Jump to content

I made the mistake of torrenting stuff and not being smart about it. Something I installed turned out to be a virus I removed the bulk of it, but this safe finder thing wouldn't leave so I did a factory reset, but now whenever I sign into my google account on chrome and sync everything it comes back so I have to delete ithe google folder in local appdata and when I sign in it happens again and thus the cycle continues. My question is how to remove it from my account all together?

The names of the files are 

C:\Users\samij\AppData\Local\Google\Chrome\User Data\Default\Web data

C:\Users\samij\AppData\Local\Google\Chrome\User Data\Default\sync data\Syncdata.sqlite3

C:\Users\samij\AppData\Local\Google\Chrome\User Data\Default\web data

C:\Users\samij\AppData\Local\Google\Chrome\User Data\Default\secure preferences

Link to comment
https://linustechtips.com/topic/1073944-need-help-with-recurring-virus/
Share on other sites

Link to post
Share on other sites

17 minutes ago, Aimi said:

Maybe you got some kind of extension tied to your Google account. What extensions show up in Chrome with syncing active?

There are no extensions being shown as I removed all of them last night on advice from someone else

Link to post
Share on other sites

2 minutes ago, Aimi said:

Does your antivirus detect anything from Chrome's AppData folder?

yes these 4 files were identified by malwarebytes but when I quarentine them it shuts down chrome and when I relaunch it and do another scan they are back

C:\Users\samij\AppData\Local\Google\Chrome\User Data\Default\Web data

C:\Users\samij\AppData\Local\Google\Chrome\User Data\Default\sync data\Syncdata.sqlite3

C:\Users\samij\AppData\Local\Google\Chrome\User Data\Default\web data

C:\Users\samij\AppData\Local\Google\Chrome\User Data\Default\secure preferences

Link to post
Share on other sites

2 minutes ago, RadicalCheetoLover said:

yes these 4 files were identified by malwarebytes but when I quarentine them it shuts down chrome and when I relaunch it and do another scan they are back

 C:\Users\samij\AppData\Local\Google\Chrome\User Data\Default\Web data

C:\Users\samij\AppData\Local\Google\Chrome\User Data\Default\sync data\Syncdata.sqlite3

C:\Users\samij\AppData\Local\Google\Chrome\User Data\Default\web data

C:\Users\samij\AppData\Local\Google\Chrome\User Data\Default\secure preferences

Try to uninstall Chrome, wipe all AppData from it, then reinstall
When you sign in again, don't sync any extensions or application data

A girl who loves to love.

Link to post
Share on other sites

Just now, Aimi said:

Try to uninstall Chrome, wipe all AppData from it, then reinstall
When you sign in again, don't sync any extensions or application data

problem is I rely on syncing cause I have a ton of things saved is there a way to remove it from my google accoount

Link to post
Share on other sites

1 minute ago, RadicalCheetoLover said:

problem is I rely on syncing cause I have a ton of things saved is there a way to remove it from my google accoount

It's not like you'll be unable to sync that stuff later, I'm just trying to troubleshoot and find the source of the issue.

A girl who loves to love.

Link to post
Share on other sites

Just now, Aimi said:

It's not like you'll be unable to sync that stuff later, I'm just trying to troubleshoot and find the source of the issue.

Ok I'll do it right now when I reinstall chrome I'll let you know. Thanks for the help

Link to post
Share on other sites

28 minutes ago, Aimi said:

It's not like you'll be unable to sync that stuff later, I'm just trying to troubleshoot and find the source of the issue.

I've reinstalled chrome and didn't sync anything and ran another scan and there weren't any threats so I believe it's related to my Google account 

Link to post
Share on other sites

Just now, RadicalCheetoLover said:

I've reinstalled chrome and didn't sync anything and ran another scan and there weren't any threats so I believe it's related to my Google account 

Not much I can do there, except suggest that you check around with data that Google stores on your account, and maybe contact Google directly if you can't seem to find anything off. You might want to update password/other security info too once the issue is cleared up.

A girl who loves to love.

Link to post
Share on other sites

14 minutes ago, Aimi said:

Not much I can do there, except suggest that you check around with data that Google stores on your account, and maybe contact Google directly if you can't seem to find anything off. You might want to update password/other security info too once the issue is cleared up.

Yea I'll try speaking to Google but I'm already partially through changing the account on everything 

Link to post
Share on other sites

For that ugly stuff I recommend to use SpyHunter. Just for detection. I hope after detection you'll be able to remove selected registry entries and files manually (program in demo mode only detecting, but it can remove only few entries). When you remove virus, uninstall SpyHunter.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×