PUP.Optional.ActiveSearchBar
ThreatDown is now the name of the Malwarebytes line of business products. References to Malwarebytes below reflect the amazing technology used to first identify the threat.
Short bio
PUP.Optional.ActiveSearchBar is Malwarebytes detection name for a potentially unwanted program that hijacks the search queries on Chrome and Edge.
Type of infection
The browser extension gets force installed by a PowerShell script that gets triggered by a Scheduled Task every 4 hours.
Malicious behavior
Users will notice a browser extension that they can’t remove in the usual way. They will see the notifications that tell them their browser is managed.
Protection
PUP.Optional.ActiveSearchBar is a “removal only” detection name. Malwarebytes users are protected by the web protection module that blocks the domains that host the extensions and the scripts they use.
Home remediation
Malwarebytes can detect and remove PUP.Optional.ActiveSearchBar without further user interaction.
- Please download Malwarebytes to your desktop.
- Double-click MBSetup.exe and follow the prompts to install the program.
- When your Malwarebytes for Windows installation completes, the program opens to the Welcome to Malwarebytes screen.
- Click on the Get started button.
- Click Scan to start a Threat Scan.
- Click Quarantine to remove the found threats.
- Reboot the system if prompted to complete the removal process.