As of late, Google Chrome shows that one of our downloads is "malicious".
Does anybody know how to remove such a ban? - I'm not a Chrome user myself, and I couldn't find any corresponding contact info on Google's website...
Thanks,
UrsGoogle Chrome says we're malicious
-
- u-he
- 30222 posts since 8 Aug, 2002 from Berlin
Hi all,
As of late, Google Chrome shows that one of our downloads is "malicious".
Does anybody know how to remove such a ban? - I'm not a Chrome user myself, and I couldn't find any corresponding contact info on Google's website...
Thanks,
Urs
As of late, Google Chrome shows that one of our downloads is "malicious".
Does anybody know how to remove such a ban? - I'm not a Chrome user myself, and I couldn't find any corresponding contact info on Google's website...
Thanks,
Urs-
- Banned
- 10196 posts since 12 Mar, 2012 from the Bavarian Alps to my feet and the globe around my head
-
- u-he
- Topic Starter
- 30222 posts since 8 Aug, 2002 from Berlin
-
- KVRAF
- 37491 posts since 14 Sep, 2002 from In teh net
I'm browsing the site using Chrome right now and not seeing any warnings - where should I go to trigger it?
-
- KVRAF
- 1594 posts since 16 Jan, 2010 from Denver
you get it on the download of the beta's. Ive seen this alot with software updates, especially music software since its not download that often compared to other things. I think chrome keeps track of what alot of users download, so if they see a zip/exe/etc name that not alot of people download they mark it as possibly malicious. Pretty sure I got this the other day with a synthmaster update and a few others
Last edited by ezelkow1 on Fri Aug 10, 2012 6:18 pm, edited 1 time in total.
-
- KVRAF
- 9091 posts since 28 May, 2005 from Netherneverlands
Contacting Google directly seems almost impossible. Almost everything goes through their product forums 
Maybe try to send it in as a bug report directly through the browser?
Maybe try to send it in as a bug report directly through the browser?
If you've come across a bug or a webpage that isn't working properly in Google Chrome but is normal in other browsers, you can report it directly through the browser. To do so:
1. Click the Page menu .
2. Select Report a bug or broken website.
3. Choose an issue type from the drop-down menu. The web address of the webpage you're on is recorded automatically.
4. If possible, add key details in the 'Description' field, including steps to reproduce the issue you're experiencing.
5. Keep 'Send source of current page' and 'Send screenshot of current page' checkboxes selected.
6. Click the Send report button to report a Google Chrome bug.
No band limits, aliasing is the noise of freedom!
-
- KVRAF
- 1596 posts since 19 May, 2011 from North Carolina
Is it a zip with dlls/exes? I'm not sure about chrome but gmail scans zips for executables, etc. (assuming one might compress to hide). It's easily fooled by an extension change however (If I have to mail an exe or dll zipped or not I use .ex_ and .dl_).
-
- KVRAF
- 9091 posts since 28 May, 2005 from Netherneverlands
Yes, that could be it. IE 9 has the same annoying security "feature"..ezelkow1 wrote:I think chrome keeps track of what alot of users download, so if they see a zip/exe/etc name that not alot of people download they mark it as possibly malicious. Pretty sure I got this the other day with a synthmaster update and a few others
No band limits, aliasing is the noise of freedom!
-
- u-he
- Topic Starter
- 30222 posts since 8 Aug, 2002 from Berlin
-
- KVRist
- 455 posts since 16 May, 2012 from Antwerp
Can also be someone who has sent a notice about malware.
This said, I don't understand why anyone would use a Google browser. They are already filtering the internet as it is, why give them even more power?
This said, I don't understand why anyone would use a Google browser. They are already filtering the internet as it is, why give them even more power?
