Slender Posted March 2, 2019 ID:1301642 Share Posted March 2, 2019 I've tried everything I can myself at this point following multiple guides but PUP.Legacy keeps coming up in AdwCleaner every time I run it and after cleaning/repair. It will occasionally release it's payload of telling me I need to update to "Chromium" and tell me to install a bunch of garbage. I've cleared my cache and cookies in Chrome before and after detection to no avail. I just need some help. Here's the Farbar files: Addition.txt FRST.txt Link to post Share on other sites More sharing options...
RPMcMurphy Posted March 3, 2019 ID:1301719 Share Posted March 3, 2019 Hello and welcome. I'm reviewing your logs and I'll be back with you soon. In the meantime, can you post one of the AdwCleaner logs so I can see exactly what is being detected? Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I’ve given you the “All clear.” Absence of symptoms does not mean your machine is clean! Please do not run any scans or install/uninstall any applications without being directed to do so. Please note that the forum is very busy and if I don't hear from you within five days this thread will be closed. Link to post Share on other sites More sharing options...
Slender Posted March 3, 2019 Author ID:1301824 Share Posted March 3, 2019 Here's what AdwCleaner has to say: AdwCleaner[S04].txt Link to post Share on other sites More sharing options...
RPMcMurphy Posted March 3, 2019 ID:1301831 Share Posted March 3, 2019 I was actually hoping to see a log that had the PUP detection that keeps coming back. If you can find one of those, please post it. Please do this now: Download and save the attached fixlist.txt file in the same location as FRST. Now run FRST again. When the tool opens click Yes to disclaimer. Press the Fix button just once and wait. The tool will make a log (Fixlog.txt) please post it to your reply. Please include the following in your next post: The fixlog.txt Report fixlist.txt Link to post Share on other sites More sharing options...
Slender Posted March 3, 2019 Author ID:1301839 Share Posted March 3, 2019 The strange thing about AdwCleaner is that it would scan and find legacy, I would clean and restart, and it then would say it was not removed even when run as an admin. I don't know why it didn't show up in any other logs besides the first one I ran. I do have a log of AdwCleaner detecting it the day I first was infected and it does show a few other PUPs but I believe those other ones besi des Legacy were successfully removed. Fixlog.txt AdwCleaner[S00].txt Link to post Share on other sites More sharing options...
RPMcMurphy Posted March 3, 2019 ID:1301844 Share Posted March 3, 2019 Thanks, I understand now. Please make sure your copy of Malwarebytes is up to date and run a Threat Scan for me. Post the log when it's done, please. Link to post Share on other sites More sharing options...
Slender Posted March 4, 2019 Author ID:1301845 Share Posted March 4, 2019 No threats detected, I think the cursed thing is finally gone thanks to you! March3Malwarebytes.txt Link to post Share on other sites More sharing options...
RPMcMurphy Posted March 4, 2019 ID:1301856 Share Posted March 4, 2019 If all of your issues are resolved, then I just have some housekeeping for you: Uninstall FRST Right click on the FRST icon and select Rename Change the name to Uninstall After renaming it, right click and select Run as Administrator Uninstall any other tools or logs from our work that you don't need. Please post once more so I know you are all set and I can mark this thread resolved. Good luck and stay safe! Link to post Share on other sites More sharing options...
Slender Posted March 4, 2019 Author ID:1302076 Share Posted March 4, 2019 Thank you so much! I haven't had any problems after the fixlist and I'll be sure to be even more cautious in the future Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted March 10, 2019 Root Admin ID:1303159 Share Posted March 10, 2019 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts