Profile does not get deleted after uninstalling on Windows (incl. Also delete your browsing data)
Reported by
jugalpan...@gmail.com,
Sep 9
|
|||||||||||
Issue descriptionVULNERABILITY DETAILS Once Browser is uninstalled then account detail must be deleted along with that. It is unsafe to have auto-login after installing the browser. It is unexpected for a user to see any of google account. It should ask credential again. VERSION Chrome Version: Version 69.0.3497.81 (Official Build) (64-bit) Operating System: Windows 7 Ultimate 64 Bit REPRODUCTION CASE 1. Install Chrome and log in with google account. 2. Uninstall it from "Programs and Features". It asks "Also delete your browsing data?" then select it. 2. Install Chrome by using "ChromeStandaloneSetup64". After installing chrome it gets auto-login. 3. Uninstall 4. Install Chrome by using "ChromeSetup". Again it gets auto-login. 5. Try to install/uninstall multiple time with "ChromeSetup" It's with the same behavior. Explaining this issue only possible with video so attached it for your reference. Use https://www.webex.com/play-webex-recording.html to play the video. Please let me know if you need more information. Thank You!
,
Sep 11
,
Sep 11
Hi, thanks for the report! I know this is disturbing, and it is obviously not something that is supposed to happen in Chrome! This seems related to the Uninstall feature, it looks like it does not delete your data even though you select this option. I added Installer component to proceed with the investigation. In the mean-time, can you please verify the following? 1 - Open your Chrome, check you are signed into Chrome (as you do in the video) 2 - Open chrome://version and copy the "Profile Path" value somewhere else (e.g., in a Notepad window) 3 - Open Windows Explorer and double-check this path exists (select the address bar, paste the profile path, press enter) 4 - Close Windows Explorer (important) 5 - Uninstall Chrome, select the "Also delete your browsing data?" 6 - Open Windows Explorer and check if the same profile path still exists. If everything works as expected, it should be gone. Does it exist for you?
,
Sep 12
The folder exists after uninstalling Chrome. I have tried multiple times but the folder is not getting deleted. When I click on "Also delete your browsing data?" It should delete the folder.
,
Sep 12
Thanks for the info! This is indeed a bug in the installer that needs to get fixed. After your feedback, this does not seem like a security issue (thus, removing all security labels). Definitely not a Sync issue. grt@, I am not knowledgeable in the windows domain, can you please add the correct component / forward to someone who works on the (un)installer?
,
Sep 12
That's me. I'll take a look.
,
Sep 12
I've just tested with 69.0.3497.92 and found that the User Data directory is deleted as expected. Could you please attach %TEMP%\chrome_installer.log? Perhaps it indicates why the directory isn't deleted in your case. Thanks.
,
Oct 15
Thanks. That confirms that at least an attempt was made to delete the directory: [0912/084539:ERROR:uninstall.cc(435)] Failed to delete user profile dir: C:\Users\USER\AppData\Local\Google\Chrome\User Data I suspect that another program has an open handle to that directory or something within it. An easy way to diagnose further would be to use the "Find" feature of Process Explorer (https://docs.microsoft.com/en-us/sysinternals/downloads/process-explorer) or Process Hacker (https://processhacker.sourceforge.io/) to search for programs with open handles to anything within "User Data".
,
Nov 19
Closing due to inability to reproduce and lack of feedback. Feel free to reopen if you have more info. Thanks. |
|||||||||||
►
Sign in to add a comment |
|||||||||||
Comment 1 by mpdenton@google.com
, Sep 10Labels: Security_Severity-Low Security_Impact-Stable OS-Windows Pri-2