PUP.EZSearch

Published:
Last updated:

Threat Scorecard

Threat Level: 10 % (Normal)
Infected Computers: 8,313
First Seen: July 24, 2009
Last Seen: April 21, 2026
OS(es) Affected: Windows

The detection of PUP.EZSearch on your system indicates the presence of a potentially unwanted program (PUP) that may be causing unwanted changes to your browser settings, search engine, or other system configurations. It is essential to understand the nature of this threat and take appropriate steps to remove it to prevent further complications.

What Is PUP.EZSearch?

PUP.EZSearch is classified as a potentially unwanted program, which means it is not necessarily malicious but can still cause significant disruptions to your computing experience. PUPs often sneak onto systems through bundled software downloads, deceptive advertisements, or other covert means. Once installed, they can alter browser settings, display unwanted advertisements, or collect user data without consent.

How PUP.EZSearch Operates

PUP.EZSearch, like other PUPs, operates by integrating itself into your system, often through browser extensions or standalone applications. It may modify your default search engine, homepage, or new tab page to redirect you to specific websites, which could be used for advertising purposes or to collect your search history and other data. This program might also display pop-up ads, banners, or other types of unwanted content, aiming to generate revenue for its developers.

Symptoms of Infection

Identifying a PUP.EZSearch infection can be challenging, as it may not exhibit overtly malicious behavior. However, common symptoms include unexpected changes to your browser settings, an increase in unwanted advertisements, slowdowns in system performance, or the appearance of unfamiliar programs or toolbars. If you notice any of these symptoms, it is crucial to investigate further to determine the cause and take corrective action.

  • Unwanted changes to browser settings, such as a new homepage or default search engine.
  • Increased appearance of pop-ups, banners, or other types of advertisements.
  • System slowdowns or increased memory usage.
  • Appearance of unfamiliar programs, toolbars, or browser extensions.

How to Remove PUP.EZSearch

  1. Boot your computer in Safe Mode with Networking to prevent PUP.EZSearch from loading and to give you a cleaner environment to work in.
  2. Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter, to detect and remove all components of PUP.EZSearch.
  3. Uninstall any suspicious programs or applications that you do not recognize or that were installed around the time you first noticed symptoms of the infection.
  4. Reset your web browsers (Chrome, Firefox, Edge, etc.) to their default settings to remove any changes made by PUP.EZSearch, such as altered homepages or search engines.
  5. Reboot your computer and perform another scan with your anti-malware tool to ensure that all traces of PUP.EZSearch have been removed.

Conclusion

Removing PUP.EZSearch requires a systematic approach to ensure that all its components are eliminated from your system. By following the steps outlined above and maintaining vigilance in your online activities, you can protect your system from similar threats in the future. Regularly updating your software, avoiding suspicious downloads, and using reputable security tools can significantly reduce the risk of PUP infections. Remember, while PUP.EZSearch may not be as dangerous as malware, it can still compromise your privacy and system performance, making its removal a necessary step in maintaining a secure and efficient computing environment.

File System Details

PUP.EZSearch may create the following file(s):
# File Name MD5 Detections
1. WindowService.exe 27b0e52096ac63ebb9cf7b8d19e50497 9
2. realtek_amd64.exe 2a835cb5056ceb518600e0a491fdc933 7
3. mediatek_86.exe 8ea97bf272cb64770799585f8b70da28 6
4. ezsearch.dll 88bb84f3e7752e0422befb9f46af1fe3 1
5. ezs.dll 7a9761576f19ceb77885201d39a1d644 0
More files

Registry Details

PUP.EZSearch may create the following registry entry or registry entries:
SOFTWARE\Microsoft\Tracing\WindowService_RASAPI32
SOFTWARE\Microsoft\Tracing\WindowService_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Tracing\WindowService_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\WindowService_RASMANCS
SYSTEM\ControlSet001\services\eventlog\Application\WindowService
SYSTEM\ControlSet002\services\eventlog\Application\WindowService
SYSTEM\CurrentControlSet\services\eventlog\Application\WindowService
EZSearch
Searchy
{24F5E422-6A70-4FAA-8CAD-E23D5DC1DAE6}
{DD0688A5-FC8B-4E93-A485-CBF606A56D49}

Directories

PUP.EZSearch may create the following directory or directories:

%PROGRAMFILES%\EZSearch
%PROGRAMFILES(x86)%\EZSearch