PDA

View Full Version : Unable to remove ASK toolbar spyware from Win 7


Noid
04-18-2010, 01:07 AM
I been trying to get this 'software' off my Win7.
Anyone have a solution that works?

This is the letter I sent to ASK.com


Unable to uninstall ASK toolbar from Win7.
I was able to remove toolbar from FireFox (default browser)
But, unable to remove from Windows7 program list.
It prompts to 'close all open browser windows' and loops.
It never completes uninstall.

The uninstall program you provide at help.funwebproducts.com' does not uninstall the Ask
software either.

This is a violation of safe computing. I don't need your spyware ! Provide solutions for your malicious software with a proper removal tool !

customersupport@ask.com

mechBgon
04-18-2010, 02:34 AM
If you haven't tried System Restore yet, that's worth a shot.

Noid
04-18-2010, 02:58 AM
I took it one step further, and sent the DLL to microrsoft thru their Defender submission utility. So, at least they will be put on their Sh*t list.

The restore point isn't an option until I get a reply form Ask.com.
(I hope next week)

Does the restore point process really work? I've never tried it.
I'm a bit afraid to use it, since I don't have a image backup.

AFurryReptile
04-18-2010, 04:02 AM
Revo Uninstaller.

pcgeek11
04-18-2010, 08:08 AM
This is a violation of safe computing. I don't need your spyware ! Provide solutions for your malicious software with a proper removal tool !

They maybe somewhat unwilling to assist after the insult. ( true or not ). You will always get more flies with honey.

bruceb
04-18-2010, 09:00 AM
Please see this page

http://www.finaluninstaller.com/blog/ut/how-to-uninstall-ask-toolbar.html

Note that some of the step have scroll arrows (which you need to use to see all of what is there) .. follow directions and you should be ok.
There is also an automatic uninstaller listed on same page. It may work.

1): Terminate Ask Toolbar process
c:\program files\ask.com\SaUpdate.exe c:\program files\ask.com\UpdateTask.exe

2): Delete Ask Toolbar files.
c:\program files\ask.com\config.xml c:\program files\ask.com\GenericAskToolbar.dll c:\program files\ask.com\mupcfg.xml c:\program files\ask.com\SaUpdate.exe c:\rogram files\ask.com\UpdateTask.exe c:\WINDOWS\tasks\scheduled update for ask toolbar.job

3): Delete Ask Toolbar directories.
C:\Documents and Settings\Administrator\Local Settings\Application Data\asktoolbar c:\program files\ask.com\ C:\WINDOWS\Installer\{86d4b82a-abed-442a-be86-96357b70f4fe}

4): Delete Ask Toolbar registry keys and values.
HKEY_CLASSES_ROOT\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}

HKEY_CLASSES_ROOT\Installer\Features\A28B4D68DEBAA 244EB686953B7074FEF

HKEY_CLASSES_ROOT\Installer\Products\A28B4D68DEBAA 244EB686953B7074FEF

HKEY_CLASSES_ROOT\Installer\UpgradeCodes\F928123A0 39649549966D4C29D35B1C9

HKEY_CLASSES_ROOT\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}

HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}

HKEY_CURRENT_USER\Software\appdatalow\askbardis

HKEY_CURRENT_USER\Software\appdatalow\askbardis\ba r

HKEY_LOCAL_MACHINE\Software\classes\appid\{9b0cb95 c-933a-4b8c-b6d4-edcd19a43874}

HKEY_LOCAL_MACHINE\Software\classes\appid\generica sktoolbar.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7 F-154A-4066-A1AD-4243D8127440}

HKEY_LOCAL_MACHINE\Software\classes\genericasktool bar.toolbarwnd

HKEY_LOCAL_MACHINE\Software\classes\genericasktool bar.toolbarwnd.1

HKEY_LOCAL_MACHINE\Software\classes\genericasktool bar.toolbarwnd.1\clsid

HKEY_LOCAL_MACHINE\Software\classes\genericasktool bar.toolbarwnd\clsid

HKEY_LOCAL_MACHINE\Software\classes\genericasktool bar.toolbarwnd\curver

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Feat ures\A28B4D68DEBAA244EB686953B7074FEF

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Prod ucts\A28B4D68DEBAA244EB686953B7074FEF

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Upgr adeCodes\F928123A039649549966D4C29D35B1C9

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{91C F619A-4686-4CA4-9232-3B2E6B63AA92}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{2996F 0E7-292B-4CAE-893F-47B8B1C05B56}

HKEY_LOCAL_MACHINE\Software\Microsoft\internet explorer\low rights\elevationpolicy\{a5aa24ea-11b8-4113-95ae-9ed71deaf12a}

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\explorer\browser helper objects\{d4027c7f-154a-4066-a1ad-4243d8127440}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\UpgradeCodes\F928123A03964954 9966D4C29D35B1C9

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}

HKEY_CURRENT_USER\Software\appdatalow\askbardis\ba r\hpoparam

HKEY_LOCAL_MACHINE\Software\classes\appid\generica sktoolbar.dll\appid

HKEY_LOCAL_MACHINE\Software\Microsoft\internet explorer\toolbar\{d4027c7f-154a-4066-a1ad-4243d8127440}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders\C:\Program Files\Ask.com\

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\SharedDlls\C:\Program Files\Ask.com\GenericAskToolbar.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\SharedDlls\C:\Program Files\Ask.com\TaskScheduler.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
\CurrentVersion\SharedDlls\C:\Program Files\Ask.com\UpdateTask.exe

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\authorizedcdfprefix

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\comments

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\contact

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\displayname

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\displayversion

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\estimatedsize

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\helplink

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\helptelephone

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\installdate

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\installlocation

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\installsource

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\language

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\modifypath

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\norepair

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\publisher

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\readme

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\size

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\uninstallstring

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\urlinfoabout

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\urlupdateinfo

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\version

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\versionmajor

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\versionminor

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}\Windowsinstaller

Noid
04-19-2010, 11:36 AM
A reply today

From: Ask.com Support <ask@mailca.custhelp.com>
To: EDITED
Sent: Mon, Apr 19, 2010 9:47 am
Subject: Unable to remove ASK toolbar from Win 7 [Incident: 100418-000080]

Recently you requested personal assistance from our on-line support center. Below is a summary of your request and our response.

