Chrome Archives

Tech Optimizer

July 26, 2026

How to Stop McAfee from Running on Windows

McAfee offers features such as file scanning, network traffic filtering, VPN services, and browser warnings to protect users. Users can pause Real-Time Scanning by opening the McAfee app, selecting Real-Time Scanning under My Protection Widgets, and turning it off. To disable the Advanced Firewall, users must access the Advanced Firewall section in the app and turn it off. Scheduled scans can be stopped by navigating to Scheduled Scans in the app and clicking Turn off. To prevent Secure VPN from reconnecting, users can toggle it off in the Home tab and set Auto Connect to Never connect automatically. Browser protection features can be managed by toggling off McAfee WebAdvisor in Chrome, Edge, and Firefox. Users can block fake McAfee popups by adjusting notification settings in their browsers. To prevent McAfee startup helpers from opening, users can manage startup settings in Windows. To completely remove McAfee, users should uninstall it through Settings or Control Panel and follow the prompts. If remnants remain, the MCPR tool can be used for complete removal. Microsoft Defender will reactivate automatically after McAfee is uninstalled.

Tech Optimizer

July 25, 2026

Scrappy RAT Malware Targets Chrome And Edge Users

A new remote access trojan (RAT) named msaRAT has been identified by Cisco Talos, linked to the Chaos ransomware group and built using Rust. It exploits Chrome and Edge browsers to disguise its traffic and evade detection. MsaRAT operates through a headless browser process, enabling remote code execution and facilitating ransomware deployment, data theft, and other malicious activities. It is typically installed via phishing emails or malicious files, making it resistant to standard browser patches. Cisco Talos recommends specific SNORT rules and a ClamAV signature for detection. Indicators of Compromise (IoC) include traffic to the IP address 172.86.126.18 and the domain is-01-ast.ols-img-12.workers.dev. The malware primarily targets large organizations, but individual users may also be at risk.

AppWizard

July 23, 2026

Smoother scrolling: How we halved scroll jank in Chrome on Android

In Chrome's multi-process pipeline, delays can disrupt visual fluidity, leading to missed deadlines and stuttering scrolls. The complexity of the input-rendering pipeline makes it challenging to identify the causes of scroll jank. Comprehensive instrumentation has been implemented to analyze the pipeline from input generation to GPU buffer presentation. Perfetto trace events are used to visually analyze each stage during scroll updates to identify irregularities contributing to scroll jank, with the goal of enhancing performance and reliability for a seamless browsing experience.

AppWizard

July 23, 2026

Google has quietly been rebuilding Chrome on Android for years, and it’s now nearly 50% smoother because of it

Google has improved Chrome on Android, resulting in 48% fewer scroll stutters compared to 2023. This enhancement is the result of nearly three years of engineering efforts and a comprehensive redesign of Chrome's rendering pipeline, leading to a smoother scrolling experience and reduced "scroll jank."

Winsage

July 21, 2026

Windows 11 bloat proves too much for Microsoft’s new 8GB Surface Laptop

Microsoft introduced the Surface Pro 12 and Surface Laptop 8, starting at 9, with lower-end specifications including an older Snapdragon chipset and 8GB of RAM. Reviews indicate that while these devices perform adequately for basic tasks, they struggle with more demanding activities, such as video calls on Microsoft Teams, leading to freezing and hanging issues. The device utilized approximately 6.7GB of its available 7.6GB of memory during typical usage, and even a reboot reduced memory consumption to around 4.2GB, which quickly increased with just a few Chrome tabs open. Users have expressed that 8GB of RAM is insufficient for reliable performance, despite Windows 11 having a minimum requirement of 4GB. Historically, Microsoft recommended 16GB of RAM for a seamless experience, but this recommendation has been omitted for the new 8GB devices, which are now described as suitable for everyday use. An additional 8GB is required to access Copilot+ AI features.

Winsage

July 16, 2026

Firefox vs Edge: fresh shots fired in browser wars as Mozilla report accuses Microsoft of using ‘harmful design’ to undermine choice in Windows 11

Mozilla's report raises concerns about Microsoft's practices regarding browser choice in Windows 11, alleging that Microsoft uses harmful design tactics to promote its Edge browser. Key strategies identified include trick wording, obstruction, visual interference, preselection, nagging, and forced action, affecting users at various stages of their experience. For example, users trying to download Chrome encounter pop-up banners encouraging them to use Edge, which is also pre-pinned to the Windows taskbar. Migration from Windows 10 to Windows 11 resets Edge as the default browser, ignoring user preferences. The report also highlights that Microsoft's AI, Copilot, opens links in Edge instead of the user's default browser, and minor consent requests may compromise user privacy by funneling data into Microsoft's advertising systems. Users in Germany face fewer issues due to stricter regulations. The report indicates that while Microsoft's promotion of Edge hasn't significantly impacted Chrome's dominance, it may have affected smaller competitors like Firefox. Mozilla calls for Microsoft to change its approach and urges regulators to take action to ensure fair competition in the browser market.

