John669 Posted November 24, 2017 ID:1186216 Share Posted November 24, 2017 (edited) Hello, I have been dealing with these damn pups, us ually there are six, but after disabling sync I have gotten it down to three. Now they won't even quarantine when they are selected. What else could I do to remove these things permanently? export.txt FRST.txt Addition.txt Edited November 24, 2017 by John669 Link to post Share on other sites More sharing options...
Aura Posted November 24, 2017 ID:1186221 Share Posted November 24, 2017 (edited) Hi John Follow the instructions in the thread below, it should help solve your issue. https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/ Edited November 24, 2017 by Aura Link to post Share on other sites More sharing options...
John669 Posted November 24, 2017 Author ID:1186231 Share Posted November 24, 2017 Well, I had done this but it didn't work, that is how I went from 6 to 3 Pups, so well it may be progress, I feel like there should be something more that I could do. Oh, BTW I never turned sync back on. I did follow your comment after the original post. Link to post Share on other sites More sharing options...
John669 Posted November 24, 2017 Author ID:1186248 Share Posted November 24, 2017 Whenever I complete a scan, when I click to quarantine the three PUPs, malwarebytes refuses to say their quarantined and when I delete them through the quarantine page, they keep coming back no matter what I do. I haven't had a clean scan for a few weeks now, and I am getting sick of it, whatever I try runs up a result with 3 or 6 Pups, and it is always the same ones, they never change. They are 2 from Binkiland and 1 from Cassiopesa, I have followed other guides to remove them but they don't work. I would just like to get rid of them once and for all. Link to post Share on other sites More sharing options...
Aura Posted November 25, 2017 ID:1186277 Share Posted November 25, 2017 Did you delete all the search engines listed under "Other search engines" as well? Link to post Share on other sites More sharing options...
John669 Posted November 25, 2017 Author ID:1186280 Share Posted November 25, 2017 Yes, I did. Link to post Share on other sites More sharing options...
Aura Posted November 25, 2017 ID:1186284 Share Posted November 25, 2017 Ah I see what's up. Can you provide me a screenshot of your "On start-up" settings in Google Chrome? Link to post Share on other sites More sharing options...
John669 Posted November 25, 2017 Author ID:1186286 Share Posted November 25, 2017 Sorry about the 2 monitors, I don't want to edit the photo right now. Link to post Share on other sites More sharing options...
Aura Posted November 25, 2017 ID:1186287 Share Posted November 25, 2017 All good. Now, under "On start-up", check the option "Open a specific page or set of pages". Do you see any websites listed under it when you select that option? Link to post Share on other sites More sharing options...
John669 Posted November 25, 2017 Author ID:1186288 Share Posted November 25, 2017 Yep: Link to post Share on other sites More sharing options...
Aura Posted November 25, 2017 ID:1186289 Share Posted November 25, 2017 Delete all of them (click on the 3 little dots button on the right of each URLs), then run a new scan with Malwarebytes. Link to post Share on other sites More sharing options...
John669 Posted November 25, 2017 Author ID:1186291 Share Posted November 25, 2017 It came up clean! Thank you so very much Any tips so this doesn't happen again? Oh, and congrats on 10,000 posts Link to post Share on other sites More sharing options...
Aura Posted November 25, 2017 ID:1186292 Share Posted November 25, 2017 No problem John, you're welcome! Quote Any tips so this doesn't happen again? Same as usual Do not install programs from bundled installers, only from their official website, be careful when installing Chrome extensions, when you get redirected to a suspicious website and try to leave, if it stops you, pay close attention to the message it shows, etc. Quote Oh, and congrats on 10,000 posts Thank you Link to post Share on other sites More sharing options...
Aura Posted November 26, 2017 ID:1186698 Share Posted November 26, 2017 Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts