Jump to content

Vosteran PUP returns after I wipe my PC


Recommended Posts

So I am locked in a several day long battle with the adware Vosteran. Hasn't done what all the other articles about it say it does, like changing browser settings or showing intrusive ads. It isnt really doing anything to the pc or chrome, but I'm scared it might be collecting information in the background or might have just not been set off yet. I have reset chrome settings, used HitmanPro, Malwarebytes, RKill, and even wiped the whole PC. I am not really sure what I haven't done yet, and would really appreciate some suggestions.

Link to post
42 minutes ago, PGDane said:

and uninstalled chrome several times.

It is the sync bringing it back every time you sign into Chrome.

Please try following the instructions in this topic to see if it helps.  If the issue still persists after that then please read and follow the instructions in this topic and then create a new topic in our malware removal area by clicking here and one of our malware removal specialists will assist you in checking and clearing the system of any remaining threats.

Please let us know how it goes.


Link to post
26 minutes ago, PGDane said:

Thank you for the help, I will do this. Another question: is it possible as long as I do not open my chrome account on another device while the account's sync is infected, can the device be infected?

If you have not cleared sync and you open Chrome on another device it will sync the stuff again. I personally do not use sync in any browser but when kept clean it does have advantages when moving between devices.

Link to post

Might just be me not doing the steps in the correct order, but I keep getting a message in the corner when I press reset sync. But I have repeated the steps several times at this point, and every time I get to the reset sync part, this happens. Could that guide possibly be outdated?

Link to post

If the instructions linked above fail to reset the sync cache then you might try the instructions for doing so found here or here.

If the issue is still unresolved then I would recommend following the instructions above to create a new topic in our malware removal area so that a qualified malware removal specialist may assist you in checking and cleaning the system of any persisting threats.

Link to post
  • Root Admin

Please post the following logs and we'll review to see if something may be stopping it from working


Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system.
You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press the Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply as well.

Thank you



Link to post

Ok, so everything seems fine again. I've used chrome a bit after playing with sync settings, and it hasn't come back. I'll still scan a bunch for the next month and be extra cautious, but for now it looks like everything is fine. I didn't end up even needing to reset all of sync, because I just deleted some parts of it, and the adware has not returned. I'll either update this thread or start a new one if this one is shut down if anything new happens. Thank you for the help, I couldn't have done it without you!

Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.