PUPS persistent

[peterr]

I was in the forum and was advised, after trying to remove the pups unsuccessfully, to run tests and post here.
I am only a mid level user.
I have Windows 10 and use Chrome. My wife has a chromebook on the same network and it uses chrome.
I reset them bot h after disabling the extensions.
I am uploading the tests I ran per directions from the forum.
I patiently look forward to your reply as to how to remove these PUPS from the MBAM scan.

 

[starbuck]

Hi Peterr,

I've been looking into this and there are quite a few threads on the MalwareBytes forums relating to this issue.

To put your mind at rest, the entries are not malicious and by design.... Google will re-create those entries.
That is why they keep coming back.
A quote from the MalwareBytes site explains the issue...

The current issues with repeat detections are being caused by Chrome sync service restoring bad data that we are attempting to remove.

We are at the moment working towards a fix to the sync service issue and apologise for any alarm or inconvenience caused.

In all theories we should not be targeting chrome cookie data but some of the settings do get backed up to WebData file.

The options open to you are:

• Ignore the detected entries.
• Add an exception to MalwareBytes, so that the entries are no longer thrown up.

If you want to add the exception for these entries, you'll need to add the following:
C:\USERS\PRIME\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Web Data

There's a how to here: How-To: Configure exclusions with Malwarebytes 3

 

[peterr]

I tried bu it seems to apply to premium as the string would not work. I will try to save the detection to desktop and use the file excursion.

 

[peterr]

I uninstalled Chrome and use Edge with Cortana. MBAM is clean now.

 

[starbuck]

I uninstalled Chrome and use Edge with Cortana. MBAM is clean now.

Ok, thanks for letting me know Peterr.
Like I said, those entries wouldn't have done any harm if left.
It's just Chrome replacing old entries.
I'm not a big fan of Chrome anyway, so I think you'll be better off with Edge.

FRST can now be removed:

Right click on the FRST icon and select delete.
Right click on any frst reports or fixlist.txt files and select delete.
Navigate to: C:\frst and delete the frst folder.

Safe surfing.

 

[peterr]

Will do and thank for all the help.