Hijacker . Hijacker.Azebar (Summary)
Software Name: Hijacker.Azebar
Company Name:
Product Name: Azebar
Classification: Hijacker
Website: http://azebar.com
Brief:
A toolbar that hijacks browser homepage, favorites, and search settings. Downloads and executes files in the background.
IMPORTANT!
Some of the Hijacker.Hijacker.Azebar components
are listed below. The list is compiled as a reference. The list might
not be complete and it doesn't represent instructions for manual removal.
We DO NOT recommend manual removal. Incorrect removal
of certain software might make your computer unstable or even unusable.
Removal of adware component might affect the related ad-supported software.
If you suspect that you have an unwanted instance of Hijacker.Azebar
installed on your computer we recommend a free
audit of your system with INAC Anti Spyware.
Hijacker.Azebar might create following folders (and inject its files inside
the folders):
- %FAVORITES%\Adult
- %FAVORITES%\Favorites
Hijacker.Azebar might create following files (some of the files might be
loaded in memory while the software is running):
- %SYSTEM%\IASADA.DLL
- %FAVORITES%\Adult Sites\Best Blowjob sites.url
- %FAVORITES%\Adult Sites\Best Bondage Sites.url
- %FAVORITES%\Adult Sites\Best Cheerleaders Sites.url
- %SYSTEM%\zksdfnsuidfsdiu.jhk
- %SYSTEM%\zolk.dll
- %SYSTEM%\ztoolbar.bmp
- %SYSTEM%\ztoolbar.xml
- %SYSTEM%\ztoolber.dll
- %COMMON_DESKTOPDIRECTORY%\Blowjob.lnk
- %COMMON_DESKTOPDIRECTORY%\Car Insurance.lnk
- %COMMON_DESKTOPDIRECTORY%\Cigarettes Discount.lnk
- %COMMON_DESKTOPDIRECTORY%\Credit Card.lnk
- %COMMON_DESKTOPDIRECTORY%\Forex Trading.lnk
- %COMMON_DESKTOPDIRECTORY%\Free Ringtones.lnk
- %COMMON_DESKTOPDIRECTORY%\Gift Ideas.lnk
- %COMMON_DESKTOPDIRECTORY%\Group Sex.lnk
- %COMMON_DESKTOPDIRECTORY%\Home Loan.lnk
- %COMMON_DESKTOPDIRECTORY%\Mp3 Download.lnk
- %COMMON_DESKTOPDIRECTORY%\Online Casino.lnk
- %COMMON_DESKTOPDIRECTORY%\Online Dating.lnk
- %COMMON_DESKTOPDIRECTORY%\Phentermine.lnk
- %COMMON_DESKTOPDIRECTORY%\Play Poker.lnk
- %COMMON_DESKTOPDIRECTORY%\PopUp Blocker.lnk
- %COMMON_DESKTOPDIRECTORY%\Porn Dvd.lnk
- %COMMON_DESKTOPDIRECTORY%\Real Estate.lnk
- %COMMON_DESKTOPDIRECTORY%\Sport Betting.lnk
- %COMMON_DESKTOPDIRECTORY%\Spyware Remover.lnk
- %COMMON_DESKTOPDIRECTORY%\Texas Holdem.lnk
- %COMMON_DESKTOPDIRECTORY%\Viagra.lnk
- %COMMON_STARTMENU%\PopUp Blocker.lnk
- %COMMON_STARTMENU%\Spyware Remover.lnk
- %WINDOWS%\blank.mht
- %WINDOWS%\zsettings.dll
- %SYSTEM%\zsettings.dll
- %WINDOWS%\stchost.exe
- %DESKTOP%\Adult.url
- %DESKTOP%\Casino.url
- %DESKTOP%\Shopping.url
- %DESKTOP%\Spyware Remover.url
- %FAVORITES%\Adult\Adult dating.url
- %FAVORITES%\Adult\Anal Sex.url
- %FAVORITES%\Adult\Animal Sex.url
- %FAVORITES%\Adult\BDSM.url
- %FAVORITES%\Adult\Escorts.url
