Antr

This thread can closed right now

made another test i completely uninstalled chrome itself and downloaded brand new google chrome installer testing1.txt - scan test without google chrome https://www.virustotal.com/gui/file/7a95e9ef40e067a480129035914f8f28cb7130f808f42804f9e4d5ab2d60923e/detection virustotal test for google chrome installer testing2.txt - scan test after brand new google chrome install and i even did not log in into google account with my user conclusion: Malwarebytes falseflags mail.ru search engine because it was a thing back then. Also someone made a adware while back with that search engine. another conclusion: mail.ru search engine is by default with google chrome, because it depens where i live. next conclusion: i asked person in my country, do they have the same search engine and i found out thats a correct. People have the same search engine installed in their system and malwarebytes picks that up as potentially harmful. final conclusion: theres no help for me in that situation other else than just i have to accept that finding from malwarebytes and google policy. testing2.txt testing1.txt

i made few test for education purpose: testing.txt - i completely deleted syncdata and levelDB folder (then i did not open google chrome after that) testing2.txt - now i opened google chrome for once testing3.txt & test_chrome.PNG & test_chrome2.PNG( be advised that i used malwarebytes to remove that mailru search engine before) - i completely deleted all data i could from google itself using clear data function from google itself testing4.txt - made new malwarebytes scan test and found nothing aswell test_chrome3.PNG & test_chrome4.PNG & test_chrome5.PNG - since i found nothing from both testing3 and testin4 test i tought i could go wild and reset browser itself from settings. testing5.txt - heres result of testing test_chrome3.png & test_chrome4.PNG & test_chrome5.PNG no sync data from internet just reset from browser itself. all files are in testing.zip testing.zip

Even if i make new fresh windows install and doing fresh google chrome install. It wont go away. mail ru search engine will come back new_scan_malwarebytes.txt

Heres a result of step1 , 2 and 3 AdwCleaner[C03].txt malwarebytes_scan_result.txt FRST.txt Addition.txt

Heres my result: Thank you for helping me. i uninstalled ccleaner, java8 FRST.txt Addition.txt Fixlog.txt

Yes idemia is installed on purpose. source: https://installer.id.ee thats program that can read our document. Yes i set those persistent routes myself. And i dont know where the policy restriction come for google chrome. The computer is fully mine. I run the fix and then i give the feedback after fixing list.

heres my log files as requested FRST.txt Addition.txt

issue is hidden there that im from europe and google keeps giving me those search engines. I never cant get rid of that issue, only with vpn or changing my location to western society. Since theres a malwarebytes office in tallinn, maybe its possible to redict that issue to there for further investigation. That would fall into that requirements to look into that issue little better. For now its 100% sure thats google itself that keeps giving those search engines. Thank you for answering and giving attention for that issue.

thank you for answering. I meant those files i uploaded here to make inacessible. Also i really followed those instructions to reset all sync data all together with removing all data from chrome and reset and stuff. I did it before i even came here. I tried absolutely every trick u suggested those guys who had similar problem. That thing didnt go away. That is reason why i came here. Im thankful that response and suggestion but that gives same issue as described before. Like i assume its false positive alert from malwarebytes because of bad experience with those search engines.

can u close this topic and make those file inacessible? thank you

since i cant edit my message. Heres a the virustotal result of something that malwarebytes think thats potentially malware https://www.virustotal.com/gui/file/51d2404e895287d1c46e742859b0e58b0212cd4ebd2e491ad8f598ab8b89aae6/detection

Please show him this screenshot aswell. After removing any data in sync, then only web.data is appearing to be the issue here. Please be notified the files im sending here was flagged potentially bad. The full report is in thefound.txt thefound.txt the found.zip

Heres a picture what i see after clean install of google chrome. Same picture after clean installation of windows. Same situation with search engines involves atleast 4+ person who has same result. heres a article about those search engines. https://www.androidpolice.com/2020/01/09/google-alternative-search-engines-android-europe/

Im not ok that google gives mail.ru search engine by default. Also im not okay with that false positive result finding that threat. But seems i have nothing else to do then quit using google chrome. But i cant do anything about that google decides what search engines i should have extra instead google itself.

thank you for answering i searched answers for my own and found out next: in estonia seems that google gives search engines ans yandex and mail.ru by default. Thats confirmed by asking several people-s search engines. Also doing clean google chrome installs on freshly installed pc. That may answer why malwarebytes keep popping up with that mail.ru thing cause it was a thing back then. adwcleaner found nothing on my pc. also i did several malware searching in my pc (with diffirent av-s) - nothing i also deleted all my sync data from google, seems its mistake cause overally its still false positive result.

Malwarebytes web protection failed (once atleast, i couldnt enable it and it crashed) i repaired with malwarebytes repair tool. My problem is following: Search engines @mail.ru and @yandex keep coming back even if i keep removing them. Also malwarebytes keep finding that in google web.data file theres a PUP.mail.ru file treath. I made several clean installs but that seems not solve the problem. Also i asked few friends, do they have same thing in their search engines and what occurs, that they similary have same thing. Now im bit confused, is that detection from malwarebytes program false positive or i really have some kind of virus in my system that i cant get rid off. doc.txt

heres additional log. Malwarebytes keeps going broke. mbst-grab-results.zip

Hello like title says im having problem with pup.mailru malware. i tryed everything from previous posts. My windows is up on date. log files in attach. Addition.txt FRST.txt