ezCyberSearch

ezCyberSearch is an IE toolbar that displays pop ads as well as hijacks Internet Explorer's search features. It displays pop ads as well as hijacks Internet Explorer's search features. Linked to EZCYBERSEARCH.com, 50cents.com, 50centlyrics.com. EZCYBERSEARCH is related to AllCyberSearch, GoCyberSearch and TinyBar, which now all have become CoolWebSearch.0

General information:

Malware Name:	ezCyberSearch
Malware Type:	Adware
Company Name:	EZCyberSearch
Company URL:	http://www.ezcybersearch.com/
Threat Level:	Elevated Risk
Operating System:	WIN XP
Installation Type:	Installed through ActiveX
Operation:	Time of After Installation.

Company Description:

EzCyberSearch is a Browser Helper Object (BHO), an application (like the Goggle toolbar) that works within and augments Web browsers. It displays ads on computer without asking permission. EZCyberSearch is a generic search toolbar for Internet Explorer. It records personal data.

Spyware Description:

Characteristics/Symptoms:

-> Displays third-party advertising on the computer -> Tracks browsing habits -> Degrade the performance and stability of the computer. -> Bundled with other adware 0

Additional information might be found here:

	Search at Google for ezCyberSearch
	Search at Bing for ezCyberSearch
	Search at Yahoo for ezCyberSearch

Processes Running:

File information Created after Installation:

File Location	Size (Bytes)	Type
C:\WINDOWS\system32\pics\ebay.gif	854	GIF Image
C:\WINDOWS\system32\pics\fitness1.gif	150	GIF Image
C:\WINDOWS\system32\pics\games.gif	265	GIF Image

Folder information Created after Installation:

Folder Location

Registry information Created after Installation:

Main Registry Key	Sub Registry Key	Key Value Name
HKEY_CURRENT_USER	\software\eeee	showbar
HKEY_CURRENT_USER	\software\microsoft\internet explorer\toolbar\webbrowser	{09860ded-a434-49ea-ad61-427ef7b7f214}
HKEY_LOCAL_MACHINE	\software\microsoft\internet explorer\toolbar	{09860ded-a434-49ea-ad61-427ef7b7f214}