Whenever you open a New tab page in Chrome if you’ve been redirected to https://chrome-updates.win/s.html page, without further thinking uninstall or remove the VPN extensions you’ve using. These extensions have been compromised and used by the phishing site to spread malware.
Millions of users are using VPN extensions in Chrome browsers, these are directing users to fake Chrome update page, and also showing ads on sites you visit. Do note, Chrome will never ask you to download update as it will be automatically updated or you will be notified via an icon in the Chrome menu when an update is available. You should be always be downloading and installing updates manually by visiting ‘About Google Chrome’ page in Help menu.
You should be removing these extensions right now, if using
- Touch VPN
- Hotspot shield
- Betternet unlimited Free VPN Proxy
Here is how you can remove them
Click on Chrome Menu > More tools > Extensions,
Select the extension and select ‘Report abuse‘ before clicking ‘Remove’ button.
After that, do the following
- Download and run Chrome Cleanup tool, and remove any malicious programs if found and reset Chrome
- Download Malwarebytes and perform a scan.
- Also Run Adwcleaner.
Are you affected?