84,488,480 programs installed

Should I remove Kozaka?

What percent of users and experts removed it?
86% remove it14% keep it
Overall Sentiment
What do people think about it?
(click star to rate)
How common is it?
Global Rank #23,070
United States Rank #45,687
Reach 0.0083%
Lifespan of installation (until removal)
< 5.14 days
151.59 days >
Average installed length: 79.65 days


2014.01.25.024532 0.61%
2014.01.16.002256 0.61%
2014.01.10.194843 6.75%
2013.12.07.011955 92.02%


What is Kozaka?

This is a variant of the Web Cake/Lucky Leap adware. It is a web browser extension that will modify the user's home and search providers as well as display contextual and popup advertising in the browser. This adware program injects advertisements with its affiliate ad providers in order to serve a number of ad types including banner, inline text links and popups. These ads are aimed to promote the installation of additional questionable content including web browser toolbars, optimization utilities and other products, all so the publisher can generate pay-per-click revenue.

Once infected by this program, common symptoms include:

- Random web page text is turned into hyperlinks.
- Ads with red click here button will pop up when those links are hovered on.
- Other unwanted adware programs might get installed without the user's knowledge.
- Browser popups appear which recommend fake updates or other software.
- Web pages become extremely slow to download due to the multiple ads.

About  (from Yontoo Technology)

Such features include, without limitation, toolbars and applications for providing enhanced search results, browsing reference links, website ratings and reviews, social media, coupons, and comparison shopping for various products and services, including travel and insurance. The Software is compatible with Internet Ex...  Read more
  • Malware detected in the program
  • Integrates into the web browser
  • Adds a background Windows Service
  • Delivered through a thrid-party offer
  • Injects advertisements unassociated with the underlying web page
  • Hijacks the browser's default search provider
  • This program has a poor reputation
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in Kozaka.
KozakaBHO.dll (171da209e2af69f4ce1efdca75a7e2c8) has been flagged by the following 13 scanners:
Anti-Virus softwareVersionDetection
Antiy-AVL AdWare/Win32.Agent
Bkav FE W32.Clod494.Trojan
Comodo Security 17565 Application.Win32.Altbrowse.AK
Dr.Web Adware.Plugin.142
K7 AntiVirus 13.175.10750 Unwanted-Program
K7GW 13.175.10750 Unwanted-Program ( 00454f261 )
Kaspersky not-a-virus:AdWare.Win32.Agent
Malwarebytes v2013.11.24.08 PUP.Optional.Kozaka.A
McAfee 5600.7254 Artemis!171DA209E2AF
McAfee-GW-Edition 7.7254 Artemis!171DA209E2AF
TrendMicro-HouseCall 7.2.11 TROJ_GEN.F47V1030
Vba32 AntiVirus AdWare.Agent
VIPRE Antivirus 25160 Yontoo (fs)
updateKozaka.exe (400b8f05ab4574d7d67b5ad367147a5f) has been flagged by the following 15 scanners:
Anti-Virus softwareSoftware versionDetection
avast! 8.0.1489.320 Win32:Kozak-B [PUP]
Avira ADWARE/BrowseFox.Gen7
AVware Yontoo (fs)
Baidu-International Adware.Win32.BrowseFox.BI
ESET-NOD32 10468 a variant of Win32/BrowseFox.H
F-Prot W32/A-db42cb3b!Eldorado
IKARUS anti.virus T3. PUA.BrowseFox
Kaspersky not-a-virus:HEUR:AdWare.MSIL.Kranet.heur
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.Kozaka.A
McAfee-GW-Edition v2014.2 Artemis
Panda Antivirus Trj/Chgt.G
Qihoo-360 Win32/Virus.Adware.708
VIPRE Antivirus 33436 Yontoo (fs)
       View all 28 all detections
Kozaka has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program detailsProgram details

Displayed publisher: Kozaka
URL: kozaka.net/support
Help link: mailto:[email protected]
Installation folder: C:\Program Files\Kozaka
Uninstaller: C:\Program Files\Kozaka\Kozakauninstall.exe
Estimated size: 763.21 KB

Program filesFiles installed by Kozaka

Program module:KozakaBHO.dll (Malware detected)
Signed by:kozaka
Path:C:\Program Files\Kozaka\KozakaBHO.dll
Additional files:
  • (Malware detected) KozakaBHO.dll - Kozaka
  • (Malware detected) updateKozaka.exe

Program behaviorsBehaviors exhibited

Internet Explorer BHO
  • KozakaBHO.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Kozaka' with the class of {a45e3fa8-5048-4372-94ad-c6661671f7fc}.
  • updateKozaka.exe runs as a service named 'Update Kozaka' (Update Kozaka).

How do I remove Kozaka?

You can uninstall Kozaka from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program Kozaka, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove Kozaka.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by Kozaka you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

Win 7 (SP1) 47%
Win XP 1%
Windows Service? Yes
(Installs a service)
Uninstall it 86%
Keep it 14%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 59.51%
Windows 10 26.38%
Windows XP 12.27%
Windows Vista 1.84%
Which OS releases does it run on?
Windows 7 Ultimate 29.01%
Windows 7 Home Premium 17.28%
Microsoft Windows XP 12.35%
Windows 7 Professional 9.26%
Windows 8.1 6.79%
Windows 8 Pro 4.94%

Distribution by countryGeography

12.41% of installs come from the United States
Which countries install it?
  United States 12.41%
  India 10.34%
  Iran 6.90%
  DZ 4.83%
  MA 3.45%
  IQ 3.45%
  Turkey 3.45%
  Italy 3.45%
  Brazil 2.76%
  Egypt 2.76%
  Saudi Arabia 2.76%
  United Kingdom 2.76%
  Belgium 2.07%
  Australia 2.07%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Dell 30.97%
Hewlett-Packard 21.24%
Toshiba 14.16%
Acer 12.39%
ASUS 8.85%
Intel 3.54%
Samsung 3.54%
Sony 0.88%
Common models
Dell Inspiron 3521 2.94%
Dell Inspiron N5050 2.94%
HP Pavilion g6 Notebook P... 2.94%
TOSHIBA Satellite S50-A 1.96%
Hewlett-Packard Compaq Pr... 1.96%

About Yontoo Technology

Yontoo, a subsidiary/alias of ad-hijacker Sambreel, is a publisher of ad-supported web browser extensions designed to inject and display advertisements within the browser.
Publisher URL: www.yontoo.com


user comment
No one has commented yet. Help others learn more about this software, share your comments.