How to Check for Viruses on Chrome: Complete Guide

By Josh C.

Chrome doesn't have a traditional virus scanner, but Google Safe Browsing protects billions of devices by checking websites, downloads, and extensions. Start with Chrome's built-in Safety Check, then investigate extensions, settings, downloaded files, and your entire device if warning signs continue.

You may be searching this because Chrome has become slow, strange popups appear on ordinary websites, your homepage changed, or a download triggered a warning. The important distinction is that Chrome can help identify browser-level threats, but it can't independently prove that every file on your computer is clean. Think of Chrome as a guard at the entrance to a building. It can inspect the doors you use and the packages you bring in, while a full antivirus scan checks the rooms, storage areas, and equipment inside.

Understanding How Chrome Protects You

Chrome's main security layer is Google Safe Browsing, not a traditional antivirus program. Safe Browsing checks sites and downloads against Google's unsafe-site and unsafe-download lists, and Google says it protects over five billion devices and can warn users before they visit a dangerous site or download a harmful file (Google Safe Browsing overview).

That protection operates while you browse. If you click a suspicious link in an email, Chrome may display a warning before the page loads. If a download looks dangerous, Chrome can block it or ask you to review it. The browser is watching the route you're taking, rather than searching every file already stored on your computer.

Google describes Safe Browsing as a large detection network. It currently lists more than 21,000 malware attack sites and 1.8 million phishing sites, and it sends more than 3 million warnings to users every day (Google's Chrome browser security paper). Those warnings aren't random popups. They're signals produced by a reputation and detection system designed to intercept known threats.

What a Chrome warning can and can't tell you

Suppose Chrome warns you that a website contains malware. Treat that warning seriously. Close the tab, don't bypass the warning, and don't enter passwords or payment details on the page.

A warning usually tells you that Chrome has identified a risky website, download, or extension. It doesn't necessarily tell you that your whole device is infected. Conversely, the absence of a warning doesn't certify that every local file is safe, especially if the suspicious item never passed through Chrome.

Practical rule: Chrome's protection answers, “Is this browsing activity or download risky?” A full device scan answers, “Is malicious software already somewhere on this computer?”

Google's technical documentation says Safe Browsing threat lists update every 30 minutes, the service scans billions of web pages, and it issues over 3 million warnings per day (Chrome Safe Browsing support documentation). The sensible approach is to use Chrome's alerts as an early warning system, then perform additional checks when symptoms point beyond the browser.

Running Chrome Safety Check

Safety Check is the fastest place to begin because Chrome examines several browser security areas in one guided review. It runs automatically on desktop and Android and can surface unsafe extensions, compromised passwords, harmful settings, and problems with your protection level (Chrome Safety Check support).

Open Chrome and follow these steps:

1. Open the menu. Select the three-dot button in the upper-right corner.
2. Enter Settings. Choose Settings from the menu.
3. Find Safety Check. Scroll until you see Safety Check, then select Go to Safety Check or Get started, depending on your Chrome version.
4. Read each result. Chrome may recommend reviewing Safe Browsing, removing an unsafe extension, changing a compromised password, or correcting another security setting.
5. Apply fixes carefully. Use Chrome's suggested action when you recognize the item. If you don't recognize an extension or password alert, pause and investigate rather than approving everything automatically.

Safety Check doesn't behave like a hard-drive scanner. It reviews browser conditions that commonly affect security and privacy, which is why the results may mention passwords or extensions even when you started by looking for a virus. That broader review is useful because a malicious extension or stolen password can create serious trouble without installing a classic virus.

For a guided visual walkthrough, this Chrome malware scan guide can help you locate the relevant browser controls. Keep the distinction in mind: a clean Safety Check result means Chrome didn't find the browser issues it checks for. It doesn't rule out malware elsewhere on your device.

The browser also continues checking activity after Safety Check finishes. Google says Chrome's Standard Protection checks visited sites, installed extensions, and downloaded files, while newer real-time protections can check websites against Google's server-side bad-site list rather than relying only on locally stored data (Google's real-time Safe Browsing update).

Choosing Your Protection Level

Chrome gives you a choice between Standard Protection and Enhanced Protection. Both help reduce exposure to dangerous sites and downloads. Enhanced Protection sends Chrome additional information for more active analysis, so it suits people who want stronger real-time browser defenses.

Choose Standard Protection if you mainly visit familiar sites and download files from trusted sources. Choose Enhanced Protection when you regularly open unfamiliar links, handle sensitive accounts, or download files whose origin you cannot confidently verify. The setting should match your habits, not merely remain at its default.

Google reports that Enhanced Protection users are phished 20% to 35% less often than Standard Protection users. A Google technical paper also describes a 30% to 50% improvement in phishing protection, while Google says the Safe Browsing service runs more than 300,000 deep scans of suspicious files every month (Google's Enhanced Protection explanation).

Make the choice deliberately

Open Settings, select Privacy and security, then choose Security or Safe Browsing. Select the protection level that fits the links you open and the files you download.

Chrome's protection covers browser activity. It does not inspect every part of your computer. Enhanced Protection can identify more risky websites and downloads, while separate antivirus software scans the device for threats Chrome cannot see. Use both when you need protection beyond the browser.

Auditing Your Chrome Extensions

An extension can look harmless because it adds a button to Chrome, but it may also receive permission to read or change information on websites. That access deserves the same attention you'd give an unfamiliar program installed on your computer.

Recent reporting has shown why an extension audit matters. Malwarebytes described a Chrome and Edge VPN extension that was presented as a privacy tool but was later reported to collect users' AI conversations and send them to a data broker after an update (Malwarebytes' report on the Chrome extension). The lesson isn't that every extension is malicious. It's that an extension's purpose, permissions, and later updates all matter.

Use this audit checklist

Select the puzzle-piece icon in Chrome's toolbar, then choose Manage extensions. Review every item, including extensions you installed long ago and no longer remember.

• Recognize the publisher: If you don't know what an extension does or who made it, disable it first and investigate before keeping it.
• Review permissions: Be cautious when an extension requests access to read and change data across all websites, especially when that access isn't necessary for its stated purpose.
• Check recent behavior: Remove an extension associated with new ads, redirects, changed search results, slow browsing, or unexpected tabs.
• Consider continued need: If you haven't used an extension recently, uninstalling it reduces unnecessary access.
• Use Chrome's removal control: Select Remove, confirm the action, and restart Chrome before checking whether the behavior has stopped.

Don't assume a Chrome Web Store listing guarantees that an extension is right for you. Read the description, publisher details, requested permissions, and user feedback, but remember that those clues can't replace your own judgment.

An extension should earn its place by doing something you understand, with permissions that match that job.

If the unwanted behavior disappears after you disable one item, don't immediately reinstall it to test the result. Leave it removed, change passwords that may have been entered while the extension was active, and consider a device scan if the extension had broad access.

Reseting Chrome Settings

Resetting Chrome is useful when the browser's configuration has changed in ways you didn't authorize. Typical signs include a new homepage, an unfamiliar search engine, repeated redirects, or notifications that continue after you close suspicious tabs.

Before resetting, save anything you may need from open tabs and make sure you know how to sign back into important accounts. Then open the three-dot menu, choose Settings, select Reset settings, and choose Restore settings to their original defaults. Read Chrome's confirmation screen before approving the reset.

The reset restores browser settings and disables extensions, but it isn't the same as deleting every personal item. Chrome's support guidance should be your reference if the labels differ in your version. You'll still need to review extensions and permissions afterward because resetting is a recovery step, not a complete investigation.

When a reset makes sense

Reset Chrome when:

• Search behavior changed: Your searches go through an unfamiliar provider or produce unexpected results.
• The homepage moved: Chrome opens a page you didn't select.
• Redirects continue: Ordinary links send you to unrelated pages.
• Settings won't stay fixed: A change returns after you correct it.
• Extensions behave strangely: Disabling or removing one item hasn't restored normal browsing.

If redirects or homepage changes continue, the cause may be a browser hijacker or unwanted software outside Chrome. For a region-specific explanation of that problem, hijacker removal for Sheffield users offers additional troubleshooting context from Steel City IT.

You can also review this guide to removing the Yahoo search virus when unwanted Yahoo redirects are part of the problem. If Chrome remains abnormal after a reset, stop treating it as a browser-only issue and check the operating system.

Checking Your Entire Computer

Chrome checks websites, downloads, and extensions. It does not inspect every application, executable, document, system component, or startup process stored on your computer. That boundary matters: a browser warning points to a web threat, while unfamiliar software or system changes require a device-level check.

Run a full scan when you notice unfamiliar applications, system-wide slowness, security settings that change back, unexplained account activity, or suspicious files in several folders. Use a reputable antivirus or anti-malware product, update its threat definitions, and select a complete scan rather than only a quick scan.

A complete scan examines more of the device, so it can take time. Keep the computer connected to power, avoid opening questionable files, and follow the product's instructions if it quarantines an item. Use one reputable primary protection tool. Several security programs can interfere with one another, so add a second opinion only when you understand how both products will coexist.

Match the response to the symptom

Malwarebytes is one example of a product used for broader malware detection. The main requirement is coverage beyond Chrome. A browser reset can remove a harmful setting, but it cannot necessarily remove software that changed system files or created a separate startup process.

For practical signs that an infection can extend beyond the browser, consult the Finchum Fixes IT malware guide. Chromebook users need a device-appropriate process, and this virus on Chromebook guide covers related browser settings, extensions, notifications, and checks.

Protecting Yourself Going Forward

A clean browser is a starting point, not a permanent guarantee. Build a routine that combines Chrome's warnings, careful extension choices, cautious downloads, and device-wide security checks.

Use this simple pattern:

• Before downloading: Confirm the website, publisher, file purpose, and expected file type. Don't open a download just because a popup claims your computer has a virus.
• Before installing an extension: Ask whether you need it, read its permissions, and check the publisher. Remove it if its access doesn't match its function.
• While browsing: Treat urgent warnings, prize messages, fake support alerts, and unexpected login pages as suspicious. Close the tab instead of following instructions from the page.
• After a warning: Don't bypass Chrome's protection. Run Safety Check, review downloads and extensions, and scan the device if symptoms continue.
• At regular intervals: Review extensions, passwords, site permissions, and Chrome's protection level. Install browser and operating system updates when they become available.

Google has continued expanding Chrome's security model. Google announced that, in a projection for October 2026, Chrome 154 will make Always Use Secure Connections the default for public sites, following an earlier rollout for more than 1 billion users who opted into Enhanced Safe Browsing (Google's HTTPS-by-default announcement). The same announcement says testing produced fewer than one warning per week for the median user and fewer than three warnings per week for users at the 95th percentile, showing an effort to surface meaningful risks without overwhelming people.

Seek professional help if you can't remove an extension, the computer keeps changing security settings, important accounts show unauthorized activity, or a full scan reports a persistent threat. If scam calls, messages, or emails are what lead you toward suspicious downloads, the Gini Help app is available on Google Play and the App Store.

Gini Help screens calls, texts, and emails for spam and scam signals, and its Live Call Analysis can provide a risk score and haptic warnings during calls you answer. Visit Gini Help to add another layer of protection around the messages and conversations that can lead to unsafe links or downloads.