Search.tb.ask.com: what it is and how to remove it
Search.tb.ask.com is a browser hijacker powered by Mindspark that forces itself as default search engine. Published in 2018, the address no longer resolves as of October 2026.
Facts checked October 5, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
Not sure what changed your search to search.tb.ask.com? An automatic scan checks extensions, programs and browser settings in one pass.
Do it yourself · free Remove Search.tb.ask.com yourself 5 steps, about 15 minutes, no software needed.
Start the steps
Search.tb.ask.com: summary
| Detection names | No Microsoft detection name is known |
|---|---|
| Distribution | Not recorded in the old report |
| Damage | Not recorded in the old report |
| Name | Search.tb.ask.com |
| Type | Search hijacker extension |
| Symptoms | A changed search engine |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 5 more facts
| Evidence | 6 write-ups by security sites; details still limited |
|---|---|
| Search page | search.tb.ask.com |
| Browsers | Chrome, Edge and Firefox |
| First seen | 21 May 2018 |
| Facts checked | 5 October 2026 |
Search.tb.ask.com in 2026: what we found
search.tb.ask.com no longer opens: when we checked on 4 October 2026, the domain no longer resolves.
search.tb.ask.com · desktop Chrome · 4 October 2026
- The addressDoes not open (the domain no longer resolves).
- Copies and old permissionsLook-alike addresses may still use the name, and notifications allowed on the site earlier keep coming from its push service until you remove the permission.
Offline The site itself is gone; the steps below remove what it may have left in your browser.
Is Search.tb.ask.com dangerous? What it collects
Search.tb.ask.com: what changed since our report
May 2018
Our first report
We described Search.tb.ask.com on 21 May 2018.
October 2026
Our new check
The address no longer opened.
From our report of May 2018 · outdated details corrected in October 2026
Search.tb.ask.com is a search engine that might hijack your browsers
Search.tb.ask.com by Mindspark Interactive is a search engine that might appear on Google Chrome or other web browsers after incorrect installation of freeware or shareware.
This search engine is powered by Ask search. However, once its set as your default one, you might find difficulties in setting your preferred search provider as default one.
Due to unexpected appearance, computer users often refer to it as Search.tb.ask.com virus. However, we want to stress out that it is NOT a virus. It might be only called a browser hijacker or potentially unwanted program (PUP) because it causes unwanted changes on the browser, such as:
Despite the surprise of changed browser's startup page, Search.tb.ask.com seems like a useful tool. The main page includes shortcuts to popular email services, social networks, and other sites. However, security specialists do not recommend trusting it because of the capability to redirect to promotional websites.
Another negative aspect of this search engine is its ability to collect and share various information about users, such as demographic data, browsing history, interaction with advertisements, etc. The Privacy Policy also tells that aggregated information might be shared with third-parties.
Additionally, developers of the search engine allow third-party tracking technologies. Therefore, if you keep and use it for a long time, you might expect to see lots of commercial content based on your browsing history. Keep in mind that ads in 2018 were extremely dangerous because they might include malicious content.
Considering the fact that Search.tb.ask.com is categorized as a potentially unwanted program, you should be aware that it might advertise potentially dangerous or harmful content. Therefore, you should not click on any ads and avoid using this search tool.
If you use Ask search on a daily basis, you should remove Search.tb.ask.com and set Ask as your default search engine. It might not be safe to use it from the hijacked browser. We have prepared manual removal instructions at the end of the article.
However, we want to suggest opting for automatic Search.tb.ask.com removal and checking if any suspicious programs were not installed without your knowledge. You can start a free scan with right now or you can update your current antivirus and let it clean this cyber threat for you.
- Search.tb.ask.com or o Home.tb.ask.com set as default homepage or search engine,
- an increased amount of pop-ups, banners or other types of ads,
- installation of unknown browser extensions,
- redirects to promotional websites after clicking links in the results page.


From our report of May 2018 · not reviewed since
More from our earlier report on Search.tb.ask.com
- Browser's homepage, default search engine and new tab URL changed, an increased amount of ads showing up when browsing the web, crashing and freezing web browser.
Check your browser and PC
- Address:
search.tb.ask.com
How to remove Search.tb.ask.com
How to remove Search.tb.ask.com and get your search engine back
Remove the extension first.
The search settings only stay fixed once nothing on the PC can change them again.
Step 1: Remove extensions you did not add
In Chrome open
chrome://extensions, in Edgeedge://extensions, and in Firefox the menu > Extensions and themes.Remove every extension you do not remember adding, especially search, new tab, coupon, PDF, weather or video downloader add-ons. Check every browser and every profile, because each keeps its own list.
If an extension has no Remove button or comes back, a browser policy holds it (see "Managed by your organization" in the procedure below). The pages are the same on Windows 11 and Windows 10.

Chrome on Windows 11: More > Extensions > Manage extensions. Full procedure with screenshots: Remove a browser extension
Step 2: Put the search engine back and delete search.tb.ask.com
In Chrome open Settings > Search engine > Manage search engines and site search, make an engine you trust the default, and delete
search.tb.ask.comfrom the list.In Edge type
search engineinto the search box at the top of Settings and open Manage search engines; in Firefox use Settings > Search. Then check the homepage and the new tab page in the same settings, because hijackers change all three.If search.tb.ask.com is back after a restart, an extension, a program or a policy still sets it, so finish the other steps and check again. The settings are the same on Windows 11 and Windows 10.

Chrome on Windows 11: check Search engine and On startup. Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Step 3: Uninstall programs you did not mean to install
Search.tb.ask.com rarely comes alone: it is usually installed by, or together with, a free program. In Windows 11 open Settings > Apps > Installed apps, in Windows 10 Settings > Apps > Apps & features, and sort by install date.
Uninstall every entry from the day the trouble began that you did not install on purpose, for example a download manager, a converter or a browser you never chose.
Keep drivers and entries from Microsoft, Intel, AMD, NVIDIA or your PC's maker unless you are sure.
Full procedure with screenshots: Uninstall a program or app in Windows On uGetFix
Step 4: Reset the browser
A reset removes what the steps above could miss:
- changed start pages
- site permissions
- hidden settings
In Chrome open Settings > Reset settings > Restore settings to their original defaults; in Edge Settings > Reset settings; in Firefox Help > More troubleshooting information > Refresh Firefox.
Tip: Bookmarks and saved passwords stay, while extensions are turned off and the search engine and start page return to the defaults.
Reset every browser on the PC, including Edge, which Windows 11 and Windows 10 always have.

Chrome on Windows 11: Settings > Reset settings. Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Step 5: Scan the PC, then run the offline scan
A scan finds the parts of Search.tb.ask.com that the manual steps cannot see. In Windows Security > Virus & threat protection > Scan options, start a Full scan and quarantine what it reports.
Follow it with Microsoft Defender Antivirus (offline scan) > Scan now, which restarts the PC and checks the disk while Windows and the malware are not running.
It takes about 15 minutes and works the same in Windows 11 and Windows 10. If either scan finds something, run the full scan again after removal until it comes back clean.

Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Instructions for each browser and system
The detailed steps for every browser and system this guide covers. Open the one you use.
Uninstall from Windows
Follow the guidelines to check the system for unwanted apps:
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.

Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.

Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.

Remove from Google Chrome
Uninstall suspicious extensions that might be associated with Search.tb.ask.com and reset Google Chrome:
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.

Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.

Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.

Remove from Microsoft Edge
Reset Microsoft Edge to get rid of the hijacker:
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.

Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.

Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.

Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.

Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.

Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.

Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.

Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.

Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.

- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.

Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.

Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.

Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.

Delete from macOS
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).

Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.

- Finally, empty the Trash to permanently remove the leftovers.
Reset Internet Explorer
Remove dangerous add-ons:
- Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
- Pick Manage Add-ons.
- You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.

Change your homepage if it was altered:
- Open IE and click on the Gear icon.
- Select Internet Options.
- In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
- Click Apply and then select OK.

Delete temporary files:
- Press on the Gear icon and select Internet Options.
- Under Browsing history, click Delete...
- Select relevant fields and press Delete.

Reset Internet Explorer:
- Click on Gear icon > Internet options and select Advanced tab.
- Select Reset.
- In the new window, check Delete personal settings and select Reset.

Access your website securely from any location
When you work on the domain, site, blog, or different project that requires constant management, content creation, or coding, you may need to connect to the server and content management service more often. The best solution for creating a tighter network could be a dedicated/fixed IP address.
If you make your IP address static and set to your device, you can connect to the CMS from any location and do not create any additional issues for the server or network manager that needs to monitor connections and activities. VPN software providers like can help you with such settings and offer the option to control the online reputation and manage projects easily from any part of the world.
Recover files after data-affecting malware attacks
While much of the data can be accidentally deleted due to various reasons, malware is one of the main culprits that can cause loss of pictures, documents, videos, and other important files.
More serious malware infections lead to significant data loss when your documents, system files, and images get encrypted. In particular, ransomware is is a type of malware that focuses on such functions, so your files become useless without an ability to access them.
Even though there is little to no possibility to recover after file-locking threats, some applications have features for data recovery in the system. In some cases, can also help to recover at least some portion of your data after data-locking virus infection or general cyber infection.
From our report of May 2018 · not reviewed since
The search engine is promoted in freeware bundles: tips to avoid it
When downloading freeware and shareware, you have to be careful and attentive.
Many PUPs might be spreading with the help of it. Additionally, you might be offered to replace your default search engine or homepage. If you overlook such important steps, you might have to deal with various problems.
For avoiding unplanned system changes, you should always keep an eye on the installation of free programs. We highly recommend opting for Custom or Advanced installation method when installing freeware on the system and then monitoring every installation step.
If you see a pre-selected statement saying "I agree to make Search.tb.ask.com my default search engine" or similar, you should remove the tick. Researchers from LesVirus.fr remind that Quick or Recommended settings do not have such option. If you use the latter settings, you allow installing the whole software package.

From our report of May 2018 · not reviewed since
Eliminate Search.tb.ask.com from Google Chrome and other web browsers
To fully remove Search.tb.ask.com, you have to uninstall all programs, files, browser extensions or plugins that you do not remember installing yourself.
The guide below will explain to you where to look up for hijacker-related components and how to get rid of them properly.
However, you can also speed up Search.tb.ask.com removal and check the system with anti-malware or anti-spyware program. After full system scan, your preferred search tool will offer to delete malicious components. We also suggest resetting affected browsers to delete tracking cookies or beacons.
Questions about Search.tb.ask.com
What is Search.tb.ask.com?
Search.tb.ask.com is a search engine created by Mindspark Interactive that may hijack browsers. First reported in 2018, the address no longer resolves as of 2026-10-04. It appears as a default search engine after incorrect installation of freeware or shareware, powered by the Ask search engine.
While presented as a legitimate search tool with shortcuts to email services and social networks, security specialists warn against trusting it due to its capability to redirect to promotional websites and track user data.
Is Search.tb.ask.com a virus?
No, Search.tb.ask.com is not a virus but a browser hijacker and potentially unwanted program. Despite being powered by legitimate Ask search technology, it's classified as PUP due to unauthorized browser modifications.
Users often refer to it as a virus because of sudden, unwanted changes to their browser settings. It functions by making changes to your browser without permission rather than infecting files. However, it shares virus-like traits including persistence and resistance to removal attempts.
How does Search.tb.ask.com change my browser?
Search.tb.ask.com hijacks browsers by setting itself as the default homepage and search engine without user permission. It may also set Home.tb.ask.com as your homepage. Once installed, users experience increased pop-ups, banners, and advertisements from redirects to promotional websites.
The hijacker changes new tab settings and may install unknown browser extensions. Clicking links on the results page leads to redirects to sponsored websites. Despite your attempts to change settings back, the hijacker prevents your preferred search provider from becoming the default.
Where does Search.tb.ask.com come from?
Search.tb.ask.com spreads through bundled freeware and shareware packages, often arriving with download managers, PDF creators, and other free software. During installation, users may see pre-selected statements like 'I agree to make Search.tb.ask.com my default search engine' buried in Quick or Recommended settings.
When users fail to read installation steps carefully, they unknowingly agree to install this hijacker. Researchers emphasize that Quick and Recommended settings provide no option to decline this modification, requiring Advanced or Custom installation selection.
What data does Search.tb.ask.com collect?
Search.tb.ask.com collects demographic data, browsing history, and your interaction with advertisements displayed in search results. The Privacy Policy reveals that aggregated information may be shared with third parties. Additionally, developers allow third-party tracking technologies, meaning external companies can monitor your online behavior.
This collected data is used to create personalized advertisements based on your browsing habits. Extended use of this search engine exposes you to commercially targeted content, and because modern ads may contain malicious code, this data collection poses security risks.
How do I remove Search.tb.ask.com?
First, uninstall all programs you don't remember installing through your Control Panel's Programs list. Open each browser and remove suspicious extensions by navigating to the extensions menu. Reset all affected browsers to their default settings to restore your preferred homepage and search engine.
Clear cookies and browsing data to remove tracking elements. Run a full system scan with updated antivirus software to detect any remaining components. Because hijackers like Search.tb.ask.com can prevent manual removal, automatic scanning and cleaning with security software is the most reliable solution.
How can I avoid installing Search.tb.ask.com?
Always select Custom or Advanced installation settings when installing freeware or shareware instead of accepting Quick or Recommended options. Carefully read each installation step and look for pre-selected statements like 'Make Search.tb.ask.com my default search engine.' Actively deselect any such options before proceeding.
Never skip reading license agreements and Terms of Use sections. Download software only from official sources and avoid third-party distribution sites. Keeping your system updated with security software helps block potential threats before initial infiltration.
Why can't I change my search engine back to my preferred provider?
Search.tb.ask.com hijacks your browser in ways that make changing settings difficult or impossible through normal methods. The hijacker may install components that override browser preferences or use techniques to prevent modification of search settings.
Each time you restart your browser, the hijacker resets your search engine back to Search.tb.ask.com. Manual removal of hijacker components may not be complete, leaving files that reapply these settings. Full removal through security software and browser reset are necessary to regain control over your search engine selection.
Will Fortect remove Search.tb.ask.com?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For Search.tb.ask.com, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- Wikipedia: Computer virus (read October 5, 2026)
- TechTarget: Browser hijacker (browser hijacking) (read October 5, 2026)
- Les Virus: Les Virus (read October 5, 2026)
- FTC: How to recognize, remove and avoid malware (read October 5, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 5, 2026)