Chrome - and immunet (amadey)

[Calits]

False positive?!? 
today immunet quarantined chrome.exe file and after chrome uninstall can’t install chrome. Because immunet quarantines chrome.exe file. 
It’s false positive? 

[Tabatha]

I got the same. I had chrome on my laptop and immunet 'sucessfully quarantined' something which I don;t think needed to be quarantined. I can now not open chrome on my laptop and when I tried to re-download chrome I received that error. I'm not sure what to do now and really need chrome

 

[Clint]

As of ~4am this morning Immunet v7.5.0.20795 quarantined all of my Windows 10 Enterprise 21H2 OS Build 19044.1706 PC's "chrome.exe". I had to uninstall Immunet to get Chrome reinstalled. 

Detection Name: Clam.Win.Dropper.Sykipot-995050[5-6]-0

Edited May 27, 2022 by Clint
Detection/Versions

[HA Tech]

Same here

[MOUSA]

Same on multiple workstations, multiple organizations.

[zombunny2]

I could make a joke here that Chrome is basically spyware, and as such it's a good thing it was detected! But let's be serious and try to fix your issue...

It's interesting that the first poster reports a detection via Immunet's cloud engines, and the second post looks like this is a false-positive with the ClamAV scanning engine. It's almost-certainly already been reported, therefore it won't be too long before the developers patch the faulty signature. You may find that within a few days, you can reinstall Chrome with no issues.

In the meantime, you may be able to avoid this problem by disabling the ClamAV engine from within Immunet's settings, and seeing if this cures the false positive. The cloud engines would still be protecting you, and they might already be fixed. ClamAV is a traditional engine, which is not updated as quickly and is prone to false-positives.

Alternatively, if you view your quarantined files, try restoring all the chrome.exe files. When you restore a file from quarantine, Immunet adds this to the exclusions list. By doing this, you may find you can run (or reinstall) Chrome again.

Another option would be to switch browser to Firefox or Vivaldi, or to uninstall Immunet and rely on Windows Defender or another reputable antivirus.

[zombunny2]

6 minutes ago, MOUSA said:

Same on multiple workstations, multiple organizations.

If you're in an organisation, you shouldn't be using Immunet as it's not licenced or supported for such use cases. You should be using Cisco's commercial endpoint protection.

I'm a bit concerned that Cisco put out Immunet full of bugs and then have virtually zero presence on this forum. If you need free antivirus protection, it would be better to switch to Windows Defender or something else, until Cisco decide to either put Immunet out of its misery or actually produce a half-decent AV and provide even half-arsed support for it. The current state of Immunet is worse than having no protection at all as it is full of bugs, unsupported and as a result, gives users a false sense of security.

[JWYO]

I have 2 PC's both have immunet both killed chrome, one of the PC's I only use with my trusted sites, banking, no surfing. really surprised if it is compromised, it would have to be compromised at the source - Google in the latest update released yesterday.

Immunet (cisco) lets get this figured out. ASAP

[MOUSA]

7 minutes ago, zombunny2 said:

If you're in an organisation, you shouldn't be using Immunet as it's not licenced or supported for such use cases. You should be using Cisco's commercial endpoint protection.

I'm a bit concerned that Cisco put out Immunet full of bugs and then have virtually zero presence on this forum. If you need free antivirus protection, it would be better to switch to Windows Defender or something else, until Cisco decide to either put Immunet out of its misery or actually produce a half-decent AV and provide even half-arsed support for it. The current state of Immunet is worse than having no protection at all as it is full of bugs, unsupported and as a result, gives users a false sense of security.

I've been trying to make that case.  Me thinks it will be easier after Chrome gets removed

 

[gader]

Same case on different computers, I had to uninstall immunet, I have had 5 computers with the same problem

[JWYO]

Now up to 4 PC's in my home, Chrome updates to Version 102.0.5005.63 (Official Build) (64-bit) Immunet kills the chrome.exe. only recourse is uninstall immunet reinstall chrome.