Home Malware Programs Adware Adware.ezlife

Adware.ezlife

Posted: May 12, 2010

Adware.ezlife is a potentially unwanted adware program designed to deliver annoying ads to a targeted system. Adware.ezlife also contains an Internet Explorer toolbar which displays links to corrupt sites. Have Adware.ezlife removed with an effective anti-malware program immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %ProgramFiles%\ezLife\ezLife\1.5.4.0\uninstall.exe
    2 %ProgramFiles%\Mozilla Firefox\components\adproFfx.dll
    3 %ProgramFiles%\Mozilla Firefox\components\nsAdproFFx.xpt
    4 %ProgramFiles%\Smart-Ads-Solutions\SmartAds\1.5.4.0\uninstall.exe
    5 %System%\klpyvuut.dll
    6 %System%\ktsihcgt.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}(Default) = "adHlpr.adHlpr.1.0"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\adHlpr.adHlpr\CLSID][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C79EBB3-7DDC-45EF-8808-221AA3ED4597}\InprocServer32][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C79EBB3-7DDC-45EF-8808-221AA3ED4597}\ProgID][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C79EBB3-7DDC-45EF-8808-221AA3ED4597}\TypeLib][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C79EBB3-7DDC-45EF-8808-221AA3ED4597}\VersionIndependentProgID][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C79EBB3-7DDC-45EF-8808-221AA3ED4597}][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E0EC6FBA-F009-3535-95D6-B6390DB27DA1}\InprocServer32][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E0EC6FBA-F009-3535-95D6-B6390DB27DA1}\ProgID][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E0EC6FBA-F009-3535-95D6-B6390DB27DA1}\TypeLib][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E0EC6FBA-F009-3535-95D6-B6390DB27DA1}\VersionIndependentProgID][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E0EC6FBA-F009-3535-95D6-B6390DB27DA1}][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\adHlpr.adHlpr\CurVer]HKEY..\..\..\..{RegistryKeys}(Default) = "%System%\klpyvuut.dll"(Default) = "%System%\ktsihcgt.dll"(Default) = "CscrptXt Object"(Default) = "CscrptXt.CscrptXt"(Default) = "CscrptXt.CscrptXt.1.0"(Default) = "adHlpr Object"(Default) = "adHlpr.adHlpr"(Default) = "adHlpr.adHlpr.1.0"(Default) = "{38061EDC-40BB-4618-A8DA-E56353347E6D}"(Default) = "{A9722A0D-365F-47D2-B70B-37D046316D99}"AppID = ""ThreadingModel = "apartment"
Loading...