PUA.Win32.AskToolbar.CRXN

Step 1

Before doing any scans, Windows 7, Windows 8, Windows 8.1, and Windows 10 users must disable System Restore to allow full scanning of their computers.

Step 2

Note that not all files, folders, and registry keys and entries are installed on your computer during this malware's/spyware's/grayware's execution. This may be due to incomplete installation or other operating system conditions. If you do not find the same files/folders/registry information, please proceed to the next step.

Step 3

Delete this registry value

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
  • URLUpdateInfo = http://www.{BLOCKED}oft.com
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
  • URLInfoAbout = http://www.{BLOCKED}oft.com
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
  • UninstallString = "%Program Files%\Glary Undelete\unins000.exe"
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
  • QuietUninstallString = "%Program Files%\Glary Undelete\unins000.exe" /SILENT
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
  • Publisher = GlarySoft.com
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
  • NoRepair = 1
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
  • NoModify = 1
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
  • InstallLocation = %Program Files%\Glary Undelete\
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
  • InstallDate = {Installation Date}
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
  • Inno Setup: User = {Username}
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
  • Inno Setup: Setup Version = 5.1.11
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
  • Inno Setup: Selected Tasks = desktopicon,quicklaunchicon
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
  • Inno Setup: Icon Group = Glary Undelete
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
  • Inno Setup: Deselected TasksRegData:
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
  • Inno Setup: App Path = %Program Files%\Glary Undelete
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
  • HelpLink = http://www.{BLOCKED}oft.com
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
  • DisplayName = Glary Undelete 1.5.0.232
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
  • URLUpdateInfo = http://{BLOCKED
    }k.com/toolbarv/download.html
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
  • URLInfoAbout = http://www.{BLOCKED}k.com
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
  • UninstallString = "%Program Files%\AskBarDis\unins000.exe"
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
  • QuietUninstallString = "%Program Files%\AskBarDis\unins000.exe" /SILENT
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
  • Publisher = Ask.com
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
  • NoRepair = 1
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
  • NoModify = 1
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
  • InstallLocation = %Program Files%\AskBarDis\
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
  • InstallDate = {Installation Date}
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
  • Inno Setup: User = {Username}
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
  • Inno Setup: Setup Version = 5.2.0
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
  • Inno Setup: Icon Group = (Default)
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
  • Inno Setup: App Path = %Program Files%\AskBarDis
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
  • HelpLink = http://{BLOCKED}sk.com/en/toolbar/toolbarv/faq.html
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
  • DisplayVersion = 4.1.0.2
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
  • DisplayName = Ask Toolbar
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{GUID}
  • (Default) = AskBar BHO
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
  • {GUID} = \x00
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0
  • (Default) = Toolbar 1.0 Type Library
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0
  • (Default) = PopSwatter Control 1.0 Type Library
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0\HELPDIR
  • (Default) = %Program Files%\AskBarDis\bar\bin\
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0\FLAGS
  • (Default) = 0
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0\0\win32
  • (Default) = %Program Files%\AskBarDis\bar\bin\askPopStp.dll
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0\0\win32
  • (Default) = %Program Files%\AskBarDis\bar\bin\askBar.dll
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{GUID}
  • (Default) = IAskISettings
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{GUID}
  • (Default) = IAskIPopSwatterSettings
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{GUID}
  • (Default) = _IAskISettingsEvents
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{GUID}
  • (Default) = _IAskIPopSwatterSettingsEvents
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{GUID}\TypeLib
  • Version = 1.0
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{GUID}\TypeLib
  • (Default) = {GUID}
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{GUID}\ProxyStubClsid
  • (Default) = {GUID}
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{GUID}\ProxyStubClsid32
  • (Default) = {GUID}
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
  • (Default) = Settings Class
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
  • (Default) = PopupBlocker Server Class
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
  • (Default) = Bar Button Class
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
  • (Default) = askBar Installer2
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
  • (Default) = AskBar BHO
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
  • (Default) = Ask ToolbarSettings
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
  • (Default) = Ask Toolbar Quick View
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
  • (Default) = Ask Toolbar
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
  • (Default)RegData:
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\Version
  • (Default) = 1.0
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\VersionIndependentProgID
  • (Default) = AskToolBar.SettingsPlugin
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\VersionIndependentProgID
  • (Default) = AskIBar.PopSwatterSettingsControl
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\VersionIndependentProgID
  • (Default) = AskIBar.PopSwatterBarButton
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\TypeLib
  • (Default) = {GUID}
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\TreatAs
  • (Default) = {GUID}
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\ProgID
  • (Default) = AskToolBar.SettingsPlugin.1
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\ProgID
  • (Default) = AskIBar.PopSwatterSettingsControl.1
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\ProgID
  • (Default) = AskIBar.PopSwatterBarButton.1
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\MiscStatus
  • (Default) = 0
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\MiscStatus\1
  • (Default) = 131473
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\Instance
  • CLSID = {GUID}
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\Instance\InitPropertyBag
  • Url = res://%Program Files%\ASKBAR~1\bar\bin\askBar.dll/105
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\InprocServer32
  • ThreadingModel = Apartment
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\InprocServer32
  • (Default) = %System%\shdocvw.dll
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\InprocServer32
  • (Default) = %Program Files%\AskBarDis\bar\bin\askPopStp.dll
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\InprocServer32
  • (Default) = %Program Files%\AskBarDis\bar\bin\askBar.dll
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskToolBar.SettingsPlugin
  • (Default) = Ask Toolbar Settings Plugin
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskToolBar.SettingsPlugin\CurVer
  • (Default) = AskToolBar.SettingsPlugin.1
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskToolBar.SettingsPlugin\CLSID
  • (Default) = {GUID}
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskToolBar.SettingsPlugin.1
  • (Default) = Ask Toolbar Settings Plugin
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskToolBar.SettingsPlugin.1\CLSID
  • (Default) = {GUID}
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterSettingsControl
  • (Default) = Settings Class
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterSettingsControl\CurVer
  • (Default) = AskIBar.PopSwatterSettingsControl.1
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterSettingsControl\CLSID
  • (Default) = {GUID}
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterSettingsControl.1
  • (Default) = Settings Class
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterSettingsControl.1\CLSID
  • (Default) = {GUID}
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterBarButton
  • (Default) = Bar Button Class
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterBarButton\CurVer
  • (Default) = AskIBar.PopSwatterBarButton.1
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterBarButton\CLSID
  • (Default) = {GUID}
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterBarButton.1
  • (Default) = Bar Button Class
    
