Hidden PUP.Optional.ASK Threats

[BrentC]

Hello,

I have some clients reporting with the PUP.Optional.ASK threat (Ask Toolbar browser extension). They are all registry entries, but for some of them I cannot find in the registry, yet they keep showing up in the scans. For example :

 HKU\S-1-5-21-3653222824-1754080434-398015076-500\Software\Microsoft\Inernet Explorer\Searchscopes\{2fa28606-de77-4029-af96-b231e3b8f827}

Any ideas on this?

Brent

[djacobson]

Hi Brent, for stubborn browser hijack pups, use ADWCleaner.

https://www.malwarebytes.com/adwcleaner/