Crowdspring

Whether your audience wants to learn how to run a business or simply advance in their career, they will always turn to specialized business blogs for advice.

Wednesday, 15 June 2022

[New post] [Updated] Google Chrome 'Properties' extension malware creating 'Chrome_pref' file or redirects to Bing? Try these workarounds – PiunikaWeb

Site logo image BossDiva posted: "New updates are being added at the bottom of this story…….Original story (published on May 31, 2022) follows:Google Chrome is the most popular and widely used browser on the planet. According to Statcounter, Chrome had a browser share of somewhere around " AFFILIATE MARKETING GIG & FREELANCE WORK

[Updated] Google Chrome 'Properties' extension malware creating 'Chrome_pref' file or redirects to Bing? Try these workarounds – PiunikaWeb

BossDiva

Jun 15

New updates are being added at the bottom of this story…….
Original story (published on May 31, 2022) follows:
Google Chrome is the most popular and widely used browser on the planet. According to Statcounter, Chrome had a browser share of somewhere around 65% in April of 2022.
Developed by Google, it uses the Blink engine and is the main component of the company's Chrome OS. However, the browser is far from perfect with users reporting security exploits every now and then.
chrome-ios-inline
Unfortunately, some Chrome users seem to be affected by a malicious browser extension called 'Properties'. Users say the virus is limited to Chrome and affects certain functionalities (1,2,3).
While it is still unclear how it is infecting machines, it could be related to the ChromeLoader malware that uses Powershell to inject itself into the browser.
According to Chrome users, the Properties extension malware is causing the browser to crash every few seconds and is creating a Chrome_pref file in the Windows local app data folder. Apart from this, the malware redirects search requests to Bing.
Many have tried deleting the Chrome_pref file in the local app data folder and removing the Properties extension causing the problem but the malware seems to be reinstalling itself regardless.
Some say security extensions like MalwareBytes and adblockers are also disabled by the virus. You can see in the image below what the Google Chrome Properties extension malware looks like.
For the past few days my google chrome has been closing itself and reopening, and in doing so it has been adding a random properties extention to it and changing search engines to Bing. Once i open chrome i only have a few short seconds before the restart to go to the extentions tab before it completely blocks me from opening that. Along with that it seems to creat a file in my Appdata>Local folder named Chrome_settings with its contents being a Javascript file named background, a JSON file named manifest and a PNG file named properties.
(Source)
So yesterday i randomly got a virus, i didnt click on any sus links or anything and upon researching this virus i found that a couple of people also got this virus in the past few days. The virus only affects my chrome browser that i know of and basically all it does is redirect my searches to Bing and also randomly restarts my chrome browser very often. This has made my chrome basically unusable. I found that the virus is a chrome extension called Properties and has a folder called "chrome_pref" in my appdata>local.
(Source)
Thankfully, we came across a couple of workarounds that might help those infected by the Chrome Properties extension malware.
The first workaround requires users to download and install ProcessHacker, a software similar to Windows Task Manager.
After opening ProcessHacker, try force terminating the tree of Chrome tabs and relaunch the browser, remove the 'Properties' extension and delete the associated files from local app data folder.
I use an interesting bit of software called "Processhacker" which I am not promoting or suggesting you use (wink). Its essentially task manager on crack. If you have the properties malware thing active you'll find a bunch of chrome tabs in a tree with both CMD and Powershell. Terminate the entire tree and relaunch chrome, the properties extension will be temporarily gone, From there open your Files
Go to C:Users[UserName]AppDataLocal
find a folder in their called "Bloom" Nuke that. there may be other folders in your appdata local called things like "Chrome_tools" Nuke em too.
(Source)
Another user suggested deleting the Chrome_pref file and creating a text file and changing the file and extension to the same name.
While the second workaround will not completely remove the virus, it will stop the malware from reinstalling the extension for now.
We hope the aforementioned workarounds helped you remove the Chrome Properties extension malware or limit its severity.
As always, we will be updating this space as and when we come across more information so make sure you stay tuned to PiunikaWeb.

