Google Chrome has a malware extension that keeps reappearing.

I'm running Windows 8.1 with Google Chrome. I have an extension that keeps reappearing in the Chrome extension list as "MFAC." It is not the legitimate extension. When I open Chrome, it sits at a screen that says "processing" in the bottom left corner for a few minutes and during this time if I look at my extensions list I see "MFAC" listed. If I wait a few minutes, the screen flashes, everything loads and then if I check the extension list the "MFAC" plugin is gone. If I look for the extension in the Chrome extension folder or in registry, it does not show up there. I've tried recreating a new profile for Chrome and removing the extensions folder in registry with no luck. I've checked for viruses and malware as well, with nothing showing up. What else can I try?
LVL 2
OAC TechnologyProfessional NerdsAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

TemodyPickalbatros, IT ManagerCommented:
Uninstall Google chrome from control panel

Navigate to the following locations and delete the “Chrome” folder(s) that exist there.

Windows

C:\Users\<YourUserName>\AppData\Local\Google\Chrome
C:\Program Files\Google\Chrome

Install fresh copy and test
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
JohnBusiness Consultant (Owner)Commented:
Download, install and run Process Explorer from Microsoft. Look under the Explorer tree. Are there any strange (alphanumeric) processes running?  If so, kill them, close out do NOT restart and run Malwarebytes to clean up.
0
John Gates, CISSPSecurity ProfessionalCommented:
Use superantispyware it will find and remove what malwarebytes misses:

http://www.superantispyware.com/
0
Anuj BhatiaDirectorCommented:
Hi Buddy,

Try the following steps .. removed all the extensions from Google chrome.

1) Remove Google Chrome .
2) Delete The Chrome folder from these folders.

C:\Users\<YourUserName>\AppData\Local\Google\Chrome
C:\Program Files\Google\Chrome

3) Reboot the machine .
4) Download, Install & Run Malware Bytes and see if it find any infected files and also make sure if you have an Antivirus disable that as some time it causes some issues..
5) Restart the machine.
6) Install Google Chrome and see if its works for you.

If you still have the issues you can also try this .. for Windows 8

Open windows start menu go into the search field.
Go to Microsoft\windows\start menu\programs\startup.
Remove associated files.
Access windows task manager to kill rogue_name processes.
Search for all related registry entries infected by virus and wipe them out.
Reboot the computer to normal mode when the above steps are done.

Thanks..

Anuj Bhatia
0
OAC TechnologyProfessional NerdsAuthor Commented:
Also found that Lenovo Location Awareness was locking the preferences file in appdata which is why changes made to chrome would always revert. I set this service to disabled and then followed your steps, which worked
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 8

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.