» Lizardlink
Digital Signature
Analysis
Files (913)
Related (98)

Lizardlink

Publisher Information

Lizardlink is a brand of the Sambreel/Yontoo group, a web advertising company located in Carlsbad, CA. The company is a primary distributor of unwanted software. It is part of the Yontoo/Sambreel group and distributes web browser add-ons, typically potentially unwanted and adware in nature, that are designed to modify a user's typical search beahvior as well as display context and popup advertising.

Authority:

VeriSign, Inc.

Valid from:

8/12/2013 8:00:00 PM

Valid to:

8/13/2015 7:59:59 PM

Subject:

CN=Lizardlink, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Lizardlink, L=San Diego, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

75d65d3f9991f633c8ac64a5ae9e34ee

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Yontoo (M), Adware.Yontoo (M), PUP.Yontoo.Service

100.00%

1 / 68 (Adware)

{97b7ec0a-f987-45e4-b01b-dd899fc689c3}gw64.sys (StdLib) (4865dd9b08a4e6788e17795bd63b2542)

1 / 68 (Adware)

{215f3947-4d13-46f7-95aa-328779d361ce}64.dll (XVRNT by TODO: <Company name>) (54d1cd3bbc3361c168357aa9aaaaf19c)

1 / 68 (Adware)

97b7ec0af98745e4b01b64.dll (ecfd6cda78fcc07d21170a8c99e0ad33)

1 / 68 (Adware)

215f39474d1346f795aa64.dll (0b397bb80a51a4bbbbd302a89ad1e3a5)

1 / 68 (Adware)

215f39474d1346f795aa.dll (dcddfa83d257132205d9ffb61edb7f6b)

1 / 68 (Adware)

{97b7ec0a-f987-45e4-b01b-dd899fc689c3}64.dll (by TODO: <Company name>) (18ecf1466fc02e2c606a36f357c25207)

1 / 68 (Adware)

{97b7ec0a-f987-45e4-b01b-dd899fc689c3}.dll (by TODO: <Company name>) (c37385db01c1202c77171d8595fcee57)

1 / 68 (Adware)

{215f3947-4d13-46f7-95aa-328779d361ce}64.dll (XVRNT by TODO: <Company name>) (d9eef4445729c4e56c5f0cf19a7e8da0)

1 / 68 (Adware)

lizardlink.expextdll.dll (6466674f915d69ae5cc8bcde437b09f0)

1 / 68 (Adware)

97b7ec0af98745e4b01b64.dll (08d34028cc64cfb1a057b3ff8f3817c9)

1 / 68 (Adware)

215f39474d1346f795aa64.dll (d1a60661f27d7284da47e03543069aa6)

1 / 68 (Adware)

215f39474d1346f795aa.dll (86724ce43bbcaa90c57ee170c1f9c46c)

1 / 68 (Adware)

{97b7ec0a-f987-45e4-b01b-dd899fc689c3}w64.sys (StdLib) (db5279ba0e0ad24ad5ed4eb587ffceea)

1 / 68 (Adware)

lizardlinkbaapp.dll (9b58e7b477638e77b034b3f29bd0f2fa)

1 / 68 (Adware)

maintainer.exe (cee795a63b555f30fb0deb20cd083229)

1 / 68 (Adware)

{215f3947-4d13-46f7-95aa-328779d361ce}w64.sys (StdLib) (e610c8d1f61495d5c948e875b161113c)

1 / 68 (Adware)

{97b7ec0a-f987-45e4-b01b-dd899fc689c3}w64.sys (StdLib) (af7c9f5f32f69efa563033c0e55c7de1)

1 / 68 (Adware)

updatelizardlink.exe (2c64145704a7e1b1a09a3655ea054396)

1 / 68 (Adware)

setup (51226fe6a6793b938b995107db1fa9a2)

1 / 68 (Adware)

maintainer.bak (e7ffa802124e8b18c86843f01a8f6029)

1 / 68 (Adware)

Lizardlink.OfSvc.dll (8175db1a7acfe5374d3048c9dca8f6cc)

1 / 68 (Adware)

Lizardlink.BrowserAdapterS.dll (7b250a43e6fde030fe7e81eb25f75a8f)

1 / 68 (Adware)

lizardlinkbaapp.dll (ba0f091aa6cdc90c1acc176718073bae)

1 / 68 (Adware)

lizardlinkbho.dll (Lizardlink) (061ef5311d6c902a9940fba2e62ec654)

1 / 68 (Adware)

utillizardlink.exe (b16c9695ae10296e365206f34e0c21f7)

1 / 68 (Adware)

maintainer.bak (91c8c4c90ce6806f95a31bf384f9f399)

1 / 68 (Adware)

lizardlink.purbrowse.dll (bf12459e37b0384f1c9798b2ee91c6a0)

1 / 68 (Adware)

lizardlink.ofsvc.dll (54379762346e32dd097c9250de12202c)

1 / 68 (Adware)

lizardlink.ieupdate.dll (2a2bfa5d1f45bb879bbd660cc580d8bb)

1 / 68 (Adware)

lizardlink.gcupdate.dll (be0047e199a5c81f79b3c0958c8d4371)

Latest 30 of 913 files

The following publishers (by Authenticode signature organization name) are related.

30 of 98 publishers

* Note, the details and description above are based on the code signing digital signature issued to Lizardlink by VeriSign, Inc. on August 12, 2013 with the serial number '75d65d3f9991f633c8ac64a5ae9e34ee'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.