- %FAVORITES%\Adult\Fetish.url
- %FAVORITES%\Adult\Free Sex.url
- %FAVORITES%\Adult\Group Sex.url
- %FAVORITES%\Adult\Mature Sex.url
- %FAVORITES%\Adult\Penis Enlargement.url
- %FAVORITES%\Adult\Porn Video.url
- %FAVORITES%\Adult\Porn.url
- %FAVORITES%\Adult\Sex.url
- %FAVORITES%\Adult\Single Girls.url
- %FAVORITES%\Adult\Swingers.url
- %FAVORITES%\Adult\Teen Sex.url
- %FAVORITES%\Adult\Gay\Free gay pic.url
- %FAVORITES%\Adult\Gay\Gay dating.url
- %FAVORITES%\Adult\Gay\Gay man.url
- %FAVORITES%\Adult\Gay\Gay Movies.url
- %FAVORITES%\Adult\Gay\Gay personals.url
- %FAVORITES%\Adult\Gay\Gay Porn.url
- %FAVORITES%\Adult\Gay\Gay Sex.url
- %FAVORITES%\Adult\Gay\Gay single.url
- %FAVORITES%\Adult\Gay\Gay teen.url
- %FAVORITES%\Adult\Lesbians\Free Lesbian porn.url
- %FAVORITES%\Adult\Lesbians\Hot Lesbian.url
- %FAVORITES%\Adult\Lesbians\Lesbian kissing.url
- %FAVORITES%\Adult\Lesbians\Lesbian Movies.url
- %FAVORITES%\Adult\Lesbians\Lesbian orgy.url
- %FAVORITES%\Adult\Lesbians\Lesbian porn.url
- %FAVORITES%\Adult\Lesbians\Lesbian Sex.url
- %FAVORITES%\Adult\Lesbians\Lesbian video.url
- %FAVORITES%\Adult\Lesbians\Lesbians.url
- %FAVORITES%\Adult\Lesbians\Teen Lesbian.url
- %FAVORITES%\Adult\Teens\Nude teen.url
- %FAVORITES%\Adult\Teens\Teen chat.url
- %FAVORITES%\Adult\Teens\Teen model.url
- %FAVORITES%\Adult\Teens\Teen porn.url
- %FAVORITES%\Adult\Teens\Teen pussy.url
- %FAVORITES%\Adult\Teens\Teen sex.url
- %FAVORITES%\Adult\Teens\Teens.url
- %FAVORITES%\Adult\Teens\Virgins.url
- %FAVORITES%\Adult\Teens\Young teen.url
- %FAVORITES%\Favorites\Adware.url
- %FAVORITES%\Favorites\Sex Personals.url
- %FAVORITES%\Favorites\Dating\Adult Datings.url
- %FAVORITES%\Favorites\Dating\Free Dating.url
- %FAVORITES%\Favorites\Dating\Free Gay Dating.url
- %FAVORITES%\Favorites\Dating\Free Mature Dating.url
- %FAVORITES%\Favorites\Dating\Free Single Chat.url
- %FAVORITES%\Favorites\Dating\Free Teen Dating.url
- %FAVORITES%\Favorites\Dating\Russian Dating.url
- %FAVORITES%\Favorites\Dating\Russian Girls.url
- %FAVORITES%\Favorites\Dating\Sex Contacts.url
- %FAVORITES%\Favorites\Dating\Sex Cruise.url
- %FAVORITES%\Favorites\Dating\Sex Personals.url
- %FAVORITES%\Favorites\Dating\Single Girls.url
- %FAVORITES%\Favorites\Dating\XXX Chat.url
- %WINDOWS%\adult.ico
- %WINDOWS%\azentretien.dll
- %WINDOWS%\azesearch.bmp
- %WINDOWS%\banner.js
- %WINDOWS%\casino.ico
- %WINDOWS%\shopping.ico
- %WINDOWS%\spywareremoval.ico
- %SYSTEM%\azebar.xml
- %SYSTEM%\AZESEARCH4.OCX
- %FAVORITES%\Adult Sites\Best Domination Sites.url
- %FAVORITES%\Adult Sites\Best Ebony Sites.url
- %FAVORITES%\Adult Sites\Best Fetish Sites.url
- %FAVORITES%\Adult Sites\Best Gay Sites.url
- %FAVORITES%\Adult Sites\Best Group Sex Sites.url
- %FAVORITES%\Adult Sites\Best Hardcore Sites.url
- %FAVORITES%\Adult Sites\Best Lesbian Sites.url
- %FAVORITES%\Adult Sites\Best Mature Sites.url
- %FAVORITES%\Adult Sites\Best Shemales Sites.url
- %FAVORITES%\Adult Sites\Best Up-skirt sites.url
- %FAVORITES%\Adult Sites\Best Voyeur Sites.url
- %FAVORITES%\Adult Sites\Best XXX Cartoons.url
- %FAVORITES%\Adult Sites\Best XXX DVD.url
- %FAVORITES%\Adult Sites\Free hot porno!.url
- %FAVORITES%\Adult Sites\Sex Webcams.url
- %COMMON_DESKTOPDIRECTORY%\Blowjob.url
- %COMMON_DESKTOPDIRECTORY%\Car Insurance.url
- %COMMON_DESKTOPDIRECTORY%\Cigarettes Discount.url
- %COMMON_DESKTOPDIRECTORY%\Credit Card.url
- %COMMON_DESKTOPDIRECTORY%\Forex Trading.url
- %COMMON_DESKTOPDIRECTORY%\Free Ringtones.url
- %COMMON_DESKTOPDIRECTORY%\Gift Ideas.url
- %COMMON_DESKTOPDIRECTORY%\Group Sex.url
- %COMMON_DESKTOPDIRECTORY%\Home Loan.url
- %COMMON_DESKTOPDIRECTORY%\Mp3 Download.url
- %COMMON_DESKTOPDIRECTORY%\Online Casino.url
- %COMMON_DESKTOPDIRECTORY%\Online Dating.url
- %COMMON_DESKTOPDIRECTORY%\Phentermine.url
- %COMMON_DESKTOPDIRECTORY%\Play Poker.url
- %COMMON_DESKTOPDIRECTORY%\PopUp Blocker.url
- %COMMON_DESKTOPDIRECTORY%\Porn Dvd.url
- %COMMON_DESKTOPDIRECTORY%\Real Estate.url
- %COMMON_DESKTOPDIRECTORY%\Sport Betting.url
- %COMMON_DESKTOPDIRECTORY%\Spyware Remover.url
- %COMMON_DESKTOPDIRECTORY%\Texas Holdem.url
- %COMMON_DESKTOPDIRECTORY%\Viagra.url
- %COMMON_STARTMENU%\PopUp Blocker.url
- %COMMON_STARTMENU%\Spyware Remover.url
- %WINDOWS%\efefdfddfsdh.tmp
- %SYSTEM%\zhfsduiu.ghj
- %SYSTEM%\zolker005.dll
- %WINDOWS%\Downloaded Program Files\azesearch.inf
- %WINDOWS%\LastGood\Downloaded Program Files\azesearch.inf
Hijacker.Azebar is often accompanied by the following tracking cookies:
- 12.tnssearch.com
- tnssearch.com
Hijacker.Azebar might create following registry keys (and inject subkeys
and values):
- HKEY_CLASSES_ROOT\TypeLib\{42FC3840-020C-4E93-A34C-4DF1A6330FBB}
- HKEY_CLASSES_ROOT\ZToolbar.activator
- HKEY_CLASSES_ROOT\ZToolbar.activator.1
- HKEY_CLASSES_ROOT\ZToolbar.ParamWr
- HKEY_CLASSES_ROOT\ZToolbar.ParamWr.1
- HKEY_CLASSES_ROOT\ZToolbar.StockBar
- HKEY_CLASSES_ROOT\ZToolbar.StockBar.1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0d2def3a-f4f1-42ec-ac4f-132e7ba6e292}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{da7ff3f8-08be-4cac-bc00-94d91c6ae7f4}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f65b197f-8260-4d52-909a-f70118e646eb}
- HKEY_CLASSES_ROOT\CLSID\{A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EB}
- HKEY_CLASSES_ROOT\CLSID\{B75F75B8-93F3-429D-FF34-660B206D897A}
- HKEY_CLASSES_ROOT\CLSID\{D7BF3304-138B-4DD5-86EE-491BB6A2286C}
- HKEY_CLASSES_ROOT\CLSID\{FFF5092F-7172-4018-827B-FA5868FB0478}
- HKEY_CLASSES_ROOT\Interface\{6DEEE498-08CC-43F0-BCA0-DBB5A25C9501}
- HKEY_CLASSES_ROOT\Interface\{DCFAB192-4A0E-4720-8E24-70D5F0CB8C39}
