Jump to content

Chrome - and immunet (amadey)


Recommended Posts

I got the same. I had chrome on my laptop and immunet 'sucessfully quarantined' something which I don;t think needed to be quarantined. I can now not open chrome on my laptop and when I tried to re-download chrome I received that error. I'm not sure what to do now and really need chrome

 

Link to comment
Share on other sites

As of ~4am this morning Immunet v7.5.0.20795 quarantined all of my Windows 10 Enterprise 21H2 OS Build 19044.1706 PC's "chrome.exe". I had to uninstall Immunet to get Chrome reinstalled. 

Detection Name: Clam.Win.Dropper.Sykipot-995050[5-6]-0

image.png.0987b112f6011e0114436651e5774cf1.png

Edited by Clint
Detection/Versions
Link to comment
Share on other sites

I could make a joke here that Chrome is basically spyware, and as such it's a good thing it was detected! But let's be serious and try to fix your issue...

It's interesting that the first poster reports a detection via Immunet's cloud engines, and the second post looks like this is a false-positive with the ClamAV scanning engine. It's almost-certainly already been reported, therefore it won't be too long before the developers patch the faulty signature. You may find that within a few days, you can reinstall Chrome with no issues.

In the meantime, you may be able to avoid this problem by disabling the ClamAV engine from within Immunet's settings, and seeing if this cures the false positive. The cloud engines would still be protecting you, and they might already be fixed. ClamAV is a traditional engine, which is not updated as quickly and is prone to false-positives.

Alternatively, if you view your quarantined files, try restoring all the chrome.exe files. When you restore a file from quarantine, Immunet adds this to the exclusions list. By doing this, you may find you can run (or reinstall) Chrome again.

Another option would be to switch browser to Firefox or Vivaldi, or to uninstall Immunet and rely on Windows Defender or another reputable antivirus.

Link to comment
Share on other sites

6 minutes ago, MOUSA said:

Same on multiple workstations, multiple organizations.

If you're in an organisation, you shouldn't be using Immunet as it's not licenced or supported for such use cases. You should be using Cisco's commercial endpoint protection.

I'm a bit concerned that Cisco put out Immunet full of bugs and then have virtually zero presence on this forum. If you need free antivirus protection, it would be better to switch to Windows Defender or something else, until Cisco decide to either put Immunet out of its misery or actually produce a half-decent AV and provide even half-arsed support for it. The current state of Immunet is worse than having no protection at all as it is full of bugs, unsupported and as a result, gives users a false sense of security.

  • Like 1
Link to comment
Share on other sites

I have 2 PC's both have immunet both killed chrome, one of the PC's I only use with my trusted sites, banking, no surfing. really surprised if it is compromised, it would have to be compromised at the source - Google in the latest update released yesterday.

Immunet (cisco) lets get this figured out. ASAP

Link to comment
Share on other sites

7 minutes ago, zombunny2 said:

If you're in an organisation, you shouldn't be using Immunet as it's not licenced or supported for such use cases. You should be using Cisco's commercial endpoint protection.

I'm a bit concerned that Cisco put out Immunet full of bugs and then have virtually zero presence on this forum. If you need free antivirus protection, it would be better to switch to Windows Defender or something else, until Cisco decide to either put Immunet out of its misery or actually produce a half-decent AV and provide even half-arsed support for it. The current state of Immunet is worse than having no protection at all as it is full of bugs, unsupported and as a result, gives users a false sense of security.

I've been trying to make that case.  Me thinks it will be easier after Chrome gets removed :)

 

Link to comment
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
 Share

×
×
  • Create New...