[Security information] Microsoft Windows Defender suspected of mislabeling Google Chrome update as malware

• Author｜Jiang Ge
• Source｜IT House
• Release time｜2021-02-04

---

According to a foreign media Neowin report, Microsoft Defender for Endpoint yesterday flagged the Google Chrome browser update as malware and warned users and administrators that some Twitter users discovered the flag and asked if it was a false positive.

According to a foreign media ZDNet report, the software marked the'sl.pak' file as a "Funvalget backdoor", which seems to be related to the language localization in the installer of version 88.0.4324.104 of the Chrome browser.

At present, Microsoft has not officially responded to whether the file is indeed a security risk, or whether it has made a false report. However, some users said that Microsoft has defined the detection as a false positive and provided a method to clear the detection:

1. Open a command prompt as an administrator and change the directory to c:\Program Files\Windows Defender
2. 运行 MpCmdRun.exe -removedefinitions -dynamicsignatures
3. Run MpCmdRun.exe -SignatureUpdate

---