Google Software Removal Tool

Discussion in 'other anti-malware software' started by MrBrian, Sep 19, 2014.

  1. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
  2. Feandur

    Feandur Registered Member

    Joined:
    Jun 15, 2005
    Posts:
    429
    Location:
    Australia
    no offense MrBrian, but was tempted to be humorous and have fun with the posting title.

    But read the link, and looks cool - might be a useful app to have in the kit-bag.

    thanks ,
    f
     
  3. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
    You're welcome :).

    I thought the same thing when I read the title of the Ghacks link.
     
  4. guest

    guest Guest

    Considering that some of those unwanted components are Google's products, this made me giggle, even more after reading the article.

    Seems legit... =V
     
    Last edited by a moderator: Sep 19, 2014
  5. WildByDesign

    WildByDesign Registered Member

    Joined:
    Sep 24, 2013
    Posts:
    2,587
    Location:
    Toronto, Canada
    It would appear that Google has now bundled Software Removal Tool into Google Chrome.

    Code:
    C:\Users\{user-profile}\AppData\Local\Google\Chrome\User Data\SwReporter\2.6.2\software_reporter_tool.exe
    The executable calls itself 'software_reporter_tool' yet when you right-click to see properties, it is labeled as 'Software Removal Tool'. It appears to have been pushed onto my system just this morning, despite no actual Chrome update. Just a heads up.
     
  6. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,881
    Location:
    Slovenia, EU
    I've checked my installation and couldn't find that file (nor folder). If it would install in profile folder it couldn't run on my system - SRP would block it.
     
  7. Rules

    Rules Registered Member

    Joined:
    Mar 3, 2009
    Posts:
    697
    Location:
    EU
    Couldn't find that file too
    Chrome 64 bit user
    Rules.
     

    Attached Files:

  8. WildByDesign

    WildByDesign Registered Member

    Joined:
    Sep 24, 2013
    Posts:
    2,587
    Location:
    Toronto, Canada
    My kernel-mode driver blocked it from running as well, but that was after the fact.

    Chrome's updater automatically downloaded and installed it from this specific folder:
    Code:
    C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}
    EDIT: Further investigation of the Event Logs show this coming in from GoogleUpdate.exe. Chrome is the only Google software on my system. We will have to wait until Google rolls this out to more Chrome users. So far no official word from Google or mention in Chrome forums of this roll out.
     
    Last edited: Jan 26, 2015
  9. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,881
    Location:
    Slovenia, EU
    I hope that they'll put it in program Files folder if Chrome is installed there. I don't want to manage another exception in my SRP rules.
     
  10. Rules

    Rules Registered Member

    Joined:
    Mar 3, 2009
    Posts:
    697
    Location:
    EU
    @WildByDesign

    Sorry if i misunderstood something, so you talk about the software_reporter_tool.exe. In the folder you mentionned above 8A69D345..............., i have the full installer of google chrome used when first install (dated november 2014), but maybe it depends how you configure-it and install it, because since i have installed this browser i never show this reporter tool, even if i ve ever try it before, no trace remain.

    I always do that :
    - Install Chrome 64 bit with msi installer
    - Desactivate the 2 tasks scheduler
    - Set the 2 services on manual (one already on manual, if i remember)
    - Always use the internal update via about chrome
    - use OldChromeRemover after each update
    Other settings i've made had nothing to do with this stuff (security, performances.......).

    Hope this help.

    Rules
     
  11. WildByDesign

    WildByDesign Registered Member

    Joined:
    Sep 24, 2013
    Posts:
    2,587
    Location:
    Toronto, Canada
    Thank you for these suggestions, Rules. I always wondered why Google needed 2 services and 2 scheduled tasks to keep Chrome updated. I will follow your tips because I always use the internal updater within 'About Google Chrome' as well. So I am glad that you have confirmed that setting both services to Manual and disabling the scheduled tasks will still allow the internal updater to work manually. I am assuming this would likely prevent the rollout of this Software Removal Tool too. Cheers!

    I agree with you. I remember a few years ago when Google was installing Chrome executable in the user profile directories as well. So I am surprised that Google has decided to install the Software Removal Tool executable into user directories. Although I am more surprised that Google didn't notify me or ask whether or not I wanted this software on my system in the first place. For now I will keep my kernel-mode driver rules blocking this from executing until more users confirm this rollout.

    If Google continues to push stuff out like this without confirmation then I may end up having to switch over to Chromium.
     
  12. Rules

    Rules Registered Member

    Joined:
    Mar 3, 2009
    Posts:
    697
    Location:
    EU
    @WildByDesign

    You're most welcome, at the same time i love the Photography on the wildbydesign.net, i grow up a little Fox at home.:)

    Rules
     
  13. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,881
    Location:
    Slovenia, EU
    I even deleted both tasks and services and Chrome is updating just fine using internal updater only. And it doesn't even re-install those services or re-create those tasks. :)
     
  14. WildByDesign

    WildByDesign Registered Member

    Joined:
    Sep 24, 2013
    Posts:
    2,587
    Location:
    Toronto, Canada
    Got an official answer back from Google management:

     
  15. Rules

    Rules Registered Member

    Joined:
    Mar 3, 2009
    Posts:
    697
    Location:
    EU
    Fresh install of the OS this morning, Latest chrome 64 bit installed too, still nothing, no software reporter installed, i look the Privacywhitepaper, indeed it's writing, but nothing here, i just see that this tool is still in beta, maybe it's localized, more users from different country could confirm that or not.

    Rules.
     
  16. Rules

    Rules Registered Member

    Joined:
    Mar 3, 2009
    Posts:
    697
    Location:
    EU
  17. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,881
    Location:
    Slovenia, EU
    After last update I got software_reporter_tool installed. Since it's installed in user profile folder it got blocked by SRP.
     
  18. WildByDesign

    WildByDesign Registered Member

    Joined:
    Sep 24, 2013
    Posts:
    2,587
    Location:
    Toronto, Canada
    Same here, just came back on mine as well about an hour ago. My application whitelisting rules blocked it from running as well. I'm not a huge fan of Google sneaking things in there though.

    EDIT: It appears to be version 3.20.1 of Software Removal Tool now.
     
  19. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,881
    Location:
    Slovenia, EU
    I don't like running unneeded software. I hope that they will give us an option to disable this tool. Otherwise it will get blocked on my system as long as it is installed outside Program Files folder.
     
  20. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    5,868
    better or worse than adwcleaner?
    (i would prefer, malware dont only exists for chrome :rolleyes: )
     
  21. emmjay

    emmjay Registered Member

    Joined:
    Jan 26, 2010
    Posts:
    1,540
    Location:
    Triassic
    I noticed a process started (software_reporter_ tool) on my W7 systems today and terminated in 15 secs. Not sure what it was doing in that amount of time other than calling home. Maybe it updated itself. It is currently at V 21.120.1.0.

    I was wondering if this tool went into action when Chrome was advised that a rogue extension was found to be spreading malware just recently (the malware would have to be removed, not just the extension)...

    https://arstechnica.com/information...d-by-any-av-hosted-in-chrome-web-store-twice/
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.