r/techsupport • u/hyodogimi • 2h ago

Open | Malware Trojan reappiring even after I got rid of it

Hello, I don't know if this is the right place but I got a problem with an extension. A long time ago I downloaded that infamous flash player extension that was a malware or something, and as soon as Malwarebytes detected it as a Trojan I unistalled it and deleted its folder and anything the AV could get rid of. Some days ago, the AV reports that it is back again but I don't understand how... I desynced the extensions from my browser and didn't download any other add-ons in the meantime, but maybe I had to do something else to ensure the total deletion of this trojan? Any help appreciated.

0 Upvotes

33% Upvoted

13 comments sorted by

•

u/AutoModerator 2h ago

If you suspect you may have malware on your computer, or are trying to remove malware from your computer, please see our malware guide

Please ignore this message if the advice is not relevant.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/ThunderTech101 2h ago

What is it actually detecting? We need more info...

Try running a scan with this: https://www.sophos.com/en-us/products/hitmanpro/downloads

1

u/hyodogimi 2h ago

It's detected as Trojan.CompromisedExtension, both a registry key and a file. They're in the edge user data folder under secure preferences. The name of the folder where it appears is "hkjagicdaogfgdifaklcgajmgefjllmd" if it may help.. I've deleted it again with Malwarebytes but I don't know if it'll reappear again now.. I'll give a shot with hitman pro as well

1

u/Objective-Bike-4292 1h ago

Didn't flash player become obsolete almost a decade ago?

1

u/hyodogimi 1h ago

It is! I downloaded some extension that could play flash sh*t like years ago?? I don't even remember what I needed to see/try on an old ass webpage, but it seems it kept being synced into my edge account and it came to this 💀

1

u/Objective-Bike-4292 1h ago

Flash player was a huge security hole years ago. Any flash games/videos worth anything should be ported to HTML5

1

u/hyodogimi 1h ago

Man I am no tech expert on this but it's so crazy to me that a thing so stupid could get you a malware. I'm sure I didn't even get it for games purposes but something related to a uni research?? So it wasnt even for my own enjoyment lol

1

u/HalfShots 2h ago

Backup your data, reinstall Windows from USB.

1

u/hyodogimi 2h ago

Thanks, but wouldn't it work the same if I did a factory reset? Sorry I'm no expert..

1

u/HalfShots 2h ago

If you want it to come back, then sure.

1

u/hyodogimi 2h ago

Damn didn't think an extension malware could be that persistent. Thanks man

1

u/ThunderTech101 1h ago

A browser extension isn't just going to magically gain administrator privileges and start modifying Windows recovery files lol.

A proper factory reset with "Remove everything" should get rid of it. If it comes back, I'd suspect Edge syncing the extension back or something reinstalling it, rather than the malware somehow surviving the reset.

1

u/hyodogimi 1h ago

I'm sure it's edge man, I like desynced everything but I can't stop thinking that even if I deleted everything from the PC, it just reinstalls it or something. I ain't even that much into tech and such so that's the best conclusion I came to 🫩