Security [CENTRAL] Forum - SCforum.info
24. May 2012., 08:32:31 *
Welcome, Guest. Please login or register.

Login with username, password and session length

SCforum.info - Security [CENTRAL] Forum

↑ Grab this Headline Animator

Custom Search
News: For ultra cheap bullet proof vests, hard armor ballistic plates or for advice on body armor in general visit SafeGuardClothing.com
 
  Home Help Chess Links Login Register   *

SCforum.info


furniture store



Members
Total Members: 11258
Latest: donna717
Stats
Total Posts: 15637
Total Topics: 4337
Online Today: 2172
Online Ever: 51419
(01. January 2010., 10:27:49)

SCF UnSpam

Top Ten Antivirus Software

Friend of WOT


SCF Feedburner

SCF Facebook

SCF Twitter

Welcome to SCforum.info - Security [CENTRAL] Forum, a home of the SCF Community devoted to provide Computer related News, Alerts, Downloads and FREE Help in such a way that even the novice computer user can understand.

Getting started using our community is extremely easy, check the two steps below:

Step 1: Create an account by clicking here and wait for approval from Administrator. It's completely free with no hidden strings attached.

Step 2: If you have a computer problem and need some help, or just want to take part in opened discussions, simply browse Forum. Once you *Register an account, you can quickly post your questions and comments.

(*Registered Members get: free support, also, they can communicate privately with other members via PM, removal of this message, see fewer ads and much more...)






Pages: 1
  Print  
Author Topic: Microsoft SE detect Google Chrome as Zbot Trojan, accidentally or intentionally?  (Read 1313 times)
0 Members and 3 Guests are viewing this topic.
Samker
SCF Administrator
*****

KARMA: 86
Gender: Male
Location: Europe
Posts: 5078


Whatever doesn't kill us makes us stronger.

Google Talk
WWW
« on: 30. September 2011., 20:14:54 »



Users of Microsoft Security Essentials and Google Chrome have been reporting a very unusual issue with their anti-virus program of choice. According to a thread originating on the official Google Chrome support forum: http://www.google.com/support/forum/p/Chrome/thread?tid=42d6ba02d7eed070&hl=en , the browser is being identified as a trojan. The first post about the issue was made at 8:02AM, with the following being a direct quote from the thread:
Quote

I have been using Chrome on my office PC for over a year.  This morning, after I started up the PC, a Windows Security box popped up and said I had a Security Problem that needed to be removed.  I clicked the Details button and saw that it was "PWS:Win32/Zbot".  I clicked the Remove button and restarted my PC.  Now I do not have Chrome.  It has been removed or uninstalled.  The Chrome.exe file is gone.  Was there really a problem, or is this just a way for Microsoft to stick it to Google?  If I reinstall Chome, will it have my bookmarks and other settings?  Not sure what to do about this, but I much prefer Chrome to Explorer.


Less than 10 minutes after this, the thread creator responded, confirming the issue. When attempting to reinstall the browser, Microsoft Security Essentials deleted the "chrome.exe" installer, citing it as PWS:Win32/Zbot, which is classified as a severe threat by MSE. It is possible that the issue comes from a a compromise with Microsoft Security Essentials or Chrome, but it seems more likely that it stemmed from a conflict between some code.

Microsoft were quick to confirm the issue, and also to try and fix it. They released a new virus definition, and added the following information to the Malware Protection Center page:
Quote

On September 30th, 2011, an incorrect detection for PWS:Win32/Zbot was identified. On September 30th, 2011, Microsoft released an update that addresses the issue. Signature versions 1.113.672.0 and higher include this update.


Quote

PWS:Win32/Zbot is a password-stealing trojan that monitors for visits to certain Web sites. It allows limited backdoor access and control and may terminate certain security-related processes.


Just over an hour later, a Microsoft employee responded to ZDNet's Ed Bott about the issue via email. He said the following:
Quote

On September 30th, 2011, an incorrect detection for PWS:Win32/Zbot was identified and as a result, Google Chrome was inadvertently blocked and in some cases removed from customers PCs. We have already fixed the issue - we released an updated signature (1.113.672.0) at 9:57 am PDT - but approximately 3,000 customers were impacted. Affected customers should manually update Microsoft Security Essentials (MSE) with the latest signatures. To do this, simply launch MSE, go to the update tab and click the Update button, and then reinstall Google Chrome. We apologize for the inconvenience this may have caused our customers.


(NW)
Logged

Security [CENTRAL] Forum - SCforum.info
« on: 30. September 2011., 20:14:54 »



 Logged
Fintech
SCF Advanced Member
***

KARMA: 19
Gender: Male
Age: 58
Location: Finland
Posts: 143



« Reply #1 on: 02. October 2011., 12:30:52 »

Oh, what a thing was really confusing! Fortunately, I do not use either of those! Grin
I do not like to Crome and Security Essential... I have not even tried! Roll Eyes
 Karma Up
Logged

I'm old man but still alive as well Smiley
Pages: 1
  Print  
 
Jump to:  

Enter your email address to receive daily email with 'SCforum.info - Security CENTRAL Forum' newest content:

Terms of Use | Privacy Policy | Advertising
Powered by MySQL Powered by PHP Powered by SMF | SMF © 2011, Simple Machines
TinyPortal © Bloc
Valid XHTML 1.0! Valid CSS!


Google visited last this page 20. May 2012., 15:36:17