Hidden Chrome extensions... evil?

This morning, I did a system restore (that never had Chrome installed) and installed Chrome (32.0.1700.102 m) and these extensions:

bhmmomiinigofkjcapegjjndpbikblnp wot
fdcgdnkidjaadafnichfpabhfomcebme zenmate
gighmmpiobklfepjocnamgkkbiglidom adblock
hnkcfpcejkafcihlgbojoidoihckciin refer control
jeoacafpbcihiomhlakheieifhpjdfeo disconnect

I did install adblock plus and HTTP Switchboard but removed them... it seems their folders were also removed.

My "C:\Users\%USERNAME%\AppData\Local\Google\Chrome\User Data\Default\Extensions" folder has five extensions I did not install:

apdfllckaahabafndbhieahigkjlhalf google drive (2 files: 128.png, manifest.json & 1 folder: _locales)
blpcfgokakmgnkcojhhkbfbldkacnbeo youtube (2 files: 128.png, manifest.json & 1 folder: _locales)
coobgpohoikkiipiblmjeljniedjpjpf google search (5 files: 16.png, 32.png, 48.png, 128.png, manifest.json & 1 folder: _locales)
nmmhkkegccagdldgiimedpiccmgmieda google wallet (3 files: craw_background.js, craw_window.js, manifest.json & 4 folders:_locales, css, html, images)
pjkljhegncpnkpknbcohdijeoejaedia gmail (2 files: 128.png, manifest.json & 2 folders: _locales, __MACOSX)

Question, any possability those five google extensions could become evil... calling home?

Mike

 

Actually they are chrome's default apps, they are embedded to it.
Unless you are logged in, I guess there is no more risk than any usual search on youtube, google, etc.

Anyway, you can remove them all.

 

Google introduces Chrome 'factory reset' pop-ups to tackle extensions hijacks

http://www.cso.com.au/article/53739...tory_reset_pop-ups_tackle_extensions_hijacks/

 

Instead of deleting those five folders, I just renamed them by adding a "X" to the front of the folder names. I then tweaked some setting in Chrome, and quit Chrome and restarted Chrome. Those five folders I renamed were gone.

I am guessing Chrome did not like non-extension folders and deleted them.

Mike

 

If you are on Windows, this might be related to the new policy of not allowing extensions which are not from the store (unless installed locally using dev tools).

 

From the Google Chrome Blog a reset tool is available.
http://chrome.blogspot.ca/2013/10/dont-mess-with-my-browser.html

Based on findings and comments:
http://arstechnica.com/security/201...e-warns-users-when-browser-has-been-hijacked/

 

I do not have a Google account.

The Chrome Web Store has "Apps", "Extensions" & "Themes".

Some of my search results return "Apps" and "Extensions". When I wanted to test an "App", it wanted me to first login into my Google account... NFW. I do not know if that is true of all "Apps".

Mike

 

Hmm, even though those five Google extensions/apps are not in my "C:\Users\%USERNAME%\AppData\Local\Google\Chrome\User Data\Default\Extensions" folder, CCleaner shows them.



I am going to disable them in CCleaner and see what happens.

Mike