• In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterBarButton.1\CLSID
  • (Default) = {GUID}
    
• In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes
  • DefaultScope = {GUID}
    
• In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{GUID}
  • URL = http://{BLOCKED}k.com/toolbarv/askRedirect.jsp?gct=&gc=1&q={searchTerms}&crm=1&toolbar=GLS
    
• In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{GUID}
  • DisplayName = Ask Search
    
• In HKEY_CURRENT_USER\Software\GlarySoft\Glary Utilities
  • Skin = %Program Files%\Glary Undelete\skins\Default\skin.ini
    
• In HKEY_CURRENT_USER\Software\GlarySoft\Glary Utilities
  • Regcode = ########
    
• In HKEY_CURRENT_USER\Software\GlarySoft\Glary Utilities
  • Language = english.lng
    
• In HKEY_CURRENT_USER\Software\GlarySoft\Glary Utilities
  • Date = {Date}
    
• In HKEY_CURRENT_USER\Software\GlarySoft\Glary Utilities\Settings
  • BackupsMax = 60
    
• In HKEY_CURRENT_USER\Software\GlarySoft\Glary Utilities\Settings
  • BackupsDelete = 1
    
• In HKEY_CURRENT_USER\Software\AppDataLow\AskBarDis\bar
  • ToolbarName = GLS
    
• In HKEY_CURRENT_USER\Software\AppDataLow\AskBarDis\bar
  • SAEnabled = 1
    
• In HKEY_CURRENT_USER\Software\AppDataLow\AskBarDis\bar
  • Maximized = 1
    
• In HKEY_CURRENT_USER\Software\AppDataLow\AskBarDis\bar
  • IsInstalled = 0
    
• In HKEY_CURRENT_USER\Software\AppDataLow\AskBarDis\bar
  • Init = 1
    
• In HKEY_CURRENT_USER\Software\AppDataLow\AskBarDis\bar
  • HPOParamRegData:
    
• In HKEY_CURRENT_USER\Software\AppDataLow\AskBarDis\bar
  • FFUpgrade = 0
    
• In HKEY_CURRENT_USER\Software\AppDataLow\AskBarDis\bar
  • FFExtPath = %Application Data%\Mozilla\Firefox\Profiles\{Profile}\extensions\{Random}
    

To delete the registry value this malware/grayware created:

