Skip to main content

Chrome is scanning Windows, but it may be a bug

A few days ago, Kelly Shortridge, a product manager at SecurityScorecard, discovered that Chrome was running AV scans of Windows devices.

This isn’t normal behavior from a web browser, but it does have a fairly benign explanation. Namely, it appears to be a bug related to some antivirus features that Google added to the Windows version of Chrome last year. The Chrome Cleanup tool is meant to help users restore control of hijacked systems. Justin Schuh, Google’s security lead, initially said that these scans were part of this anti-virus software.

“CCT isn’t a system-wide scan or filter,” Schuh tweeted. “It runs weekly, at background priority and normal user privs, for up to 15 mins. It scans browser hijacking points, which may cause it to follow links elsewhere. The engine is a heavily sandboxed subset of ESET.”

It turns out that wasn’t the real problem, however. Google later discovered that a bug was causing Chrome to begin file checks upon startup. The tool is meant to scan previously downloaded files, but a bug moved the scan to the start-up path, meaning it runs scans every time Chrome is opened. This can cause Windows computers to slow down when starting the browser. Google has said that it will patch the bug in a future patch. Clearing your download history might help reduce the slowdowns in the meantime.

Even with these issues, Chrome is still a solid browser. If you’d rather explore some other options, you can check out our guide to the best web browsers in order to find one that suits you better.

Eric Brackett
Former Digital Trends Contributor
This new Google Chrome security warning is very important
The Google Chrome logo on a black phone which is resting on a red book

Google is changing how it warns its users about suspicious files on Chrome by adding new full-page warnings and cloud scanning regarding suspicious downloads, according to Windows Report. This is an attempt to explain more precisely why it blocks specific downloads. Google says that the AI models will divide the warning into two categories: "suspicious" or "dangerous."

The new warning system primarily benefits those using the anti-phishing Enhanced protection feature. The files users upload to the cloud for an automatic scan and those that undergo a deep scan are 50 times more likely to have the AI flag them as malware.

Read more
Google just gave up on its proposed makeover of the internet
Google Chrome browser running on Android Automotive in a car.

Google announced on Monday that it will pull the brakes on phasing out the use of third-party cookies on its Chrome browser because of concerns from regulators, competitors, and privacy advocates, the tech giant said in a Privacy Sandbox post. Instead, Google will be going in a different direction that will let users choose how they interact with third-party cookies.

Blocking third-party cookies would have presented a hurdle for remarketing, which lets companies serve you ads based on your previous activity around the web.

Read more
It’s time to add one more service to the Google graveyard
A woman using a HP Chromebook laptop while sitting at a bright green table with a cup of coffee, all in front of a colorful background.

Google is killing yet another service: the Google URL Shortener. As Dare Obasanjo comments on X, any links using the goo.gl shorter will break after August 25, 2025.

When Google offers a service, millions of people use it and it becomes embedded in every corner of the internet -- and then when Google kills a service, countless things break, and it causes a whole lot of inconvenience for a whole lot of people.

Read more