Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

'This extension contains malware' #72

Closed
daniela-idara opened this issue Mar 3, 2021 · 37 comments
Closed

'This extension contains malware' #72

daniela-idara opened this issue Mar 3, 2021 · 37 comments

Comments

@daniela-idara
Copy link

I use this extension daily.
It now has a message that it contains malware and is disabled.
image
It would be nice to at least be able to download my text expanders until I figure out another solution.

@XpecialOne
Copy link

Same here ! Any workaround solution ?

1 similar comment
@KirillMartynenko
Copy link

Same here ! Any workaround solution ?

@WaitingForBan
Copy link

The same issue here. Please update any solution to recover templates...

@yllip
Copy link

yllip commented Mar 3, 2021

If you sync Chome data, you can download a list of snippets with the below steps:

  • on chrome browser, click on the circle icon on top right
  • select "Manage your Google Account"
  • click "Data & personalization"
  • scroll down the page, select "Download your data"
  • on the google takeout page, click "Deselect all"
  • select checkbox of Chrome
  • click "All Chrome data included"
  • select only "Extensions", click OK
  • then download the exported data
  • extract the exported data, you will find all snippets in the file Extensions.json

@WaitingForBan
Copy link

If you sync Chome data, you can download a list of snippets with the below steps:

  • on chrome browser, click on the circle icon on top right
  • select "Manage your Google Account"
  • click "Data & personalization"
  • scroll down the page, select "Download your data"
  • on the google takeout page, click "Deselect all"
  • select checkbox of Chrome
  • click "All Chrome data included"
  • select only "Extensions", click OK
  • then download the exported data
  • extract the exported data, you will find all snippets in the file Extensions.json

Thx! works fine :)

@dswartze
Copy link

dswartze commented Mar 3, 2021

So was ChromeAutoTextExpander2 uploaded to the Chrome Web Store as a malware free version?

@epsilon80
Copy link

epsilon80 commented Mar 3, 2021

same here!! In addition, the extension has disappeared from the Chrome Store .. I wrote directly to the author of the Auto text Expander plugin and he told me there is no malware and he will bring the plugin online again! So we look forward to it. <3

@pviswanathan
Copy link
Owner

pviswanathan commented Mar 3, 2021

Sorry for any inconvenience caused. I can assure you that the app does not contain anything malicious (the CRX can be unpacked by anyone to verify this). We are working with Google to rectify ASAP this and will appear again in the Chrome Web Store soon.

Special thanks to @yllip for providing instructions for anyone looking to backup their data.

@iamatef
Copy link

iamatef commented Mar 3, 2021

Thanks @yllip for sharing the solution on how to get the snippets, I have coded a quick script to convert this extentsions.json to a json that we can import to ChromeAutoTextExpander2. It works great for me right now

just paste the extentions.json content to the box and then copy the output and import to AutoTextExpander2

https://deandev.com/php/text_expander.php

PHP code of this script for reference https://pastebin.com/yvTTYBzF

@HelpFromFrank
Copy link

I just mad e a post of how data populated once extracted. How do I get this copied over to auto text expander 2? My whole business is down right now

@HelpFromFrank
Copy link

This is how the data populated once extracted. How do I get this copied over to auto text expander 2? I tried to copy and paste into the proper are after clicking import but it is not working. Please help! My whole business is down right now
image

@ajpintos
Copy link

ajpintos commented Mar 3, 2021

Anybody know what is the purpose of the malware found in the extensión?

@ajpintos
Copy link

ajpintos commented Mar 3, 2021

Anothe question.. i´m using the Firefox version... Could be also affected? I´m not sure if is the same developer that Chrome extension...

@iamatef
Copy link

iamatef commented Mar 3, 2021

This is how the data populated once extracted. How do I get this copied over to auto text expander 2? I tried to copy and paste into the proper are after clicking import but it is not working. Please help! My whole business is down right now
image

paste the whole extentions.json content here https://deandev.com/php/text_expander.php

then copy the output to ChromeAutoTextExpander2 to import

@pviswanathan
Copy link
Owner

pviswanathan commented Mar 3, 2021

Hi all, I just want to keep the group here posted and be transparent on what happened.

