sevdabeast Posted January 7, 2019 ID:1291034 Share Posted January 7, 2019 Good evening, First off, i'd like to apologize if this is in the wrong section, as it is my first time using these forums! I have two issues. First off, malware bytes detects that I have pup.optional.ifeo in my steam files. I am pretty sure this is a false positive because i never had an issue. My bigger worry is the fact that in the past 3-4 days, malware bytes ran a scan and found that I had riskware.ifeohijack but it was attached to my google chrome. Naturally, i deleted chrome and removed whatever the issue was. However, once I reinstalled it, it reappeared. Does anybody have any suggestions on what to do? Also, my google chrome is updated to the latest version. If theres anything i can do to fix or make sure that there is nothing wrong, please let me know! Thanks! Link to post Share on other sites More sharing options...
sevdabeast Posted January 7, 2019 Author ID:1291124 Share Posted January 7, 2019 here's some files that I attached for more analysis. I couldn't get malware bytes logs because I cant find them. Addition.txt FRST.txt Link to post Share on other sites More sharing options...
LDTate Posted January 7, 2019 ID:1291129 Share Posted January 7, 2019 Hello and Please take your time. For Chrome: If you use Chrome's Sync option, that's why it's coming back but we can take care of that Open your Chrome on all devices using Chrome as we need to make sure Chrome sync doesn't allow it back in. • Go to Settings > People > Sync (or alternatively, enter the following in the address bar: chrome://settings/syncSetup) • On the page, you'll see what synced data is enabled. Move all sliders to the left in order to disable all the syncing. Please make sure Chrome is closed before running the MBAM scan Run a new Malwarebytes (MBAM) scan and Quarantine whatever is found. Link to post Share on other sites More sharing options...
sevdabeast Posted January 7, 2019 Author ID:1291148 Share Posted January 7, 2019 Still there 😕 I attached the scan results here malwarefiles.txt Link to post Share on other sites More sharing options...
LDTate Posted January 7, 2019 ID:1291155 Share Posted January 7, 2019 If you have Chrome Bookmarks that you want to save, you want to do that first. Export / Import Bookmarks. https://support.google.com/chrome/answer/96816?hl=en Open your Chrome on all devices using Chrome as we need to make sure Chrome sync doesn't allow it back in. • Go to Settings > People > Sync (or alternatively, enter the following in the address bar: chrome://settings/syncSetup) • On the page, you'll see what synced data is enabled. Move all sliders to the left in order to disable all the syncing. Please make sure Chrome is closed before running the fix I have attached A file I need you to download and save it to the same place that you saved the FRST program This fix will include removing temp files and emptying the Recycle Bin. Download attached **fixlist.txt** and save it to same location where the FRST tool is located. NOTE: Both FRST.exe and the fixlist.txt must be in the same location or the fix will not work. Close all browsers before running. Double click FRST to run the tool. If the tool warns you the version is outdated, please download and run the updated version. •Click the **Fix Button**. •If you receive a message that a reboot is required, please make sure you allow it to restart normally. •The tool will complete its run after restart. When finished, the tool will make a log (Fixlog.txt) in the same location from where it was run. Please attach the Fixlog.txt in your reply. Restart the pc and let me know how it's running now. fixlist.txt Link to post Share on other sites More sharing options...
sevdabeast Posted January 7, 2019 Author ID:1291171 Share Posted January 7, 2019 There we go! Personally, I dont think its anything malicious but its very annoying that it pops up everytime it does a scan. Fixlog.txt Link to post Share on other sites More sharing options...
LDTate Posted January 7, 2019 ID:1291175 Share Posted January 7, 2019 Windows 8.1 and 10 Restart your computer in Safe Mode. Step 1: When you hit the power button in Windows 8.1 / 10 (through Charms Bar), hold down the Shift key when clicking the Restart button. Step 2: The next screen will present you with three options. Click Troubleshoot. Step 3: Next, hit Advanced options followed by Windows Startup Settings from the next screen. Step 4: Your PC will now be rebooted to enable the advanced parameters, which include Safe Mode as well. Once it restarts, you’ll get nine options whereby the following commands apply: F4 for Safe Mode F5 for Safe Mode with Networking F6 for Safe Mode with Command Prompt Based on your selection, Windows 8.1 (or Windows 8 or 10 the method applies to both) will boot accordingly. F5 for Safe Mode with Networking Then press the enter key on your keyboard to boot into Windows Safe Mode. When Windows starts you will be at a typical logon screen. Logon to your computer and Windows will enter Safe mode. Open Malwarebytes (MBAM), make sure Scan For Rootkits is checked, run a new scan and Quarantine all **Power Off** (shutdown, the pc. Wait a few minutes. Restart in Normal Mode and make sure it's gone Link to post Share on other sites More sharing options...
sevdabeast Posted January 8, 2019 Author ID:1291268 Share Posted January 8, 2019 Seems good for now. if anything pops up, i'll come back! Thanks! Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted February 1, 2019 Root Admin ID:1296036 Share Posted February 1, 2019 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts