over her computer rendering it useless then wanted more more more money to keep fixing things they were breaking. I didn't have time to fix her mess but her new boyfriend did. He spent hours upon hours getting rid of the mountain of crap the malicious company had planted on purpose to cause more problems for them to solve for a fee  and getting her protected again from that nightmare happening again. We both lectured her at length to engage brain before randomly calling companies and handing out her credit card to the first idiot that answers just because some screen on her computer ordered her to do so. She still keeps trying to justify why she called them and trusted them, but it still makes no sense to me. Life is goof.
http://DearMissMermaid.Com

Living, working. playing  in a Class C, 1994 Tioga Montara, 28'

Pack half the stuff and twice the cash.
http://dearmissmermaid.blogspot.com/

DearMissMermaid

  • ---
  • Posts: 2105
  • Read my mis-adventures at DearMissMermaid.Com
    • DearMissMermaid.Com
Re: Google Chrome malware...?
« Reply #15 on: February 26, 2017, 07:34:11 PM »
PS

RansomWare is the perfect term for that!
http://DearMissMermaid.Com

Living, working. playing  in a Class C, 1994 Tioga Montara, 28'

Pack half the stuff and twice the cash.
http://dearmissmermaid.blogspot.com/

8Muddypaws

  • ---
  • Posts: 2239
Re: Google Chrome malware...?
« Reply #16 on: February 26, 2017, 11:07:20 PM »
Www.majorgeeks.com has every ransomware removal tool known.  Also all the known virus removal tools.
Retired computer professional
Musician, songwriter and music director
2006 Bounder 34H, 2008 CR-V Toad

scottydl

  • Admin assist
  • ---
  • *
  • Posts: 7653
  • Central IL
Re: Google Chrome malware...?
« Reply #17 on: February 27, 2017, 03:46:18 AM »
Even though it was potentially harmless as a browser pop-up, I didn't want to take any chances.  My work computer was infected by true ransomware a few years ago (through no direct action of mine, such as clicking on a link or calling a number and allowing computer access) and it blocked access to dozens of crucial files.  Luckily, the computer is on a secure network that is backed up every few days... so everything was able to be restored (manually, by me, file by file) with little data loss.  Unfortunately, my home computers are not on such a networked system.

The other way to close the window is open the task manager (alt, control, delete) and shut the browser window from there using the end process dialogue.

That's exactly what I did.

After uninstalling Chrome and running all the virus/malware scans, I also used ccleaner to delete the cookies/browser history/unwanted files from all my browers just in case something spilled over.  Firefox is my regular daily browser.
Scott, wife, 3 boys... and the dog
- 2008 Forest River Wildwood 32BHDS
- 1995 Chevrolet Suburban C2500 tow vehicle
- 1994 Thor Residency motorhome... owned 2007-2012

Clay L

  • ---
  • Posts: 1716
Re: Google Chrome malware...?
« Reply #18 on: February 27, 2017, 12:34:36 PM »
Apparently there are enough MACs out there now to attract the crapheads. See MAC DOWNLOADER MALWARE


Edit: Removed erroneous tags.
« Last Edit: March 08, 2017, 05:47:01 AM by Tom »
Clay (WA5NMR), Lee (Wife), Katie & Kelli (cats), Sali (toy poodle)
Settled down after full timing for eleven years and snowbirding for one year in a 2004 Winnebago 35N Sightseer, Workhorse W 20 Chassis. Honda toad

rvannie23

  • ---
  • Posts: 184
Re: Google Chrome malware...?
« Reply #19 on: February 27, 2017, 12:49:37 PM »
Apparently there are enough MACs out there now to attract the crapheads. See [size=78%]MAC DOWNLOADER MALWARE[/size]


There are, and there have been a few floating in the past, but its nowhere near as easy to make well written and executed malware for macs. Especially when Windows is such an easy target. Had my mac since 2009, downloaded lots of textbooks over four years (sorry government) with bittorrent and still never had a single issue. It runs exactly like the day I bought it.