1. Open Registry Editor.
   » For Windows 7 and Server 2008 (R2) users, click the Start button, type regedit in the Search input field then press Enter.
   » For Windows 8, 8.1, 10, and Server 2012 (R2) users, right-click on the lower left corner of the screen, click Run, type regedit in the text box provided, and then press Enter.
2. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Uninstall>Glary Undelete_is1
3. In the right panel, locate and delete the entry:
   URLUpdateInfo = http://www.{BLOCKED}oft.com
4. Again In the right panel, locate and delete the entry:
   URLInfoAbout = http://www.{BLOCKED}oft.com
5. Again In the right panel, locate and delete the entry:
   UninstallString = "%Program Files%\Glary Undelete\unins000.exe"
6. Again In the right panel, locate and delete the entry:
   QuietUninstallString = "%Program Files%\Glary Undelete\unins000.exe" /SILENT
7. Again In the right panel, locate and delete the entry:
   Publisher = GlarySoft.com
8. Again In the right panel, locate and delete the entry:
   NoRepair = 1
9. Again In the right panel, locate and delete the entry:
   NoModify = 1
10. Again In the right panel, locate and delete the entry:
    InstallLocation = %Program Files%\Glary Undelete\
11. Again In the right panel, locate and delete the entry:
    InstallDate = {Installation Date}
12. Again In the right panel, locate and delete the entry:
    Inno Setup: User = {Username}
13. Again In the right panel, locate and delete the entry:
    Inno Setup: Setup Version = 5.1.11
14. Again In the right panel, locate and delete the entry:
    Inno Setup: Selected Tasks = desktopicon,quicklaunchicon
15. Again In the right panel, locate and delete the entry:
    Inno Setup: Icon Group = Glary Undelete
16. Again In the right panel, locate and delete the entry:
    Inno Setup: Deselected TasksRegData: =
17. Again In the right panel, locate and delete the entry:
    Inno Setup: App Path = %Program Files%\Glary Undelete
18. Again In the right panel, locate and delete the entry:
    HelpLink = http://www.{BLOCKED}oft.com
19. Again In the right panel, locate and delete the entry:
    DisplayName = Glary Undelete 1.5.0.232
20. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Uninstall>Ask Toolbar_is1
21. In the right panel, locate and delete the entry:
    URLUpdateInfo = http://{BLOCKED}k.com/toolbarv/download.html l
22. Again In the right panel, locate and delete the entry:
    URLInfoAbout = http://www.{BLOCKED}k.com
23. Again In the right panel, locate and delete the entry:
    UninstallString = "%Program Files%\AskBarDis\unins000.exe"
24. Again In the right panel, locate and delete the entry:
    QuietUninstallString = "%Program Files%\AskBarDis\unins000.exe" /SILENT
25. Again In the right panel, locate and delete the entry:
    Publisher = Ask.com
26. Again In the right panel, locate and delete the entry:
    NoRepair = 1
27. Again In the right panel, locate and delete the entry:
    NoModify = 1
28. Again In the right panel, locate and delete the entry:
    InstallLocation = %Program Files%\AskBarDis\
29. Again In the right panel, locate and delete the entry:
    InstallDate = {Installation Date}
30. Again In the right panel, locate and delete the entry:
    Inno Setup: User = {Username}
31. Again In the right panel, locate and delete the entry:
    Inno Setup: Setup Version = 5.2.0
32. Again In the right panel, locate and delete the entry:
    Inno Setup: Icon Group = (Default)
33. Again In the right panel, locate and delete the entry:
    Inno Setup: App Path = %Program Files%\AskBarDis
34. Again In the right panel, locate and delete the entry:
    HelpLink = http://{BLOCKED}sk.com/en/toolbar/toolbarv/faq.html Delete this registry key
    [ Learn More ]
    [ back ]

    Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry. Before you could do this, you must restart in Safe Mode. For instructions on how to do this, you may refer to this page If the preceding step requires you to restart in safe mode, you may proceed to edit the system registry.

    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
      • URLUpdateInfo
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
      • URLInfoAbout
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
      • UninstallString
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
      • QuietUninstallString
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
      • Publisher
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
      • NoRepair
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
      • NoModify
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
      • InstallLocation
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
      • InstallDate
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
      • Inno Setup: User
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
      • Inno Setup: Setup Version
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
      • Inno Setup: Selected Tasks
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
      • Inno Setup: Icon Group
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
      • Inno Setup: Deselected Tasks
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
      • Inno Setup: App Path
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
      • HelpLink
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
      • DisplayName
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Undelete_is1
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
      • URLUpdateInfo
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
      • URLInfoAbout
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
      • UninstallString
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
      • QuietUninstallString
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
      • Publisher
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
      • NoRepair
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
      • NoModify
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
      • InstallLocation
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
      • InstallDate
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
      • Inno Setup: User
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
      • Inno Setup: Setup Version
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
      • Inno Setup: Icon Group
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
      • Inno Setup: App Path
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
      • HelpLink
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
      • DisplayVersion
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1
      • DisplayName
        
    • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
      • Ask Toolbar_is1
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{GUID}
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
      • {GUID}
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
      • {GUID}
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0\HELPDIR
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0
      • HELPDIR
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0\FLAGS
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0
      • FLAGS
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0\0\win32
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0\0
      • win32
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0
      • 0
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}
      • 1.0
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
      • {GUID}
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{GUID}
      • TypeLib\Version
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{GUID}
      • TypeLib\(Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{GUID}
      • TypeLib
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{GUID}ProxyStubClsid
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{GUID}\ProxyStubClsid32
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{GUID}
      • ProxyStubClsid32
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{GUID}
      • ProxyStubClsid
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{GUID}
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
      • {GUID}
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\VersionIndependentProgID
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
      • VersionIndependentProgID
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\Version
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
      • Version
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\TypeLib
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
      • TypeLib
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\TreatAs
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
      • Programmable
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
      • ProgID\(Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
      • ProgID
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\MiscStatus\1
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\MiscStatus
      • 1
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\MiscStatus
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
      • MiscStatus
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\Instance\InitPropertyBag
      • Url
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\Instance
      • InitPropertyBag
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\Instance
      • CLSID
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
      • Instance
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\InprocServer32
      • ThreadingModel
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\InprocServer32
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
      • InprocServer32
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\Implemented Categories
      • {GUID}
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
      • Implemented Categories
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
      • Control
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
      • {GUID}
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskToolBar.SettingsPlugin\CurVer
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskToolBar.SettingsPlugin
      • CurVer
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskToolBar.SettingsPlugin\CLSID
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskToolBar.SettingsPlugin
      • CLSID
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskToolBar.SettingsPlugin
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskToolBar.SettingsPlugin.1\CLSID
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskToolBar.SettingsPlugin.1
      • CLSID
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskToolBar.SettingsPlugin.1
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes
      • AskToolBar.SettingsPlugin.1
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes
      • AskToolBar.SettingsPlugin
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterSettingsControl\CurVer
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterSettingsControl
      • CurVer
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterSettingsControl
      • CLSID
        
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterSettingsControl
      • CLSID
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterSettingsControl
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterSettingsControl.1\CLSID
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterSettingsControl.1
      • CLSID
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterSettingsControl.1
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes
      • AskIBar.PopSwatterSettingsControl.1
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes
      • AskIBar.PopSwatterSettingsControl
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterBarButton\CurVer
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterBarButton
      • CurVer
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterBarButton\CLSID
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterBarButton
      • CLSID
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterBarButton
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterBarButton.1\CLSID
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterBarButton.1
      • CLSID
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskIBar.PopSwatterBarButton.1
      • (Default)
        
    • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes
      • AskIBar.PopSwatterBarButton.1
        
    • In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\DefaultScope\{GUID}
      • URL
        
    • In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\DefaultScope\{GUID}
      • DisplayName
        
    • In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\DefaultScope
      • {GUID}
        
    • In HKEY_CURRENT_USER\SOFTWARE\GlarySoft\Glary Utilities
      • Skin
        
    • In HKEY_CURRENT_USER\SOFTWARE\GlarySoft\Glary Utilities\Settings
      • BackupsMax
        
    • In HKEY_CURRENT_USER\SOFTWARE\GlarySoft\Glary Utilities\Settings
      • BackupsDelete
        
