PUP.optional.legacy removed but keeps coming back

[robean]

 I run Adw Cleaner, and find  "pup.optional.legacy  MSN Homepage & Bing Search Engine". I run the program and it says it is removed, but each time I open Google chrome after restating the adwear comes back again. Chrome says:  MSN Homepage & Bing Search Engine was added, and I get pop ups. I've used Malwarebytes as well as Adw Cleaner.  I have no idea how to get rid of it! I keep removing the extension from Chrome but it comes back every time even after running Adw cleaner. Can you help me?

Here is the scan log file:

# -------------------------------
# Malwarebytes AdwCleaner 7.3.0.0
# -------------------------------
# Build:    04-04-2019
# Database: 2019-05-27.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    06-07-2019
# Duration: 00:00:13
# OS:       Windows 10 Pro
# Scanned:  27501
# Detected: 1

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

PUP.Optional.Legacy             MSN Homepage & Bing Search Engine

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

AdwCleaner[S00].txt - [1278 octets] - [12/02/2019 22:45:03]
AdwCleaner[C00].txt - [1444 octets] - [12/02/2019 22:45:26]
AdwCleaner[S01].txt - [1400 octets] - [13/02/2019 13:42:41]
AdwCleaner[C01].txt - [1566 octets] - [13/02/2019 13:43:00]
AdwCleaner[S02].txt - [1522 octets] - [13/02/2019 14:32:49]
AdwCleaner[C02].txt - [1688 octets] - [13/02/2019 14:36:18]
AdwCleaner[S03].txt - [1615 octets] - [13/02/2019 14:40:09]
AdwCleaner[S04].txt - [1705 octets] - [13/02/2019 14:42:54]
AdwCleaner[C04].txt - [1871 octets] - [13/02/2019 14:49:28]
AdwCleaner[S05].txt - [1827 octets] - [13/02/2019 14:57:10]
AdwCleaner[S06].txt - [1942 octets] - [13/02/2019 15:03:08]
AdwCleaner[C06].txt - [2088 octets] - [13/02/2019 15:04:40]
AdwCleaner[S07].txt - [1981 octets] - [13/02/2019 15:24:00]
AdwCleaner[S08].txt - [2042 octets] - [13/02/2019 15:24:29]
AdwCleaner[S09].txt - [2132 octets] - [13/02/2019 15:36:04]
AdwCleaner[C09].txt - [2298 octets] - [13/02/2019 15:38:01]
AdwCleaner[S10].txt - [2254 octets] - [06/06/2019 23:13:21]
AdwCleaner[C10].txt - [2420 octets] - [06/06/2019 23:20:41]
AdwCleaner[S11].txt - [2376 octets] - [06/06/2019 23:55:19]
AdwCleaner[C11].txt - [2542 octets] - [06/06/2019 23:55:53]
AdwCleaner[S12].txt - [2498 octets] - [07/06/2019 14:52:40]
AdwCleaner[C12].txt - [2664 octets] - [07/06/2019 14:53:52]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S13].txt ##########
 

[nasdaq]

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

If the problem persists and Chrome is Synced with other Devices check this out.

https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/

Execute the suggested fix.

Restart the computer normally.
===========

If this is not to issue please execute the following.

Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file:
In the Reply section in the bottom of the topic Select Click the Choose a File.
Navigate to the location of the File.
Click the file. It will appear in section.
Click the Saving button.

Wait for further instructions
====
 

[robean]

Hi thank you for your reply,

Sync isn't enabled and I have completed these steps. 

 Farbar Recovery Scan Tool outputs attached. 

Thank you,

FRST.txt Addition.txt

[nasdaq]

Hi,

Please download the attached Fixlist.txt file to  the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

If the problem persists and Chrome is Synced with other Devices check this out.

https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/

Execute the suggested fix.

Restart the computer normally.
===========

Please post the Fixlog.txt and let me know what problem persists.

fixlist.txt

[robean]

Fixlog.txt

 

Executed the fix using FRST. 
Adwcleaner no longer detects PUP.Optional.Legacy  -MSN Homepage & Bing Search Engine. Google chrome extension is not added when opening Chrome. 
However I am still getting pop ups via Chrome - click.e-captcha.support

[nasdaq]

Hi,

If the problem persists and Chrome is Synced with other Devices check this out.

https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/

Execute the suggested fix.

Restart the computer normally.
===========

How is it now?

[AdvancedSetup]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks