updatesizlsearch.exe

sizlsearch

Part of the Yontoo web browser plugin (delivers advertisements to the web browser in the form of injected banners, text-links, popups, etc.) the updater mechanism for sizlsearch will automatically keep the extension patched by downloaded new functionality which is auto-enabled by default. The application updatesizlsearch.exe by sizlsearch has been detected as adware by 8 anti-malware scanners. It runs as a separate (within the context of its own process) windows Service named “Update sizlsearch”. Additionally, the file is typically installed by a number of programs including sizlsearch by Yontoo Technology, Inc. and Buzzdock by Alactro LLC, both potentially unwanted software. It will plug into the web browser and display context-based advertisements by overwriting existing ads or by inserting new ones on various web pages.
Publisher:
sizlsearch  (signed and verified)

Version:
1.0.5373.25683

MD5:
cce22ec94cb51ad415260d86a3aded0e

SHA-1:
5938ef96234b8aac5c7e1e370047b3029419db53

SHA-256:
e072b868a249d5b5bffa08130476cc897ae631c11f0754501d7141f8d45e3e0c

Scanner detections:
8 / 68

Status:
Adware

Explanation:
Part of the Yontoo adware web browser extension update process.

Analysis date:
4/26/2024 11:31:19 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
ADWARE/BrowseFox.Gen
7.11.173.16

AVG
Slizearch
2015.0.3348

Baidu Antivirus
Adware.Win32.BrowseFox
4.0.3.14918

ESET NOD32
Win32/BrowseFox (variant)
8.10434

Kaspersky
not-a-virus:HEUR:AdWare.MSIL.Kranet
14.0.0.3235

Malwarebytes
PUP.Optional.Sizlsearch.A
v2014.09.18.01

Reason Heuristics
Adware.Yontoo.Service.Q
14.9.18.0

VIPRE Antivirus
Yontoo
33212

File size:
317.3 KB (324,896 bytes)

Product version:
1.0.5373.25683

Original file name:
sizlsearch.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\sizlsearch\updatesizlsearch.exe

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
11/14/2013 10:00:00 AM

Valid to:
11/15/2014 9:59:59 AM

Subject:
CN=sizlsearch, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=sizlsearch, L=Santa Monica, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
14A03B7644CA6A74D050BBD6188EAA95

File PE Metadata
Compilation timestamp:
9/18/2014 1:16:26 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:lGNjT+zwNMFqVHA6d5npq4itm2LyX/78D3O8iv8wXsrAFdFqj99tIPGbli3x:lGNjgsMuNbiELee8btqeax

Entry address:
0x4F11A

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.0900

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
308.5 KB (315,904 bytes)

Service
Display name:
Update sizlsearch

Type:
Win32OwnProcess


The file updatesizlsearch.exe has been discovered within the following programs.

Buzzdock  by Alactro LLC
This is a web browser extension that injects advertising. From the EULA: "Buzzdock is free to download and use. Buzzdock is supported by advertising, and users will see additional ads on websites where Buzzdock features operate.
www.buzzdock.com/faq-support
79% remove it
sizlsearch  by Yontoo Technology, Inc.
sizlsearch is an adware application that is distributed by Yontoo, a division of Sambreel Holdings based in Carlsbad, CA. It is a rebrand of the various other web browser extensions that Yontoo delivers all with similar names. The program is included as part of a download bundle.
sizlsearch.net/support
84% remove it
 
Powered by Should I Remove It?

Remove updatesizlsearch.exe - Powered by Reason Core Security