Beezil54 Posted December 4, 2017 ID:1188817 Share Posted December 4, 2017 Everyday, I receive the same notification for the same PUP to be quarantined. I don't use Chrome and haven't done for some time. I did have a file with old Firefox settings stored on my desktop, but I have shredded that. I am at a loss as to why these PUPs keep recurring. Link to post Share on other sites More sharing options...
Aura Posted December 5, 2017 ID:1188940 Share Posted December 5, 2017 Hi Beezil54 Do you plan on using Google Chrome again, or not? Following the instructions in the thread below should solve your issue. https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/ Link to post Share on other sites More sharing options...
Beezil54 Posted December 5, 2017 Author ID:1189160 Share Posted December 5, 2017 Hi Aura, I don't have Chrome installed on my computer - so I cannot follow the suggestions. I am at a complete loss as to where this adware has come from and what it is attached to. Although I did perfomr a malfwarebytes scan on WoW folder and the Pup.Optional.Delta came up there. Any other ideas as to how I get rid of it. My computer has been behaving very oddly. Link to post Share on other sites More sharing options...
Aura Posted December 5, 2017 ID:1189172 Share Posted December 5, 2017 Can you provide me the Malwarebytes log showing the detections? Link to post Share on other sites More sharing options...
Beezil54 Posted December 5, 2017 Author ID:1189197 Share Posted December 5, 2017 I am attaching the log as well as the log which was created by the AdwClean scan. AdwCleaner[C0].txt result Malware 5.12.17.txt Link to post Share on other sites More sharing options...
Aura Posted December 5, 2017 ID:1189199 Share Posted December 5, 2017 Do you have any Chromium-based web browser or not? Link to post Share on other sites More sharing options...
Beezil54 Posted December 5, 2017 Author ID:1189227 Share Posted December 5, 2017 I use Mozilla Firefox but also have IE and Microsoft Edge on this computer. No Google Chrome or anything similar. It's a bit weird that the PUP is attaching itself to an unknown data folder. Link to post Share on other sites More sharing options...
Aura Posted December 5, 2017 ID:1189228 Share Posted December 5, 2017 In that case, delete that folder, and the detection should go away. C:\USERS\BELINDA PERSONAL\APPDATA\LOCAL\GOOGLE\CHROME Link to post Share on other sites More sharing options...
Beezil54 Posted December 5, 2017 Author ID:1189231 Share Posted December 5, 2017 Thanks, I would if I could I could find it. I suppose the other option is to ask Malwarebytes to ignore it. Link to post Share on other sites More sharing options...
Aura Posted December 5, 2017 ID:1189235 Share Posted December 5, 2017 Press on the Windows + R keys to open the Run box, and in it, copy/paste the following: C:\USERS\BELINDA PERSONAL\APPDATA\LOCAL\GOOGLE Then, press on Enter. It should open the Google folder. Look for the Chrome folder and delete it. Simple as that Link to post Share on other sites More sharing options...
Beezil54 Posted December 5, 2017 Author ID:1189239 Share Posted December 5, 2017 Slight problem, I "don't have permission" to delete the folder. I've gone into it and am now using McAfee shredder to get rid of the individual folders. It's a bit long winded but, so far seems to be working. Link to post Share on other sites More sharing options...
Beezil54 Posted December 5, 2017 Author ID:1189243 Share Posted December 5, 2017 So far, I have worked through 36% of the folder "extensions" in Chrome\User Data Link to post Share on other sites More sharing options...
Beezil54 Posted December 5, 2017 Author ID:1189264 Share Posted December 5, 2017 Hi Aura, I have managed to shred everything except for one folder in Chrome (Extensions), which appears to be empty. Ran another Malwarebytes scan and it came up clean with no threats. So hopefullly this is sorted for the time being. Many thanks for your help. Link to post Share on other sites More sharing options...
Aura Posted December 6, 2017 ID:1189276 Share Posted December 6, 2017 Glad to see that it worked Beezil If the issue ever comes back, send me a PM and I'll re-open this thread. Until then, stay safe! Link to post Share on other sites More sharing options...
Aura Posted December 6, 2017 ID:1189277 Share Posted December 6, 2017 Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts