Key takeaways
- Check the subscription hasn’t lapsed. An expired trial still running in the background is a classic trigger.
- Use the vendor’s repair option (Settings → Apps → the antivirus → Modify → Repair) rather than a plain reinstall; repair rebuilds the registration.
- Pause “web shield” or “download scanning” for 60 seconds and retry. If the download completes, the shield itself is faulty — update it, then switch it back on.
- Make sure the antivirus can read your Downloads folder. Ransomware-protection features that lock folders, or folder exclusions, will break the scan silently.
The fastest fix for Chrome’s “Virus scan failed” error is to confirm that a working, licensed antivirus is actually registered with Windows, then retry the download in a clean Chrome profile. That error does not mean Chrome found a virus — it means Chrome asked your operating system’s security software to scan the file, the scan never returned a result, and Chrome blocked the download rather than risk it. Most people clear it in under ten minutes once they know which of the four common causes they’re hitting.
What the Error Actually Means
When you download an installer, archive, or document, Chrome hands the file to Windows’ Attachment Manager, which calls whichever antivirus product is registered with the Windows Security Center. Three outcomes are possible: the scan reports clean, the scan reports infected, or the scan fails. Only the third produces this message.
A scan fails when the registered antivirus is missing, expired, disabled, mid-update, too slow to answer before the timeout, or unable to read the folder the file landed in. That distinction changes the fix: deleting Chrome, clearing cookies, or switching browsers won’t help if the real problem is a broken antivirus registration.
60-Second Triage
| What you’re seeing | What it usually means | Go to |
|---|---|---|
| Every download fails, any file type | No antivirus registered, or the registered one is switched off | Fix 1 |
| Error started after uninstalling or replacing an antivirus | Stale registration pointing at software that no longer exists | Fix 1, then Fix 2 |
| Only .exe, .msi, .zip, .7z or .rar files fail | Download protection scanning flagged file types | Fix 3 |
| One specific file fails, everything else is fine | Corrupt download, blocked host, or low disk space | Fix 6 |
| Work laptop you don’t administer | Group Policy or an endpoint agent enforcing the block | Contact IT |
Fix 1: Verify Your Antivirus Is Registered and Running
Open Windows Security (search “Windows Security” from Start) and check Virus & threat protection. You want a green check and a recent “Last update” time. If a third-party antivirus is installed, Windows Security typically hands over to it and displays the vendor’s name.
To see exactly what Windows believes is protecting the machine, open PowerShell as administrator and run:
Get-CimInstance -Namespace root/SecurityCenter2 -ClassName AntiVirusProduct | Select displayName, productState
If the list comes back empty
Turn Microsoft Defender back on: Virus & threat protection → Manage settings → Real-time protection. If Defender is off because a third-party product took over and then went away, repair or reinstall that product instead.
If it names software you removed months ago
That leftover registration is your cause. Reinstall the old antivirus briefly, then remove it using the vendor’s own dedicated removal tool, which clears the registration Windows is still pointing at. Restart before retrying the download.
Fix 2: Repair the Antivirus That Owns the Scan
- Check the subscription hasn’t lapsed. An expired trial still running in the background is a classic trigger.
- Use the vendor’s repair option (Settings → Apps → the antivirus → Modify → Repair) rather than a plain reinstall; repair rebuilds the registration.
- Pause “web shield” or “download scanning” for 60 seconds and retry. If the download completes, the shield itself is faulty — update it, then switch it back on.
- Make sure the antivirus can read your Downloads folder. Ransomware-protection features that lock folders, or folder exclusions, will break the scan silently.
Paid suites generally run $30–$80 per year for a single device, but this particular error is about registration, not features, so a free tier works fine.
Fix 3: Chrome’s Own Download and Safe Browsing Settings
Type chrome://settings/security in the address bar. You’ll see three Safe Browsing levels: Enhanced protection, Standard protection (the default), and No protection.
- If you’re on Enhanced, drop to Standard and retry — Enhanced sends more of each download to Google for checking and produces more false blocks.
- If the error persists, set No protection for a single trusted download, then switch straight back. Treat this as a diagnostic step, never a permanent setting.
Next, check chrome://settings/downloads. Confirm the download location exists, is writable, and isn’t a disconnected network drive or a cloud folder mid-sync. Finally, open chrome://flags and search “download” — if a download-scanning or deep-scanning entry is present and enabled, set it to Default and relaunch. Flags change between Chrome versions, so this step is optional.