Windows 7, Cubase 9.5 and some extra plug-ins | Takamine EN-10C and PRS Mira
-
- KVRian
- 657 posts since 2 May, 2002 from Kalispell, MT
blah blah, google is evil, whatever. I use Chrome (Mac) I got the warning, I ignored it. If Urs wants a backdoor into my computer, he can have it. Maybe he'll install cool alphas/betas while I'm sleeping. Or maybe he wants to steal some processing power to help speed development of his new projects.
-
- KVRAF
- 9091 posts since 28 May, 2005 from Netherneverlands
GruvSyco wrote:If Urs wants a backdoor into my computer, he can have it. Maybe he'll install cool alphas/betas while I'm sleeping. Or maybe he wants to steal some processing power to help speed development of his new projects.
I'm in too!
No band limits, aliasing is the noise of freedom!
-
- KVRAF
- 9091 posts since 28 May, 2005 from Netherneverlands
I don't think it's only the name, there must some checksum/crc or something involved, otherwise it would be an extremely stupid security implementationUrs wrote:Hmmm... maybe we need to call the installer Setup.exe then... how boring...
No band limits, aliasing is the noise of freedom!
-
- KVRist
- 396 posts since 29 Aug, 2006 from Eta Carinae
From what I've been able to discover here are 3 snippets from various forums about this common problem:
------
1) If a file isn't from a known source, Chrome sends the URL and IP of the host and other meta data, such as the file's hash and binary size, to Google. The file is automatically classified using machine learning analysis and the reputation and trustworthiness of files previously seen from the same publisher and website.
------
2) Chrome's 'this file appears malicious' warnings are false and unfounded in too many cases. They include two factors that have nothing to do with whether the code is malicious: packed executable, and low number of previous downloads.
-----
3) I am having the same problem -- an (unsigned) exe installer created using InnoSetup is called malicious and recommends I discard it. The file is completely clean, and this is not only ruining my download rate, but ruining the reputation of my company...
-----
When I ordered Dark Zebra from Digital River (Share-it) here is the requested URL:
[code]https://secure.shareit.com/shareit/fina ... 0&prno=000[/code]
I replaced the actual values with 000.
The downloaded file is 'TheDarkZebra254.zip' so it does not match the requested URL (naturally since the file is sent via a server script).
I presume because the final file name mismatches the request, it will trigger some warning in Chrome download.
Digital River has been around a long time and I've purchased quite a lot from them, so the reputation factor should be high.
Maybe it is just a low download count?
Anyway, this is really a bit high-handed from Google, especially since there is no way to contact them or find out why this is happening. Lots of people are complaining, but some say that the warning eventually goes away.
------
1) If a file isn't from a known source, Chrome sends the URL and IP of the host and other meta data, such as the file's hash and binary size, to Google. The file is automatically classified using machine learning analysis and the reputation and trustworthiness of files previously seen from the same publisher and website.
------
2) Chrome's 'this file appears malicious' warnings are false and unfounded in too many cases. They include two factors that have nothing to do with whether the code is malicious: packed executable, and low number of previous downloads.
-----
3) I am having the same problem -- an (unsigned) exe installer created using InnoSetup is called malicious and recommends I discard it. The file is completely clean, and this is not only ruining my download rate, but ruining the reputation of my company...
-----
When I ordered Dark Zebra from Digital River (Share-it) here is the requested URL:
[code]https://secure.shareit.com/shareit/fina ... 0&prno=000[/code]
I replaced the actual values with 000.
The downloaded file is 'TheDarkZebra254.zip' so it does not match the requested URL (naturally since the file is sent via a server script).
I presume because the final file name mismatches the request, it will trigger some warning in Chrome download.
Digital River has been around a long time and I've purchased quite a lot from them, so the reputation factor should be high.
Maybe it is just a low download count?
Anyway, this is really a bit high-handed from Google, especially since there is no way to contact them or find out why this is happening. Lots of people are complaining, but some say that the warning eventually goes away.
-
- KVRAF
- 6113 posts since 7 Jan, 2005 from Corporate States of America