PUP Optional Spigot comes back after removal

[Jonz2112]

spigot.txt

[Aura]

Hi Jonz

Can you .zip the following file, and PM me it?

C:\USERS\JANE\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Backup default\Web Data

 

[Aura]

Thank you Follow the instructions in the thread below, it should solve your issue.

https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/

 

[Jonz2112]

Thank you,,, however the above recommendations did not appear to work.  The detected item comes back right away.

 

[Aura]

Did you delete everything under "Other search engines"?

[Jonz2112]

Yes... I did  

 

[Aura]

Alright, follow the instructions below.

Farbar Recovery Scan Tool (FRST) - Scan mode
Follow the instructions below to download and execute a scan on your system with FRST, and provide the logs in your next reply.

• Download the right version of FRST for your system:
  
  • FRST 32-bit
  • FRST 64-bit
    Note: Only the right version will run on your system, the other will throw an error message. So if you don't know what your system's version is, simply download both of them, and the one that works is the one you should be using.
    
• Move the executable (FRST.exe or FRST64.exe) on your Desktop
• Right-click on the executable and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
• Accept the disclaimer by clicking on Yes, and FRST will then do a back-up of your Registry which should take a few seconds
• Make sure the Addition.txt box is checked
• Click on the Scan button
  
• On completion, two message box will open, saying that the results were saved to FRST.txt and Addition.txt, then open two Notepad files
• Copy and paste the content of both FRST.txt and Addition.txt in your next reply
  

[Jonz2112]

 

 

FRST.txt

Addition.txt

[Aura]

Ah I see what the issue is.

Alright, go in the following folder:

C:\Users\Jane\AppData\Local\Google\Chrome\User Data

Rename the "Backup default" folder for "Backup default OLD". Now, open Google Chrome. Are all your settings (extensions, bookmarks, etc.) still there?

[Jonz2112]

Yes... bookmarks are still there...

[Aura]

Good. Now, delete that "Backold default OLD" folder, and run a new scan with Malwarebytes. It should come back clean.

[Jonz2112]

Awesome !!   thanks so much for your help !!

[Aura]

No problem Jonz, you're welcome!

Stay safe  

[Aura]

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!