ArdiDS Posted January 5, 2019 ID:1290822 Share Posted January 5, 2019 everytime I start chrome, its always install a extention "HelpyHand" although I alway remove it. then if I run a full scan using Adwcleaner it always found a threat called "PUP.Optional.22ChromeEXT" the I clean & fix until all clear. restart my pc scan it again and then it always there.. please help me to fix this problem scan 1.txt FRST.txt Link to post Share on other sites More sharing options...
nasdaq Posted January 5, 2019 ID:1290849 Share Posted January 5, 2019 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === Reset Chrome... Open Google Chrome, click on menu icon or the 3 vertical dots located right side top of the google chrome. Click "Settings" then "Show advanced settings" at the bottom of the screen. Click "Reset and clean up" > "Restore settings to their original defaults" Restart Chrome. <<<>>> If the problem persists check this out. Chrome Secure Preferences detection always comes back. https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/ Execute the suggested fix. =========== Let me know if the problem persists. fixlist.txt Link to post Share on other sites More sharing options...
ArdiDS Posted January 6, 2019 Author ID:1290916 Share Posted January 6, 2019 Already done all the step that you showed me. but. "PUP.Optional" still exist when I scan. dunno why still happen AdwCleaner[C08].txt Fixlog.txt Link to post Share on other sites More sharing options...
nasdaq Posted January 6, 2019 ID:1290939 Share Posted January 6, 2019 Hi, Next time post the log that is showing the pup.Optional entry. Link to post Share on other sites More sharing options...
ArdiDS Posted January 8, 2019 Author ID:1291363 Share Posted January 8, 2019 I don't know why. but the PUP.optional.22ChromeEXT is gone but PUP.Optional.Legacy out of nowhere is found when I scan using Adwcleaner and I dunno why but my pc is running slower than before, I hope it's not the effect of this new PUP. I already done the chrome reset and everything but I don't know what to do next I hope that I don't have to reinstall windows because I'm too lazy to do the backup FRST.txt Addition.txt AdwCleaner[S11].txt Link to post Share on other sites More sharing options...
nasdaq Posted January 8, 2019 ID:1291398 Share Posted January 8, 2019 Hi, Open Chrome setting and delete this Extension. CHR Extension: (Handy Tab) - C:\Users\Ardi D Sopiyan\AppData\Local\Google\Chrome\User Data\Default\Extensions\clgckgfbhciacomhlchmgdnplmdiadbj [2019-01-05] === You are probably Syncing Chrome with other devices? To remove it reset the Sync in Chrome. Read this article and proceed. Chrome Secure Preferences detection always comes backhttps://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/ <<<>>> Let me know if the problem persists. Link to post Share on other sites More sharing options...
ArdiDS Posted January 9, 2019 Author ID:1291432 Share Posted January 9, 2019 I open the path that you just send, but there's no folder "clgckgfbhciacomhlchmgdnplmdiadbj [2019-01-05]" in the extensions folder Link to post Share on other sites More sharing options...
nasdaq Posted January 9, 2019 ID:1291521 Share Posted January 9, 2019 Hi, Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === Any remaining issues? fixlist.txt Link to post Share on other sites More sharing options...
ArdiDS Posted January 9, 2019 Author ID:1291529 Share Posted January 9, 2019 for now its fixed. maybe when I found other issues next time I willl make another topic thank you for your help 😀 Fixlog.txt Link to post Share on other sites More sharing options...
nasdaq Posted January 9, 2019 ID:1291587 Share Posted January 9, 2019 Glad we could help. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 11, 2019 Root Admin ID:1291920 Share Posted January 11, 2019 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts