What is “Chrome has detected unusual behavior” pop-up? (Guide)

If you seeing a “Chrome has detected unusual behavior” in the top-right of your Google Chrome browser, then you have installed a malicious extension or a browser hijacker. If you have purposely installed a new extension that changes the Chrome feels and look, then you don’t need to take any other actions. However in most cases, a potentially unwanted extension was added and is nothing more than a browser hijacker. The “Chrome has detected unusual behavior” will have the following message:

Is Chrome crashing, showing unusual startup pages, toolbars, or unexpected ads you can’t get rid of, or otherwise changing your browsing experience? You may be able to fix the problem by running the Chrome Cleanup Tool.

To prevent these malicious extensions from taking over your browser, Google has introduced the “Chrome has detected unusual behavior” pop-up. When the “Chrome has detected unusual behavior” window will pop-up, you will have two option, either to “Run Chrome Cleanup Tool” (which will reset browser settings to the default) or to “Dismiss”. The Chrome Cleanup Tool feature fixes many issues by restoring Chrome to its factory default state while saving your essential information like bookmarks and open tabs.

What to do when you see “Chrome has detected unusual behavior” pop-up

If you did not intentionally add an extension that changes the way Chrome works, then it’s recommended that you run the Chrome Cleanup Tool and check your computer for malware.

• Click on the Chrome “Run Chrome Cleanup Tool” pop-up, and follow the steps to run this tool.
  

How to remove malware from Windows. Clean-up your computer from malware

While resetting Chrome may remove the malware from the browser, your Windows may still be infected with adware, potentially unwanted programs or other forms of malware.
The below steps are optional, and are meant to be used if you still having issues with adware, browser hijackers or any other form of malware after resetting Google Chrome.

STEP 1: Remove Google Chrome adware with AdwCleaner

The AdwCleaner utility will scan your computer and web browser for malicious files, adware browser extensions and registry keys, that may have been installed on your computer without your knowledge.

1. You can download AdwCleaner from the below link.
   ADWCLEANER DOWNLOAD LINK (This link will open a new web page from where you can download “AdwCleaner”)
2. Before starting AdwCleaner, close all open programs and internet browsers, then double-click on the AdwCleaner icon.
   
   If Windows prompts you as to whether or not you wish to run AdwCleaner, please allow it to run.
3. When the AdwCleaner program will open, click on the “Scan” button as shown below.
   
   AdwCleaner will now start to search for the malicious files that may be installed on your computer.
4. To remove the malicious files that were detected in the previous step, please click on the “Clean” button.
   
5. AdwCleaner will prompt you to save any open files or documents, as the program will need to reboot the computer. Please do so and then click on the OK button.
   

STEP 2: Remove Google Chrome potentially unwanted programs with Malwarebytes Anti-Malware Free

Malwarebytes Anti-Malware Free uses industry-leading technology to detect and remove all traces of malware, including worms, Trojans, rootkits, rogues, dialers, spyware, and more.
It is important to note that Malwarebytes Anti-Malware works well and should run alongside antivirus software without conflicts.

1. You can download download Malwarebytes Anti-Malware from the below link.
   MALWAREBYTES ANTI-MALWARE DOWNLOAD LINK (This link will open a new web page from where you can download “Malwarebytes Anti-Malware Free”)
2. Once downloaded, close all programs, then double-click on the icon on your desktop named “mbam-setup” to start the installation of Malwarebytes Anti-Malware.
   
   You may be presented with a User Account Control dialog asking you if you want to run this file. If this happens, you should click “Yes” to continue with the installation.
3. When the installation begins, you will see the Malwarebytes Anti-Malware Setup Wizard which will guide you through the installation process.
   
   To install Malwarebytes Anti-Malware on your machine, keep following the prompts by clicking the “Next” button.
   
4. Once installed, Malwarebytes Anti-Malware will automatically start and you will see a message stating that you should update the program, and that a scan has never been run on your system. To start a system scan you can click on the “Scan Now” button.
   
5. Malwarebytes Anti-Malware will now start scanning your computer for the malware. When Malwarebytes Anti-Malware is scanning it will look like the image below.
   
6. When the scan has completed, you will now be presented with a screen showing you the malware infections that Malwarebytes Anti-Malware has detected. To remove the malicious programs that Malwarebytes Anti-malware has found, click on the “Remove Seletected” button.
   
   Please note that the infections found may be different than what is shown in the image.
7. Malwarebytes Anti-Malware will now quarantine all the malicious files and registry keys that it has found. When removing the files, Malwarebytes Anti-Malware may require a reboot in order to remove some of them. If it displays a message stating that it needs to reboot your computer, please allow it to do so.
   
   After your computer will restart, you should open Malwarebytes Anti-Malware and perform another “Threat Scan” scan to verify that there are no remaining threats

STEP 3: Remove Google Chrome browser hijackers with HitmanPro

HitmanPro is a second opinion scanner, designed to rescue your computer from malware (viruses, trojans, rootkits, etc.) that have infected your computer despite all the security measures you have taken (such as anti virus software, firewalls, etc.). HitmanPro is designed to work alongside existing security programs without any conflicts. It scans the computer quickly (less than 5 minutes) and does not slow down the computer.

1. You can download HitmanPro from the below link:
   HITMANPRO DOWNLOAD LINK (This link will open a new web page from where you can download “HitmanPro”)
2. Double-click on the file named “HitmanPro.exe” (for 32-bit versions of Windows) or “HitmanPro_x64.exe” (for 64-bit versions of Windows). When the program starts you will be presented with the start screen as shown below.
   
   Click on the “Next” button, to install HitmanPro on your computer.
   
3. HitmanPro will now begin to scan your computer for malicious files.
   
4. When it has finished it will display a list of all the malware that the program found as shown in the image below. Click on the “Next” button, to remove virus.
   
5. Click on the “Activate free license” button to begin the free 30 days trial, and remove all the malicious files from your computer.
   

(Optional) STEP 4: Double-check for malware infections with Zemana AntiMalware

Zemana AntiMalware is a powerful utility, which will remove malicious browser extensions from Google Chrome, and also check your computer other malicious software.

1. You can download Zemana AntiMalware from the below link:
   ZEMANA ANTIMALWARE DOWNLOAD LINK (This link will open a new web page from where you can download “Zemana AntiMalware”)
2. Double-click on the file named “Zemana.AntiMalware.Setup.exe” to install Zemana AntiMalware on your computer. When the program starts you will be presented with the start screen as seen below.
   
   Click on the “Next” button, to install Zemana AntiMalware on your computer.
   
3. When Zemana AntiMalware will start, click on the “Scan” button.
   
4. Zemana AntiMalware will now scan computer for any malicious files. This process can take up to 10 minutes.
   
5. When Zemana AntiMalware has finished it will display a list of all the malware that the program found. Click on the “Next” button, to remove the malicious files from your computer.
   
6. Zemana AntiMalware will now remove all the detected malicious files, and at the end a system reboot may be required to remove all traces of malware.