infected by boyu in chrome&edge, cannot remove extension, ran norton antivirus failed to resolve, trying FRST

Status
Not open for further replies.

solarSail

New Member
Thread author
May 27, 2024
1
my issue began an hour ago after clicking a link on reddit, My Chrome and Edge started stating that it was managed by an organization, had "Guardian Angel" extension installed, and kept redirecting to the Boyu website whenever I search something. I ran norton antivirus and it failed to resolve the issue but did remove several other viruses i got.

i ran FRST and got the 2 files its scan creates which i will add as attachments
 

Attachments

  • Addition.txt
    36.4 KB · Views: 2
  • FRST.txt
    48.2 KB · Views: 2

nasdaq

Super Moderator
Verified
Staff Member
Nov 5, 2019
1,599
Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Remove this program in bold using the Control Panel > Programs > Programs and Features...
App Explorer (HKU\S-1-5-21-3143387143-2137460674-3773430456-1001\...\Host App Service) (Version: 0.273.4.677 - SweetLabs) <====
<<<>>>

Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

Please post the Fixlog.txt and let me know what problem persists.

Before you post the logs.

p..s
If the problem persists and Chrome is Synced with other Devices reset it.

Chrome Secure Preferences detection always returns

Sign in & sync in Chrome - Computer - Google Chrome Help

Execute the suggested fix.

Restart the computer normally.
===========

Post the logs. Let me know if the problem is solved.
 

Attachments

  • Fixlist.txt
    4 KB · Views: 0

nasdaq

Super Moderator
Verified
Staff Member
Nov 5, 2019
1,599
No replay. If you still need help send me a personal message.
This topic will be closed.
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top