You could make the same argument for a well taken care of PC but at the end of the day I have spent a total of ~3 hours updating and maintaining in the last 8 years, opposed to the 3 hours weekly PC maintenance takes.

Just something to consider

2014 Laredo 274rb TT
2015 Duramax
FL - MS - TX

Clay L

  • ---
  • Posts: 1716
Re: Google Chrome malware...?
« Reply #20 on: February 27, 2017, 12:53:28 PM »
I have used Malwarebytes free for quite a while. A few weeks ago my wife picked up some malware from a website she has visited often with no prior issues. I bought the Premium version of Malwarebytes for both of our computers it monitors continually which the free version doesn't. Hopefully that will help. It found and quarantined several items on both of our computers on the initial full scan.
Clay (WA5NMR), Lee (Wife), Katie & Kelli (cats), Sali (toy poodle)
Settled down after full timing for eleven years and snowbirding for one year in a 2004 Winnebago 35N Sightseer, Workhorse W 20 Chassis. Honda toad

xymii

  • Posts: 3
Re: Google Chrome malware...?
« Reply #21 on: March 08, 2017, 01:09:57 AM »
It sounds like a malicous pop up only. There might something wrong with Chrome homepage, start up settings and shortcut properries. Some malware removal tools can not detect redirect virus or pop up ads effectively. You can try go to the extensions tab on Google Chrome, on Configuration; then activate the Developer Mode. Exit Chrome, and enter again. Go to the Extensions tab, and under the ADWARE program tab, there must be a text where it says: "Loaded from:......." Click there, remove everything it is in there, and remove it again from the Recycle Bin. Restart Chrome, and you won't see this adware again. This is the method I use to deal with Cdn.mobieblitz.com redirect virus.
Or just reset browser settings to default and use other professional removal tools.

John From Detroit

  • ---
  • Posts: 19627
  • ^My New Home^
    • Diabetics Forum
Re: Google Chrome malware...?
« Reply #22 on: March 08, 2017, 10:07:39 AM »
One of the problems with this stuff is the Official Response.

Laws need a bit of updating but the official position is these are minor "petty" crimes and not worth the time it takes to track down the )@(#$#@ who do this kind of stuff.

The Facts are the US wastes BILLIONS OF DOLLARS A YEAR because of this, Just here in the US... It is the largest crime, More money it taken by these scammers than by all the bank robbers. all the strong arm robbers, all the armed robbers, all crimes that are SERIOUSLY investigated..  But they treat each incident as a petty crime

They need to update the laws so that when a Hacker is caught he gets a fine equal to the estimated cost of hacking and related crimes (internet scamming) for the last calander year.. Several billion dollars.. And a prohibition against ANY computer use till the fine is fully paid.

Computers most folks overlook
Phone
Watch (Even an old fashion spring wround analog watch is a computer)
Thermostat in house
Automobile (Engine control comptuer, transmission control computer) even older no transistors engins have analog comptuers that control the timing, mechanical they are, but they are still computers.

Starting to get what a TOTAL ban on computer use at the level I'm speaking of means.
Nothing adds excitement like something that is none of your business
My Home is where I park it.

SeilerBird

  • ---
  • Posts: 10653
  • Everything I state is my opinion.
Re: Google Chrome malware...?
« Reply #23 on: March 08, 2017, 10:50:36 AM »
I sure am glad I use a Chromebook for all of my surfing. It is the safest way to go.
I would like to apologize to anyone I have not yet offended. Please be patient and I will get to you shortly.
Life list of birds:
https://goo.gl/photos/xuP9zPD2KP2swN1g8
Grand Canyon photos:
https://photos.app.goo.gl/Nc1AT8tQp25wJwfm1
My portfolio:
https://goo.gl/photos/Cx4SaYhGfYFShSty7

catblaster

  • ---
  • Posts: 2132
Re: Google Chrome malware...?
« Reply #24 on: March 08, 2017, 01:06:01 PM »
  Last week I got several  malicious extensions attached to Google Chrome. Thankfully Malwarebytes prevented it from sending information out but was not able to remove it since it was a extension attached to chrome and it look legitimate. It has to be found and physically removed from the system or it comes back...very annoying. This one of the few problems that a chromebook has in common with other computers.
Will and Jane
95 Winnebago Luxor

