Users on ZDNet, a business technology news website, reported that Microsoft's leading enterprise security solution flagged the file 'sl.pak' as the Funvalget Backdoor, which seems to be related to language localization in the installer for Chrome version 88.0.4324.104, resulting in blocked automatic installations on many systems.
Recent alerts have caused significant disruption in the business environment due to numerous supply chain software attacks that have occurred globally over the past few months.
System administrators are currently awaiting an official statement from Microsoft to confirm that this detection is a false alarm rather than a real threat. ZDNet reached out to Microsoft's spokesperson immediately to seek an official statement regarding Microsoft Defender for Endpoint detections.
However, while the company has not issued any public statements yet, a user on VirusTotal shared that Microsoft has acknowledged the detection as false and they have removed it. The user further added that the company has provided steps for administrators and users to remove cached detections and fetch the latest malware definitions. Here are the steps:
- Open Command Prompt as an administrator and navigate to c:Program FilesWindows Defender.
- Run 'MpCmdRun.exe -removedefinitions -dynamicsignatures'.
- Run 'MpCmdRun.exe -SignatureUpdate'.
If you're using Windows 10 and unsure how to open Command Prompt, you can refer to the guide here.
- More: How to open Command Prompt in Windows 10
The best practice is for system administrators to delete cached detections to address the 'false alarm' issue. This action will also unblock the installation of the latest version of Chrome.
Additionally, if you're not a fan of using Google Chrome, you can download the Coc Coc browser to use. Coc Coc offers many useful features, such as accessing Facebook when blocked and downloading YouTube videos without third-party software.