Fix 4: Rule Out Extensions and Profile Corruption
Open a Guest window (profile menu → Open Guest window) and try the same download. Guest windows run with no extensions and a clean profile.
- Works in Guest but fails normally → an extension or profile setting is at fault. Disable everything at chrome://extensions, then re-enable one at a time.
- Fails in Guest too → the problem sits at the Windows level. Continue to Fix 5.
Creating a fresh Chrome profile takes about 30 seconds and rules out years of accumulated settings at once.
Fix 5: Windows-Level Repairs
- Run sfc /scannow, then DISM /Online /Cleanup-Image /RestoreHealth, both in an elevated Command Prompt. Each takes roughly 5–15 minutes.
- Check Attachment Manager policy. In gpedit.msc, go to User Configuration → Administrative Templates → Windows Components → Attachment Manager. The setting “Notify antivirus programs when opening attachments” should be Enabled when you have a working antivirus; a mismatch between this policy and your actual setup is a known trigger. On Home editions without gpedit, the equivalent lives under HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments, value name ScanWithAntiVirus — back up the key first, and remember that disabling scanning lowers your protection.
- Turn off Controlled folder access temporarily (Virus & threat protection → Ransomware protection) if Downloads is a protected folder. If downloads start working, add Chrome to the allowed apps list rather than leaving the feature off.
- Confirm the machine is on Windows 10 or later. Chrome ended support for Windows 7 and 8.1 in 2023, and older systems produce a whole family of download failures that no setting fixes.
Fix 6: Space, Path Length, and Folder Permissions
Three unglamorous limits cause a surprising share of these errors:
- Free disk space: keep at least 1–2 GB free on the drive holding Downloads. Windows and the antivirus both need room to stage and scan a copy of the file.
- Path length: Windows still struggles beyond 260 characters. A file headed for C:\Users\name\OneDrive\Documents\Projects\2026\Client\Final\… can fail to save or scan. Point Downloads at C:\Downloads and retry.
- Location type: encrypted containers, folders syncing to OneDrive or Dropbox at the moment of download, and removable drives are the three places scans fail most often. Download to a plain local folder, then move the file.
Fix 7: Safe Workarounds While You Sort It Out
- Try the same file in Microsoft Edge or Firefox. If it downloads there but not in Chrome, the problem is Chrome-side; if it fails everywhere, the antivirus registration is the culprit — which is useful to know.
- Use the vendor’s own download page rather than a mirror, and check the published file hash if one is offered.
- Never bypass a scan for a file from a source you don’t recognise. If the file matters, download it on a machine with working protection and transfer it by USB, scanning it there.
Match the Fix to Your Situation
| Your situation | Most likely cause | Do this, in order | Typical time |
|---|---|---|---|
| Personal Windows 11 PC, every download fails | Antivirus not registered or disabled | Fix 1 → Fix 2 | 5–10 min |
| Started after uninstalling Norton, McAfee or Avast | Stale antivirus registration | Fix 1 → Fix 2 | 10–20 min |
| Only .exe and .msi files fail | Download protection plus antivirus interaction | Fix 3 → Fix 1 | 5–15 min |
| Fresh Windows install, no third-party antivirus | Defender real-time protection switched off | Fix 1 | 2–5 min |
| One large file (2 GB or more) keeps failing | Scan timeout or insufficient free space | Fix 6 | 5 min |
| Work laptop managed by IT | Policy or endpoint agent | Ask IT; don’t change settings | — |
FAQ
Does “Virus scan failed” mean I have a virus?
No. It means the scan couldn’t complete. Chrome blocks the download because it can’t verify the file, not because it detected anything in it.
Is it safe to turn Safe Browsing off to get the file?
Only as a temporary test on a file you already trust, and switch it back immediately afterwards. With Safe Browsing off, Chrome stops warning you about known-malicious downloads altogether.
Why does this happen mostly with .exe and .zip files?
Those types are scanned most aggressively by both Windows and Chrome, so they hit the scan path far more often than a PDF or an image does.
Will reinstalling Chrome fix it?
Rarely. The scan happens at the Windows level, so a Chrome reinstall usually just costs you your settings. Start with Fix 1.