Linksicle

Linksicle Description

Type: Adware

Linksicle is a PUP, Potentially Unwanted Program, that is used to add advertising content to affected Web browsers. Linksicle uses in-text advertisements that pop-up in a new window. Linksicle advertisements may appear whenever you visit numerous popular websites, including Facebook, Amazon, Google and YouTube. Linksicle is a Web browser add-on that is supported by online advertising. The Linksicle PUP may affect various Web browsers. Versions of Linksicle are available for Internet Explorer, Google Chrome and Mozilla Firefox and may also affect other popular Web browsers on the Windows operating system. Linksicle is distributed using various advertisement platforms and is installed using misleading tactics. If Linksicle is installed on your Web browser, security researchers strongly recommend the use of a reliable anti-malware program to protect your computer and remove this PUP immediately.

How Linksicle Enters Can Infect Your Computer

In most cases, Linksicle is installed when a computer user downloads and installs freeware from an unreliable, poorly-regulated source. PUPs like Linksicle use this method often to enter computers, and there are certain types of freeware programs that are usually related with these types of unwanted components (for example, media players, video streaming applications, file format converters, PDF readers and creators and download managers). Marketers may bundle these types of applications with PUPs like Linksicle to ensure that they are installed by unsuspecting computer users. Example of free programs that are known to be bundled with Linksicle include such apps as 1ClickDownload, Superfish, Yontoo and FBPhotoZoom. Because of this, ESG security researchers strongly advise computer users never to install freeware from unreliable sources and to use custom installation to monitor all of the components that are being installed along with the free application.

The Unusual Tactics Used by Linksicle

Linksicle inserts in-text advertisements into otherwise safe websites. Linksicle works by highlighting certain words and turning them into links. These links use a double underline to differentiate themselves from normal links in the source text. When computer users pass their cursor over the highlighted text, a pop-up advertisement will appear. Whenever computer users click on links displayed by Linksicle, the developers of Linksicle receive affiliate marketing payouts. Linksicle adds banner advertisements to websites and may cause other problems, such as browser redirects and performance problems on the affected Web browser.

Technical Information

File System Details

Linksicle creates the following file(s):
# File Name MD5 Detection Count
1 lssvc.exe.vir 4ebd5db8349c2d0d9eb3335a56fe71be 6,055
2 lssvc.exe 55c4c01682e57856c79a13f7b674eb84 2,068
3 air3291.exe 5a02633ccd7884b65e4448a53fabf5a5 3
4 linksicle@linksicle.com.xpi 2630f7db42ab62b2a6d083d926edca34 0
5 gohhkpbcblcpnaghfmnkfangnkkagacg.crx c75c9e612f3b1d1e5baf815c07e06217 0
More files

Registry Details

Linksicle creates the following registry entry or registry entries:
CLSID
{2AD2D8CA-D24D-40D2-A8FC-46952409BA9A}
{8A7BE212-5F53-4252-8DCA-1FB5451D4E2B}
{A073AC6F-0B69-494C-8D61-60618FA37B4A}
Registry key
SOFTWARE\Linksicle
SOFTWARE\Mozilla\Firefox\Extensions\linksicle@linksicle.com
SOFTWARE\Wow6432Node\Linksicle
SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\linksicle@linksicle.com
SYSTEM\ControlSet001\services\lssvc
SYSTEM\ControlSet002\services\lssvc
SYSTEM\CurrentControlSet\services\lssvc
Uninstaller
Linksicle
Directory
%ProgramFiles%\Linksicle
%ProgramFiles%\Mozilla Firefox\extensions\linksicle@linksicle.com
%ProgramFiles(x86)%\Linksicle
%ProgramFiles(x86)%\Mozilla Firefox\extensions\linksicle@linksicle.com

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.