Tuvaro Toolbar

Tuvaro Toolbar Description

Tuvaro is free browser add-on, which is pushed via other free program downloads. When installed on a targeted computer, Tuvaro will add the Tuvaro Toolbar, alter the default homepage and search engine of the hijacked Internet browser with tuvaro.com. The Tuvaro Search Bar will show advertisements and sponsored links in hijacked search results, and may gather search terms from search queries of a victimized web user. Tuvaro Toolbar enters the corrupted PC after the computer user has installed another free application or add-on that had packed into their installer Tuvaro Toolbar. For instance, when the Internet user installs vPlay, he/she will also agree to alter the default homepage and search engine with tuvaro.com, and install the Tuvaro Toolbar. However, when the computer user uninstalls vPlay from the PC, the Internet browser's default settings will not be restored. This means that the web user will have to uninstall Tuvaro Search from the favorite Internet browser manually.

Infected with Tuvaro Toolbar? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect Tuvaro Toolbar

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Infection Statistics


Our MalwareTracker shows malware activity across the world. Explore real-time data of Tuvaro Toolbar outbreaks and other threats from global to local level.

File System Details

Tuvaro Toolbar creates the following file(s):
# File Name Size MD5 Detection Count
1 tuvaro_1.8.16.19.exe 2,530,872 df6b943df9c64b7353bb900556930ad7 290
2 %PROGRAMFILES(x86)%\tuvaro 31
3 %USERPROFILE%\AppData\LocalLow\tuvaro 22
4 %APPDATA%\tuvaro 19
5 %LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\omgjkafaoidbgamjoklhaiiciahohkbh 16
6 %UserProfile%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\omgjkafaoidbgamjoklhaiiciahohkbh 12

Registry Details

Tuvaro Toolbar creates the following registry entry or registry entries:
HKEY..\..\..\..{RegistryKeys}
esrv.tuvaroESrvc
esrv.tuvaroESrvc.1
SOFTWARE\Classes\esrv.tuvaroESrvc
SOFTWARE\Classes\esrv.tuvaroESrvc.1
SOFTWARE\Classes\tuvaro.tuvaroappCore
SOFTWARE\Classes\tuvaro.tuvaroappCore.1
SOFTWARE\Classes\tuvaro.tuvarodskBnd
SOFTWARE\Classes\tuvaro.tuvarodskBnd.1
SOFTWARE\Classes\tuvaro.tuvaroHlpr
SOFTWARE\Classes\tuvaro.tuvaroHlpr.1
Software\Microsoft\Internet Explorer\SearchScopes\{61047D73-3FEA-4865-A8E0-9B1513FEEDC2}
Software\Microsoft\Internet Explorer\SearchScopes\{61CF3657-2FF2-4D13-9D0C-91E6C739DFC6}
Software\tuvaro
Software\tuvaroToolbar
SOFTWARE\Wow6432Node\Google\chrome\Extensions\omgjkafaoidbgamjoklhaiiciahohkbh
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E40E840E-5A15-4A29-9C51-9A060EEB192B}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar, value: {6F001652-AF51-45C6-B029-86E0265A1851}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{5CB02877-EFBC-4317-B608-9E24B11BAB40}
SOFTWARE\Wow6432Node\tuvaro
tuvaro.tuvaroappCore
tuvaro.tuvaroappCore.1
tuvaro.tuvarodskBnd
tuvaro.tuvarodskBnd.1
tuvaro.tuvaroHlpr
tuvaro.tuvaroHlpr.1
HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}
tuvaro
The following CLSID's were found:
HKEY..\..\{CLSID Path}
{C6712CEF-79A8-440E-A7AC-4EF00C856922}
{A88A4515-66BC-413B-9526-3FF53B5F21C8}
{6BE4B879-4E7D-4AE8-A356-DCBD7029612E}
{9389BE07-565A-45A0-B1A3-3DE01AA1C5CA}
{5CB02877-EFBC-4317-B608-9E24B11BAB40}
{6F001652-AF51-45C6-B029-86E0265A1851}
{4CBF0FC8-4222-435B-9E57-0DE807350D39}
{2A3FF0D3-4417-492B-8929-11AB24EA0A90}
{1E8F8EDE-EB73-4CA9-A139-6DA2B576FD69}
{A02005FA-FFF4-4099-9D14-E097378574C4}
{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
{2768469C-717B-401F-8532-C6D88BAE0339}
{09C554C3-109B-483C-A06B-F14172F1A947}
{F77B6A63-1EC9-45FB-A7AB-F9930CBBAD32}
{DD973375-0904-4886-8F63-6FC3A2BE6544}
{4C694E60-4549-466D-83FB-C4C162FB53E2}
{427F9EE7-35CB-4EC6-ACCA-122AE77C68B8}
{240A6AD4-4868-4513-A8DD-3ABF47E1F146}

Site Disclaimer

One Comment

  • rollyn edquist says:

    somehow tuvaro.com got inside my computer Thursday – says it is easy to uninstall but is not – was inhabiting IF and Firefox and Chrome – out of IE but still in the other two – by the look of programs is gone but it isn’t – extremely frustrating – to have it in hiding – attempts to remove it have all failed

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 14 + 7 ?