Home Malware Programs Adware Adware.LyricsBuddy

Adware.LyricsBuddy

Posted: October 2, 2013

Threat Metric

Ranking: 12,343
Threat Level: 2/10
Infected PCs: 31,808
First Seen: October 2, 2013
Last Seen: October 9, 2023
OS(es) Affected: Windows

LyricsBuddy is an adware that may be installed onto the computer together with other shareware and freeware that PC users download from the Internet. LyricsBuddy may show numerous random pop-up ads or ads associated with the web user's surfing routine, which contain offers and discounts, on the desktop of the computer system. LyricsBuddy may offer the PC user checking some prices comparisons, for example, when the computer user is visiting online shopping or social networking websites. The pop-up adverts of LyricsBuddy may declare to supposedly be sent by LyricsBuddy. If the PC user clicks on any pop-up adverts, LyricsBuddy may forcibly redirect him to commercial or even infected websites. LyricsBuddy may push doubtful advertisement websites, services and products. LyricsBuddy may also collect information about the computer user's search queries, browsing activity and websites he is visiting. This data can be very valuable and used by fraudsters for marketing purposes, especially, showing targeted pop-up ads. LyricsBuddy is not a malware threat, but it may pose a risk to the machine and cause numerous annoying activities on the computer.

Aliases

Artemis!7CC630196DEE [McAfee]Artemis!651F7CC04FD9 [McAfee]

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES%\LyricsBuddy-2\LyricsBuddy-2-updater.exe File name: LyricsBuddy-2-updater.exe
Size: 367.1 KB (367104 bytes)
MD5: d8d9142fecb6ef655e58723344e6b5e0
Detection count: 246
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyricsBuddy-2
Group: Malware file
Last Updated: August 24, 2017
%PROGRAMFILES(x86)%\di7LyricsBuddy\di8LyricsBuddyjl175.exe File name: di8LyricsBuddyjl175.exe
Size: 158.72 KB (158720 bytes)
MD5: cd897d8d2f55760c903590d8265aa551
Detection count: 215
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\di7LyricsBuddy
Group: Malware file
Last Updated: August 24, 2017
%PROGRAMFILES%\LyricsBuddy-soft\LyricsBuddyGvh158.exe File name: LyricsBuddyGvh158.exe
Size: 142.84 KB (142848 bytes)
MD5: 56d8e1e860f11857bac1132767e015eb
Detection count: 129
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyricsBuddy-soft
Group: Malware file
Last Updated: August 24, 2017
%PROGRAMFILES%\LyricsBuddy-soft\LyricsBuddyGvhQcw.exe File name: LyricsBuddyGvhQcw.exe
Size: 77.31 KB (77312 bytes)
MD5: feee440ff3b547d37d8c9f5a60940877
Detection count: 108
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyricsBuddy-soft
Group: Malware file
Last Updated: August 24, 2017
%PROGRAMFILES(x86)%\LyricsBuddy-soft\LyricsBuddyosr.exe File name: LyricsBuddyosr.exe
Size: 383.48 KB (383488 bytes)
MD5: 166c8161bb17fa752a44d1a7c435f06f
Detection count: 95
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\LyricsBuddy-soft
Group: Malware file
Last Updated: August 24, 2017
%PROGRAMFILES%\lyricsbuddy-1\lyricsbuddy-1-bg.exe File name: lyricsbuddy-1-bg.exe
Size: 855.9 KB (855902 bytes)
MD5: 3664eac4631427c24f31c053c61d66d6
Detection count: 52
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\lyricsbuddy-1
Group: Malware file
Last Updated: August 24, 2017
%PROGRAMFILES(x86)%\ver9AutoLyrics\j2AutoLyricsd58.exe File name: j2AutoLyricsd58.exe
Size: 513.53 KB (513536 bytes)
MD5: 217e35b97693327c30b75cd5fa371f5b
Detection count: 47
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\ver9AutoLyrics
Group: Malware file
Last Updated: January 7, 2015
%PROGRAMFILES(x86)%\LyricsBuddy-2\Uninstall.exe File name: Uninstall.exe
Size: 115.2 KB (115200 bytes)
MD5: 880e1604b0cdfbf8377696fc9012fd96
Detection count: 40
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\LyricsBuddy-2
Group: Malware file
Last Updated: August 24, 2017
%PROGRAMFILES%\LyricsBuddy-2\LyricsBuddy-2-codedownloader.exe File name: LyricsBuddy-2-codedownloader.exe
Size: 568.32 KB (568320 bytes)
MD5: bffdb939fc94e0382318e5a09c1b1e82
Detection count: 36
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyricsBuddy-2
Group: Malware file
Last Updated: August 24, 2017
C:\Program Files (x86)\LyricsBuddy-2\LyricsBuddy-2-bho64.dll File name: LyricsBuddy-2-bho64.dll
Size: 963.07 KB (963072 bytes)
MD5: ff5e4dbe69580820ed6da86d8179946c
Detection count: 26
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Program Files (x86)\LyricsBuddy-2\LyricsBuddy-2-bho64.dll
Group: Malware file
Last Updated: April 10, 2022
%PROGRAMFILES%\ver9AutoLyrics\V3oA178.exe File name: V3oA178.exe
Size: 292.35 KB (292352 bytes)
MD5: 031891689aa657de8551cd2eff253b96
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\ver9AutoLyrics
Group: Malware file
Last Updated: January 7, 2015
%PROGRAMFILES%\ver9AutoLyrics\178.dll File name: 178.dll
Size: 222.72 KB (222720 bytes)
MD5: 6aec603d6b6cd00cc8f332ae3ea2dd16
Detection count: 21
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\ver9AutoLyrics
Group: Malware file
Last Updated: January 7, 2015
%PROGRAMFILES%\ver9AutoLyrics\H4R.exe File name: H4R.exe
Size: 256 KB (256000 bytes)
MD5: 2d65a3cad1ca2d2f1861bbcf0200544b
Detection count: 19
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\ver9AutoLyrics
Group: Malware file
Last Updated: January 7, 2015
%PROGRAMFILES%\LyricsBuddy\LyricsBuddyGvhQcw.exe File name: LyricsBuddyGvhQcw.exe
Size: 77.31 KB (77312 bytes)
MD5: efeea3d8fdaffa90ec72830314b55437
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyricsBuddy
Group: Malware file
Last Updated: August 24, 2017
%PROGRAMFILES%\LyricsBuddy\LyricsBuddyGvh161.exe File name: LyricsBuddyGvh161.exe
Size: 143.87 KB (143872 bytes)
MD5: 0dd2162d4ef62cd5358d5a76d97d9152
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyricsBuddy
Group: Malware file
Last Updated: August 24, 2017
%PROGRAMFILES%\ver9LyricsBuddy\O8LyricsBuddyok175.exe File name: O8LyricsBuddyok175.exe
Size: 161.28 KB (161280 bytes)
MD5: 04dfd0c49060408bd88e330838ec1c16
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\ver9LyricsBuddy
Group: Malware file
Last Updated: August 24, 2017
%PROGRAMFILES%\ver9LyricsBuddy\L9LyricsBuddyJ.exe File name: L9LyricsBuddyJ.exe
Size: 100.86 KB (100864 bytes)
MD5: 69360e8a63ffaf671bb0df9eef6e45fa
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\ver9LyricsBuddy
Group: Malware file
Last Updated: August 24, 2017

