Ask.com

Publisher Information

Ask.com is a software developer located in Oakland, California in the United States*. The company is a primary distributor of potentially unwanted software. Ask.com is a toolbar distribution and monetization platform that provides publishers the ability to create white-label toolbars using the APN (Ask Partner Network) platform. Ask in turn provides web search using partners such as Google. Thre are 5 additional code signing certificates issued to this publisher.
Remove Ask.com Malware - Powered by Reason Core Security
Authority:
VeriSign, Inc.

Valid from:
6/17/2008 2:00:00 AM

Valid to:
6/18/2011 1:59:59 AM

Subject:
CN=Ask.com, OU=Distribution, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Ask.com, L=Oakland, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
286f8a30e2eac6965b936f826a05305d

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Ask (M), PUP.Ask.Toolbar (M), PUP.Ask.Installer (M)
100.00%

Bkav FE
W32.FamVT.ExpiroPC.PE, W32.Clodc17.Trojan, W32.HfsAutoB
14.00%

Norman
Expiro.YJ, W32/AskBar.D, W32/AskBar.E
14.00%

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant)
12.00%

Dr.Web
Win32.Expiro.80, Trojan.DownLoader7.16675, Trojan.Crossrider.27621
10.00%

McAfee
W32/Expiro.gen.p, ASKToolbar.dll
10.00%

McAfee Web Gateway
BehavesLike.Win32.Expiro.tc, Artemis!07E2FC67C053
10.00%

XVirus List
Win.Detected
8.00%

Filseclab Twister
W32.Bundled.Toolbar.Ask.lrsp
6.00%

F-Prot
W32/Expiro.BG, W32/Patched.Y.gen
4.00%

1 / 68      (PUP)
asksearchasst.exe (Ask Search Assistant by Ask.com)  (28387db3bfa8ed7f1ba742b02b0c09d8)

1 / 68      (PUP)
uninst.exe (Ask Search Assistant by Ask.com)  (deb7d54c58b2064a9d9045c01186a0fb)

1 / 68      (PUP)
saupdate.exe  (465b18045b1237e60df74b7915df1831)

1 / 68      (PUP)
updatetask.exe  (dfa8412897a7875773b8d5fed6701b9a)

1 / 68      (PUP)
UTorrent.dll (UTorrent Addon by Ask.com)  (91e51e590f60aefa4b7efd4d29c9c786)

1 / 68      (PUP)
new9e.tmp.exe (Ask Toolbar by Ask.com)  (5d264f9be3eb60b11d8db2799a6fa791)

1 / 68      (PUP)
tmp0000004976d681fa6281184b  (fa8315f3922a17a312b4ac2a18fb1c47)

1 / 68      (PUP)
tmp00000040868c2cb65cb66e38  (0712b04a7c05804f5fd4b5eafadfa0e3)

1 / 68      (PUP)
UTorrent.dll (UTorrent Addon by Ask.com)  (bf61ab2a17c8a06d7923ae3739bc1015)

1 / 68      (PUP)
asksearchinit.exe (Stand Alone Default Search by Ask.com)  (075d3f7f623d25fa1c7692b70cd641d8)

1 / 68      (PUP)
updatetask.exe  (4b5f5e8f51be2541cd3e066ce175042a)

1 / 68      (PUP)
saupdate.exe  (abac3901427b533b3622608d3a4136df)

2 / 68      (PUP)
GenericAskToolbar.dll (Toolbar by Ask.com)  (f302182f91bffbac4b46396e10f55370)

5 / 68      (PUP)
askBar.dll (Ask.com Toolbar by Ask.com)  (9866ea2c8c4b8507290525be1edce2b6)

1 / 68      (PUP)
tmp0000000a4b008e8634ddb1e5  (2f9a742a38a13e6cc6a6df197028917d)

1 / 68      (PUP)
barsetup.exe (Ask Toolbar by Ask.com)  (d940096306dbe52b31673de0047b4a2a)

1 / 68      (PUP)
a0015971.exe  (f22c7ad17fff325f65e1a2a5bdb788f9)

1 / 68      (PUP)
apntoolbarinstaller.exe  (680f1cb64d961c178b0f020bdbc79cf2)

1 / 68      (PUP)

1 / 68      (PUP)
updatetask.exe  (24447aca2ccf22ade41d837eb3fa86d4)

10 / 68    (PUP)
apntoolbarinstaller.exe (Ask Toolbar by Ask)  (34cd678c43b04e6291dee343ddf0a000)

5 / 68      (PUP)
apnstub.exe (AskStub Application by Ask.com)  (2f7b36673a00562f23f3e9025a5381cf)

5 / 68      (PUP)
apnstub.exe (AskStub Application by Ask.com)  (fae8cfd1cfe6707f647d5a4303352afb)

1 / 68      (PUP)
saupdate.exe  (6383d076514b8c2425291d4b3f5efa2c)

1 / 68      (PUP)
updatetask.exe  (9b44c0c98c8804a713859e881c891beb)

3 / 68      (PUP)
askpopstp.dll (Ask Popup Blocker by Ask.com)  (3bdadb2e4ff0069ceeb3942087d612a1)

1 / 68      (PUP)
taskscheduler.exe  (92162c95c308b9d7f9cb94a138878341)

6 / 68      (PUP)
apnstub.exe (AskStub Application by Ask.com)  (a7da27d293684eb67eff948510c01cf1)

1 / 68      (PUP)
apnic.dll (AskIC Dynamic Link Library by Ask.com)  (e74f2a692f143b58d3d69b8c89a2c2ed)

1 / 68      (PUP)
updatetask.exe  (9ddc0931eda0f2e31c86180cba25b0d3)

 
Latest 30 of 474 files

The certificates below are also signed by Ask.com.

071C9C2CC792BCB19C804C3655D4DE1F  (Jun 02, 2014 to Aug 01, 2016)

10B9E2525844B965BFD1932E5265E605  (Sep 07, 2015 to Jul 31, 2016)

0E92120309E5E292CD4FFE132C48D3D8  (Jan 23, 2014 to Jun 19, 2014)

0965F2AC7236C7E1BDCA44ED139B273A  (Jun 19, 2011 to Jun 18, 2014)

00A14100010020D9D7891D7DD5115F  (Jul 13, 2006 to Jul 13, 2008)

The following publishers (by Authenticode signature organization name) are related.

Remove Ask.com Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to Ask.com by VeriSign, Inc. on June 17, 2008 with the serial number '286f8a30e2eac6965b936f826a05305d'.