Home Malware Programs Adware LizardLink

LizardLink

Posted: October 2, 2013

Threat Metric

Threat Level: 2/10
Infected PCs: 740
First Seen: October 2, 2013
Last Seen: January 2, 2023
OS(es) Affected: Windows

LizardLink Screenshot 1LizardLink is adware that may display unwanted advertisements, coupons and sponsored links via a pop-up box on Amazon, Walmart, Ebay and other shopping websites that PC users are visiting. LizardLink pop-up advertisements may be displayed as boxes, which carry numerous coupons that are available or as underlined keywords, which when clicked may show pop-up ads that claim to be sent to the web user by LizardLink. LizardLink is an unwanted extension for Internet Explorer, Mozilla Firefox and Google Chrome that may be usually embedded when PC users install another free application, such as video recording/streaming, download-managers or PDF creators, that had packed into their installation LizardLink. When PC users install these free tools, they may also install LizardLink. When installed, whenever the PC user will visit Expedia, Best Buy, Facebook or any other similar websites, LizardLink may ashow a 'See Similar' button on product images, which when clicked may display pop-up ads by LizardLink. LizardLink may also deliver advertising banners on the websites that web users are visiting, and as they browse the web, LizardLink may show coupons and other deals available on various websites.

LizardLink Screenshot 2LizardLink Screenshot 3

Aliases

Trojan.ADH.2 [Symantec]Artemis!E3558C6AB24B [McAfee]

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES%\Lizardlink\Lizardlinkbho.dll File name: Lizardlinkbho.dll
Size: 249.63 KB (249632 bytes)
MD5: 1303adf1b1fa446ceda94f4468d073f7
Detection count: 45
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Lizardlink
Group: Malware file
Last Updated: February 11, 2014
%PROGRAMFILES%\Lizardlink\Lizardlinkuninstall.exe File name: Lizardlinkuninstall.exe
Size: 214.97 KB (214977 bytes)
MD5: 4d585377a4b04c9f3d67a8b3616c4be0
Detection count: 31
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Lizardlink
Group: Malware file
Last Updated: February 11, 2014
%PROGRAMFILES(x86)%\Lizardlink\bin\utilLizardlink.exe File name: utilLizardlink.exe
Size: 102.17 KB (102176 bytes)
MD5: c8d6f1062c6cf57d7c38e2fdc167cbaf
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Lizardlink\bin
Group: Malware file
Last Updated: February 11, 2014
%PROGRAMFILES(x86)%\Lizardlink\Lizardlinkuninstall.exe File name: Lizardlinkuninstall.exe
Size: 213.29 KB (213298 bytes)
MD5: 07ca0b32f1c53afdfaf4df8343eaac63
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Lizardlink
Group: Malware file
Last Updated: May 5, 2020
%PROGRAMFILES%\Lizardlink\updateLizardlink.exe File name: updateLizardlink.exe
Size: 206.62 KB (206624 bytes)
MD5: 635ea6f043a0cfe1236cde38293caec7
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Lizardlink
Group: Malware file
Last Updated: February 11, 2014

Registry Modifications

The following newly produced Registry Values are:

CLSID{17F7D2B4-126F-4567-9FDB-563C2D907A92}{eb9e4cdf-b007-450c-b0af-b66467c3d6e0}{EF277141-3A4E-41D4-A9FD-C83DF8CC4C1F}HKEY..\..\..\..{RegistryKeys}Software\LizardlinkSoftware\Microsoft\Internet Explorer\Approved Extensions\{EB9E4CDF-B007-450C-B0AF-B66467C3D6E0}Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\lizardlink.bizSoftware\Microsoft\Windows\CurrentVersion\Ext\Settings\{EB9E4CDF-B007-450C-B0AF-B66467C3D6E0}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EB9E4CDF-B007-450C-B0AF-B66467C3D6E0}SOFTWARE\Wow6432Node\LizardlinkSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{eb9e4cdf-b007-450c-b0af-b66467c3d6e0}SYSTEM\ControlSet001\services\eventlog\Application\Update LizardlinkSYSTEM\ControlSet001\services\Update LizardlinkSYSTEM\ControlSet002\services\eventlog\Application\Update LizardlinkSYSTEM\ControlSet002\services\Update LizardlinkSYSTEM\CurrentControlSet\services\eventlog\Application\Update LizardlinkSYSTEM\CurrentControlSet\services\Update LizardlinkHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Lizardlink

Additional Information

The following directories were created:
%ProgramFiles%\Lizardlink%ProgramFiles(x86)%\Lizardlink
The following URL's were detected:
Lizardlink
Loading...