Platform
10230.0.0 (Official Build) dev-channel edgar
Firmware
Google_Edgar.7287.167.96
Channel
Currently on dev
ARC Version
4510049
Blink
537.36 (@)
V8
6.5.75
User Agent
Mozilla/5.0 (X11; CrOS x86_64 10230.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3299.0 Safari/537.36
Command Line
/opt/google/chrome/chrome --ppapi-flash-path=/opt/google/chrome/pepper/libpepflashplayer.so --ppapi-flash-version=28.0.0.133 --ui-prioritize-in-gpu-process --use-gl=egl --enable-native-gpu-memory-buffers --gpu-sandbox-failures-fatal=yes --enable-logging --log-level=1 --use-cras --enable-wayland-server --user-data-dir=/home/chronos --max-unused-resource-memory-usage-percentage=5 --login-profile=user --has-chromeos-keyboard --default-wallpaper-large=/usr/share/chromeos-assets/wallpaper/oem_large.jpg --default-wallpaper-small=/usr/share/chromeos-assets/wallpaper/oem_small.jpg --default-wallpaper-is-oem --guest-wallpaper-large=/usr/share/chromeos-assets/wallpaper/guest_large.jpg --guest-wallpaper-small=/usr/share/chromeos-assets/wallpaper/guest_small.jpg --enable-consumer-kiosk --arc-availability=officially-supported --enterprise-enrollment-initial-modulus=15 --enterprise-enrollment-modulus-limit=19 --login-manager --first-exec-after-boot --vmodule=*arc/*=1,automatic_reboot_manager=1,tablet_power_button_controller=1,*chromeos/login/*=1,auto_enrollment_controller=1,*plugin*=2,*zygote*=1,*/ui/ozone/*=1,*/ui/display/manager/chromeos/*=1,*night_light*=1,power_button_observer=2,webui_login_view=2,lock_state_controller=2,webui_screen_locker=2,screen_locker=2
Build Date
Tuesday, December 19, 2017

What steps will reproduce the problem?
Normal ops
Brand new chrome book.
Didn't enter phone number when I created new account, chromebook came up clean.
Next thing I new it said there was a new OS update to install  (which I had never encountered before) 

Then I noticed the galaxy 4,5,6 malware had been loaded on the brand new acer.   I created a log on monorail, tried to roll back the update, powerwashed and deleted the old email I had created cw6316... and reran chrome net internals which I have attached.  

There are significantly more issues now identified.  This login does not have my phone number in the account but is protected by google enhanced privacy protection.  This is the log for initial login to the chromebook.   https://bugs.chromium.org/p/chromium/issues/detail?id=797198

I have noted both of these chrome books have multiple unauthorized modules visible in net-internals, the old galaxy 4 malware is resident in both, and another stand alone update is constantly trying to update flash on both machines.  These two chromebooks will power wash but it doesnt do any good, the malware still resides on the device, also several of the apps "can't delete these.png" will not allow me to remove them at all.  It reminds me of the people that made encrypted partitions using samsung knox on their phones added malware and then added the ~20 phones to corina.w on the samsung website....  All of these apps downloaded straight away to my galaxy phones.

 

Deleted: debug-logs_20171225-223308 1.2 MB

debug-logs_20171225-223308 1.2 MB View Download

Deleted: wants to update adobe flash player badly.png 1.9 MB

	wants to update adobe flash player badly.png 1.9 MB View Download

Deleted: openingallery.png 2.3 MB

	openingallery.png 2.3 MB View Download

Deleted: cantdeletethese.png 1.9 MB

	cantdeletethese.png 1.9 MB View Download