Addition.txt211030 1551 Malwarebytes Scan.txtFRST.txt
I recently downloaded some files I needed from various disreputable Chinese websites.
I have already removed most of the initial malware/bloatware that was visible via Malwarebytes or regular Windows user interface.
Evidently, some malware persists. For example, every ~2 hours Windows will prompt me to open a .7ztmp file which I have located in %usertemp% (see attached image). Task scheduler does not appear to have any events matching this time interval. Even if I delete the file, it will eventually be recreated in the same place with the same name, contents, and time metadata. When it reappears, it again prompts me to open the file.
I was curious so I set the file's default program to WinRAR, which reveals the contents of this file to be related to Google Chrome's Baidu Translate extension. However, I have already removed the extension and uninstalled Google Chrome.