SKL

well... i already know that some extension is causing these... What I really want to do is find out what extensions are causing these... because if I want those extensions, then I may want to then just ignore these pups, right? I just want to know where they're coming from... Is there not some kind of fingerprint db to match these pups with possible extensions names?

OK, i see the rootkit option in the scanner... so what's the first option for? under security? that I had already turned on... what does that do? seems useless... and why is it recommended that you not search for rootkits? and why not use expert system algo to id malicious files? seems counter intuitive. Can you please explain or point me to an explanation?

Yep, see attached screenshots.

In the attached scan output file, it says "Rootkits: Disabled" -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect But in the attached screenshot of MWB Security Settings, you can see that I have it enabled... Does it mean that I have a rootkit (?) or is this a bug in MWB? or am I missing something? 20220211 mwb.txt

I keep quarantining them and they keep coming back... I'm thinking these might be legit files / directories created by some of the extensions I'm using BUT I cannot tell what extensions these files are related to... is there an easy way to find out? Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 2/11/22 Scan Time: 8:33 AM Log File: f61e9316-8b4f-11ec-8963-14feb5ee2e33.json -Software Information- Version: 4.5.2.157 Components Version: 1.0.1562 Update Package Version: 1.0.50943 License: Premium -System Information- OS: Windows 10 (Build 19044.1526) CPU: x64 File System: NTFS User: System -Scan Summary- Scan Type: Threat Scan Scan Initiated By: Scheduler Result: Completed Objects Scanned: 299592 Threats Detected: 11 Threats Quarantined: 0 Time Elapsed: 5 min, 3 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 2 PUP.Optional.Trovi, C:\USERS\SALIM\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, No Action By User, 487, 454808, , , , , , PUP.Optional.Conduit, C:\USERS\SALIM\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, No Action By User, 180, 454835, , , , , , File: 9 PUP.Optional.Trovi, C:\Users\salim\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000004.log, No Action By User, 487, 454808, , , , , A53F459D9575F7BE94BE4D655CAF0EE5, 0906BAEE622AB2C27311FC15EC586AED7BDEBD935B636889701692A9C2386281 PUP.Optional.Trovi, C:\Users\salim\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000005.ldb, No Action By User, 487, 454808, , , , , 693F63E3B105208A9613F9D0AE0D8DCD, 7EF53B5712236F5652F23E25E0DE5B97FB54C630D7F44F42B0B0F025530F3E74 PUP.Optional.Trovi, C:\Users\salim\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\CURRENT, No Action By User, 487, 454808, , , , , 46295CAC801E5D4857D09837238A6394, 0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443 PUP.Optional.Trovi, C:\Users\salim\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOCK, No Action By User, 487, 454808, , , , , , PUP.Optional.Trovi, C:\Users\salim\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG, No Action By User, 487, 454808, , , , , 4D2CFD82E608E8B7BD0C771FC08EEA79, 9B81708A09FB0DD63AAF621CF906E5F13065F21DB0086C8CAF1AB53673B38A6E PUP.Optional.Trovi, C:\Users\salim\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000001, No Action By User, 487, 454808, , , , , 482CB3B387FC2ACB86DC0AC0C82AD41F, 71DD39195A3AC0441F48C5882E060B367EDA696C18B080F87D4FE26F600DE377 PUP.Optional.Trovi, C:\USERS\SALIM\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, No Action By User, 487, 454808, , , , , B7C9D5A20EFBBB33F704AFBA42A13CBD, EB10D44CD512C50BA50FA644420ECF955B7F095546098965C556A339B7F82E35 PUP.Optional.Trovi, C:\USERS\SALIM\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, No Action By User, 487, 454808, 1.0.50943, , ame, , 849CFA06EBDD95890366B62888D0ECCA, 3B2A1221898C15EC2E9D488807D5D30B55B93734C7F0A7224AC887CBD2FFF1B9 PUP.Optional.Conduit, C:\USERS\SALIM\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, No Action By User, 180, 454835, 1.0.50943, , ame, , 849CFA06EBDD95890366B62888D0ECCA, 3B2A1221898C15EC2E9D488807D5D30B55B93734C7F0A7224AC887CBD2FFF1B9 Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end) 20220211 mwb.txt