I'd like to start by saying that there is no malware in our application whatsoever. We attempted to submit an update to this application from the Chrome Web Store with a trusted tracking library (amplitudejs) such that we can better serve our users and provide a heightened user experience. This was just the first update, of many more to come, where we were looking to improve this application exponentially. Although we haven't received confirmation from Google that this was the reason for the app to be flagged, this was the only change in the update.

In order to unblock you, I'd be happy to provide raw zip of the last available version on the store before it was taken down (feel free to reach out to my personal email found on my account). Regarding ChromeAutoTextExpander2, I am not affiliated to this app in any way.

At this time, we are working with Google to resolve the issue. I will provide multiple updates through the day on our progress and apologize once again for the inconvenience.

Updated Aug 26:
For transparency, more about this, including Google's official response, can be found here: https://getmagical.notion.site/Auto-Text-Expander-Outage-23bff9d3613342d79acef98d6c7c37be

Summary: Google accidentally marked us as malware, recognized their error and apologized for the inconvenience.

@JuanAlbuja
Copy link

JuanAlbuja commented Mar 3, 2021

Thanks @yllip for sharing the solution on how to get the snippets, I have coded a quick script to convert this extentsions.json to a json that we can import to ChromeAutoTextExpander2. It works great for me right now

just paste the extentions.json content to the box and then copy the output and import to AutoTextExpander2

https://deandev.com/php/text_expander.php

PHP code of this script for reference https://pastebin.com/yvTTYBzF

I am not able to import some shortcuts that have HTML links; I think it may have to do with the escaping of the double quotes. Below is an example of how this program converted a shortcut that I can't import:
Taken from Extensions.json:

"value": "\"\\u003Cp style\u003d\\\"margin: 0px; font-size: 14px; line-height: 20px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline; background: rgb(255, 255, 255); font-family: system-ui, -apple-system, BlinkMacSystemFont, \u0026quot;Segoe UI\u0026quot;, Roboto, Oxygen-Sans, Ubuntu, Cantarell, \u0026quot;Helvetica Neue\u0026quot;, Arial, sans-serif; color: rgb(51, 51, 51);\\\"\u003ePlease note that you cannot access the SFTP server with a web browser; we suggest using the\u0026nbsp;\\u003Ca href\u003d\\\"https://filezilla-project.org/download.php\\\" style\u003d\\\"margin: 0px; padding: 0px; vertical-align: baseline; background-image: initial; background-position: initial; background-size: initial; background-repeat: initial; background-attachment: initial; background-origin: initial; background-clip: initial; cursor: pointer; text-decoration-line: none; color: rgb(31, 115, 183);\\\"\u003eFileZilla\\u003C/a\u003e SFTP client application. For additional assistance on how to use FileZilla, we suggest that you go through\u0026nbsp;\\u003Ca href\u003d\\\"https://wiki.filezilla-project.org/Using\\\" style\u003d\\\"margin: 0px; padding: 0px; vertical-align: baseline; background-image: initial; background-position: initial; background-size: initial; background-repeat: initial; background-attachment: initial; background-origin: initial; background-clip: initial; cursor: pointer; text-decoration-line: none; color: rgb(31, 115, 183);\\\"\u003eFileZilla\u0027s user guide\\u003C/a\u003e.\\u003C/p\u003e\"",
"key": "@flz"

After conversion:

