pickout99 Posted November 10, 2017 ID:1180930 Share Posted November 10, 2017 I have tried everything mentioned in the guides here but there remain two items I just cannot get rid of they are: users\xxx\appdata\local\google\chrome\chrome\user data\profile 2\web data This appears twice and goes to quarantine and asks for a reboot and then it just comes straight back Anyone have any help?? Link to post Share on other sites More sharing options...
Aura Posted November 10, 2017 ID:1180931 Share Posted November 10, 2017 Hi pickout99 users\xxx\appdata\local\google\chrome\chrome\user data\profile 2\web data It seems like you have multiple Google accounts logged in Chrome, can you confirm? If you click on your name/username in the top-right corner (right by the minimize, adjust and close buttons), then click on Manage people, you should see how many profiles you have and which ones they are. Link to post Share on other sites More sharing options...
pickout99 Posted November 10, 2017 Author ID:1180936 Share Posted November 10, 2017 It just says my profile? this is the log file? Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 11/10/17 Scan Time: 12:12 AM Log File: Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.236 Update Package Version: 1.0.3218 License: Trial -System Information- OS: Windows Vista Service Pack 1 CPU: x86 File System: NTFS User: xx\xx -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 266029 Threats Detected: 2 Threats Quarantined: 2 Time Elapsed: 14 min, 12 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 2 Adware.Elex.ShrtCln, C:\USERS\xxx\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Profile 2\Web Data, Replaced, [2308], [454729],1.0.3218 Adware.Elex.ShrtCln, C:\USERS\xxx\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Profile 2\Web Data, Replaced, [2308], [454729],1.0.3218 Physical Sector: 0 (No malicious items detected) (end) Link to post Share on other sites More sharing options...
pickout99 Posted November 10, 2017 Author ID:1180941 Share Posted November 10, 2017 Thanks for the reply by the way just really want to get rid of this it's been 5 hours and I still can't get rid Link to post Share on other sites More sharing options...
Aura Posted November 10, 2017 ID:1180942 Share Posted November 10, 2017 Follow the instructions below. Farbar Recovery Scan Tool (FRST) - Scan mode Follow the instructions below to download and execute a scan on your system with FRST, and provide the logs in your next reply. Download the right version of FRST for your system:FRST 32-bit FRST 64-bitNote: Only the right version will run on your system, the other will throw an error message. So if you don't know what your system's version is, simply download both of them, and the one that works is the one you should be using. Move the executable (FRST.exe or FRST64.exe) on your Desktop Right-click on the executable and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users) Accept the disclaimer by clicking on Yes, and FRST will then do a back-up of your Registry which should take a few seconds Make sure the Addition.txt box is checked Click on the Scan button On completion, two message box will open, saying that the results were saved to FRST.txt and Addition.txt, then open two Notepad files Copy and paste the content of both FRST.txt and Addition.txt in your next reply Link to post Share on other sites More sharing options...
pickout99 Posted November 10, 2017 Author ID:1180946 Share Posted November 10, 2017 Hello here they are: FRST 1.txt Addition 1.txt Link to post Share on other sites More sharing options...
Aura Posted November 10, 2017 ID:1180949 Share Posted November 10, 2017 Looks like the attachments have been removed. Can you attach them again? Link to post Share on other sites More sharing options...
pickout99 Posted November 10, 2017 Author ID:1180952 Share Posted November 10, 2017 46 minutes ago, Aura said: Addition 1.txt.txt FRST 1.txt.txt Link to post Share on other sites More sharing options...
Aura Posted November 10, 2017 ID:1180954 Share Posted November 10, 2017 Your FRST.txt log report that you have multiple profiles. You don't see them? CHR Profile: C:\Users\xx\AppData\Local\Google\Chrome\User Data\Default [2017-11-10] CHR Profile: C:\Users\xx\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-11-09] CHR Profile: C:\Users\xx\AppData\Local\Google\Chrome\User Data\System Profile [2017-11-10] Link to post Share on other sites More sharing options...
pickout99 Posted November 10, 2017 Author ID:1180955 Share Posted November 10, 2017 4 minutes ago, Aura said: Your FRST.txt log report that you have multiple profiles. You don't see them? CHR Profile: C:\Users\xx\AppData\Local\Google\Chrome\User Data\Default [2017-11-10] CHR Profile: C:\Users\xx\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-11-09] CHR Profile: C:\Users\xx\AppData\Local\Google\Chrome\User Data\System Profile [2017-11-10] I cannot find them if they are there the only thing I get is my profile Link to post Share on other sites More sharing options...
Aura Posted November 10, 2017 ID:1180957 Share Posted November 10, 2017 Can you confirm whether or not these folders exists? C:\USERS\xxx\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default C:\USERS\xxx\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Guest Profile C:\USERS\xxx\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\System Profile C:\USERS\xxx\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Profile 1 C:\USERS\xxx\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Profile 2 Link to post Share on other sites More sharing options...
pickout99 Posted November 10, 2017 Author ID:1180958 Share Posted November 10, 2017 1 minute ago, Aura said: Can you confirm whether or not these folders exists? C:\USERS\xxx\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default C:\USERS\xxx\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Guest Profile C:\USERS\xxx\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\System Profile C:\USERS\xxx\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Profile 1 C:\USERS\xxx\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Profile 2 I can find all but profile 1 Link to post Share on other sites More sharing options...
Aura Posted November 10, 2017 ID:1180959 Share Posted November 10, 2017 Alright. Let's do a test. Close Google Chrome and make sure that no chrome.exe processes are running. Now, rename the Profile 2 folder for "Profile 2_old" and open Google Chrome. Are all your settings, bookmarks, extensions, history, etc. still there? Link to post Share on other sites More sharing options...
pickout99 Posted November 10, 2017 Author ID:1180961 Share Posted November 10, 2017 Did that all the settings are still there Link to post Share on other sites More sharing options...
Aura Posted November 10, 2017 ID:1180962 Share Posted November 10, 2017 Good. Now, delete the Profile 2 folder and run a new scan with Malwarebytes. Is the detection still coming up? Link to post Share on other sites More sharing options...
pickout99 Posted November 10, 2017 Author ID:1180964 Share Posted November 10, 2017 Ok will be around 15 mins Link to post Share on other sites More sharing options...
pickout99 Posted November 10, 2017 Author ID:1180967 Share Posted November 10, 2017 Ok that was clear that time However computer is now very slow on start up comes up with blank screen waits and then eventually desktop comes on before all this it was a lot faster?? Link to post Share on other sites More sharing options...
Aura Posted November 10, 2017 ID:1180972 Share Posted November 10, 2017 I doubt this is related. What you deleted was an old, unused folder for Google Chrome. Deleting it will not affect your startup time. Link to post Share on other sites More sharing options...
pickout99 Posted November 10, 2017 Author ID:1180979 Share Posted November 10, 2017 So I should be clear now? Can't thank you enough. Just wanted the problem gone and now Link to post Share on other sites More sharing options...
Aura Posted November 10, 2017 ID:1180981 Share Posted November 10, 2017 If Malwarebytes doesn't detect the threat anymore, you're clear now, yes And no problem pickout99, you're welcome! If the issue comes back somehow, feel free to drop me a PM and I'll re-open this thread. Stay safe! Link to post Share on other sites More sharing options...
Aura Posted November 10, 2017 ID:1180982 Share Posted November 10, 2017 Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts