LizardBar

LizardBar is a Internet Explorer browser helper object that may redirect search requests. Lizardbar attempts to advertise porn sites by inserting URLs into web forms where a homepage entry is requested.

LizardBar is set as the internal file name for submithook.dll. When you enter a url in a web browser, submithook.dll changes the internal "onsubmit" handler with its own subroutine. Once the form is submitted, the submithook.dll subroutine enumerates all the form fields and starts looking for any with the name "url", "homepage", "page", "www", ".cl1" or "site". If it finds any of these fields, it will retrieve a single URL from a remote server and insert the URL into the form field. The server's response will be a link to pornographic material at www.indateens.com.