- HKEY_CLASSES_ROOT\Interface\{F4394F24-163D-430B-B5AF-B68B56031B99}
- HKEY_CLASSES_ROOT\TypeLib\{84C94803-B5EC-4491-B2BE-7B113E013B77}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B75F75B8-93F3-429D-FF34-660B206D897A}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFF5092F-7172-4018-827B-FA5868FB0478}
- HKEY_LOCAL_MACHINE\SOFTWARE\ZSearchCo
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\moto
- HKEY_LOCAL_MACHINE\SOFTWARE\AzEntretienCo
- HKEY_LOCAL_MACHINE\SOFTWARE\AZESearchCo
- HKEY_CLASSES_ROOT\AddressBar.Loader
- HKEY_CLASSES_ROOT\AddressBar.Loader.1
- HKEY_CLASSES_ROOT\AzEntretien.Loader
- HKEY_CLASSES_ROOT\AzEntretien.Loader.1
- HKEY_CLASSES_ROOT\CLSID\{0d2def3a-f4f1-42ec-ac4f-132e7ba6e292}
- HKEY_CLASSES_ROOT\CLSID\{a19ef336-01d4-48e6-926a-fe7e1c747aed}
- HKEY_CLASSES_ROOT\CLSID\{ba048011-957f-4ba0-a804-62c28d96f878}
- HKEY_CLASSES_ROOT\CLSID\{da7ff3f8-08be-4cac-bc00-94d91c6ae7f4}
- HKEY_CLASSES_ROOT\CLSID\{f65b197f-8260-4d52-909a-f70118e646eb}
- HKEY_CLASSES_ROOT\TypeLib\{DEA43CE3-D57B-45F6-A4D1-110E652CED11}
- HKEY_LOCAL_MACHINE\SOFTWARE\LoaderCo
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D7BF3304-138B-4DD5-86EE-491BB6A2286C}
Hijacker.Azebar might create following registry values:
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{a19ef336-01d4-48e6-926a-fe7e1c747aed}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EB}
Hijacker.Azebar might create registry values with following data:
- HKEY_USERS\*\Software\Microsoft\Internet Explorer\Main|*|http://www.top20results.com*
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar|CLSID|{B75F75B8-93F3-429D-FF34-660B206D897A}
- HKEY_USERS\*\Software\Microsoft\Internet Explorer\Main|Start Page|*blank.mht*
Hijacker.Azebar might insert following entries in the HOSTS file:
- 213.219.251.78 www.google.com
- 213.219.251.78 google.com
- 213.219.251.78 www.google.co.uk
- 213.219.251.78 google.co.uk
- 213.219.251.78 www.google.ca
- 213.219.251.78 google.ca
- 213.219.251.78 www.google.es
- 213.219.251.78 google.es
- 213.219.251.78 www.google.de
- 213.219.251.78 google.de
- 213.219.251.78 www.google.fr
- 213.219.251.78 google.fr
- 213.219.251.78 www.google.com.au
- 213.219.251.78 google.com.au
- 213.219.251.79 www.yahoo.com
- 213.219.251.79 yahoo.com
- 66.218.75.184 mail.yahoo.com
- 213.219.251.81 astalavista.com
- 213.219.251.81 www.astalavista.com
- 213.219.251.81 astalavista.box.sk
- 213.219.251.81 cracks.am
- 213.219.251.81 www.cracks.am
- 213.219.251.81 www.astalavista.box.sk
- 213.219.251.81 cracks.com
- 213.219.251.81 www.cracks.com
- 213.219.251.80 www.msn.com
- 213.219.251.80 msn.com
- 213.219.251.80 search.msn.com
- 213.219.251.80 www.search.msn.com
- 213.219.251.80 go.com
- 213.219.251.80 www.go.com
Click
here to scan your computer for Hijacker.Azebar free of charge
|