"flz": "\u003Cp style=\"margin: 0px; font-size: 14px; line-height: 20px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline; background: rgb(255, 255, 255); font-family: system-ui, -apple-system, BlinkMacSystemFont, Segoe UI, Roboto, Oxygen-Sans, Ubuntu, Cantarell, Helvetica Neue, Arial, sans-serif; color: rgb(51, 51, 51);\>Please note that you cannot access the SFTP server with a web browser; we suggest using the \u003Ca href=\https://filezilla-project.org/download.php\ style=\margin: 0px; padding: 0px; vertical-align: baseline; background-image: initial; background-position: initial; background-size: initial; background-repeat: initial; background-attachment: initial; background-origin: initial; background-clip: initial; cursor: pointer; text-decoration-line: none; color: rgb(31, 115, 183);\>FileZilla\u003C/a> SFTP client application. For additional assistance on how to use FileZilla, we suggest that you go through \u003Ca href=\https://wiki.filezilla-project.org/Using\ style=\margin: 0px; padding: 0px; vertical-align: baseline; background-image: initial; background-position: initial; background-size: initial; background-repeat: initial; background-attachment: initial; background-origin: initial; background-clip: initial; cursor: pointer; text-decoration-line: none; color: rgb(31, 115, 183);\>FileZilla's user guide\u003C/a>.\u003C/p>"

@ramailo1
Copy link

ramailo1 commented Mar 3, 2021

Thanks @yllip for sharing the solution on how to get the snippets, I have coded a quick script to convert this extentsions.json to a json that we can import to ChromeAutoTextExpander2. It works great for me right now

just paste the extentions.json content to the box and then copy the output and import to AutoTextExpander2

https://deandev.com/php/text_expander.php

PHP code of this script for reference https://pastebin.com/yvTTYBzF

Where to find the file exactly because i'm not able to locate extentsions.json

@Mistiecal1
Copy link

When I attempt to follow the steps above from yllip to download my data, I get the following message on the Google Takeout page:

"Products
You have no services enabled for which data can be exported."

Any workaround for this? I'm not given the option to complete any of the rest of the steps from "select checkbox of Chrome" on.

@ramailo1
Copy link

ramailo1 commented Mar 3, 2021

Is there a way to export old text from Edge since I'm using the extension with edge browser ?

@pviswanathan
Copy link
Owner

Update: We have a response from Google and our app is being re-reviewed as we speak. More updates to come soon.

@pviswanathan
Copy link
Owner

Hello,

I have uploaded the last release directly as .zip. You may follow these instructions to regain access to Auto Text Expander while the application is being re-reviewed. Hope this works as an acceptable work-around for now:

  1. Go to : https://github.com/pviswanathan/ChromeAutoTextExpander/raw/master/Auto%20Text%20Expander%20for%20Google%20Chrome-1.9.5.zip
  2. Unzip the downloaded file
  3. Open chrome://extensions
  4. Turn on developer mode in the top right
  5. Click "Load Unpacked"
  6. Select the unzipped folder

Happy to assist anyone having issues with the above.

@ramailo1
Copy link

ramailo1 commented Mar 3, 2021

Hello,

I have uploaded the last release directly as .zip. You may follow these instructions to regain access to Auto Text Expander while the application is being re-reviewed. Hope this works as an acceptable work-around for now:

  1. Go to : https://github.com/pviswanathan/ChromeAutoTextExpander/raw/master/Auto%20Text%20Expander%20for%20Google%20Chrome-1.9.5.zip
  2. Unzip the downloaded file
  3. Open chrome://extensions
  4. Turn on developer mode in the top right
  5. Click "Load Unpacked"
  6. Select the unzipped folder

Happy to assist anyone having issues with the above.

@pviswanathan If we do this all old data will be removed right ?

new error after following your steps

image

@daniela-idara
Copy link
Author

When I attempt to follow the steps above from yllip to download my data, I get the following message on the Google Takeout page:

"Products
You have no services enabled for which data can be exported."

Any workaround for this? I'm not given the option to complete any of the rest of the steps from "select checkbox of Chrome" on.

Same issue here - I think it's because my account is a company-managed GSuite account.

@daniela-idara
Copy link
Author

Hello,

I have uploaded the last release directly as .zip. You may follow these instructions to regain access to Auto Text Expander while the application is being re-reviewed. Hope this works as an acceptable work-around for now:

Using the .zip version does not show the stored expanders from the original one in the Google Extension Store.
If you are on a company-managed GSuite, the only way to get the text expanders back is to wait for it to be readded.

@pviswanathan
Copy link
Owner

pviswanathan commented Mar 3, 2021

Just as I was posting some steps to assist those looking to "Load Unpacked" the app has now been re-listed on the Chrome Web Store. We are awaiting the changes to propagate across users now. I anticipate everything to be working as it was before momentarily.

