Google Uses Search To Diagnose Infected Computers

Google has somewhat controversially begun searching users’ Windows-based computers for malware, after it detected some suspicious search traffic in its servers.

A computer infected with this kind of malware, which may have come from downloading software or reading an email, may result in deleted data, stolen personal information and a slower connection to many websites.

The malware, which hasn’t been named because it includes several variants, prompts infected Windows computers to send traffic to Google through intermediary or proxy servers, making the source of the infections tougher to trace.

Google Warning

Users whose computers are found to be distributing malware will see a yellow notification atop their Google web search results, warning:

“It appears that your computer is infected with software that intercepts your connection to Google and other sites.”

Google then redirects users via a link to fix the issue by performing a system scan and updating their antivirus software if necessary.

The company confirmed the suspicious search traffic was malware after huddling with security experts at several companies that were sending this modified traffic.

No Other Details

The company was particularly tight-lipped about the details, presumably to continue investigating the issue. Google isn’t sure where the malware is coming from or exactly what effect, if any, the malware has on had on Google users.

More information is available on Google’s help centre page here.

Search Engine Land’s Danny Sullivan ferreted out more info, including the fact that Google is concerned about “Windows Protection Suite,” a fake antivirus software program that appears to be routing traffic to Google.

Krebs on Security interviewed Google security engineer Damian Menscher, who found the pernicious software while conducting routine maintenance at a Google data centre.

Clint Boulton eWEEK USA 2012. Ziff Davis Enterprise Inc. All Rights Reserved

View Comments

  • "Google has somewhat controversially begun searching users’ Windows-based computers for malware..."

    This is incorrect, Google is not searching users' computers. Infected users' Google queries go through proxy servers. Those proxy servers then forward the queries to Google. If Google sees a search request coming via a proxy server the search result page has an extra note about a possible infection.

Recent Posts

Northvolt Mulls US Bankruptcy Protection – Report

Troubled battery maker Northvolt reportedly considers Chapter 11 bankruptcy protection in the United States as…

8 hours ago

FTC Plans Investigation Into Microsoft Cloud Business – Report

Microsoft's cloud business practices are reportedly facing a potential anti-competitive investigation by the FTC

10 hours ago

Programmer Sentenced To Five Years In Prison For Bitcoin Laundering

Ilya Lichtenstein sentenced to five years in prison for hacking into a virtual currency exchange…

12 hours ago

Hate Speech Watchdog CCDH To Quit Musk’s X

Target for Elon Musk's lawsuit, hate speech watchdog CCDH, announces its decision to quit X…

1 day ago

Meta Fined €798m Over Alleged Facebook Marketplace Violations

Antitrust penalty. European Commission fines Meta a hefty €798m ($843m) for tying Facebook Marketplace to…

1 day ago

Elon Musk Rebuked By Italian President Over Migration Tweets

Elon Musk continues to provoke the ire of various leaders around the world with his…

1 day ago