BruceinFL

  • ---
  • Posts: 2890
Re: Google Chrome malware...?
« Reply #25 on: March 08, 2017, 09:39:59 PM »
I have dumped Chrome and Firefox. Have gone with the Brave browser. Faster and safer.
Bruce A.
2004 Alpenlite Valhalla 29RK 5W
2005 Ford F-350 SRW 6.0L

scottydl

  • Admin assist
  • ---
  • *
  • Posts: 7653
  • Central IL
Re: Google Chrome malware...?
« Reply #26 on: March 21, 2017, 10:58:27 AM »
Last week this happened again... still with Chrome, but on a different household computer (a desktop) this time.  Similarly, Chrome on this PC is only used to visit a few websites so I'm not sure where it was picked up.  This time, I didn't freak out so fast and I took a couple screenshots (see below) before Ctrl-Alt-Delete to Task Manager and forcing a shutdown of Chrome.  The browser window was otherwise locked up and wouldn't allow the user to do anything or open any other programs.  Even the "scroll" action on the pop-up was fake, it was all just a static image that apparently tried to force me to call the toll-free number (which of course I did not do).  And the IP address in the image is not my IP address either.

Ultimately I took the same action as the previous occurrence (except I did not fully delete and reinstall Chrome)... ran a couple virus scans with nothing found, and emptied all browser history and cache.  No other problems since then, and the computer is used daily by my kids.
Scott, wife, 3 boys... and the dog
- 2008 Forest River Wildwood 32BHDS
- 1995 Chevrolet Suburban C2500 tow vehicle
- 1994 Thor Residency motorhome... owned 2007-2012

LarsMac

  • ---
  • Posts: 375
  • Larry and Margo w/ Ami the tiny co-pilot
Re: Google Chrome malware...?
« Reply #27 on: March 21, 2017, 12:55:24 PM »
This is not a Chrome specific problem. My wife has seen the same thing on FireFox, and a grandkid saw it on IE, even.
It is a bad link that was picked up somewhere while browsing. There is nothing wrong with your PC. Just close the browser. Go to internet Options, and clear your cache, before opening your browser again.
And, if you can remember where to were (what webpage) don't go there, again. It can be in a link a friend shared of Facebook, or some clickbait ad, or a number of other webpages. 
What you do not want to do when you see that is click on any link offered, or call the telephone number that it shows.



2000 Itasca Sundancer 430V
2007 Saturn Vue

If you lose your sense of humor, it's just not funny anymore. - Wavy Gravy

BruceinFL

  • ---
  • Posts: 2890
Re: Google Chrome malware...?
« Reply #28 on: March 21, 2017, 08:43:17 PM »
Check out the Brave browser.
Bruce A.
2004 Alpenlite Valhalla 29RK 5W
2005 Ford F-350 SRW 6.0L

John From Detroit

  • ---
  • Posts: 19627
  • ^My New Home^
    • Diabetics Forum
Re: Google Chrome malware...?
« Reply #29 on: March 22, 2017, 12:50:32 PM »
      I have seen it on multiple browsers and computers... I crash out of it and all is good

It is just a web page. a very nasty web page but it does nothing except disable "close page" functions.. Closing the entire browser using task master on a PC or shutting off and restarting a chrome book works fine.
Nothing adds excitement like something that is none of your business
My Home is where I park it.

 

Hosted by Over The Network