DaveG75 Posted November 22, 2017 ID:1185686 Share Posted November 22, 2017 Tried several scans, one after the other, but still have instances in Yontoo. How do I get rid of it? I see people attaching scan.txt, but cannot find it -- where is it? Link to post Share on other sites More sharing options...
Aura Posted November 22, 2017 ID:1185688 Share Posted November 22, 2017 Hi DaveG75 Follow the instructions in the thread below, it should help solve your issue. https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/ Link to post Share on other sites More sharing options...
DaveG75 Posted November 22, 2017 Author ID:1185703 Share Posted November 22, 2017 Sorry to be dim - I have MW premium. Your link says that my version, 3.2.2 is out of date. MWB itself says it is up to date. Assuming that 3.3 is really the right thing: When I click to update, I get a purchase page with multiple options. Do I have to purchase Premium again to download? Or better - which option on the download page should I use? The free version? Link to post Share on other sites More sharing options...
Porthos Posted November 22, 2017 ID:1185732 Share Posted November 22, 2017 1 hour ago, DaveG75 said: Your link says that my version, 3.2.2 is out of date. MWB itself says it is up to date. Just download the latest installer from : https://downloads.malwarebytes.org/file/mb3 Run the installer on top of your existing product. No need to uninstall. Restart after. Link to post Share on other sites More sharing options...
DaveG75 Posted November 24, 2017 Author ID:1186145 Share Posted November 24, 2017 I've downloaded & installed the latest. However, I'm giving up. It takes 30+ minutes for every scan cycle to see if Yontoo is still there - plus, the Chrome settings do not look like anything in the linked 'how to' and I have no idea how to access Google Sync. I'll just use Edge. (Puzzled as to how Yontoo got into my system - why didn't Malwarebytes block it?) Link to post Share on other sites More sharing options...
Aura Posted November 24, 2017 ID:1186154 Share Posted November 24, 2017 Dave, can you give me a screenshot of how your Google Chrome settings looks like? If so, I can help you. Link to post Share on other sites More sharing options...
DaveG75 Posted November 24, 2017 Author ID:1186181 Share Posted November 24, 2017 OK - 3 screens - 1st level + 2 for advanced Link to post Share on other sites More sharing options...
Aura Posted November 24, 2017 ID:1186203 Share Posted November 24, 2017 Awesome. In the first screenshot, click on "Manage search engines", under "Search engines" and give me a screenshot of what you see as well. Link to post Share on other sites More sharing options...
DaveG75 Posted November 24, 2017 Author ID:1186230 Share Posted November 24, 2017 Can't get a screen shot - beyond the 2 default search engines (Google, Bing), there is a huge list. I tried a fairly powerful scrolling capture and ran out of memory. Chrome seems to have listed nearly every site I've regularly visited - and a few I've been to only once - as a "search engine." Link to post Share on other sites More sharing options...
DaveG75 Posted November 24, 2017 Author ID:1186233 Share Posted November 24, 2017 Chrome has added every site that has a search capability. I've just added Don't Add Search Engines app to Chrome and am painfully removing all the Chrome-added ones manually, except sites such as Wikipedia. Link to post Share on other sites More sharing options...
Aura Posted November 25, 2017 ID:1186281 Share Posted November 25, 2017 Once you're done with that, let me know, as the detections should either be gone, or there'll only be one left. Link to post Share on other sites More sharing options...
DaveG75 Posted November 26, 2017 Author ID:1186592 Share Posted November 26, 2017 (edited) Right. This time, only one,, a PUP called Trovi (which has not been there previously).... Why isn't Malwarebytes preventing these from joining my system? <-- that's a question asked in a neutral tone of voice: is there something about these nasties that makes them undiscoverable? Edited November 26, 2017 by DaveG75 Link to post Share on other sites More sharing options...
Aura Posted November 26, 2017 ID:1186604 Share Posted November 26, 2017 Quote This time, only one,, a PUP called Trovi (which has not been there previously).... In the first screenshot, delete the "Trovi" website that is listed ( in the "Show home button" section). And the definitions for these infections were added 2-3 weeks ago. So they were already on your system. Link to post Share on other sites More sharing options...
DaveG75 Posted November 26, 2017 Author ID:1186607 Share Posted November 26, 2017 Delete how? Right clicking on the name has option to cut, but Chrome says "not valid". Right-click on the radio button has no delete action available. Link to post Share on other sites More sharing options...
Aura Posted November 26, 2017 ID:1186610 Share Posted November 26, 2017 Select the radio button by the "Trovi" link, then erase it's content (click on the field, and erase everything) then press on "Enter". Link to post Share on other sites More sharing options...
DaveG75 Posted November 26, 2017 Author ID:1186612 Share Posted November 26, 2017 Thanks! Worked. Much appreciated. Link to post Share on other sites More sharing options...
Aura Posted November 26, 2017 ID:1186614 Share Posted November 26, 2017 No problem DaveG, you're welcome! Stay safe Link to post Share on other sites More sharing options...
Aura Posted November 26, 2017 ID:1186615 Share Posted November 26, 2017 Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts