eZula Adware - PrivacyAnywhere Spyware Research Library


	Home / Research


	eZula

Details of the eZula are shown below. This threat can be detected and cleaned using PestBlock Anti-Spyware.


Name:	eZula
Type:	Adware
Risk:
Description:	When installed, eZula will alter all pages viewed in IE, adding extra links to words and phrases targeted by advertisers. These links are unauthorised by the operators of the sites being viewed.

Removal
We do not publish here the MD5 checksums for files. PestBlock Anti Spyware can identify good file from bad more accurately.

Registry Items:

HKEY_CLASSES_ROOT\AppID\AtlBrowser.EXE
HKEY_CLASSES_ROOT\appid\ezulabootexe.exe
HKEY_CLASSES_ROOT\appid\ezulamain.exe
HKEY_CLASSES_ROOT\AppID\{0818D423-6247-11D1-ABEE-00D049C10000}
HKEY_CLASSES_ROOT\appid\{8a044397-5da2-11d4-b185-0050dab79376}
HKEY_CLASSES_ROOT\appid\{c0335198-6755-11d4-8a73-0050da2ee1be}
HKEY_CLASSES_ROOT\AtlBrCon.AtlBrCon
HKEY_CLASSES_ROOT\AtlBrCon.AtlBrCon.1
HKEY_CLASSES_ROOT\BHO.Adware
HKEY_CLASSES_ROOT\BHO.Adware.1
HKEY_CLASSES_ROOT\BHO.Hider
HKEY_CLASSES_ROOT\BHO.Hider.1
HKEY_CLASSES_ROOT\Crypt.Core
HKEY_CLASSES_ROOT\Crypt.Core.1
HKEY_CLASSES_ROOT\ezulaagent.ezulactrlhost
HKEY_CLASSES_ROOT\ezulaagent.ezulactrlhost.1
HKEY_CLASSES_ROOT\ezulaagent.ieobject
HKEY_CLASSES_ROOT\ezulaagent.ieobject.1
HKEY_CLASSES_ROOT\ezulaagent.plugprot
HKEY_CLASSES_ROOT\ezulaagent.plugprot.1
HKEY_CLASSES_ROOT\ezulaagent.toolbarband
HKEY_CLASSES_ROOT\ezulaagent.toolbarband.1
HKEY_CLASSES_ROOT\ezulaagent.webofferhbarobj
HKEY_CLASSES_ROOT\ezulaagent.webofferhbarobj.1
HKEY_CLASSES_ROOT\ezulaboot.installctrl
HKEY_CLASSES_ROOT\ezulaboot.installctrl.1
HKEY_CLASSES_ROOT\ezulabootexe.installctrl
HKEY_CLASSES_ROOT\ezulabootexe.installctrl.1
HKEY_CLASSES_ROOT\ezulafsearcheng.ezulacode
HKEY_CLASSES_ROOT\ezulafsearcheng.ezulacode.1
HKEY_CLASSES_ROOT\ezulafsearcheng.ezulahash
HKEY_CLASSES_ROOT\ezulafsearcheng.ezulahash.1
HKEY_CLASSES_ROOT\ezulafsearcheng.ezulasearch
HKEY_CLASSES_ROOT\ezulafsearcheng.ezulasearch.1
HKEY_CLASSES_ROOT\ezulafsearcheng.popupdisplay
HKEY_CLASSES_ROOT\ezulafsearcheng.popupdisplay.1
HKEY_CLASSES_ROOT\ezulafsearcheng.resulthelper
HKEY_CLASSES_ROOT\ezulafsearcheng.resulthelper.1
HKEY_CLASSES_ROOT\ezulafsearcheng.searchhelper
HKEY_CLASSES_ROOT\ezulafsearcheng.searchhelper.1
HKEY_CLASSES_ROOT\EZulaMain.eZulaPopSearchPipe
HKEY_CLASSES_ROOT\EZulaMain.eZulaPopSearchPipe.1
HKEY_CLASSES_ROOT\ezulamain.ezulasearchpipe
HKEY_CLASSES_ROOT\ezulamain.ezulasearchpipe.1
HKEY_CLASSES_ROOT\ezulamain.trayiconm
HKEY_CLASSES_ROOT\ezulamain.trayiconm.1
HKEY_CLASSES_ROOT\interface\{03022430-abc4-11d0-bde2-00aa00a11953}
HKEY_CLASSES_ROOT\Interface\{037C47A1-A5EB-4A81-82DD-7615EF5E7BEE}
HKEY_CLASSES_ROOT\interface\{07f0a542-47ba-11d4-8a6d-0050da2ee1be}
HKEY_CLASSES_ROOT\interface\{07f0a544-47ba-11d4-8a6d-0050da2ee1be}
HKEY_CLASSES_ROOT\Interface\{0FD6420A-F789-40AE-B921-3983F84E074E}
HKEY_CLASSES_ROOT\interface\{1823bc4b-a253-4767-9cfc-9aca62a6b136}
HKEY_CLASSES_ROOT\interface\{19dfb2ca-9b27-11d4-b192-0050dab79376}
HKEY_CLASSES_ROOT\Interface\{241667A3-EC83-4885-84DD-C2DAAFC1C5EA}
HKEY_CLASSES_ROOT\Interface\{2531390A-1AA6-4F8D-8224-82808F81406E}
HKEY_CLASSES_ROOT\Interface\{25630B50-53C6-4E66-A945-9D7B6B2171FF}
HKEY_CLASSES_ROOT\interface\{27bc6871-4d5a-11d4-8a6d-0050da2ee1be}
HKEY_CLASSES_ROOT\Interface\{370F6327-41C4-4FA6-A2DF-1BA57EE0FBB9}
HKEY_CLASSES_ROOT\Interface\{370F6353-41C4-4FA6-A2DF-1BA57EE0FBB9}
HKEY_CLASSES_ROOT\Interface\{3C7D55D7-AD86-4B05-A7A6-F19C2B3D5758}
HKEY_CLASSES_ROOT\interface\{3d7247dd-5db8-11d4-8a72-0050da2ee1be}
HKEY_CLASSES_ROOT\interface\{3d7247f1-5db8-11d4-8a72-0050da2ee1be}
HKEY_CLASSES_ROOT\interface\{4fd8645f-9b3e-46c1-9727-9837842a84ab}
HKEY_CLASSES_ROOT\Interface\{5679B16C-CD3A-471F-A503-25C528A3AD26}
HKEY_CLASSES_ROOT\interface\{58359012-bf36-11d3-99a2-0050da2ee1be}
HKEY_CLASSES_ROOT\Interface\{788C6F6E-C2EA-4A63-9C38-CE7D8F43BCE4}
HKEY_CLASSES_ROOT\Interface\{78BCF936-45B0-40A7-9391-DCC03420DB35}
HKEY_CLASSES_ROOT\interface\{7edc96e1-5dd3-11d4-b185-0050dab79376}
HKEY_CLASSES_ROOT\Interface\{89E9F6CF-6F80-4C5E-B8E8-78E5A6B5D3BF}
HKEY_CLASSES_ROOT\interface\{8a0443a2-5da2-11d4-b185-0050dab79376}
HKEY_CLASSES_ROOT\interface\{8ebb1743-9a2f-11d4-8a7e-0050da2ee1be}
HKEY_CLASSES_ROOT\Interface\{955CBF48-4313-4B1F-872B-254B7822CCF2}
HKEY_CLASSES_ROOT\Interface\{994A0535-B09C-4D1C-AA4A-2F76002349B1}
HKEY_CLASSES_ROOT\Interface\{9CFA26C2-81DA-4C9D-A501-F144A4A000FA}
HKEY_CLASSES_ROOT\Interface\{BA2A20E0-2476-43BB-BCC8-BFEE2419B293}
HKEY_CLASSES_ROOT\interface\{c03351a3-6755-11d4-8a73-0050da2ee1be}
HKEY_CLASSES_ROOT\interface\{c4fee4a6-4b8b-11d4-8a6d-0050da2ee1be}
HKEY_CLASSES_ROOT\Interface\{D0C1545E-61E1-40D5-8F8C-37D4E7758275}
HKEY_CLASSES_ROOT\Interface\{DDA9619F-F00E-4B40-AA4D-94A218773C61}
HKEY_CLASSES_ROOT\interface\{ef0372dc-f552-11d3-8528-0050dab79376}
HKEY_CLASSES_ROOT\interface\{ef0372de-f552-11d3-8528-0050dab79376}
HKEY_CLASSES_ROOT\Interface\{EFA52460-8822-4191-BA38-FACDD2007910}
HKEY_CLASSES_ROOT\Le.Toy24
HKEY_CLASSES_ROOT\Le.Toy24.1
HKEY_CLASSES_ROOT\ONONE.Thegimp
HKEY_CLASSES_ROOT\ONONE.Thegimp.1
HKEY_CLASSES_ROOT\TypeLib\{07f0a536-47ba-11d4-8a6d-0050da2ee1be}
HKEY_CLASSES_ROOT\TypeLib\{083fa8f4-84f4-11d4-8a77-0050da2ee1be}
HKEY_CLASSES_ROOT\TypeLib\{370F6327-41C4-4FA6-A2DF-1BA57EE0FBB9}
HKEY_CLASSES_ROOT\TypeLib\{3d7247d1-5db8-11d4-8a72-0050da2ee1be}
HKEY_CLASSES_ROOT\TypeLib\{4a954c6b-6946-40cf-b211-62385cdb85f9}
HKEY_CLASSES_ROOT\TypeLib\{4DFD0B10-93DB-4D7E-9B34-3D92CA493BE4}
HKEY_CLASSES_ROOT\TypeLib\{547DDE29-2299-4C8F-B613-DA17A62CF102}
HKEY_CLASSES_ROOT\TypeLib\{58359011-bf36-11d3-99a2-0050da2ee1be}
HKEY_CLASSES_ROOT\TypeLib\{68C93759-CAD1-465F-A320-4C2728003E08}
HKEY_CLASSES_ROOT\TypeLib\{82910CE3-D86A-435A-A519-6A8C369855D3}
HKEY_CLASSES_ROOT\TypeLib\{8a044396-5da2-11d4-b185-0050dab79376}
HKEY_CLASSES_ROOT\TypeLib\{9CFA26C0-81DA-4C9D-A501-F144A4A000FA}
HKEY_CLASSES_ROOT\TypeLib\{9cfa26c1-81da-4c9d-a501-f144a4a000fa}
HKEY_CLASSES_ROOT\TypeLib\{BAF13496-8F72-47A1-9CEE-09238EFC75F0}
HKEY_CLASSES_ROOT\TypeLib\{c0335197-6755-11d4-8a73-0050da2ee1be}
HKEY_CLASSES_ROOT\TypeLib\{FDB10602-AA12-4E76-AAE2-2B328A3E950A}
HKEY_CLASSES_ROOT\WebOfferBar.WebOfferBarObj
HKEY_CLASSES_ROOT\WebOfferBar.WebOfferBarObj.1
HKEY_CURRENT_USER\software\ezula
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\EARN
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\ezmmod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\eZWO
HKEY_CURRENT_USER\Software\TopText
HKEY_CURRENT_USER\Software\Web Offer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Bit1ocker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Netstat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Webext
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app management\arpcache\ezula
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\ezstub.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\ezulaboot.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls\ezstub.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls\ezulaboot.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\ezula
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\TopText
HKEY_LOCAL_MACHINE\Software\Microsoft\windows\currentversion\uninstall\web offer
HKEY_USERS\.default\software\ezula
HKEY_CLASSES_ROOT\Flex.FlexBHO
HKEY_CLASSES_ROOT\Flex.FlexBHO.1
HKEY_CLASSES_ROOT\Flex.FlexHide
HKEY_CLASSES_ROOT\Flex.FlexHide.1

News for Jul 19, 2008

New Version!
PestBlock version 4.1. Many new featured, bugfixes. Download new version today! Learn More...

	Download Demo Version
	Buy Now!

Buy Online

	Online Store



	Discount Pricing

Spyware Research

Browse our Spyware Research Center.

	Spyware Research

Free Newsletter

Sign up for our free product newsletter today and get informed about new updates and releases by email. You will also receive the latest discounts and offers for our products!

	Click Here to Sign Up