PUP.CrossRider zas a znovu

[Giraffe]

Ahoj. Opět prosím o radu. Po jednom čistém dnu se mi znovu objevil PUP.Optional.Crossrider.

Snímek obrazovky.png (51.44 KiB) Zobrazeno 7916 x

[JaRon]

Ahoj,
vypni vsetky rozsirenia v Chrome a ked zistis, ktory to sposobuje - odinstaluj ho

[Giraffe]

Mám jem jedno rozšíření a i když je vyplé, PUP se po odstranění z karantény objeví po chvíli znovu.

rozšíření.png (45.09 KiB) Zobrazeno 7912 x

[JaRon]

Pouzi zoek https://forum.viry.cz/viewtopic.php?p=1 ... k#p1557721

[Giraffe]

Zoek použit, PUP se prozatím neobjevil tak snad to tak i zůstane. Díky za pomoc.

[Giraffe]

Beru zpět. PUP je zpět

[JaRon]

Prescanuj PC s MBAM

[Giraffe]

MBAM nic nenašel. AdwCleaner ho vždy objeví.

[JaRon]

Otazka znie:
Ked ho zmazes a nebudes pouzivat Chrome - objavi sa znovu

[Giraffe]

Když ho smažu a nepoužívám chrome tak se PUP znovu neobjeví, po spuštění chromu ho detekuju do 10 sekund.

[JaRon]

Resetni nastavenia Chrome

[Giraffe]

Reset nepomáhá.

[altrok]

Ahoj, dej log z AdwCleaneru, ať přesně víme, kde se ten náš PUP schovává.

[Giraffe]

# -------------------------------
# Malwarebytes AdwCleaner 8.4.2.0
# -------------------------------
# Build: 03-04-2024
# Database: 2024-03-04.1 (Local)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 03-07-2025
# Duration: 00:00:10
# OS: Windows 11 (Build 26100.3194)
# Scanned: 32087
# Detected: 1


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

PUP.Optional.CrossRider plnkhmnoajbfccclonaeepohggeolcih

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.


AdwCleaner[S00].txt - [1420 octets] - [06/03/2025 18:58:03]
AdwCleaner[S01].txt - [1481 octets] - [06/03/2025 19:01:45]
AdwCleaner[S02].txt - [1542 octets] - [06/03/2025 19:03:07]
AdwCleaner[S03].txt - [1603 octets] - [06/03/2025 19:16:02]
AdwCleaner[S04].txt - [1692 octets] - [06/03/2025 19:22:29]
AdwCleaner[S05].txt - [1753 octets] - [06/03/2025 19:31:23]
AdwCleaner[S06].txt - [1814 octets] - [06/03/2025 20:04:13]
AdwCleaner[C06].txt - [1984 octets] - [06/03/2025 20:04:18]
AdwCleaner[S07].txt - [1908 octets] - [06/03/2025 20:05:14]
AdwCleaner[S08].txt - [1969 octets] - [06/03/2025 20:05:26]
AdwCleaner[S09].txt - [2030 octets] - [06/03/2025 20:05:40]
AdwCleaner[S10].txt - [2119 octets] - [06/03/2025 20:06:00]
AdwCleaner[S11].txt - [2180 octets] - [06/03/2025 20:06:21]
AdwCleaner[C11].txt - [2350 octets] - [06/03/2025 20:06:25]
AdwCleaner[S12].txt - [2274 octets] - [06/03/2025 20:06:45]
AdwCleaner[S13].txt - [2335 octets] - [06/03/2025 20:06:54]
AdwCleaner[S14].txt - [2424 octets] - [06/03/2025 20:07:03]
AdwCleaner[C14].txt - [2594 octets] - [06/03/2025 20:07:12]
AdwCleaner[S15].txt - [2518 octets] - [06/03/2025 20:07:31]
AdwCleaner[S16].txt - [2579 octets] - [06/03/2025 20:09:07]
AdwCleaner[S17].txt - [2640 octets] - [06/03/2025 20:09:22]
AdwCleaner[S18].txt - [2729 octets] - [06/03/2025 20:09:35]
AdwCleaner[C18].txt - [2899 octets] - [06/03/2025 22:11:29]
AdwCleaner[S19].txt - [2851 octets] - [06/03/2025 22:12:05]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S20].txt ##########

[altrok]

Proskenuj PC pomocí MBAM. Rád bych se dozvěděl přesnou cestu k tomuto rozšíření. Mám podezření, že si ho tam taháš přes synchronizaci - jsi do Chromu přihlášen svým účtem/gmailem?