Subject Unable to remove ASK toolbar from Win 7

Discussion Thread
Response (M.S.M.) 04/19/2010 10:47 AM
Thank you for writing. It is possible that you may need to restart your computer to complete the uninstall of the Ask.com toolbar. Once you restart your computer, the toolbar will be removed from the browser.

If you continue to see the toolbar after restarting your computer, please let us know and we will investigate the matter further. We appreciate your patience and regret any inconvenience.

My response

You clearly did not read or comprehend my complaint.

Yes, of course I restarted my computer.

Please re-read my original Email. It states the MS installer never completes the un-install process.
It also states the un-install PROGRAM that you supply on your help section called ' fiUnins.exe ' does not work either.
( It does not see the Ask toolbar installed )

Please forward my complaint to someone who can help me.

I also sent my complaint to Microsoft.

Noid
04-19-2010, 12:12 PM
bruceb

I tried your suggestion. This program listed the toolbar on 1st scan. I selected it and 'cleaned'. But, On reboot, the toolbar is still listed in my programs installed. So, I rescanned, but it did not see it. So, I ran the registry cleaner also, but that did not remove it either.

I beleive this is a version of the Ask toolbar that was not meant to be installed on Win7 x64, and this is why I can't remove it.

Noid
04-19-2010, 02:40 PM
Success ... the hard way

I used the guide in bruceb's link for a manual removal.

However ... If you are going to do the same as I did ...
... keep your eye open for variations in searching for 'Asktool' ...
.. like 'Ask@com'

In all .. I estimate I deleted around 70 registry items.

If you carefully look at the values within the keys, your can determine what to search that is not listed in the removal article. Also, many items listed in the article were not found, so maybe some items were deleted while trying the removal program.

Thanks for all the prompt replies and suggestions.

JackBurton
04-19-2010, 06:57 PM
And how did this get installed if you weren't running as Admin?

Noid
04-19-2010, 08:00 PM
JackBurton

Did I say I was not an Admin? This my Win7 home computer, so I am admin.

I was installing ' defraggler '. It had options to select installed optional software, which I declined (Ask toolbar and other stuff ). During the install, I got install errors from MSinstaller. I began to view the application error logs, when the installer restarted itself, and installed the Ask toolbar without prompting me. I'm not sure if I accidentally hit the 'enter' key one to many times, or the installer re-started on it's own.

But, the 'defraggler' installer definitely balked when I declined the toolbar the 1st time.

I've been having these same type of issues with the installer on Win7 for many applications I try. I believe many of these applications are not x64 ready.

Fear No Evil
04-19-2010, 08:14 PM
Why didn't you just run the uninstaller?





















;)

Noid
04-20-2010, 02:52 PM
Another Reply

Response (M.S.M.) 04/20/2010 10:45 AM
Thank you for your patience. We have identified a problem that affects some users when attempting to uninstall the Ask.com toolbar and are working to correct this issue as quickly as possible. To work around this problem, please use the following steps:

WINDOWS XP
• If you have any browser windows open, make certain that they are all closed. No browser window should remain open.
• Click on ‘Start’, then choose ‘Run’
• Type in “cmd”, then hit the Enter key
• Type in the following command on the command line: regsvr32 /u "C:\Program Files\Ask.com\GenericAskToolbar.dll"
• Hit Enter
• A Message will pop up confirming that the operation was successful if the command was typed correctly. Click on the OK button to close this window.
• On the “cmd” window, type “Exit” to close this window.
• Go to Add/Remove Programs on the Control Panel, then click on the Ask Toolbar entry and choose the Remove option.
• An error message may appear at the end of the uninstall process. Click on OK to close this message.
• Restart your computer.

WINDOWS VISTA
• If you have any browser windows open, make certain that they are all closed. No browser window should remain open.
• Click on ‘Start’, then click on the Start Search line
• Type in “cmd”. The cmd program will appear on the list of results.
• Right-click on the icon, then choose “Run as Administrator”. A User Access Control window may pop up to confirm your choice. Click on the Continue button.
• Type in the following command on the command line: regsvr32 /u "C:\Program Files\Ask.com\GenericAskToolbar.dll"
• Hit Enter
• A Message will pop up confirming that the operation was successful if the command was typed correctly. Click on the OK button to close this window.
• On the “cmd” window, type “Exit” to close this window.
• Go to the Programs and Features option on the Control Panel, then click on the Ask Toolbar entry and choose the Remove option.
• An error message may appear at the end of the uninstall process. Click on OK to close this message.
• Restart your computer.

If you continue to experience problems with this issue after following the instructions above, please let us know and we will investigate the matter further.

We again appreciate your patience and regret any inconvenience.



Does not contain Windows 7 x64