    • In HKEY_CURRENT_USER\SOFTWARE\GlarySoft\Glary Utilities
      • Settings
        
    • In HKEY_CURRENT_USER\SOFTWARE\GlarySoft\Glary Utilities
      • Regcode
        
    • In HKEY_CURRENT_USER\SOFTWARE\GlarySoft\Glary Utilities
      • Language
        
    • In HKEY_CURRENT_USER\SOFTWARE\GlarySoft\Glary Utilities
      • Date
        
    • In HKEY_CURRENT_USER\SOFTWARE\GlarySoft
      • Glary Utilities
        
    • In HKEY_CURRENT_USER\SOFTWARE
      • GlarySoft
        
    • In HKEY_CURRENT_USER\Software\Classes\CLSID
      • {GUID}
        
    • In HKEY_CURRENT_USER\Software\AppDataLow\AskBarDis\bar
      • ToolbarName
        
    • In HKEY_CURRENT_USER\Software\AppDataLow\AskBarDis\bar
      • SAEnabled
        
    • In HKEY_CURRENT_USER\Software\AppDataLow\AskBarDis\bar
      • Maximized
        
    • In HKEY_CURRENT_USER\Software\AppDataLow\AskBarDis\bar
      • IsInstalled
        
    • In HKEY_CURRENT_USER\Software\AppDataLow\AskBarDis\bar
      • Init
        
    • In HKEY_CURRENT_USER\Software\AppDataLow\AskBarDis\bar
      • HPOParam
        
    • In HKEY_CURRENT_USER\Software\AppDataLow\AskBarDis\bar
      • FFUpgrade
        
    • In HKEY_CURRENT_USER\Software\AppDataLow\AskBarDis\bar
      • FFExtPath
        
    • In HKEY_CURRENT_USER\Software\AppDataLow\AskBarDis
      • bar
        
    • In HKEY_CURRENT_USER\Software\AppDataLow
      • AskBarDis
        
    • In HKEY_CLASSES_ROOT\CLSID\{GUID}
      • TreatAs
        
    • In HKEY_CLASSES_ROOT\CLSID
      • {GUID}
        
    • In HKEY_CLASSES_ROOT
      • AskToolBar.SettingsPlugin.1
        
    • In HKEY_CLASSES_ROOT
      • AskToolBar.SettingsPlugin
        
    • In HKEY_CLASSES_ROOT
      • AskIBar.PopSwatterSettingsControl.1
        
    • In HKEY_CLASSES_ROOT
      • AskIBar.PopSwatterSettingsControl
        
    • In HKEY_CLASSES_ROOT
      • AskIBar.PopSwatterBarButton.1
        
    • In HKEY_CLASSES_ROOT
      • AskIBar.PopSwatterBarButton
        

    To delete the registry key this malware/grayware/spyware created:

    1. Restart your computer in Safe Mode. For instructions on how to do this, you may refer to this page. If the preceding step requires you to restart in safe mode, you may proceed to #2.
    2. Open Registry Editor. To do this:
       » For Windows 7 and Server 2008 (R2) users, click the Start button, type regedit in the Search input field then press Enter.
       » For Windows 8, 8.1, 10, and Server 2012 users, right-click on the lower left corner of the screen, click Run, type regedit in the text box provided, and then press Enter.
    3. In the left panel of the Registry Editor window, double-click the following:
       HKEY_LOCAL_MACHINE>Software>Microsoft>Windows>CurrentVersion>Uninstall>Glary Undelete_is1
    4. Still in the left panel, locate and delete the key:
       URLUpdateInfo
    5. Again Still in the left panel, locate and delete the key:
       URLInfoAbout
    6. Again Still in the left panel, locate and delete the key:
       UninstallString
    7. Again Still in the left panel, locate and delete the key:
       QuietUninstallString
    8. Again Still in the left panel, locate and delete the key:
       Publisher
    9. Again Still in the left panel, locate and delete the key:
       NoRepair
    10. Again Still in the left panel, locate and delete the key:
        NoModify
    11. Again Still in the left panel, locate and delete the key:
        InstallLocation
    12. Again Still in the left panel, locate and delete the key:
        InstallDate
    13. Again Still in the left panel, locate and delete the key:
        Inno Setup: User
    14. Again Still in the left panel, locate and delete the key:
        Inno Setup: Setup Version
    15. Again Still in the left panel, locate and delete the key:
        Inno Setup: Selected Tasks
    16. Again Still in the left panel, locate and delete the key:
        Inno Setup: Icon Group
    17. Again Still in the left panel, locate and delete the key:
        Inno Setup: Deselected Tasks
    18. Again Still in the left panel, locate and delete the key:
        Inno Setup: App Path
    19. Again Still in the left panel, locate and delete the key:
        HelpLink
    20. Again Still in the left panel, locate and delete the key:
        DisplayName
    21. Again Still in the left panel, locate and delete the key:
        HKEY_LOCAL_MACHINE>Software>Microsoft>Windows>CurrentVersion>Uninstall>Ask Toolbar_is1
    22. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>Software>Microsoft>Windows>CurrentVersion>Uninstall>Ask Toolbar_is1
    23. Still in the left panel, locate and delete the key:
        URLInfoAbout
    24. Again Still in the left panel, locate and delete the key:
        UninstallString
    25. Again Still in the left panel, locate and delete the key:
        QuietUninstallString
    26. Again Still in the left panel, locate and delete the key:
        Publisher
    27. Again Still in the left panel, locate and delete the key:
        NoRepair
    28. Again Still in the left panel, locate and delete the key:
        NoModify
    29. Again Still in the left panel, locate and delete the key:
        InstallLocation
    30. Again Still in the left panel, locate and delete the key:
        InstallDate
    31. Again Still in the left panel, locate and delete the key:
        Inno Setup: User
    32. Again Still in the left panel, locate and delete the key:
        Inno Setup: Setup Version
    33. Again Still in the left panel, locate and delete the key:
        Inno Setup: Icon Group
    34. Again Still in the left panel, locate and delete the key:
        Inno Setup: App Path
    35. Again Still in the left panel, locate and delete the key:
        HelpLink
    36. Again Still in the left panel, locate and delete the key:
        DisplayVersion
    37. Again Still in the left panel, locate and delete the key:
        DisplayName
    38. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>Software>Microsoft>Windows>CurrentVersion>Uninstall
    39. Still in the left panel, locate and delete the key:
        Ask Toolbar_is1
    40. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Explorer>Browser Helper Objects>{GUID}
    41. Still in the left panel, locate and delete the key:
        (Default)
    42. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Explorer>Browser Helper Objects
    43. Still in the left panel, locate and delete the key:
        {GUID}
    44. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Internet Explorer>Toolbar
    45. Still in the left panel, locate and delete the key:
        {GUID}
    46. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{GUID}>1.0>HELPDIR
    47. Still in the left panel, locate and delete the key:
        (Default)
    48. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{GUID}>1.0
    49. Still in the left panel, locate and delete the key:
        HELPDIR
    50. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{GUID}>1.0>FLAGS
    51. Still in the left panel, locate and delete the key:
        (Default)
    52. Again Still in the left panel, locate and delete the key:
        FLAGS
    53. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{GUID}>1.0>0>win32
    54. Still in the left panel, locate and delete the key:
        (Default)
    55. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{GUID}>1.0>0
    56. Still in the left panel, locate and delete the key:
        win32
    57. Again Still in the left panel, locate and delete the key:
        0
    58. Again Still in the left panel, locate and delete the key:
        (Default)
    59. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{GUID}
    60. Still in the left panel, locate and delete the key:
        1.0
    61. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib
    62. Still in the left panel, locate and delete the key:
        {GUID}
    63. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{GUID}
    64. Still in the left panel, locate and delete the key:
        TypeLib\Version
    65. Again Still in the left panel, locate and delete the key:
        TypeLib\(Default)
    66. Again Still in the left panel, locate and delete the key:
        TypeLib
    67. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{GUID}ProxyStubClsid
    68. Still in the left panel, locate and delete the key:
        (Default)
    69. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{GUID}>ProxyStubClsid32
    70. Still in the left panel, locate and delete the key:
        (Default)
    71. Again Still in the left panel, locate and delete the key:
        ProxyStubClsid32
    72. Again Still in the left panel, locate and delete the key:
        ProxyStubClsid
    73. Again Still in the left panel, locate and delete the key:
