pup.optional.asearch.a - showing repeatedly "Chrome\User Data\Default\Preferences"

[AndrewMont]

This has been repeatedly showing up, I don't whether it's a false positive or something to worry about. I have selected for it to be quarantined and removed several times and it always shows back up. I've searched online and the forums but cant find anything about specifically 'pup.optional.asearch' its path file is C:\Users\'User'\AppData\Local\Google\Chrome\User Data\Default\Preferences 

 

It does seem like its just a mistake as it's my google chrome preferences file but want to be sure. 

 

 

 

Addition.txt

FRST.txt

[MrCharlie]

Welcome to the forum.

Before continuing....Make sure you have created a restore point and.....
Download Delfix from Here and save it to your desktop.

• Place a check mark in front of .......
• Create registry backup <---only!
• Uncheck the rest!
• Click the Run button.
  
  Close the tool out when it's done....we'll use it later.
  
  --------------------------------
  
  Download the attached fixlist.txt to the same folder as FRST.exe.
  Run FRST.exe and click Fix only once and wait
  The tool will create a log (Fixlog.txt) in the folder, please post it to your reply.
  
  -------------------------------
  
  This Chrome setting has to be changed manually: (link should explain how to do it)
  
  

  CHR StartupUrls: "hxxp://websearch.a-searchpage.info/?pid=320&r=2013/06/05&hid=2012117803&lg=EN&cc=GB&unqvl=18"

   

  
  http://www.malwareremovalguides.info/how-to-remove-adware-from-google-chrome/
  
  ----------------------------------
  
  Please download AdwCleaner from HERE or HERE to your desktop.
  • Double click on AdwCleaner.exe to run the tool.
    Vista/Windows 7/8 users right-click and select Run As Administrator
  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • When it's done you'll see: Pending: Please uncheck elements you don't want removed.
  • Now click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
  • Look over the log especially under Files/Folders for any program you want to save.
  • If there's a program you may want to save, just uncheck it from AdwCleaner.
  • If you're not sure, post the log for review. (all items found are adware/spyware/foistware)
  • If you're ready to clean it all up.....click the Clean button.
  • After rebooting, a logfile report (AdwCleaner[s0].txt) will open automatically.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of that logfile will also be saved in the C:\AdwCleaner folder.
  • Items that are deleted are moved to the Quarantine Folder: C:\AdwCleaner\Quarantine
  • To restore an item that has been deleted:
  • Go to Tools > Quarantine Manager > check what you want restored > now click on Restore.
  Next..................
  
  Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
  Next.........
  
  Please run a Quick Scan with Malwarebytes like this: (Ver: 1.75)
  Open up Malwarebytes > Settings Tab > Scanner Settings > Under action for PUP > Select: Show in Results List and Check for removal.
  Please Update and run a Quick Scan with Malwarebytes Anti-Malware, post the report.
  Make sure that everything is checked, and click Remove Selected.
  
  If you're using Malwarebytes 2.0, please run a Threat Scan
  Click on settings > Detection and Protection > Non-Malware Protection > PUP (Potentially Unwanted Program) detections > Make sure it's set to Treat detections as malware
  Same for PUM (Potentially Unwanted Modifications)
  Quarantine All that's found
  
  MrC
  
   

[AndrewMont]

Update: there was someone else who was having the same problem, I went back to their post. I've managed to fix it for now so someone call feel free to delete this post. If It happens again I'll repost.

[AndrewMont]

Update: there was someone else who was having the same problem, I went back to their post. I've managed to fix it for now so someone call feel free to delete this post. If It happens again I'll repost.

 

Sorry MrCharlie only noticed you had replied after I posted this. I removed the startup page from chrome (strange I'm sure it wasn't there before when I checked) so it seems to be gone now. Should I still run all the programs you listed though? Or am I safe now, ran a threat scan on MBAM and it didn't detect anything. 

[MrCharlie]

What post did you follow and what did Malwarebytes find so far as the PUP in Chrome.

MrC

[AndrewMont]

What post did you follow and what did Malwarebytes find so far as the PUP in Chrome.

MrC

https://forums.malwarebytes.org/index.php?showtopic=149971 - this guy was having the same problem. I didn't follow the instructions he was given though. Apart from changing things in google chrome settings I haven't done anything. 

 

In chrome I went to settings-under 'on startup' i clicked set pages and deleted the startup page which was "Websearch.a-searchpage.info" I then exited chrome and went back into it. No longer was it in my preferences file and as far as I can tell it's gone. I will restart my computer to make sure it doesn't come back. It's strange because I was sure I checked this before and it wasn't there. 

 

PS. Is it worth my while downloading and running the software you linked?

[MrCharlie]

OK...Thanks for that. I answered that one too......but that person is having a problem changing the on startup setting.

Yes it would be wise to run the programs as listed, just make sure you create a new system restore point and backup the registry as instructed.

MrC

[AndrewMont]

OK...Thanks for that. I answered that one too......but that person is having a problem changing the on startup setting.

Yes it would be wise to run the programs as listed, just make sure you create a new system restore point and backup the registry as instructed.

MrC

thanks very much for all the help will do

[MrCharlie]

OK...MrC

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!