Home Articles Spyware Research Support Scan Now Purchase F.A.Q.

Top 25 Spyware:

1.	Zlob Trojan
2.	Vundo Trojan
3.	AntiSpyCheck
4.	homesiteurls.com
5.	otherhomepage.com
6.	homepagefile.com
7.	AntiVirus2009
8.	UltimateAntivirus
9.	VirusHeat
10.	MS Antivirus
11.	WinSpyKiller
12.	Win32.Netsky
13.	W32.ExpDwnldr
14.	Virus Burst
15.	ProtectionBar
16.	WinAntiVirus
17.	AntiviralGolden
18.	System Doctor
19.	SpyHeal
20.	DNS Changer
21.	Virus Blast
22.	Trojan.Win32.CP4000
23.	onlinestability.com
24.	Trojan.FakeAlert
25.	Troj.SystemAlert

About Spyware
Glossary

Latest Detections

Adware/BHO/Toolbar/Adware-Ezula

Alias: iLookup, Ezula TopText, Adware/eZula, Adware-Ezula

Description: Adware/BHO/Toolbar/Adware-Ezula is an adware and Internet Explorer plugin. It alters all pages viewed in IE, adding extra links to viewed web pages. These links are unauthorised by the operators of the sites being viewed.

Threat type:

Adware - Adware is a software application which displays advertisements on your computer. Advertisements can be displayed through pop-up / pop-under windows, additional bars or toolbars, underlined links or buttons that appear on a computer screen. Adware applications include additional code that delivers the ads. Adware authors earn money when users click on those ads. Occasionally, adware includes code that tracks user's site visits and passes it to third parties without the user's permission or knowledge.

BHO - A Browser Helper Object (BHO) is a software application that runs automatically whenever you start Internet Explorer. Browser Helper Objects are typically installed by other programs such as toolbar accessories and can track internet usage, create popup windows, display additional information on a viewed page and collect information that is transmitted by you over the internet. Malicious software that exploits this technology can replace banner advertisements with other ads, monitor your actions, change your home page, etc.

Toolbar - A Toolbar is a group of buttons that performs different tasks. Unwanted toolbars are usually installed by adware programs that try to send users to their paying advertisers.

Advice: Remove This is a very high risk threat and should be removed immediately as to prevent harm to your computer or your privacy.

Detection:
SpyNoMore detects Adware/BHO/Toolbar/Adware-Ezula: Yes

Threat risk: Medium Risk

Potentially dangerous malware. May collect sensitive user information and broadcast data back to a server with "opt-out" permission. Category includes most adware programs.

Symptoms:

Adware/BHO/Toolbar/Adware-Ezula connects itself to the internet.

Adware/BHO/Toolbar/Adware-Ezula displays commercial advertisements.

Adware/BHO/Toolbar/Adware-Ezula changes browser settings.

Adware/BHO/Toolbar/Adware-Ezula hides from the user and stays resident in background.

Adware/BHO/Toolbar/Adware-Ezula Signature Details: The following information includes some of the standard signatures associated with this spyware threat. Please do not attempt to manually remove these items from your computer; Removing these items incorrectly or partially can cause your computer to experience critical errors, prevent your computer from restarting or cause loss of Internet connectivity. Should you be infected with Adware/BHO/Toolbar/Adware-Ezula, you can clean your computer by downloading SpyNoMore now.

Running Process Signatures:
N/A

File Signatures:

%PROFILE%\administrator\start menu\programs\toptext ilookup\my preferences.lnk
%WINDOWS%\system32\stub.exe
%PROFILE%\administrator\start menu\programs\toptext ilookup\feedback.url
%WINDOWS%\inetpal\m3tsp8.exe
%PROFILE%\all users\start menu\easy mp3 alarm clock.lnk
%WINDOWS%\system32\ezstub.exe
%WINDOWS%\system\stub.exe
c:\ezsb.exe
%WINDOWS%\downloaded program files\ezug.dll
%PROFILE%\administrator\start menu\programs\earn\earn website.url
%WINDOWS%\system\eabh.dll
%PROFILE%\administrator\start menu\programs\toptext ilookup\help.url
%WINDOWS%\system32\ezstubtt.exe
%COMMON_PROGRAMS%\filesubmit\install adaysdreamss.zip.lnk
%WINDOWS%\system32\eabh.dll
%WINDOWS%\downloaded program files\ezstub.dll
%WINDOWS%\downloaded program files\ezstub.inf
%PROFILE%\administrator\start menu\programs\toptext ilookup\my keywords.lnk
%WINDOWS%\system\ezstub.exe
%PROFILE%\administrator\start menu\programs\toptext ilookup\toptext button show - hide.lnk
%PROFILE%\administrator\start menu\programs\toptext ilookup\readme.url
%WINDOWS%\ezinstall.exe
%DESKTOPDIRECTORY%\great offers!.url
%COMMON_PROGRAMS%\filesubmit\uninstall adaysdreamss.zip.lnk
%WINDOWS%\downloaded program files\ezulaboot.inf
%PROFILE%\local settings\temporary internet files\content.ie5\qitmgpj4\ezinstall[1].exe
%WINDOWS%\oleacc.dll
%WINDOWS%\ezulastb.exe
%WINDOWS%\temporary internet files\content.ie5\qwvm0mqt\ezinstall[1].exe
%WINDOWS%\downloaded program files\ezulaboot.dll
%PROFILE%\local settings\temporary internet files\content.ie5\yse2nxbu\ezulains[1].exe
%DESKTOPDIRECTORY%\easy mp3 alarm clock.lnk
%PROFILE%\local settings\temporary internet files\content.ie5\08jaajmj\ezinstall[1].exe
%WINDOWS%\ezulains.exe

Registered Dll (Dynamic Link Library) Signatures:
N/A

Folder Signatures:
%PROGRAM_FILES%\twister\partner\ezstttub.exe
c:\program\ezula
%WINDOWS%\start menu\programs\toptext ilookup
%PROGRAM_FILES%\easy mp3 alarm clock
%PROGRAM_FILES%\filesubmit\adaysdreamss.zip
%COMMON_PROGRAMS%\toptext ilookup
%PROGRAM_FILES%\go!zilla\ezula
%COMMON_PROGRAMS%\easy mp3 alarm clock
%PROFILE%\start menu\programs\toptext ilookup
%PROGRAM_FILES%\ezula

Registry Signatures:

HKCR\clsid\{c0335197-6755-11d4-8a73-0050da2ee1be}
HKCR\ezulaagent.toolbarband.1
HKCR\typelib\{07f0a536-47ba-11d4-8a6d-0050da2ee1be}
HKLM\software\classes\clsid\{2079884b-6ef3-11d4-8a74-0050da2ee1be}
HKLM\software\classes\ezulaagent.plugprot
HKLM\software\microsoft\windows\currentversion\explorer\browser helper objects\{58359010-bf36-11d3-99a2-0050da2ee1be}
HKCR\ezulaboot.installctrl.1
HKLM\software\classes\typelib\{083fa8f4-84f4-11d4-8a77-0050da2ee1be}
HKLM\software\classes\clsid\{c03351a4-6755-11d4-8a73-0050da2ee1be}
HKCR\typelib\{4a954c6b-6946-40cf-b211-62385cdb85f9}
HKLM\software\classes\ezulaagent.toolbarband
HKLM\software\microsoft\code store database\distribution units\{a041b850-57ad-493f-8fdc-4f1b15c0d16f}
HKCR\clsid\{27bc6871-4d5a-11d4-8a6d-0050da2ee1be}
HKCR\interface\{58359012-bf36-11d3-99a2-0050da2ee1be}
HKCR\ezulaagent.plugprot.1
HKCR\ezulamain.ezulasearchpipe
HKCR\clsid\{3d7247e8-5db8-11d4-8a72-0050da2ee1be}
HKLM\software\classes\ezulafsearcheng.popupdisplay
HKLM\software\classes\ezulaagent.plugprot.1
HKLM\software\classes\ezulafsearcheng.ezulasearch
HKLM\software\classes\ezulaagent.ieobject.1
HKCR\typelib\{c0335197-6755-11d4-8a73-0050da2ee1be}
HKCR\clsid\{c0335198-6755-11d4-8a73-0050da2ee1be}
HKLM\software\classes\typelib\{07f0a536-47ba-11d4-8a6d-0050da2ee1be}
HKLM\software\classes\clsid\{3d7247e8-5db8-11d4-8a72-0050da2ee1be}
HKCR\interface\{3d7247f1-5db8-11d4-8a72-0050da2ee1be}
HKLM\software\classes\ezulamain.trayiconm.1
HKLM\software\classes\ezulamain.ezulasearchpipe
HKLM\software\classes\ezulafsearcheng.popupdisplay.1
HKLM\software\classes\interface\{07f0a542-47ba-11d4-8a6d-0050da2ee1be}
HKLM\software\classes\clsid\{3c368c4a-827f-4f25-9c52-371bdf049912}
HKCR\clsid\{07f0a545-47ba-11d4-8a6d-0050da2ee1be}
HKCR\interface\{4fd8645f-9b3e-46c1-9727-9837842a84ab}
HKCR\ezulabootexe.installctrl.1
HKCR\clsid\{58359011-bf36-11d3-99a2-0050da2ee1be}
HKLM\software\classes\appid\{8a044397-5da2-11d4-b185-0050dab79376}
HKCR\interface\{3d7247dd-5db8-11d4-8a72-0050da2ee1be}
HKCR\clsid\{8a044397-5da2-11d4-b185-0050dab79376}
HKLM\software\classes\clsid\{19dfb2cb-9b27-11d4-b192-0050dab79376}
HKLM\software\classes\interface\{1823bc4b-a253-4767-9cfc-9aca62a6b136}
HKCR\ezulafsearcheng.searchhelper
HKLM\software\classes\typelib\{ef100007-f409-426a-9e7c-cb211f2a9786}
HKLM\software\classes\interface\{7edc96e1-5dd3-11d4-b185-0050dab79376}
HKCR\typelib\{8a044396-5da2-11d4-b185-0050dab79376}
HKLM\software\classes\ezulaagent.ieobject
HKLM\software\classes\clsid\{2babd334-5c3f-11d4-b184-0050dab79376}
HKCR\clsid\{c03351a4-6755-11d4-8a73-0050da2ee1be}
HKLM\software\classes\interface\{4fd8645f-9b3e-46c1-9727-9837842a84ab}
HKLM\software\classes\clsid\{07f0a543-47ba-11d4-8a6d-0050da2ee1be}
HKCR\interface\{07f0a542-47ba-11d4-8a6d-0050da2ee1be}
HKCR\appid\ezulabootexe.exe
HKCR\clsid\{58359010-bf36-11d3-99a2-0050da2ee1be}
HKLM\software\classes\appid\ezulabootexe.exe
HKLM\software\classes\typelib\{58359011-bf36-11d3-99a2-0050da2ee1be}
HKCU\software\ezula
HKCR\ezulafsearcheng.ezulasearch
HKLM\software\classes\interface\{ef0372de-f552-11d3-8528-0050dab79376}
HKLM\software\classes\ezulafsearcheng.resulthelper
HKLM\software\classes\ezulafsearcheng.ezulahash
HKLM\software\classes\interface\{3d7247f1-5db8-11d4-8a72-0050da2ee1be}
HKCR\clsid\{58359012-bf36-11d3-99a2-0050da2ee1be}
HKCR\appid\{c0335198-6755-11d4-8a73-0050da2ee1be}
HKCR\clsid\{3d7247f1-5db8-11d4-8a72-0050da2ee1be}
HKLM\software\microsoft\windows\currentversion\moduleusage\d:/winnt/downloaded program files/ezstub.dll
HKLM\software\classes\ezulaagent.toolbarband.1
HKCR\ezulafsearcheng.ezulacode.1
HKCR\interface\{03022430-abc4-11d0-bde2-00aa00a11953}
HKLM\software\classes\ezulafsearcheng.resulthelper.1
HKCR\clsid\{ezula toptext}
HKCR\clsid\{1823bc4b-a253-4767-9cfc-9aca62a6b136}
HKLM\software\classes\typelib\{3d7247d1-5db8-11d4-8a72-0050da2ee1be}
HKLM\software\classes\interface\{ef0372dc-f552-11d3-8528-0050dab79376}
HKLM\software\classes\interface\{07f0a544-47ba-11d4-8a6d-0050da2ee1be}
HKLM\software\classes\clsid\{c4fee4a7-4b8b-11d4-8a6d-0050da2ee1be}
HKCR\clsid\{19dfb2cb-9b27-11d4-b192-0050dab79376}
HKLM\software\classes\ezulabootexe.installctrl.1
HKCR\clsid\{3d7247de-5db8-11d4-8a72-0050da2ee1be}
HKCR\ezulaagent.toolbarband
HKCR\clsid\{07f0a542-47ba-11d4-8a6d-0050da2ee1be}
HKCR\ezulaboot.installctrl
HKLM\software\classes\interface\{58359012-bf36-11d3-99a2-0050da2ee1be}
HKLM\software\classes\ezulamain.trayiconm
HKCR\clsid\{07f0a543-47ba-11d4-8a6d-0050da2ee1be}
HKCR\typelib\{3d7247d1-5db8-11d4-8a72-0050da2ee1be}
HKLM\software\classes\clsid\{58359010-bf36-11d3-99a2-0050da2ee1be}
HKLM\software\classes\interface\{c4fee4a6-4b8b-11d4-8a6d-0050da2ee1be}
HKCR\ezulaagent.plugprot
HKLM\software\classes\ezulafsearcheng.ezulahash.1
HKLM\software\microsoft\code store database\distribution units\{3d7247de-5db8-11d4-8a72-0050da2ee1be}
HKCR\ezulaagent.ezulactrlhost.1
HKCR\ezulamain.trayiconm
HKCR\software\microsoft\windows\currentversion\explorer\browser helper objects\{58359010-bf36-11d3-99a2-0050da2ee1be}
HKCR\ezulafsearcheng.ezulacode
HKLM\software\classes\ezulafsearcheng.ezulasearch.1
HKCR\appid\ezulamain.exe
HKCR\interface\{1823bc4b-a253-4767-9cfc-9aca62a6b136}
HKLM\software\classes\ezulafsearcheng.ezulacode
HKCR\ezulafsearcheng.popupdisplay.1
HKLM\software\classes\clsid\{07f0a545-47ba-11d4-8a6d-0050da2ee1be}
HKCR\clsid\{8a044396-5da2-11d4-b185-0050dab79376}
HKCR\ezulafsearcheng.ezulahash
HKCR\clsid\{55910916-8b4e-4c1e-9253-cce296ea71eb}
HKCR\ezulaagent.ezulactrlhost
HKCR\appid\{8a044397-5da2-11d4-b185-0050dab79376}
HKCR\ezulamain.ezulasearchpipe.1
HKCR\ezulafsearcheng.resulthelper.1
HKCR\clsid\{c03351a3-6755-11d4-8a73-0050da2ee1be}
HKU\.default\software\ezula
HKLM\software\classes\ezulamain.ezulasearchpipe.1
HKCR\clsid\{c4fee4a6-4b8b-11d4-8a6d-0050da2ee1be}
HKLM\software\microsoft\windows\currentversion\uninstall\ezula
HKCR\clsid\{ef0372dc-f552-11d3-8528-0050dab79376}
HKCR\ezulafsearcheng.ezulahash.1
HKCR\clsid\{8ebb1743-9a2f-11d4-8a7e-0050da2ee1be}
HKCR\interface\{8a0443a2-5da2-11d4-b185-0050dab79376}
HKCR\interface\{19dfb2ca-9b27-11d4-b192-0050dab79376}
HKCR\clsid\{a041b850-57ad-493f-8fdc-4f1b15c0d16f}
HKLM\software\classes\ezulafsearcheng.ezulacode.1
HKCR\clsid\{07f0a536-47ba-11d4-8a6d-0050da2ee1be}
HKLM\software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/ezstub.dll
HKCR\ezulafsearcheng.resulthelper
HKLM\software\classes\ezulaagent.ezulactrlhost.1
HKLM\software\classes\ezulafsearcheng.searchhelper
HKLM\software\classes\interface\{8ebb1743-9a2f-11d4-8a7e-0050da2ee1be}
HKCR\ezulafsearcheng.ezulasearch.1
HKCR\interface\{07f0a544-47ba-11d4-8a6d-0050da2ee1be}
HKCR\clsid\{2079884b-6ef3-11d4-8a74-0050da2ee1be}
HKCR\clsid\{c4fee4a7-4b8b-11d4-8a6d-0050da2ee1be}
HKLM\software\classes\interface\{19dfb2ca-9b27-11d4-b192-0050dab79376}
HKLM\software\classes\appid\{c0335198-6755-11d4-8a73-0050da2ee1be}
HKCR\interface\{27bc6871-4d5a-11d4-8a6d-0050da2ee1be}
HKLM\software\classes\interface\{3d7247dd-5db8-11d4-8a72-0050da2ee1be}
HKCR\clsid\{d290d6e7-bf9d-42f0-9c1b-3bc8ae769b57}
HKLM\software\classes\clsid\{b1dd8a69-1b96-11d4-b175-0050dab79376}
HKCR\ezulafsearcheng.searchhelper.1
HKCR\clsid\{2babd334-5c3f-11d4-b184-0050dab79376}
HKCR\clsid\{07f0a544-47ba-11d4-8a6d-0050da2ee1be}
HKLM\software\classes\clsid\{2306abe4-4d42-11d4-8a6d-0050da2ee1be}
HKLM\software\classes\ezulaagent.ezulactrlhost
HKCR\ezulaagent.ieobject
HKCR\clsid\{b1dd8a69-1b96-11d4-b175-0050dab79376}
HKLM\software\classes\typelib\{c0335197-6755-11d4-8a73-0050da2ee1be}
HKCR\ezulabootexe.installctrl
HKLM\software\classes\clsid\{55910916-8b4e-4c1e-9253-cce296ea71eb}
HKLM\software\microsoft\windows\currentversion\app management\arpcache\web3000 network
HKCR\ezulaagent.ieobject.1
HKLM\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/ezstub.dll
HKCR\clsid\{4fd8645f-9b3e-46c1-9727-9837842a84ab}
HKCR\clsid\{ef0372de-f552-11d3-8528-0050dab79376}
HKCR\ezulafsearcheng.popupdisplay
HKLM\software\classes\clsid\{d290d6e7-bf9d-42f0-9c1b-3bc8ae769b57}
HKLM\software\classes\clsid\{3d7247de-5db8-11d4-8a72-0050da2ee1be}
HKCR\clsid\{083fa8f4-84f4-11d4-8a77-0050da2ee1be}
HKCR\clsid\{7edc96e1-5dd3-11d4-b185-0050dab79376}
HKCR\clsid\{8a0443a2-5da2-11d4-b185-0050dab79376}
HKCR\typelib\{083fa8f4-84f4-11d4-8a77-0050da2ee1be}
HKLM\software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/ezulaboot.dll
HKLM\software\classes\appid\ezulamain.exe
HKLM\software\classes\interface\{27bc6871-4d5a-11d4-8a6d-0050da2ee1be}
HKCR\clsid\{2306abe4-4d42-11d4-8a6d-0050da2ee1be}
HKLM\software\classes\ezulafsearcheng.searchhelper.1
HKCR\ezulamain.trayiconm.1
HKCR\typelib\{58359011-bf36-11d3-99a2-0050da2ee1be}
HKLM\software\classes\interface\{8a0443a2-5da2-11d4-b185-0050dab79376}
HKLM\software\classes\interface\{c03351a3-6755-11d4-8a73-0050da2ee1be}
HKLM\software\classes\ezulabootexe.installctrl

SpyNoMore Collected Residual File Signatures:
N/A