Solved Mail.ru re-infecting Google Secure Preferences

Akemi

New Member
Thread author
Feb 20, 2018
3
Looking over the FRSS, it's listed MaxiBuy and AnonymiserGadget in there which I've already removed. Task Scheduler lists those as "system cannot find the file". I deleted them out of the Task Scheduler.

Additionally, this is the file in question that keeps coming back on MBAM: upload_2018-2-20_10-35-4.png
 

Akemi

New Member
Thread author
Feb 20, 2018
3
Yes. It re-infects. I did a little digging myself and after I reset my sync and restarted (as well as running AdwRemoval) it seems to have cleared up. I also manually pulled out all the registry keys that were listed on the FRSS.

Seems it was hiding in the sync and resetting it did the trick.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top