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{11111111-1111-1111-1111-110411181168}{22222222-2222-2222-2222-220422182268}{44444444-4444-4444-4444-440444184468}{55555555-5555-5555-5555-550455185568}{66666666-6666-6666-6666-660466186668}Regexp file mask%WinDir%\System32\Tasks\LyricsBuddy[RANDOM CHARACTERS]%WinDir%\Tasks\LyricsBuddy[RANDOM CHARACTERS].jobHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\LyricsBuddy-1SOFTWARE\Classes\CrossriderApp0041868.BHOSOFTWARE\Classes\CrossriderApp0041868.BHO.1SOFTWARE\Classes\CrossriderApp0041868.SandboxSOFTWARE\Classes\CrossriderApp0041868.Sandbox.1Software\InstalledThirdPartyPrograms\EID41868Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration\{11111111-1111-1111-1111-110411181168}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0cf4b7fe-baa5-4490-badb-dee7095a7c93}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{42d03a8d-49f3-4dd1-bb8e-0886cbf7a36c}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8a03bfd1-725d-406c-aa0c-6350e32904bd}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e6b0854c-1f05-400e-849b-6ffb2a28b8d1}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f38e2d34-0a90-46f4-9d5c-298da7fe0b4d}SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsBuddy-1-enabler.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsBuddy-1-enabler.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyricsBuddy-1-enablerSOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411181168}Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{11111111-1111-1111-1111-110411181168}SOFTWARE\Wow6432Node\LyricsBuddy-1SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{42d03a8d-49f3-4dd1-bb8e-0886cbf7a36c}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8a03bfd1-725d-406c-aa0c-6350e32904bd}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e6b0854c-1f05-400e-849b-6ffb2a28b8d1}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f38e2d34-0a90-46f4-9d5c-298da7fe0b4d}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\LyricsBuddy-1-bg.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411181168}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}LyricsBuddy-1

Additional Information

The following URL's were detected:
LyricsBuddy
Loading...