Jump to content
Steve1982

Seeing PUP.Optional.Legacy on a fresh system install

Recommended Posts

Hi, I just did a fresh Windows 10 Pro install and after loading MalwareBytes and Chrome and updating both to the latest versions I ran AdwCleaner.

Much to my dismay, it came back with two entries!

PUP.Optional.Legacy
  - Chrome Search Provider      Ask
  - Chrome Search Provider      Ask

That has to be false positives right? See attached files for details. I have two Chrome profiles, hence the two detections. I went to Chrome > Settings > Manage search engines and removed the Ask entries and now AdwCleaner comes up clean.

Is there any reason to be worried at all? I'm pretty sure these are installed by the official Chrome installer but I would love to hear from others who have Chrome installed if they're also seeing this.

Thanks!!

Capture.PNG

AdwCleaner[S00].txt

Share this post


Link to post
Share on other sites

***This is an automated reply***

Hi,

Thanks for posting in the AdwCleaner Help forum.

Someone will reply shortly, but in the meantime here are a few resources which may help resolve your issue:

Thanks in advance for your patience.

-The Malwarebytes Forum Team

Share this post


Link to post
Share on other sites

Hello,

Yes, we're not advising about using Ask search engine, whether it's offered in Chrome in the default setup, so this isn't a FP.

Regards,

Share this post


Link to post
Share on other sites

Hi, thanks for the reply.

So just to clarify ... what you're saying is that, even though the Ask search engine is installed by Chrome by default and not "real" malware, you still advise against having it which is why it's reported by AdwCleaner, is that right?

I just want to make sure I don't have anything to worry about (other than the fact that Ask search is installed by Chrome).

Thanks!

Share this post


Link to post
Share on other sites

@fr33tux @Elisabeth @exile360

Sorry forgot to tag the right people for a response. Since the Ask toolbar is installed by the latest versions(s) of Chrome by default most (if not all) users of AdwCleaner will probably see that detection so a little more clarity around this will be great.

Share this post


Link to post
Share on other sites

Oops, wish I could edit posts ... I meant to say in the previous message "Since the Ask search is installed by the latest versions(s) of Chrome by default ..."

Share this post


Link to post
Share on other sites

Just to make sure there is no confusion, here is a screenshot of what is installed by Google Chrome by default (AdwCleaner detects the Ask search entry). 

 

 

Capture.PNG

Share this post


Link to post
Share on other sites

Hello,

Sorry for the delay.

On 10/1/2018 at 5:20 PM, Steve1982 said:

Since the Ask toolbar is installed by the latest versions(s) of Chrome by default most (if not all) users of AdwCleaner will probably see that detection so a little more clarity around this will be great. 

You're right.

Ask has been well-known to have grey-ish practices, which led us to detect them as they were considered as PUP and I let you refer to the Wikipedia history for more details.

Very often, grey-ish companies try to bundle their software with widely used software (Java was Ask's case for instance) as an installation option, or as a browser setting (search engine, extension...) in a browser to generate views, collect data, and thus get revenue.

This (AdwCleaner restricted) detection triggers only on the search engine that is a subset of the Ask toolbar, thus the detection.

We'll elaborate more about that in the coming weeks.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.