Help with PUP trovi AND Conduit

[damaza90]

As the title hints, I have tried getting rid of these two PUPs, I tried ADW and Malwarebytes even on safe boots mode, these buggers keep coming back.

Would love some help

 

[nasdaq]

Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

[/b][/b]Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file:
In the Reply section in the bottom of the topic Select Click the Attach Files.
Navigate to the location of the File.
Click the file. It will appear in the reply section.
Click the Post Reply button.

Please post the logs for my review.

Wait for further instructions

 

[damaza90]

Done

 

[damaza90]

Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

[/b][/b]Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file:
In the Reply section in the bottom of the topic Select Click the Attach Files.
Navigate to the location of the File.
Click the file. It will appear in the reply section.
Click the Post Reply button.

Please post the logs for my review.

Wait for further instructions

 

[nasdaq]

Hi,

Your logs are clean.

Try this.

If the problem persists and Chrome is Synced with other Devices reset it.

Chrome Secure Preferences detection always returns

Browser-related remediation (especially concerning preference/configuration files) can be particularly troublesome given the safeguards built into the browsers, along with syncing mechanisms and other complications associated with Internet browsers. The issue you're experiencing is likely caused ...

forums.malwarebytes.com

Sign in and sync in Chrome - Computer - Google Chrome Help

When you sign in to Chrome with your Google Account, you can get your info on all your devices and use additional Chrome features. When you sign in You can get your bookmarks, passwords, and

support.google.com

Execute the suggested fix.

Restart the computer normally.
===========

Is the problem solved?

 

[damaza90]

Hi,

Your logs are clean.

Try this.

If the problem persists and Chrome is Synced with other Devices reset it.

Chrome Secure Preferences detection always returns

Browser-related remediation (especially concerning preference/configuration files) can be particularly troublesome given the safeguards built into the browsers, along with syncing mechanisms and other complications associated with Internet browsers. The issue you're experiencing is likely caused ...

forums.malwarebytes.com

Sign in and sync in Chrome - Computer - Google Chrome Help

When you sign in to Chrome with your Google Account, you can get your info on all your devices and use additional Chrome features. When you sign in You can get your bookmarks, passwords, and

support.google.com

Execute the suggested fix.

Restart the computer normally.
===========

Is the problem solved?

No It did not, both still come back after ADW, Malwarebytes and SYNC clean up

 

[nasdaq]

HI,

Your copy of Chrome may have been compromised

Remove and re-install Chrome. Follow these instructions.


[img=[URL]https://www.bleepingcomputer.com/forums/public/style_emoticons/default/step1.gif[/URL]] Remove Chrome from your Computer and reinstall a fresh copy later.

[img=[URL]https://www.bleepingcomputer.com/forums/public/style_emoticons/default/step2.gif[/URL]] If you remove the syncing of your account you must remove it before you save your bookmarks etc...
Delete Your Google Chrome Browser Sync Data if you sync with other devices. <- Important ...

Chrome Secure Preferences detection always returns

Browser-related remediation (especially concerning preference/configuration files) can be particularly troublesome given the safeguards built into the browsers, along with syncing mechanisms and other complications associated with Internet browsers. The issue you're experiencing is likely caused ...

forums.malwarebytes.com

[img=[URL]https://www.bleepingcomputer.com/forums/public/style_emoticons/default/step3.gif[/URL]] Before you remove Chrome Export your Bookmarks
Chrome will export your bookmarks as a HTML file, which you can then import into another browser.
How To: How To Back Up Your Google Chrome Bookmarks

[img=[URL]https://www.bleepingcomputer.com/forums/public/style_emoticons/default/step4.gif[/URL]] Before you remove Chrome Export your Passwords
How to export your saved passwords from Chrome

chrome export password - Google Search

[img=[URL]https://www.bleepingcomputer.com/forums/public/style_emoticons/default/step5.gif[/URL]] Clear your Chrome cache and cookies

Delete browsing data in Chrome - Android - Chromebook Help

You can delete your Chrome browsing history and other browsing data, like saved form entries, or just delete data from a specific date. What happens to your info Data th

support.google.com

[img=[URL]https://www.bleepingcomputer.com/forums/public/style_emoticons/default/step6.gif[/URL]] Remove Chrome using the the instructions on this page.

Uninstall Google Chrome - Computer - Google Chrome Help

You can remove Chrome from your computer (Windows, Mac, or Linux), or delete Chrome from your iPhone or iPad. Windows 11 On your computer, close all Chrome wi

support.google.com

[img=[URL]https://www.bleepingcomputer.com/forums/public/style_emoticons/default/step7.gif[/URL]] Re-install Chrome and the Bookmarks and passwords.
<<<>>

Is the problem solved?

