Virus Keeps Coming Back After Reboot

[Richardss]

7 PUP viruses keep coming back after removal when rebooting, tried to uninstall the program but it doesn't show in the programs. Thank you for your help and assistance!

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 11/11/17
Scan Time: 2:11 AM
Log File: 8435e54c-c6af-11e7-8542-5cf9dd5381e5.json
Administrator: Yes

-Software Information-
Version: 3.3.1.2183
Components Version: 1.0.236
Update Package Version: 1.0.3228
License: Trial

-System Information-
OS: Windows 10 (Build 15063.674)
CPU: x64
File System: NTFS
User: USERPC\User

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 417939
Threats Detected: 7
Threats Quarantined: 7
Time Elapsed: 2 min, 1 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 7
PUP.Optional.Conduit, C:\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Replaced, [579], [454835],1.0.3228
PUP.Optional.Dregol, C:\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [9341], [455074],1.0.3228
PUP.Optional.Dregol, C:\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Replaced, [9341], [455074],1.0.3228
PUP.Optional.Trovi, C:\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Replaced, [4983], [454808],1.0.3228
PUP.Optional.Dregol, C:\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Replaced, [9341], [455074],1.0.3228
PUP.Optional.Dregol, C:\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Replaced, [9341], [455074],1.0.3228
PUP.Optional.Dregol, C:\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [9341], [455074],1.0.3228

Physical Sector: 0
(No malicious items detected)

(end)

Edited November 11, 2017 by Richardss

[Richardss]

Farbar files attached.

FRST.txt

Addition.txt

[Aura]

Hi Richardss

Can you .zip these two files and PM me the .zip?

C:\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data
C:\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences

 

[Richardss]

Farbar files attached. Zip files attached. Thank you again for your help and assistance.

 

 

Edited November 11, 2017 by Fatdcuk
Received files, disabled their download.Thanks!

[Aura]

No problem  Now, follow the instructions in the thread below, and let me know if that solves your issue.

https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/

 

[Richardss]

I think it appears to have worked! Thank you so much, you guys are geniuses and have a great weekend!

[Aura]

Glad to see that it worked for you Richardss! And no problem, you're welcome

Stay safe!

[Aura]

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!