View original (French)

The Extension Search Manager won't uninstall.

Solved
Kasoro Posted messages 12 Status Member -  
Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   -
Recently, a dubious extension has installed itself on Google Chrome, and no matter what I do, it keeps coming back, even when I try to remove it with AdwCleaner.
I saw that with a software called FRST, we can get rid of this unwanted extension, so if someone with more experience could help me solve this issue, that would be great; I really care about my PC.
I'm sharing the links to visualize the problem.

FRST: https://pjjoint.malekal.com/files.php?id=FRST_20191107_u9i10m15n8u15

Addition: https://pjjoint.malekal.com/files.php?id=20191107_k10j6q14l8e14

Shortcut: https://pjjoint.malekal.com/files.php?id=20191107_y15e5w9t9h13

Hoping to find a solution to this problem, thank you.

3 answers

  1.
    Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712
     
    Hello,

    Here's the correction to be made with FRST. You can refer to this explanatory note with screenshots for assistance.
    Restart FRST and then press the CTRL + Y keys on your keyboard.
    The notepad will open, copy/paste this.

    Start:
    CloseProcesses:
    CreateRestorePoint:
    HKU\S-1-5-21-1324731461-1752385771-220412341-1002\...\Run: [Chromium] => c:\users\kasoro\appdata\local\chromium\application\chrome.exe [4195328 2017-10-07] (The Chromium Authors) [Unsigned file]
    c:\users\kasoro\appdata\local\chromium
    EmptyTemp:
    RemoveProxy:
    Hosts:
    Reboot:
    End:


    Save the content via the file menu and then save.

    Close the notepad, go back to FRST and click on the "Fix" button.
    A restart may be required and will happen automatically.
    A text file will appear, copy/paste the content here in a new message.

    Restart the computer.

    2°)
    Reset/Repair the affected web browsers:

    --
    Please press any key to continue the disinfection...
    1
    1. Kasoro Posted messages 12 Status Member
       
      Hi

      Thank you very much, it worked but I still need to uninstall and then reinstall Chrome. I don't know if I will encounter the problem again when I synchronize my cloud, any advice?
      I'll keep you posted.
      0
      1. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712 > Kasoro Posted messages 12 Status Member
         
        There’s no point in uninstalling and reinstalling Chrome.
        You need to reset it.

        What do you mean by syncing your cloud?
        0
    2. Kasoro Posted messages 12 Status Member
       
      Ah no, in that case, I will reset Chrome and then log into my Google account. And by "synchronize," I mean that on Gmail, the data is saved to my Google account, so when I log in, I synchronize my data (I checked an option to ensure that my extensions don't get reinstalled) and I recover my account.
      0
    3. Kasoro Posted messages 12 Status Member
       
      https://imgur.com/a/NjTlex9

      The extension reappears after I deleted the User Data file that was in the Chrome files.
      0
    4. Kasoro Posted messages 12 Status Member
       
      https://imgur.com/a/pXwTdH0

      The fixlog shows this, and I noticed that some things were not found (I did it twice because the first time didn't work), is that normal?
      0
  2. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712
     
    If the extension follows the connection to your Google
    It means your extension is located in the synchronized profile.
    You need to clear the profile or not synchronize the extensions.
    It's explained at the end of the page to fix Chrome that I gave you.

    --
    Please press any key to continue the disinfection...
    1
    1. Kasoro Posted messages 12 Status Member
       
      No, the extension reactivates after I open Chrome without logging in.
      0
      1. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712 > Kasoro Posted messages 12 Status Member
         
        Disconnect Google sync.
        Reset it.

        Is she coming back?
        0
    2. Kasoro Posted messages 12 Status Member
       
      No, she is not coming back; I need to click on "synchronize" for that to happen. However, the extension is present even when I am not logged into any account.
      0
      1. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712 > Kasoro Posted messages 12 Status Member
         
        Give me a screenshot of this "synchronize" to see.
        0
    3. Kasoro Posted messages 12 Status Member
       
      Unfortunately, I am not at home but this is the screenshot "http://imgur.com/a/NjTlex9" that I mentioned in a previous message. You can see that I am not logged into any account and nothing is synchronized. Yet, the extension was installed by itself.
      0
  3. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712
     
    Reinstall Google Chrome properly by following this procedure exactly: Repair and properly reinstall Google Chrome

    Okay, it still doesn't sync.
    And see if it comes back.

    --
    Please press any key to continue the disinfection...
    1
    1. Kasoro Posted messages 12 Status Member
       
      Alright, I will try this when I find my PC and I will keep you updated.
      However, I don't understand what the text I had to copy-paste into FRST is for, because the chromium files do not exist on my PC, even though they are mentioned in the text.
      0
    2. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712 > Kasoro Posted messages 12 Status Member
       
      This removes unnecessary and harmful elements that have been installed.
      0
    3. Kasoro Posted messages 12 Status Member
       
      Hello,

      https://imgur.com/a/8PcOrDo

      It's happening again even though I've reset everything properly.
      0
    4. Kasoro Posted messages 12 Status Member
       
      I was wondering if there was something in my files and not in Chrome, which causes those files to reinstall the extension on Chrome.
      0
    5. Kasoro Posted messages 12 Status Member
       
      Well, it has progressed, I removed the malicious extension and it doesn't come back on my Chrome (even when I restart my PC) and I just synchronized my Google Chrome account and there's no sign of the suspicious extension either, it hasn't been added back. However, AdwCleaner indicates that this extension is still there, which is strange.
      0