        (Default)
    74. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface
    75. Still in the left panel, locate and delete the key:
        {GUID}
    76. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{GUID}>VersionIndependentProgID
    77. Still in the left panel, locate and delete the key:
        (Default)
    78. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{GUID}
    79. Still in the left panel, locate and delete the key:
        VersionIndependentProgID
    80. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{GUID}>Version
    81. Still in the left panel, locate and delete the key:
        (Default)
    82. Again Still in the left panel, locate and delete the key:
        Version
    83. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{GUID}>TypeLib
    84. Still in the left panel, locate and delete the key:
        (Default)
    85. Again Still in the left panel, locate and delete the key:
        TypeLib
    86. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{GUID}>TreatAs
    87. Still in the left panel, locate and delete the key:
        (Default)
    88. Again Still in the left panel, locate and delete the key:
        Programmable
    89. Again Still in the left panel, locate and delete the key:
        ProgID\(Default)
    90. Again Still in the left panel, locate and delete the key:
        ProgID
    91. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{GUID}>MiscStatus>1
    92. Still in the left panel, locate and delete the key:
        (Default)
    93. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{GUID}>MiscStatus
    94. Still in the left panel, locate and delete the key:
        1
    95. Again Still in the left panel, locate and delete the key:
        (Default)
    96. Again Still in the left panel, locate and delete the key:
        MiscStatus
    97. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{GUID}>Instance>InitPropertyBag
    98. Still in the left panel, locate and delete the key:
        Url
    99. In the left panel of the Registry Editor window, double-click the following:
        HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{GUID}>Instance
    100. Still in the left panel, locate and delete the key:
         InitPropertyBag
    101. Again Still in the left panel, locate and delete the key:
         CLSID
    102. Again Still in the left panel, locate and delete the key:
         Instance
    103. In the left panel of the Registry Editor window, double-click the following:
         HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{GUID}>InprocServer32
    104. Still in the left panel, locate and delete the key:
         ThreadingModel
    105. Again Still in the left panel, locate and delete the key:
         (Default)
    106. Again Still in the left panel, locate and delete the key:
         InprocServer32
    107. In the left panel of the Registry Editor window, double-click the following:
         HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{GUID}>Implemented Categories
    108. Still in the left panel, locate and delete the key:
         {GUID}
    109. Again Still in the left panel, locate and delete the key:
         Implemented Categories
    110. Again Still in the left panel, locate and delete the key:
         Control
    111. Again Still in the left panel, locate and delete the key:
         (Default)
    112. In the left panel of the Registry Editor window, double-click the following:
         HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID
    113. Still in the left panel, locate and delete the key:
         {GUID}
    114. In the left panel of the Registry Editor window, double-click the following:
         HKEY_LOCAL_MACHINE>SOFTWARE>Classes>AskToolBar.SettingsPlugin>CurVer
    115. Still in the left panel, locate and delete the key:
         (Default)
    116. In the left panel of the Registry Editor window, double-click the following:
         HKEY_LOCAL_MACHINE>SOFTWARE>Classes>AskToolBar.SettingsPlugin
    117. Still in the left panel, locate and delete the key:
         CurVer
    118. In the left panel of the Registry Editor window, double-click the following:
         HKEY_LOCAL_MACHINE>SOFTWARE>Classes>AskToolBar.SettingsPlugin>CLSID
    119. Still in the left panel, locate and delete the key:
         (Default)
    120. Again Still in the left panel, locate and delete the key:
         CLSID
    121. Again Still in the left panel, locate and delete the key:
         (Default)
    122. In the left panel of the Registry Editor window, double-click the following:
         HKEY_LOCAL_MACHINE>SOFTWARE>Classes>AskToolBar.SettingsPlugin.1>CLSID
    123. Still in the left panel, locate and delete the key:
         (Default)
    124. In the left panel of the Registry Editor window, double-click the following:
         HKEY_LOCAL_MACHINE>SOFTWARE>Classes>AskToolBar.SettingsPlugin.1
    125. Still in the left panel, locate and delete the key:
         CLSID
    126. Again Still in the left panel, locate and delete the key:
         (Default)
    127. In the left panel of the Registry Editor window, double-click the following:
         HKEY_LOCAL_MACHINE>SOFTWARE>Classes
    128. Still in the left panel, locate and delete the key:
         AskToolBar.SettingsPlugin.1
    129. Again Still in the left panel, locate and delete the key:
         AskToolBar.SettingsPlugin
    130. In the left panel of the Registry Editor window, double-click the following:
         HKEY_LOCAL_MACHINE>SOFTWARE>Classes>AskIBar.PopSwatterSettingsControl>CurVer
    131. Still in the left panel, locate and delete the key:
         (Default)
    132. In the left panel of the Registry Editor window, double-click the following:
         HKEY_LOCAL_MACHINE>SOFTWARE>Classes>AskIBar.PopSwatterSettingsControl
    133. Still in the left panel, locate and delete the key:
         CurVer
    134. Again Still in the left panel, locate and delete the key:
         CLSID
    135. Again Still in the left panel, locate and delete the key:
         CLSID
    136. Again Still in the left panel, locate and delete the key:
         (Default)
    137. In the left panel of the Registry Editor window, double-click the following:
         HKEY_LOCAL_MACHINE>SOFTWARE>Classes>AskIBar.PopSwatterSettingsControl.1>CLSID
    138. Still in the left panel, locate and delete the key:
         (Default)
    139. In the left panel of the Registry Editor window, double-click the following:
         HKEY_LOCAL_MACHINE>SOFTWARE>Classes>AskIBar.PopSwatterSettingsControl.1
    140. Still in the left panel, locate and delete the key:
         CLSID
    141. Again Still in the left panel, locate and delete the key:
         (Default)
    142. Again Still in the left panel, locate and delete the key:
         AskIBar.PopSwatterSettingsControl.1
    143. Again Still in the left panel, locate and delete the key:
         AskIBar.PopSwatterSettingsControl
    144. In the left panel of the Registry Editor window, double-click the following:
         HKEY_LOCAL_MACHINE>SOFTWARE>Classes>AskIBar.PopSwatterBarButton>CurVer
    145. Still in the left panel, locate and delete the key:
         (Default)
    146. In the left panel of the Registry Editor window, double-click the following:
         HKEY_LOCAL_MACHINE>SOFTWARE>Classes>AskIBar.PopSwatterBarButton
    147. Still in the left panel, locate and delete the key:
         CurVer
    148. In the left panel of the Registry Editor window, double-click the following:
         HKEY_LOCAL_MACHINE>SOFTWARE>Classes>AskIBar.PopSwatterBarButton>CLSID
    149. Still in the left panel, locate and delete the key:
         (Default)
    150. Again Still in the left panel, locate and delete the key:
         CLSID
    151. Again Still in the left panel, locate and delete the key:
         (Default)
    152. In the left panel of the Registry Editor window, double-click the following:
         HKEY_LOCAL_MACHINE>SOFTWARE>Classes>AskIBar.PopSwatterBarButton.1>CLSID
    153. Still in the left panel, locate and delete the key:
         (Default)
    154. In the left panel of the Registry Editor window, double-click the following:
         HKEY_LOCAL_MACHINE>SOFTWARE>Classes>AskIBar.PopSwatterBarButton.1
    155. Still in the left panel, locate and delete the key:
         CLSID
    156. Again Still in the left panel, locate and delete the key:
         (Default)
    157. Again Still in the left panel, locate and delete the key:
         AskIBar.PopSwatterBarButton.1
    158. In the left panel of the Registry Editor window, double-click the following:
         HKEY_CURRENT_USER>Software>Microsoft>Internet Explorer>SearchScopes>DefaultScope>{GUID}
    159. Still in the left panel, locate and delete the key:
         URL
    160. Again Still in the left panel, locate and delete the key:
         DisplayName
    161. In the left panel of the Registry Editor window, double-click the following:
         HKEY_CURRENT_USER>Software>Microsoft>Internet Explorer>SearchScopes>DefaultScope
    162. Still in the left panel, locate and delete the key:
         {GUID}
    163. In the left panel of the Registry Editor window, double-click the following:
         HKEY_CURRENT_USER>SOFTWARE>GlarySoft>Glary Utilities
    164. Still in the left panel, locate and delete the key:
         Skin
    165. In the left panel of the Registry Editor window, double-click the following:
         HKEY_CURRENT_USER>SOFTWARE>GlarySoft>Glary Utilities>Settings
    166. Still in the left panel, locate and delete the key:
         BackupsMax
    167. Again Still in the left panel, locate and delete the key:
         BackupsDelete
    168. Again Still in the left panel, locate and delete the key:
         Settings
    169. Again Still in the left panel, locate and delete the key:
         Regcode
    170. Again Still in the left panel, locate and delete the key:
         Language
    171. Again Still in the left panel, locate and delete the key:
         Date
    172. In the left panel of the Registry Editor window, double-click the following:
         HKEY_CURRENT_USER>SOFTWARE>GlarySoft
    173. Still in the left panel, locate and delete the key:
         Glary Utilities
    174. In the left panel of the Registry Editor window, double-click the following:
         HKEY_CURRENT_USER>SOFTWARE
    175. Still in the left panel, locate and delete the key:
         GlarySoft
    176. In the left panel of the Registry Editor window, double-click the following:
         HKEY_CURRENT_USER>Software>Classes>CLSID
    177. Still in the left panel, locate and delete the key:
         {GUID}
    178. In the left panel of the Registry Editor window, double-click the following:
         HKEY_CURRENT_USER>Software>AppDataLow>AskBarDis>bar
    179. Still in the left panel, locate and delete the key:
         ToolbarName
    180. Again Still in the left panel, locate and delete the key:
         SAEnabled
    181. Again Still in the left panel, locate and delete the key:
         Maximized
    182. Again Still in the left panel, locate and delete the key:
         IsInstalled
    183. Again Still in the left panel, locate and delete the key:
         Init
    184. Again Still in the left panel, locate and delete the key:
         HPOParam
    185. Again Still in the left panel, locate and delete the key:
         FFUpgrade
    186. Again Still in the left panel, locate and delete the key:
         FFExtPath
    187. In the left panel of the Registry Editor window, double-click the following:
         HKEY_CURRENT_USER>Software>AppDataLow>AskBarDis
    188. Still in the left panel, locate and delete the key:
         bar
    189. In the left panel of the Registry Editor window, double-click the following:
         HKEY_CURRENT_USER>Software>AppDataLow
    190. Still in the left panel, locate and delete the key:
         AskBarDis
    191. In the left panel of the Registry Editor window, double-click the following:
         HKEY_CLASSES_ROOT>CLSID>{GUID}
    192. Still in the left panel, locate and delete the key:
         TreatAs
    193. In the left panel of the Registry Editor window, double-click the following:
         HKEY_CLASSES_ROOT>CLSID
    194. Still in the left panel, locate and delete the key:
         {GUID}
    195. In the left panel of the Registry Editor window, double-click the following:
         HKEY_CLASSES_ROOT
    196. Still in the left panel, locate and delete the key:
         AskToolBar.SettingsPlugin.1
    197. Again Still in the left panel, locate and delete the key:
         AskToolBar.SettingsPlugin
    198. Again Still in the left panel, locate and delete the key:
         AskIBar.PopSwatterSettingsControl.1
    199. Again Still in the left panel, locate and delete the key:
         AskIBar.PopSwatterSettingsControl
    200. Again Still in the left panel, locate and delete the key:
         AskIBar.PopSwatterBarButton.1
    201. Again Still in the left panel, locate and delete the key:
         AskIBar.PopSwatterBarButton
    202. Close Registry Editor.

Step 5

Search and delete these files

Step 6

Search and delete these folders

Step 7

Scan your computer with your Trend Micro product to delete files detected as PUA.Win32.AskToolbar.CRXN. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check the following Trend Micro Support pages for more information:

• Home and Home Office Support
• Business Support