Winsage

July 15, 2026

LabubaRAT malware infiltrates Windows systems while posing as NVIDIA software

LabubaRAT is a newly identified Rust-based remote access tool (RAT) that disguises itself as NVIDIA software to facilitate operations on Windows systems. It establishes a reusable foothold for hands-on activity and can profile the host system, identify security tools, execute commands, transfer files, capture screenshots, and proxy network traffic. LabubaRAT retrieves its configuration at launch via command-line arguments or environment variables, allowing operators to specify parameters like the command-and-control server and API key at runtime. It maintains local state in a SQLite database and supports communication through HTTPS polling, Microsoft Edge WebView2, and DNS tunneling. The malware includes capabilities for command execution, file handling, and establishing persistence through a Windows Run registry key. The entry point for the attack is an executable named nvidia-sysruntime.exe, which masquerades as NVIDIA’s container runtime toolkit. LabubaRAT conducts thorough profiling of the host, checking for installed browsers and security products, and gathers information on the system's specifications. Blackpoint Cyber has shared indicators of compromise to help detect LabubaRAT activity.

Winsage

July 15, 2026

Here’s how to update every app on your Windows PC with a single command

Updating Windows applications is important for accessing the latest features and protecting against vulnerabilities. Many users neglect this due to forgetfulness or the time-consuming nature of the process. The Microsoft Store and Windows Update usually provide updates for native Windows applications, but a unified method for updating all programs is lacking. Windows includes a command called winget (Windows Package Manager) that allows users to update all applications simultaneously via the command line. The command to update all apps is:


winget upgrade --all

This command updates both traditional installers and Microsoft Store apps. Users can also update individual apps by specifying the app ID, for example:


winget upgrade "Chrome"

To view all applications managed by winget, the command is:


winget list

To skip confirmation prompts during updates, users can use:


winget upgrade --all --accept-source-agreements --accept-package-agreements

For complete automation, users can create a task in Task Scheduler to run at startup with the following setup: 1. Open Task Scheduler and create a basic task named "Winget Auto Update." 2. Set the trigger to run when the computer starts. 3. Choose to start a program, entering PLACEHOLDER216a2cf34dab649d in Program/script and PLACEHOLDERbe861b18048fd836 in Add arguments. 4. Set the task to run with the highest privileges and add a 1-minute delay to ensure network connectivity. While winget does not cover every Windows application, it effectively manages most mainstream applications.

Tech Optimizer

July 15, 2026

Hundreds of GitHub repos found posing as real software to push malware

Cybersecurity firm ArcticWolf has identified 292 malicious GitHub repositories that impersonate legitimate software tools, part of a campaign to deliver a new variant of the BoryptGrab infostealer. This malware can extract sensitive information from 19 web browsers, 32 cryptocurrency wallets, messaging applications like Telegram and Discord, gaming platforms such as Steam, and Windows Credential Manager. It can also exfiltrate files from users' Desktop and Documents folders and capture screenshots. This variant bypasses Chrome’s App-Bound Encryption using direct code injection and does not include an anti-analysis layer or conceal itself, aiming to harvest data quickly without persistence. The malicious activity began in late June, with most repositories removed from GitHub, though several dozen remain active. GitHub's status as a key platform in the open-source community makes it a target for cybercriminals, emphasizing the need for developers to thoroughly vet code before integration.

Tech Optimizer

July 15, 2026

State antivirus revived: “Multiscanner” returns after funding cut

The Russian portal "Multiscanner" has resumed its service for scanning files for malicious software without mandatory registration. It allows users to upload files up to 256 MB in over 30 formats, including DOC, DOCX, PDF, PPTX, EXE, and ZIP. The scanning history is saved in the browser but can be deleted for privacy. "Multiscanner" is compatible with popular web browsers like Google Chrome, Yandex Browser, Firefox, Microsoft Edge, and Safari, but is not available on mobile browsers. The portal was originally developed between 2023 and 2024 and is now managed by the National Technology Center for Digital Cryptography, operating in pilot mode.