LizardLink

LizardLink Description

ScreenshotLizardLink is adware that may display pop-up advertisements, sponsored links and coupons via a pop-up box on Amazon, Walmart, Ebay and other shopping websites that are visited by computer users. LizardLink pop-up advertisements may be shown as boxes, which include a variety of coupons that are available or as underlined keywords, which when clicked may show a pop-up advertisement that declares to come to the PC user by LizardLink. LizardLink is an add-on for Internet Explorer, Mozilla Firefox and Google Chrome that is typically added when web users install another free programs, such as download-managers, video recording/streaming or PDF creators that might had packed into their installation LizardLink. When PC users install these free software products, they may also install LizardLink. While being installed, whenever the web user will visit Expedia, Best Buy, Facebook or any other similar websites, LizardLink may display a 'See Similar' button on product images, which when clicked may show pop-up ads by LizardLink. LizardLink may also display advertising banners on the websites that are visited by computer users, and as they surf the Internet, LizardLink may deliver coupons and other deals available on various websites.
Aliases: a variant of MSIL/BrowseFox.A [ESET-NOD32], Artemis!E3558C6AB24B [McAfee], PUP.Optional.Lizardlink.A [Malwarebytes], Trojan.ADH.2 [Symantec], TROJ_GEN.F47V0913 [TrendMicro-HouseCall], Win32.Troj.Generic.a.(kcloud) [Kingsoft] and Yontoo (fs) [VIPRE].

Infected with LizardLink? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect LizardLink

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Infection Statistics


Our MalwareTracker shows malware activity across the world. Explore real-time data of LizardLink outbreaks and other threats from global to local level.

File System Details

LizardLink creates the following file(s):
# File Name Size MD5 Detection Count
1 %PROGRAMFILES(x86)%\Lizardlink\updateLizardlink.exe 206,624 e3558c6ab24b8ca4d91ffccc9eff8779 749
2 %PROGRAMFILES(x86)%\Lizardlink\bin\utilLizardlink.exe 97,056 720f494589675fc2c91f2313aed59dc4 203
3 %PROGRAMFILES%\Lizardlink\Lizardlinkbho.dll 249,632 1303adf1b1fa446ceda94f4468d073f7 45
4 %ProgramFiles%\Lizardlink 12
5 %ProgramFiles(x86)%\Lizardlink 11
6 %PROGRAMFILES(x86)%\Lizardlink\Lizardlinkuninstall.exe 213,298 07ca0b32f1c53afdfaf4df8343eaac63 11
7 %PROGRAMFILES(x86)%\Lizardlink\bin\LizardlinkBrowserFilter.exe 42,272 d5b5f4374c407ebb181eae8ffd12a494 4

Registry Details

LizardLink creates the following registry entry or registry entries:
HKEY..\..\..\..{RegistryKeys}
Software\Lizardlink
SOFTWARE\Wow6432Node\Lizardlink
Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\lizardlink.biz
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EB9E4CDF-B007-450C-B0AF-B66467C3D6E0}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EB9E4CDF-B007-450C-B0AF-B66467C3D6E0}
SYSTEM\ControlSet001\services\eventlog\Application\Update Lizardlink
SYSTEM\ControlSet001\services\Update Lizardlink
SYSTEM\ControlSet002\services\eventlog\Application\Update Lizardlink
SYSTEM\ControlSet002\services\Update Lizardlink
SYSTEM\CurrentControlSet\services\eventlog\Application\Update Lizardlink
SYSTEM\CurrentControlSet\services\Update Lizardlink
Software\Microsoft\Internet Explorer\Approved Extensions, value: {EB9E4CDF-B007-450C-B0AF-B66467C3D6E0}
The following CLSID's were found:
HKEY..\..\{CLSID Path}
{17F7D2B4-126F-4567-9FDB-563C2D907A92}
{eb9e4cdf-b007-450c-b0af-b66467c3d6e0}
{EF277141-3A4E-41D4-A9FD-C83DF8CC4C1F}

Site Disclaimer

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 9 + 11 ?