Adware.Sasquor

Short bio

Adware.Sasquor is Malwarebytes’ detection name for a specific¬†adware targeting Windows systems.

Symptoms

Adware.Sasquor uses the method of LSP hijacking to serve advertisements on the affected system. Users may notice advertisements not originating from the sites they are visiting.

Protection

Malwarebytes protects users from Adware.Sasquor by using real-time protection.

block Adware.Sasquor

Malwarebytes blocks Adware.Sasquor

Remediation

Malwarebytes can detect and remove Adware.Sasquor without further user interaction.

  1. Please download Malwarebytes to your desktop.
  2. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
  3. Then click Finish.
  4. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
  5. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
  6. When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  7. Restart your computer when prompted to do so.

It may take an extra reboot to remove the LSP hijack.

Traces/IOCs

Associated file:

local64spl.dll

Related blog content

Changes in the LSP stack
How to remove adware from your PC