04:39 pm (IST): There are some workarounds that might help you resolve this issue. You can check them below.
Workaround 1:
Can you try chrome://settings/reset and click on "restore settings" and let us know if it is still crashing. (Source)
Workaround 2:
Do a hard reset of your Google Chrome web browser. Follow the steps here below to uninstall Google Chrome:
1. Go to your software list, and uninstall Google Chrome from the list
http://windows.microsoft.com/en-us/windows/uninstall-change-program#uninstall-change-program=windows-7
2. Go to this location:
C:UsersYOUNAMEAppDataLocalGoogle
C:Program Files (x86)Google
3. And delete that "Chrome" folder (for both location, if there is a Chrome folder)
4. Restart your computer
5. Install Google Chrome from http://www.google.com/chrome (Source)
Workaround 3:
Try this:
– Go into task scheduler and find something that's similar to "chrome conf." Delete it.
This has worked for me so far.
– There also may be some files downloaded. Go into your files and find a folder called "chrome_conf" in C:Users[Username]AppDataLocal. Delete it. (Source)
Note: We have more such stories in our dedicated Google Section so be sure to follow them as well.
PiunikaWeb started as purely an investigative tech journalism website with main focus on 'breaking' or 'exclusive' news. In no time, our stories got picked up by the likes of Forbes, Foxnews, Gizmodo, TechCrunch, Engadget, The Verge, Macrumors, and many others. Want to know more about us? Head here.
  Previous article
Next article  
My fascination with technology and computers goes back to the days of Windows XP. Since then, I have been tinkering with OS, mobile phones, and other things. When I am not working on anything, you will find me enjoying video games on some Discord server.
PiunikaWeb.com is owned and operated by DeepSeaGem Technologies India. Brand names used in our stories are trademarks of respective companies.

source

Comment

Unsubscribe to no longer receive posts from AFFILIATE MARKETING GIG & FREELANCE WORK.
Change your email settings at manage subscriptions.

Trouble clicking? Copy and paste this URL into your browser:
https://affiliategigfreelancer.com/2022/06/15/updated-google-chrome-properties-extension-malware-creating-chrome_pref-file-or-redirects-to-bing-try-these-workarounds-piunikaweb/

Powered by WordPress.com
Download on the App Store Get it on Google Play
at June 15, 2022
Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest

No comments:

Post a Comment

Newer Post Older Post Home
View mobile version
Subscribe to: Post Comments (Atom)

Host Smaller, Talk Bigger

How small discussion groups and better questions can bring depth to your friendships. ͏     ­͏     ­͏     ­͏     ­͏     ­͏     ­͏     ­͏    ...

  • [New post] Canceled! Is Cancel Culture Good or Bad?
    Sheri K posted: " #*insert person/company name*isoverparty or #*insert person/company name*iscancelled How often do you ...
  • [New post] Zazen
    Lit Hub Excerpts posted: " I went to work and a guy I wait on said he was leaving. He said everyone he knew was pu...
  • [New post] Opinion: Accounting for homelessness takes more than a homelessness count
    Freel...

Search This Blog

  • Home

About Me

Whether your audience wants to learn how to run a business or simply advance in their career, they will always turn to specialized business blogs for advice.
View my complete profile

Report Abuse

Blog Archive

  • October 2025 (6)
  • September 2025 (6)
  • August 2025 (8)
  • July 2025 (10)
  • June 2025 (8)
  • May 2025 (12)
  • April 2025 (11)
  • March 2025 (10)
  • February 2025 (9)
  • January 2025 (9)
  • December 2024 (8)
  • November 2024 (6)
  • October 2024 (10)
  • September 2024 (1181)
  • August 2024 (1340)
  • July 2024 (1412)
  • June 2024 (1376)
  • May 2024 (1481)
  • April 2024 (1409)
  • March 2024 (1440)
  • February 2024 (1483)
  • January 2024 (1516)
  • December 2023 (1164)
  • November 2023 (1295)
  • October 2023 (970)
  • September 2023 (756)
  • August 2023 (750)
  • July 2023 (665)
  • June 2023 (814)
  • May 2023 (602)
  • April 2023 (549)
  • March 2023 (755)
  • February 2023 (704)
  • January 2023 (713)
  • December 2022 (775)
  • November 2022 (1220)
  • October 2022 (724)
  • September 2022 (724)
  • August 2022 (724)
  • July 2022 (696)
  • June 2022 (857)
  • May 2022 (1094)
  • April 2022 (851)
  • March 2022 (541)
  • February 2022 (357)
  • January 2022 (424)
  • December 2021 (812)
  • November 2021 (2514)
  • October 2021 (2677)
  • September 2021 (2825)
  • August 2021 (992)
Powered by Blogger.