Exterminate It! Antimalware


Known threats:700,085 Last Update:March 01, 12:55



Real people who answer queries within an hour!

Please don't get bought out by some large, impersonal company. Your customer service is amazing.

I am recommending your product to everyone I meet.


File: ask-search.xml

Location of ask-search.xml and Associated Malware

Check whether ask-search.xml is present in the following locations:

ask-search.xml file locations that are Windows version independent:

  • C:\Program Files\Mozilla Firefox\browser\searchPlugins\ask-search.xml

Windows 2000, Windows XP, Windows Server 2003 specific ask-search.xml file locations:

  • C:\Documents And Settings\USER_NAME\Application Data\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\searchPlugins\ask-search.xml
  • C:\Documents And Settings\USER_NAME\Application Data\Mozilla\Firefox\Profiles\f62fdshi.default\searchPlugins\ask-search.xml

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific ask-search.xml file locations:

  • C:\Users\USER_NAME\AppData\Roaming\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\searchPlugins\ask-search.xml
  • C:\Users\USER_NAME\AppData\Roaming\Mozilla\Firefox\Profiles\f62fdshi.default\searchPlugins\ask-search.xml

If you find ask-search.xml file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The ask-search.xml file is associated with malware only if found in the locations listed above.


Different Variations of ask-search.xml File^

File SizeFile Md5Last Seen
948BD7E1547F02FC978410E7BE5101C3500Oct 31, 2016
25412F001C3BA8004288301E767900C31779Nov 8, 2016
254737C9E4F96C19A8AB89AB5A066C606785Nov 20, 2016
25294564BFBDB88F7AB7B83FE58F6DC27C21Dec 3, 2016
25449F9BB09CCE43D60F396EB75799069EB1Dec 3, 2016
2552DB898892262DF110CCD2B82DBDA5440DDec 7, 2016
2533000C3E54E19EAB392AC7E20957DF7260Dec 8, 2016
2527953ECAE9C83EC3718926936029FD5FE4Dec 9, 2016
2549B22F56B8B0B5244CD113D4279B435999Dec 19, 2016
255046248A0C9A3E8D217CE97A2F75BD1F01Dec 21, 2016
25505E31B56A69C830BCAAA877DE2C149FA5Dec 21, 2016
2550CDB69D38D3EC2E60875C1B621A199E1EJan 10, 2017
2533EBD9BDE353E2DC0133502282E27E341AJan 13, 2017
25333610905DDEB90C81C024F587204CBA50Jan 15, 2017
2536B2870055D46220F233E65F801954A66FJan 17, 2017
2545F806A81A3C6676C85BAD81B9579D4D87Jan 19, 2017
255061DC6C6BCB20DC5B832AA8239D2F4D35Jan 30, 2017
2463FD0B97606FBB90431A1EB972DA9584A7Jan 30, 2017
2478B1DD8849BB6DBCD584C110A2027CC965Feb 2, 2017
2554AB6CE3CAB4C0FCADE02364B232F3C991Feb 6, 2017
25000B0F8BB568C2935FD9FCD8A25191C447Feb 6, 2017
25339FE88C12934B94109DBC7F38687350E4Feb 9, 2017
25331D066A67CAC0CE83EEF0987C4C105BCFFeb 13, 2017
1967FF5AC5EADA06A990CB198F48512FEB9CFeb 15, 2017
2534BCDADA469C983CD00BA41BAD78CA061EFeb 23, 2017
253305D3235901C77EE38D6BC377654FA717Feb 27, 2017
2533D94F7124DDA3F62C51B9C27E1D2FFF7EMar 10, 2017
2545989AFE065AD74E2E560C43E5C044C52FMar 14, 2017
2018D9E871AA0B46A9B74EF4A260489DB7C6Mar 18, 2017
2533ECF94C42AE7A7613058002D9172EB221Mar 22, 2017
25334B8E2C9F2689D53CAE24E886CF2B4792Mar 26, 2017
25506463E8101E1BD6867B0E517F4C1EF9BAApr 4, 2017
2546B1F151C8F4149B7BE992128684598EADApr 5, 2017
25459D7E6063F056938DA455C7EC6949BF0BApr 10, 2017
2533CB26DC9821EDDD64D8178FA27CD4FB23Apr 17, 2017
2550C43A8B4750E692D13D6042217D134617Apr 18, 2017
2549021162FC8412C0963D69B143BD0825B7Apr 19, 2017
25439B88A33D664ACF9F08611F7628AEB986Apr 19, 2017
25491B1FA279F758F552EE79D2357934BF12Apr 19, 2017
253318927EBF04741ABE5F50D50F998C39B2Apr 22, 2017
25503EA5B3A6E8039AF69ED420683FD310EEApr 24, 2017
255017BA1F075CC4B13D5F4CF84D57671113Apr 25, 2017
191750D58CCD0577B87ED6EFA35F7EF5A649Apr 26, 2017
2529108DDE9F9614213899C213702CED0FADApr 29, 2017
252836A62A019E844A0E29FA83F42ECD450EMay 3, 2017
1028B5D7146CFF69F8C4DDAE13DAA8AA1907May 5, 2017
24674ACA04677DF7FFA8C247DD860D77B892May 11, 2017
2561BCB4AD9C8D0FC5D99502AD410EF3CC6DMay 29, 2017
2470C508119201AB46727D27C9A3109FDE51Jun 3, 2017
25424482AAAD8C5CC7E0C049E4119A727A94Jun 16, 2017
2533DEF21A6E81288BE7C00E1126F9B10605May 8, 2017
25509A63BC2EA0295F953C3F0CECD5BA5879Jul 7, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove ask-search.xml^

  1. To enable deleting the ask-search.xml file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select ask-search.xml and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of ask-search.xml and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of ask-search.xml and Associated Malware.
  6. Notes:

    • The deletion of ask-search.xml will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of ask-search.xml will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a ask-search.xml malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type ask-search.xml. The name of the first found registry value referencing ask-search.xml is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to ask-search.xml, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of ask-search.xml and Associated Malware.