 

[damaza90]

HI,

Your copy of Chrome may have been compromised

Remove and re-install Chrome. Follow these instructions.


[img=[URL]https://www.bleepingcomputer.com/forums/public/style_emoticons/default/step1.gif[/URL]] Remove Chrome from your Computer and reinstall a fresh copy later.

[img=[URL]https://www.bleepingcomputer.com/forums/public/style_emoticons/default/step2.gif[/URL]] If you remove the syncing of your account you must remove it before you save your bookmarks etc...
Delete Your Google Chrome Browser Sync Data if you sync with other devices. <- Important ...

Chrome Secure Preferences detection always returns

Browser-related remediation (especially concerning preference/configuration files) can be particularly troublesome given the safeguards built into the browsers, along with syncing mechanisms and other complications associated with Internet browsers. The issue you're experiencing is likely caused ...

forums.malwarebytes.com

[img=[URL]https://www.bleepingcomputer.com/forums/public/style_emoticons/default/step3.gif[/URL]] Before you remove Chrome Export your Bookmarks
Chrome will export your bookmarks as a HTML file, which you can then import into another browser.
How To: How To Back Up Your Google Chrome Bookmarks

[img=[URL]https://www.bleepingcomputer.com/forums/public/style_emoticons/default/step4.gif[/URL]] Before you remove Chrome Export your Passwords
How to export your saved passwords from Chrome

chrome export password - Google Search

[img=[URL]https://www.bleepingcomputer.com/forums/public/style_emoticons/default/step5.gif[/URL]] Clear your Chrome cache and cookies

Delete browsing data in Chrome - Android - Chromebook Help

You can delete your Chrome browsing history and other browsing data, like saved form entries, or just delete data from a specific date. What happens to your info Data th

support.google.com

[img=[URL]https://www.bleepingcomputer.com/forums/public/style_emoticons/default/step6.gif[/URL]] Remove Chrome using the the instructions on this page.

Uninstall Google Chrome - Computer - Google Chrome Help

You can remove Chrome from your computer (Windows, Mac, or Linux), or delete Chrome from your iPhone or iPad. Windows 11 On your computer, close all Chrome wi

support.google.com

[img=[URL]https://www.bleepingcomputer.com/forums/public/style_emoticons/default/step7.gif[/URL]] Re-install Chrome and the Bookmarks and passwords.
<<<>>

Is the problem solved?

No, Both still come back, I noticed however that If I clean up and re-install. After using certain pages e.g youtube I start getting pop ups blocked by the blockers I have and then the PUPs come back. Might there be a link about it?

 

[nasdaq]

Hi,

Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

Do you consider these as popups or some type of notifications?


Please post the Fixlog.txt and let me know what problem persists.

p.s.
You should disable alll you Chrome extension.
Enable the one at a time you may be able to identify is one of them is the culprit.

 

[damaza90]

Hi,

Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

Do you consider these as popups or some type of notifications?


Please post the Fixlog.txt and let me know what problem persists.

p.s.
You should disable alll you Chrome extension.
Enable the one at a time you may be able to identify is one of them is the culprit.

So both still return, I Disabled all the extensions. Still went on youtube ran ADW cleaner and still found both PUPs. I resorted to uninstalling Chrome, and tested doing the same thing on Edge browser. After using youtube and running ADW again. nothing shows up. Seems the problem is with chrome?

 

[nasdaq]

Hi,

The extension may be managed by your organization

Disable "Your browser is managed by your organization: message

Read this article.
You should find the "Managed by your organization" at the bottom of the Menu.

Follow the recommendations on this page.

Why Does Chrome Say It's "Managed By Your Organization?"

Chrome sometimes says it's "Managed By Your Organization"---even if you don't have an organization! Here's what that means.

www.howtogeek.com

===

Let me know if the problem is solved.

If not solved can you give me some information on these popups?

 

[damaza90]

Hi,

The extension may be managed by your organization

Disable "Your browser is managed by your organization: message

Read this article.
You should find the "Managed by your organization" at the bottom of the Menu.

Follow the recommendations on this page.

Why Does Chrome Say It's "Managed By Your Organization?"

Chrome sometimes says it's "Managed By Your Organization"---even if you don't have an organization! Here's what that means.

www.howtogeek.com

===

Let me know if the problem is solved.

If not solved can you give me some information on these popups?

I got it sorted out. Thank you very much for the help.

 

[nasdaq]

Glad we could help.