CERN Accelerating science

Accidental removal of Chrome browser

 
Date & time of incident: 
Friday, September 30, 2011 - 21:54
Incident Description: 

The Microsoft forefront anti-virus software has been incorrectly identifying Chrome as a PWS:Win32:Zbot infected executable.  Microsoft have confirmed the problem

"On September 30th, 2011, an incorrect detection for PWS:Win32/Zbot was identified. On September 30th, 2011, Microsoft released an update that addresses the issue. Signature versions 1.113.672.0 and higher include this update."

The problem was first observed around 17:00 this afternoon and the new corrected signature has been deployed at CERN at 21:45 and verified.  Systems which do not automatically retrieve the signatures should refresh their settings from the Forefront “Help” menu.

If users have found their chrome.exe removed, a new version can be downloaded and installed.  Settings and bookmarks are preserved.

Look at the Knowledge Base Article: KB0000900 which explains step by step how to restore Chrome.

 

Workaround: 

Firefox or Internet Explorer can be used to download a new version of Chrome.  The Google Chrome blog also explains that you may need to uninstall Chrome from the control panel before you are able to install a new version.

 

 

Service Element Affected: 
Windows Desktop Service
Impact: 
Service is degraded
Status: 
Resolved
Resolution date: 
Tue, Oct 4, 10:00
Posted by: 
IT-OIS
Unit responsible for resolution: 
IT Department