Win32/Bundled.Toolbar.Ask

[Maxx2777 0]

We are running Endpoint Security 6.4

 

This is in regards to thePotentially Unwanted Application setting.

 

Clients are reporting the Ask Toolbar as the Cause, and the various Objects it finds are many, and in many different folder locations.  Does ESET have a preferred method to deal with this Ask toolbar?  Thanks.

[Gonzalo Alvarez 66]

Hi @Maxx2777,

 

In the meantime you wait for the official reply, I can tell you this:

 

* Use the task in ERAv6.4 to uninstall Ask toolbar

* run a deep scan with strict clean (if your company policy is ok with that)

* reset all installed browser

 

Which is my answer to the Home users

Edited July 28, 2016 by Gonzalo Alvarez

[Maxx2777 0]

What is ESET's thought on the toolbar?  Thanks.

[Gonzalo Alvarez 66]

I think the classification they do as PUA answer that,

also they made a KB...

 

  What is a potentially unwanted application or potentially unwanted content?

  hxxp://support.eset.com/kb2629/?locale=en_US

 

You should read it.

 

Mostly those toolbar are installed because some user not unmark something

before install the desire program, or installed anyway.

 

In the case you are an ID Admin of a system/network/enterprise is wise to

restrict the users about the ability to install programs or add-ons.

[Maxx2777 0]

Thanks for the reply.  I understand how it gets installed.  There are some machines where the Cause is listed as the toolbar, even when it does not show in Programs and all Ask folders have been deleted manually,  and still there are 20-30 separate file locations for a different Objects it has found.

 

 

 

The problem with strict cleaning is that ESET is "finding" other legitimate programs (CheckPoint vpn, ESET files themselves!, etc). 

[Gonzalo Alvarez 66]

Hi,

 

That never happen to me before. My scan with cleaning are ok.

 

Remember, the Ask toolbar is also an Add-on for all usual browser (IE, Firefox, Chrome, etc).

 

That is why I suggest you to reset them. Bookmarks are not affected by the reset.

[Maxx2777 0]

I have started a support case on this, as we don't want to cause additional issues with strict cleaning, when other legitimate programs are being "found".  Thanks.

[Gonzalo Alvarez 66]

Perfect!!

You are in good hands.