sagybp

Hi, Thanks for the reply. After cancelling the sync, MB was able to remove the entries and they were not found again. I guess you don't need the logs now. Thank you for the help. P.S. I apologize for the double post. It was an honest mistake. I tried to delete my second post but found no way to do it. It can be closed/ignored ( )

Hi, I'm attaching the 3 required logs. The infections that MWB is finding keep coming back every scan, even if I quarantine them. I don't know if it's a false positive or not. Sagi. FRST.txt Addition.txt MWB.txt

Everytime I scan my computer and quarantine the findings, I ger exactly the same results. Is this a false positive? everything I tried didn't help. Always the same results. Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 27/01/2020 Scan Time: 22:59 Log File: 4abab360-4150-11ea-81cc-10c37b1bdf8a.json -Software Information- Version: 4.0.4.49 Components Version: 1.0.804 Update Package Version: 1.0.18288 Licence: Trial -System Information- OS: Windows 10 (Build 18362.592) CPU: x64 File System: NTFS User: DESKTOP-5J8NB8N\Sagi -Scan Summary- Scan Type: Threat Scan Scan Initiated By: Manual Result: Completed Objects Scanned: 306566 Threats Detected: 10 Threats Quarantined: 0 Time Elapsed: 2 min, 58 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 2 PUP.Optional.ExtensionNSUU.ChrPRST, HKLM\SOFTWARE\POLICIES\GOOGLE\CHROME, No Action By User, 15053, -1, 0.0.0, , action, PUP.Optional.ExtensionNSUU.ChrPRST, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\CHROME, No Action By User, 15053, -1, 0.0.0, , action, Registry Value: 2 PUP.Optional.ExtensionNSUU.ChrPRST, HKLM\SOFTWARE\POLICIES\GOOGLE\CHROME\ExtensionInstallWhitelist|2, No Action By User, 15053, 784915, , , , PUP.Optional.ExtensionNSUU.ChrPRST, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\CHROME\ExtensionInstallWhitelist|2, No Action By User, 15053, 784915, , , , Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 1 PUP.Optional.ExtensionNSUU.ChrPRST, C:\USERS\SAGYB\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FKFHFHGOIPKHMIEAMODPHNFMNEGLAPGL, No Action By User, 15053, 784915, 1.0.18288, , ame, File: 5 PUP.Optional.ExtensionNSUU.ChrPRST, C:\WINDOWS\SYSTEM32\GROUPPOLICY\MACHINE\REGISTRY.POL, No Action By User, 15053, 784915, , , , PUP.Optional.ExtensionNSUU.ChrPRST, C:\USERS\SAGYB\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FKFHFHGOIPKHMIEAMODPHNFMNEGLAPGL\1.1.8_0\MANIFEST.JSON, No Action By User, 15053, 784915, 1.0.18288, , ame, PUP.Optional.ExtensionNSUU.ChrPRST, C:\DOCUMENTS AND SETTINGS\ALL USERS\NTUSER.POL, No Action By User, 15053, -1, 0.0.0, , action, PUP.Optional.ExtensionNSUU.ChrPRST, C:\PROGRAMDATA\NTUSER.POL, No Action By User, 15053, -1, 0.0.0, , action, PUP.Optional.ExtensionNSUU.ChrPRST, C:\WINDOWS\SYSTEM32\GROUPPOLICY\MACHINE\REGISTRY.POL, No Action By User, 15053, -1, 0.0.0, , action, Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end)