Adware.ezlife
Adware.ezlife is a potentially unwanted advertising program. On entering a system, Adware.ezlife will create a registry key that will allow it to execute each time the system is started up. Adware.ezlife is known to display excessive advertisements in various forms and degrees of intrusion. Adware.ezlife may also monitor and collect internet related information which it will send to a remote third party.
File System Details
Adware.ezlife may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %ProgramFiles%\Smart-Ads-Solutions\SmartAds\1.5.4.0\uninstall.exe | |
| 2. | %System%\klpyvuut.dll | |
| 3. | %ProgramFiles%\ezLife\ezLife\1.5.4.0\uninstall.exe | |
| 4. | %System%\ktsihcgt.dll | |
| 5. | %ProgramFiles%\Mozilla Firefox\components\adproFfx.dll | |
| 6. | %ProgramFiles%\Mozilla Firefox\components\nsAdproFFx.xpt |
Registry Details
Adware.ezlife may create the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C79EBB3-7DDC-45EF-8808-221AA3ED4597}\TypeLib]
(Default) = "adHlpr.adHlpr.1.0"
ThreadingModel = "apartment"
AppID = ""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E0EC6FBA-F009-3535-95D6-B6390DB27DA1}\TypeLib]
(Default) = "CscrptXt.CscrptXt.1.0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E0EC6FBA-F009-3535-95D6-B6390DB27DA1}]
(Default) = "adHlpr.adHlpr.1.0"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\adHlpr.adHlpr\CLSID]
(Default) = "adHlpr.adHlpr"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C79EBB3-7DDC-45EF-8808-221AA3ED4597}\ProgID]
(Default) = "%System%\klpyvuut.dll"
(Default) = "adHlpr Object"
(Default) = "CscrptXt.CscrptXt"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E0EC6FBA-F009-3535-95D6-B6390DB27DA1}\ProgID]
(Default) = "%System%\ktsihcgt.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\adHlpr.adHlpr\CurVer]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C79EBB3-7DDC-45EF-8808-221AA3ED4597}\VersionIndependentProgID]
(Default) = "{A9722A0D-365F-47D2-B70B-37D046316D99}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C79EBB3-7DDC-45EF-8808-221AA3ED4597}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C79EBB3-7DDC-45EF-8808-221AA3ED4597}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E0EC6FBA-F009-3535-95D6-B6390DB27DA1}\VersionIndependentProgID]
(Default) = "{38061EDC-40BB-4618-A8DA-E56353347E6D}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E0EC6FBA-F009-3535-95D6-B6390DB27DA1}\InprocServer32]
(Default) = "CscrptXt Object"
