Chrome-malware removal tool. Do we need it?

General Topics
1

Google launched the beta here: https://www.google.com/chrome/srt/
Can the Software Removal Tool be used safely next to avast! ?
Is it advisable to scan for software that may cause problerms with Chrome?

polonus

2

I ran it, curious as I was, and it did not detect anything threatening.
The tool can also be used to report your browser configuration to Google to improve the workings of SRT,
and to return the original settings of the browser,

polonus

3

Does it produce a log of some kind Damian as I do not use chrome but it may be useful

4

These are the contents of the log it produced, as per your request, dear essexboy:

[0913/221300:INFO:scoped_logging.cc(46)] Starting logs for version: 1.0.1.11 [0913/221300:INFO:crash_client.cc(242)] GoogleCrashHandler could not be reached. [0913/221300:INFO:chrome_cleaner_main.cc(116)] Crash reporting is not available. [0913/221309:INFO:scoped_logging.cc(46)] Starting logs for version: 1.0.1.11 [0913/221309:INFO:crash_client.cc(242)] GoogleCrashHandler could not be reached. [0913/221309:INFO:chrome_cleaner_main.cc(116)] Crash reporting is not available. [0913/221309:INFO:chrome_cleaner_main.cc(52)] Successfully re-launched elevated. [0913/221309:INFO:chrome_cleaner_main.cc(123)] Exiting with code: 0 [0913/221309:ERROR:logging_service.cc(182)] The last 4 log lines have not been uploaded to Safe Browsing. [0913/221309:INFO:recovery_component.cc(169)] Sent request to download Recovery Component. [0913/221310:INFO:main_controller.cc(105)] No PUPS found [0913/221310:INFO:chrome_profile_reset_component.cc(108)] Using Old version field from registry. Update in progress? [0913/221310:INFO:chrome_profile_reset_component.cc(118)] Found Compatible Chrome version: 37.0.2062.120 [0913/221313:INFO:recovery_component.cc(136)] Recovery Component successfully downloaded. [0913/221322:INFO:recovery_component.cc(110)] ChromeRecovery returned code: 0 [0913/221322:INFO:chrome_profile_reset_component.cc(108)] Using Old version field from registry. Update in progress? [0913/221322:INFO:chrome_profile_reset_component.cc(118)] Found Compatible Chrome version: 37.0.2062.120 [0913/221322:INFO:chrome_profile_reset_component.cc(75)] Found C:\Program Files\Google\Chrome\Application\chrome.exe
Tool uses WS2_32.dll with 11 functions, Zone Indetifier Stream version MD5: D0167969BEF834C00FBC5853D29FA8A8 to reveal some of it's workings,

enjoy,

Damian

5

http://www.screencast-o-matic.com/screenshots/u/Lh/1410652189006-48308.png

6

Hi essexboy,

Interesting (also see mutexes used): https://anubis.iseclab.org/?action=result&task_id=1c4fd4f77d47e3844c5541800055e8a70&format=html

polonus

7

I think I will give it a whirl next time I come across a chrome problem… Where is the location of the log ?

8

Hi essexboy,

The locations of the log file for me was in the same folder as the tool download.
Remember the tool scans for malicious add-ons, extensions that may harm the Google browser.
Not giving the names of particular browser software malware detected was done by Google in an attempt to not motivate malcreants to go on changing the name of their malcreation(s) → read: https://productforums.google.com/forum/#!topicsearchin/chrome/removal$20tool|sort:relevance/chrome/8L9S6EcWYNc
SRT is only for Windows computer and not for android devices.

pol

9

After you’ve run the scan, you can simply select the link:

http://www.screencast-o-matic.com/screenshots/u/Lh/1410698530021-60595.png

10

But you should have a reason to run the tool or else the browser default settings are brought back if you do not untag that option. The log has

Environment data:

  • Windows Version: 3
  • App version: 1.0.1.11
  • CPU Information:
    • Architecture: x86
    • Vendor: GenuineIntel
    • Id: 1787

Client Id: (removed by me, pol)

Found UwS Ids: None

Detailed logs:
[0914/145724:INFO:crash_client.cc(242)] GoogleCrashHandler could not be reached.
[0914/145724:INFO:chrome_cleaner_main.cc(116)] Crash reporting is not available.
[0914/145724:INFO:recovery_component.cc(169)] Sent request to download Recovery Component.
[0914/145725:INFO:main_controller.cc(105)] No PUPS found
[0914/145725:INFO:chrome_profile_reset_component.cc(108)] Using Old version field from registry. Update in progress?
[0914/145725:INFO:chrome_profile_reset_component.cc(118)] Found Compatible Chrome version: 37.0.2062.120

Exit code: ??

polonus

11

@ Damien,
Only if you allow that action. If you simply close the browser or the tab, your setting remain as they are. :slight_smile:

12

Thanks gents Magna has tested it on a VM and at the moment it is not overly good however, it is only beta so it is being monitored. It may turn out good :slight_smile:

13

I’m sure you’ll let us know when that happens. :slight_smile:

14

Hi bob3160,

Thanks ye all…
Good the tool has now been added to the malware removers’ toolchest here. ;D

polonus