Tuvaro Toolbar

Tuvaro Toolbar Description

Tuvaro is free browser add-on, which is pushed via other free program downloads. When installed on a targeted computer, Tuvaro will add the Tuvaro Toolbar, alter the default homepage and search engine of the hijacked Internet browser with tuvaro.com. The Tuvaro Search Bar will show advertisements and sponsored links in hijacked search results, and may gather search terms from search queries of a victimized web user. Tuvaro Toolbar enters the corrupted PC after the computer user has installed another free application or add-on that had packed into their installer Tuvaro Toolbar. For instance, when the Internet user installs vPlay, he/she will also agree to alter the default homepage and search engine with tuvaro.com, and install the Tuvaro Toolbar. However, when the computer user uninstalls vPlay from the PC, the Internet browser's default settings will not be restored. This means that the web user will have to uninstall Tuvaro Search from the favorite Internet browser manually.

Infected with Tuvaro Toolbar? Scan Your PC for Free

Download SpyHunter's Spyware Scanner
to Detect Tuvaro Toolbar
* SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware removal tool to remove the malware threats. Read more on SpyHunter. If you no longer wish to have SpyHunter installed on your computer, follow these steps to uninstall SpyHunter.

Security Doesn't Let You Download SpyHunter or Access the Internet?

Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in "Safe Mode with Networking" and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Infection Statistics

Our MalwareTracker shows malware activity across the world. Explore real-time data of Tuvaro Toolbar outbreaks and other threats from global to local level.

File System Details

Tuvaro Toolbar creates the following file(s):
# File Name Size MD5 Detection Count
1 tuvaro_1.8.16.19.exe 2,530,872 df6b943df9c64b7353bb900556930ad7 93
2 %USERPROFILE%\Plocha\tuvaro\tuvaro\\tuvarosrv.exe 381,848 943d51cab077da7cbb817112beb115df 27
3 %PROGRAMFILES(x86)%\tuvaro 10
4 %USERPROFILE%\AppData\LocalLow\tuvaro 7
5 %APPDATA%\tuvaro 6
6 %LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\omgjkafaoidbgamjoklhaiiciahohkbh 5
7 %TEMP%\tuvaro\tuvaro\\tuvaro4ffx.exe 329,568 3d83172297977d0e79fd10559734c253 5
8 %UserProfile%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\omgjkafaoidbgamjoklhaiiciahohkbh 4
9 %PROGRAMFILES%\tuvaro\tuvaro\\bh\tuvaro.dll 255,384 821cbe472c2966f040281b1a445596cf 3
10 %TEMP%tuvaro_1.8.12.0.exe 2,254,592 b11ef947924ea8694beef70e86cec776 3
11 %TEMP%\nsa4A8C.tmp\192\tuvaro_4112013.exe 2,600,200 8ee4a58b42dc40e6974369099b8982f3 2

Registry Details

Tuvaro Toolbar creates the following registry entry or registry entries:
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E40E840E-5A15-4A29-9C51-9A060EEB192B}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar, value: {6F001652-AF51-45C6-B029-86E0265A1851}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{5CB02877-EFBC-4317-B608-9E24B11BAB40}
Software\Microsoft\Internet Explorer\SearchScopes\{61047D73-3FEA-4865-A8E0-9B1513FEEDC2}
Software\Microsoft\Internet Explorer\SearchScopes\{61CF3657-2FF2-4D13-9D0C-91E6C739DFC6}
Software\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}
The following CLSID's were found:
HKEY..\..\{CLSID Path}

Site Disclaimer

One Comment

  • rollyn edquist:

    somehow tuvaro.com got inside my computer Thursday – says it is easy to uninstall but is not – was inhabiting IF and Firefox and Chrome – out of IE but still in the other two – by the look of programs is gone but it isn’t – extremely frustrating – to have it in hiding – attempts to remove it have all failed

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as is:
What is 7 + 2 ?