MWB Scan Repeatedly Detecting These 4 PUPs, They Always Replace Themselves.

[CyBeR_PuG]

So I have recently done many scans with the Malwarebytes antivirus running the latest update and each time it has detected one PUP (Optional.Ask) and three of the following: PUP.Optional.SweetPacks

No matter how many times I quarantine and delete these PUPs they always reappear when I scan again. They seem to be in the Chrome files but they always seem to replace themselves. I have also noticed that the Ad Blocker extension I have has blocked a larger amount of 'ads' recently. Not sure if that has to do with anything...

Screenshots will be below.

[Aura]

Hi CyBeR_PuG

Follow the instructions in the thread below, it should help you solve your issue.

https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/

 

[Aura]

Hi CyBeR_PuG,

Are you still with me?

[CyBeR_PuG]

Yeah, I can't use this computer for a little bit after, there are two accounts signed into Chrome and I think mine's clean, but the person running the other account stubbornly refuses to help me fix the viruses, they even claim Malwarebytes is a virus and the PUPs detected are clean 

[Aura]

Are you guys using the same Windows account (Admin) when you use Google Chrome?

Quote

they even claim Malwarebytes is a virus and the PUPs detected are clean 

They are obviously wrong 

Edited November 21, 2017 by Aura

[Bob_Z]

I have the same problem, although it was 11 PUPs, with repeating scans.  I followed the instructions in the link you gave, but the items still reappear.  What can I do now?

[Aura]

Hi Bob_Z,

Delete all the items under the "Other search engines" list if it isn't done yet.

[Bob_Z]

Thanks.  I deleted them and scan came back clean.  Should I sync chrome now or just leave it alone.  I don't often use Chrome.

[Aura]

You can enable Google Chrome sync now, the bad entries (search engines) shouldn't comeback.

[Bob_Z]

Thanks.

[Aura]

No problem, you're welcome  

[CyBeR_PuG]

Yes, me and this other person are both using Windows Admin account when using Chrome.

[Aura]

In that case, if they do not want to follow the instructions to clean their Chrome profile, there's nothing really I can do to help  

Do you have any other issues, or that was it?

[Aura]

Well, I'll be closing this thread now. If the other user is ever willing to do his part to get rid of this infection, send me a PM and I'll re-open this thread