Adware.elex.shrtcln - cannot remove threat

[MalachaiWare]

Hi,

I noticed this issue this afternoon (1pm, 8/11/17) during a routine scan. Malwarebytes popped up with a threat detected: Adware.elex.shrtcln in APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Secure Preferences. 

I quarantine the threat and it presents me with a log (and does not prompt me to reboot), that informs me "Removal Failed." II delete from Quarantine, and it's back the next time I scan. 

I restarted and tried again. Still there. Tried adwcleaner, it removed something (not adware.elex.shrtcln though). I tried HitmanPro. It did not detect nor remove the threat. 

I tried this: https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/

The threat is still there even after a reboot. 

Obviously this threat is abuzz at the moment, with the number of topics started for it. I figured I'd add to the discussion just to let you know that hey, I'm here and I have problems too. 

Please see my attachments: 

08.11.17 scan results.txt

08.11.17 removal failed.txt

08.11.17 removal failed summary.txt

 

[Aura]

Hi MalachaiWare

Can you update your Malwarebytes to the latest version 3.3, then try to follow the instructions in the tutorial below once more?

https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/

3.3 can be downloaded from this thread below.

https://forums.malwarebytes.com/topic/213935-malwarebytes-33-now-available/

 

[MalachaiWare]

Hi Aura,

Updating to 3.3.2 seems to have worked. After I updated and ran the scan, the file was "replaced" and, after rebooting,  I ran a scan again and there were no threats detected. 

Thanks for all your help!

 

[Aura]

No problem MalachaiWare, you're welcome  If the issue come back, feel free to drop me a PM and I'll re-open this thread.

Stay safe!

[Aura]

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!