The BEST way to ensure that your data does not get deleted through this process is to please not uninstall the original extension. Once the changes propagate across the Web Store, you should be back up and running like before with all your data.

Thanks for your patience and apologies again for the inconvenience.

@daniela-idara
Copy link
Author

Thanks for the quick turn, @pviswanathan !

I can confirm that I can see the extension in the Chrome Web Store, the Malware message is gone from chrome://extensions and all my original text expanders are back and working again!

@gerapeldoorn
Copy link

gerapeldoorn commented Mar 4, 2021

I'd like to start by saying that there is no malware in our application whatsoever. We attempted to submit an update to this application from the Chrome Web Store with a trusted tracking library (amplitudejs) such that we can better serve our users and provide a heightened user experience.

In the old version, it was stated clearly that everything was handled locally. This is a plug-in that requires extreme permissions. With a tracker added I am not able to use it anymore due to security concerns.

I'd like to add that I've enjoyed using it, thank you very much for developing it!

@daniela-idara
Copy link
Author

daniela-idara commented Mar 4, 2021

It was working yesterday, now I am getting a new message.
image
This one appears on ever tab opened. I close all of my Chrome tabs, reopen, same thing.
image
When I go to the [extension page] chrome-extension://iibninhmiggehlcdolcilmhacighjamp/options.html, I get the same message in a browser pop-up.
Good thing I can still see all my text expanders, but I cannot use them.

@HelpFromFrank
Copy link

HelpFromFrank commented Mar 4, 2021 via email

@daniela-idara daniela-idara reopened this Mar 4, 2021
@daniela-idara
Copy link
Author

@pviswanathan Can you confirm what is going on with the extension now?
I can see my text expanders, but I cannot use them.
The red banner is on every browser tab (see above).
image

@daniela-idara
Copy link
Author

I see the Known Issue message at the top of the extension options page. This fixed it. Thanks!

@pviswanathan
Copy link
Owner

@daniela-idara, do the steps at the top of the page help?

Providing a little more detail here:

  1. Go to chrome-extension://iibninhmiggehlcdolcilmhacighjamp/options.html
  2. Hit Save
  3. Success message appears at the bottom of the page Shortcuts saved!
  4. Refresh any page where you are not seeing the application work and re-attempt expanding your shortcuts

@pviswanathan
Copy link
Owner

In the old version, it was stated clearly that everything was handled locally. This is a plug-in that requires extreme permissions. With a tracker added I am not able to use it anymore due to security concerns.

I'd like to add that I've enjoyed using it, thank you very much for developing it!

@gerapeldoorn your sentiments are certainly heard, and I can understand where you are coming from. What we are striving to do is invest heavily in privacy and security to give you the peace of mind you deserve.

Our sole purpose for adding the library is to gain meaningful insights into where things are and are not working for our users. We have gone through every review left on the app store and noted specific sites that have been called out (e.g. Google Docs, Facebook), but we are unable to get a holistic lens using only this method. Simply put, we'd like to make this product better.

Please feel free to reach out to me with any concerns you have, I am sorry to see you go but happy that this product has made your life easier in some way. I hope it can continue to do that in the future.

@pviswanathan
Copy link
Owner

pviswanathan commented Mar 4, 2021

I see the Known Issue message at the top of the extension options page. This fixed it. Thanks!

@daniela-idara Sorry for the delay getting back to you, glad your issue is resolved now!

@Anumyakala
Copy link

Hi @pviswanathan The extension (Auto Text Expander for Google Chrome Official
1.10.4) was just marked with malware again, and it's not reverting back by just leaving it there. I have also lost my information. Please help.

@Anumyakala
Copy link

image

@pviswanathan
Copy link
Owner

For transparency, more about this, including Google's official response, can be found here: https://getmagical.notion.site/Auto-Text-Expander-Outage-23bff9d3613342d79acef98d6c7c37be

Summary: Google accidentally marked us as malware, recognized their error and apologized for the inconvenience.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests