Home Articles Spyware Research Support Scan Now Purchase F.A.Q.

Hijacker/Search Hijacker/Aze Search

Alias: SimpleBar Toolbar, Aze Search Toolbar

Description: Aze Search Toolbar modifies the hosts and hijacks the following Domains to the following IP addresses:

Threat type:

Hijacker - A Hijacker is a software application that takes control of your browser's settings. Usually it changes your home page and redirects it to some unknown site or modifies your search settings. It prevents you from changing back your browser's settings. An infected browser usually operates much slower.

Search Hijacker - A Search Hijacker is a software application that takes control of your browser's default search engine. The search results may not necessarily be the best fit as those usually come from paid advertisements, as issued to you by the Hijacker authors. Search hijackers prevent you from changing your browser's default search engine, and they tend to slow down PC performance.


Advice: Remove This is a very high risk threat and should be removed immediately as to prevent harm to your computer or your privacy.

Detection:
SpyNoMore detects Hijacker/Search Hijacker/Aze Search: Yes

Threat risk: High Risk
SpyNoMore AntiSpyware: Remove Aze Search, Aze Search Remover
Very dangerous malware. Can log user's keyboard activity and take snapshots of the user's screen. Uses stealth installation and removal is very difficult. Category includes spyware programs, adware programs and trojans.

Symptoms:

Hijacker/Search Hijacker/Aze Search Signature Details: The following information includes some of the standard signatures associated with this spyware threat. Please do not attempt to manually remove these items from your computer; Removing these items incorrectly or partially can cause your computer to experience critical errors, prevent your computer from restarting or cause loss of Internet connectivity. Should you be infected with Hijacker/Search Hijacker/Aze Search, you can clean your computer by downloading SpyNoMore now.

Running Process Signatures:
N/A

File Signatures:
%FAVORITES%\favorites\dating\free single chat.url
%FAVORITES%\favorites\viagra.url
%FAVORITES%\favorites\dating\russian dating.url
%FAVORITES%\favorites\dating\xxx chat.url
%DESKTOPDIRECTORY%\spyware remover.url
%FAVORITES%\favorites\money\loan.url
%FAVORITES%\favorites\games.url
%FAVORITES%\favorites\money\job search.url
%FAVORITES%\favorites\money\credit cards.url
%FAVORITES%\software\full downloads.url
%FAVORITES%\shopping\gift shopping\wholesale.url
%FAVORITES%\favorites\music and movies\melody to mobile.url
%FAVORITES%\favorites\money\home mortgage.url
%FAVORITES%\favorites\music and movies\movies.url
%FAVORITES%\shopping\gift shopping\candles.url
%FAVORITES%\shopping\gift shopping\gift clock.url
%FAVORITES%\favorites\computer privacy\firewalls.url
%FAVORITES%\favorites\music and movies\soundtracks.url
%FAVORITES%\shopping\knife.url
%DESKTOPDIRECTORY%\casino.url
%FAVORITES%\favorites\computer security.url
%FAVORITES%\favorites\domain names.url
%FAVORITES%\favorites\dating.url
%FAVORITES%\pharmacy\lipitor.url
%FAVORITES%\favorites\dating\free gay dating.url
%FAVORITES%\shopping\promotional products.url
%FAVORITES%\favorites\dating\sex contacts.url
%FAVORITES%\favorites\computer privacy\proxy list.url
%DESKTOPDIRECTORY%\adult.url
%FAVORITES%\shopping\cigars.url
%FAVORITES%\pharmacy\crestor.url
%FAVORITES%\favorites\online pharmacy.url
%FAVORITES%\favorites\computer privacy\computer security.url
%FAVORITES%\pharmacy\levitra.url
%FAVORITES%\shopping\office supplies.url
%FAVORITES%\favorites\humor.url
%FAVORITES%\favorites\music and movies\instrumental music.url
%WINDOWS%\downloaded program files\azesearch.inf
%FAVORITES%\favorites\computer privacy\computer privacy.url
%FAVORITES%\favorites\money\debt consolidation.url
%FAVORITES%\favorites\sex personals.url
%FAVORITES%\favorites\dating\single girls.url
%FAVORITES%\favorites\music and movies\artists.url
%FAVORITES%\shopping\cds.url
%FAVORITES%\favorites\web hosting.url
%FAVORITES%\pharmacy\tramadol.url
%FAVORITES%\software\cheats and trainers.url
%FAVORITES%\pharmacy\zoloft.url
%FAVORITES%\favorites\dating\sex personals.url
%FAVORITES%\favorites\money\money.url
%FAVORITES%\favorites\music and movies\top10 mp3.url
%FAVORITES%\favorites\adware.url
%FAVORITES%\favorites\money\personal finance.url
%FAVORITES%\favorites\spyware remover.url
%FAVORITES%\shopping\gift shopping\sportswear.url
%FAVORITES%\favorites\dating\sex cruise.url
%FAVORITES%\favorites\finance.url
%FAVORITES%\favorites\money\business.url
%FAVORITES%\shopping\gift shopping\wine.url
%FAVORITES%\shopping\label.url
%FAVORITES%\pharmacy\paxil.url
%FAVORITES%\shopping\battery.url
%FAVORITES%\pharmacy\zocor.url
%FAVORITES%\pharmacy\xanax.url
%FAVORITES%\favorites\dating\brides.url
%FAVORITES%\favorites\money\stocks.url
%FAVORITES%\pharmacy\neurontin.url
%WINDOWS%\system32\azesearch.xml
%FAVORITES%\software\find cracks.url
%FAVORITES%\pharmacy\carisoprodol.url
%FAVORITES%\favorites\cars.url
%WINDOWS%\system32\shopping.ico
%FAVORITES%\favorites\music and movies\mp3 players.url
%PROFILE%\recent\aze search.lnk
%WINDOWS%\system32\azesearch.ocx
%FAVORITES%\shopping\diamonds.url
%FAVORITES%\favorites\dating\free mature dating.url
%WINDOWS%\system32\spywareremoval.ico
%FAVORITES%\pharmacy\phentermine.url
%WINDOWS%\system32\iasadm.dll
%FAVORITES%\favorites\dating\russian girls.url
%FAVORITES%\pharmacy\water phentermine.url
%FAVORITES%\pharmacy\cialis.url
%FAVORITES%\favorites\music and movies\radio.url
%WINDOWS%\system32\azesearch3.ocx
%WINDOWS%\system32\azesearch2.ocx
%FAVORITES%\shopping\shades.url
%FAVORITES%\favorites\dating\free teen dating.url
%DESKTOPDIRECTORY%\shopping.url
%FAVORITES%\software\crackspider.url
%FAVORITES%\shopping\gift shopping\gift shopping.url
%FAVORITES%\favorites\weather.url
%WINDOWS%\system32\adult.ico
%FAVORITES%\software\cracks and serials.url
%FAVORITES%\favorites\movies.url
%FAVORITES%\pharmacy\online pharmacy.url
%FAVORITES%\favorites\music and movies\music.url
%FAVORITES%\shopping\cars.url
%FAVORITES%\favorites\money\banks.url
%FAVORITES%\favorites\dating\chat.url
%FAVORITES%\favorites\music and movies\dvd players.url
%WINDOWS%\system32\azesearch2.xml
%FAVORITES%\favorites\computer privacy\pc cleaner.url
%FAVORITES%\favorites\dating\free dating.url
%FAVORITES%\shopping\gift shopping\perfume.url
%FAVORITES%\favorites\music and movies\mp3.url
%FAVORITES%\favorites\sports.url
%WINDOWS%\system32\azesearch.bmp
%FAVORITES%\favorites\money\mutual funds.url
%FAVORITES%\favorites\music and movies\midi.url
%FAVORITES%\favorites\music and movies\video.url
%FAVORITES%\favorites\computer privacy\spyware remover.url
%FAVORITES%\shopping\jewelry.url
%FAVORITES%\pharmacy\celebrex.url
%FAVORITES%\favorites\money\investing.url
%FAVORITES%\favorites\computer privacy\norton antivirus.url
%FAVORITES%\shopping\gift shopping\boss gift.url
%FAVORITES%\favorites\music and movies\music albums.url
%FAVORITES%\shopping\bed.url
%FAVORITES%\favorites\music and movies\lyrics.url
%FAVORITES%\favorites\computer privacy\virus scanner.url
%FAVORITES%\favorites\dating\adult datings.url
%FAVORITES%\shopping\gift shopping\golf.url
%FAVORITES%\shopping\gifts.url
%FAVORITES%\shopping\contact lens.url
%FAVORITES%\shopping\notebooks.url
%DESKTOPDIRECTORY%\imagemagick.url
%FAVORITES%\software\spyware remover.url
%FAVORITES%\favorites\dating\dating.url
%FAVORITES%\shopping\gift shopping\flowers.url
%FAVORITES%\favorites\computer privacy\antivirus.url
%FAVORITES%\shopping\cigarettes.url
%FAVORITES%\favorites\music and movies\music charts.url
%FAVORITES%\favorites\money\trading.url
%FAVORITES%\favorites\money\finance.url


Registered Dll (Dynamic Link Library) Signatures:
N/A

Folder Signatures:
%FAVORITES%\adult
%FAVORITES%\gambling

Registry Signatures:
HKCR\inferface\{636ff82a-830a-42ea-938b-6dc78b2ac30c}
HKLM\software\azesearchco
HKLM\software\microsoft\windows\currentversion\explorer\browser helper objects\{f65b197f-8260-4d52-909a-f70118e646eb}
HKCU\software\microsoft\internet explorer\main\bandrest
HKCR\interface\{636ff82a-830a-42ea-938b-6dc78b2ac30c}
HKLM\software\azentretienco
HKLM\software\microsoft\internet explorer\toolbar\{a19ef336-01d4-48e6-926a-fe7e1c747aed}
HKLM\software\microsoft\windows\currentversion\explorer\browser helper objects\{0d2def3a-f4f1-42ec-ac4f-132e7ba6e292}
HKCR\addressbar.loader.1
HKCR\clsid\{f65b197f-8260-4d52-909a-f70118e646eb}
HKCR\azentretien.loader
HKCU\software\microsoft\internet explorer\main\conc
HKLM\software\loaderco
HKCR\clsid\{a19ef336-01d4-48e6-926a-fe7e1c747aed}
HKCR\addressbar.loader
HKLM\software\policies\avenue media
HKLM\software\microsoft\windows\currentversion\explorer\browser helper objects\{da7ff3f8-08be-4cac-bc00-94d91c6ae7f4}
HKCR\typelib\{d8bd4ded-5bb2-4d4e-9a6a-f10244fed7d6}
HKCR\azentretien.loader.1
HKCR\typelib\{dea43ce3-d57b-45f6-a4d1-110e652ced11}
HKCR\clsid\{b1c27ec4-d176-403e-a0ab-8a42332fcaeb}
HKCR\interface\{a55c3ba7-db1e-4652-867e-055ceafe8018}
HKCR\clsid\{ba048011-957f-4ba0-a804-62c28d96f878}
HKCR\interface\{ef77d50b-5767-4e0e-a3a4-098670025f1d}
HKCR\clsid\{da7ff3f8-08be-4cac-bc00-94d91c6ae7f4}
HKCR\typelib\{42fc3840-020c-4e93-a34c-4df1a6330fbb}
HKCR\interface\{38252777-2500-456e-8b3d-a55850306da2}
HKCR\clsid\{0d2def3a-f4f1-42ec-ac4f-132e7ba6e292}
HKLM\software\microsoft\code store database\distribution units\{d7bf3304-138b-4dd5-86ee-491bb6a2286c}


SpyNoMore Collected Residual File Signatures:
N/A


See Also:
Downloader/Small.aeb
Dialer/Agent.ac
Hacker Tool/Trojan-Proxy.Win32.Sobit.c
Adware/SearchMiracle.EliteBar
Downloader/TSUpdate.f
Downloader/TSUpdate.i
Adware/ESyndicate
Downloader/Agent.cu
Downloader/IstBar.ha
Backdoor/Adbreak.d

Spyware Removal Home | Support | F.A.Q. | Contact Us | Spyware Removal Database | Privacy Policy | Site Map
Copyright © 2005-2008 Illysoft LLC