Home Malware Programs Adware Adware LyricsFan

Adware LyricsFan

Posted: September 24, 2013

Threat Metric

Ranking: 8,983
Threat Level: 2/10
Infected PCs: 75,893
First Seen: September 24, 2013
Last Seen: September 19, 2023
OS(es) Affected: Windows

Lyrics Fan is a potentially unwanted application, which is categorized as adware. Lyrics Fan may add relevant toolbars or have other uncertain intentions. Lyrics Fan may use deceptive techniques to boost traffic of a specific advertising website and earn money from sponsored links or other pay-per-click methods. Lyrics Fan may invade the PC packaged with freeware and shareware programs (video recording/streaming, download-managers or PDF creators). Lyrics Fan may also be packaged within the custom installer on many insecure download websites, so if the web user has downloaded a certain tool from insecure download websites, he might have also downloaded and installed Lyrics Fan through the setup process of another application. Lyrics Fan can be installed on Google Chrome, Internet Explorer and Mozilla Firefox. Lyrics Fan may interrupt the PC user every time he starts browsing the web. Lyrics Fan may show unwanted pop-up advertisements containing links that direct PC user to suspicious websites.

Aliases

Heuristic.BehavesLike.Win32.Suspicious-BAY.K [McAfee-GW-Edition]Lyrmix Agent [Sophos]

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES(x86)%\LyricsFan-2\LyricsFan-2-updater.exe File name: LyricsFan-2-updater.exe
Size: 363.52 KB (363520 bytes)
MD5: 4d90b3b1c1b89c4d3d23c4e676e5073f
Detection count: 6,038
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\LyricsFan-2
Group: Malware file
Last Updated: April 25, 2019
%PROGRAMFILES(x86)%\LyricsFan-2\LyricsFan-2-firefoxinstaller.exe File name: LyricsFan-2-firefoxinstaller.exe
Size: 722.94 KB (722944 bytes)
MD5: 973e6573d0a5346c3b918714c3eb13e9
Detection count: 3,935
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\LyricsFan-2
Group: Malware file
Last Updated: June 10, 2014
%PROGRAMFILES%\LyricsFan-21\LyricsFan-21-enabler.exe File name: LyricsFan-21-enabler.exe
Size: 346.62 KB (346624 bytes)
MD5: 515f5833ae2316b5d1699559d91cc536
Detection count: 3,623
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyricsFan-21
Group: Malware file
Last Updated: June 10, 2014
%PROGRAMFILES%\LyricsFan-21\LyricsFan-21-codedownloader.exe File name: LyricsFan-21-codedownloader.exe
Size: 487.42 KB (487424 bytes)
MD5: 60a906086a5046f610bffc00846d1f62
Detection count: 3,202
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyricsFan-21
Group: Malware file
Last Updated: June 10, 2014
%PROGRAMFILES%\LyricsFan-1\LyricsFan-1-firefoxinstaller.exe File name: LyricsFan-1-firefoxinstaller.exe
Size: 722.94 KB (722944 bytes)
MD5: 2f7615c396a51d8a69ce9323a52eb3ca
Detection count: 3,183
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyricsFan-1
Group: Malware file
Last Updated: January 23, 2022
%PROGRAMFILES%\LyricsFan-21\LyricsFan-21-updater.exe File name: LyricsFan-21-updater.exe
Size: 363.52 KB (363520 bytes)
MD5: cdf373e695616b911872d02ce42f1733
Detection count: 3,014
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyricsFan-21
Group: Malware file
Last Updated: June 10, 2014
%PROGRAMFILES(x86)%\LyricsFan-21\LyricsFan-21-firefoxinstaller.exe File name: LyricsFan-21-firefoxinstaller.exe
Size: 722.94 KB (722944 bytes)
MD5: ee5b71f3491aaa486f5ef229ae11540e
Detection count: 1,806
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\LyricsFan-21
Group: Malware file
Last Updated: August 7, 2018
%PROGRAMFILES(x86)%\LyricsFan-1\LyricsFan-1-bho64.dll File name: LyricsFan-1-bho64.dll
Size: 940.54 KB (940544 bytes)
MD5: 6fd131375424dc12701bcd01dffe3f21
Detection count: 1,747
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\LyricsFan-1
Group: Malware file
Last Updated: July 9, 2019
%PROGRAMFILES(x86)%\LyricsFan-2\LyricsFan-2-enabler.exe File name: LyricsFan-2-enabler.exe
Size: 346.62 KB (346624 bytes)
MD5: 41fa0a64f9354eaca4b4e7730513be75
Detection count: 1,710
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\LyricsFan-2
Group: Malware file
Last Updated: June 10, 2014
%PROGRAMFILES%\LyricsFan-1\LyricsFan-1-bho.dll File name: LyricsFan-1-bho.dll
Size: 598.52 KB (598528 bytes)
MD5: ed214c458e89e0e1e9c30ef975ec9ec7
Detection count: 1,543
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\LyricsFan-1
Group: Malware file
Last Updated: September 24, 2013
%PROGRAMFILES(x86)%\lyricsfan-1\lyricsfan-1-bg.exe File name: lyricsfan-1-bg.exe
Size: 738.3 KB (738304 bytes)
MD5: 8685771707f3b9c9c00e7ffb64fb7b7b
Detection count: 424
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\lyricsfan-1
Group: Malware file
Last Updated: January 23, 2022
F:\Users\<username>\AppData\Local\Temp\is1070216317\1056710_stp.EXE File name: 1056710_stp.EXE
Size: 5.49 MB (5497929 bytes)
MD5: dce33aec7a7c50d88dc5e5c8c6235ebc
Detection count: 56
File type: Executable File
Mime Type: unknown/EXE
Path: F:\Users\<username>\AppData\Local\Temp\is1070216317\1056710_stp.EXE
Group: Malware file
Last Updated: May 23, 2023
%PROGRAMFILES%\Lyrics_Fan\lrcsfans.exe File name: lrcsfans.exe
Size: 246.78 KB (246784 bytes)
MD5: 1dece6105523694c31004e5bbe61c033
Detection count: 50
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Lyrics_Fan
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES%\Lyrics_Fan\125.dll File name: 125.dll
Size: 137.72 KB (137728 bytes)
MD5: d588bff77b7d811ebfc43fad36a4079a
Detection count: 32
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Lyrics_Fan
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES%\Lyrics_Fan\lrcsfans.exe File name: lrcsfans.exe
Size: 234.49 KB (234496 bytes)
MD5: fe88c602c78367135a33da0127c4e587
Detection count: 11
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Lyrics_Fan
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES%\Lyrics_Fan\133.dll File name: 133.dll
Size: 146.43 KB (146432 bytes)
MD5: 2081f27102e0857ef66537f8de6c7088
Detection count: 10
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Lyrics_Fan
Group: Malware file
Last Updated: August 25, 2017
%ProgramFiles(x86)%\LyricsFan-1\LyricsFan-1-helper.exe File name: LyricsFan-1-helper.exe
Size: 311.29 KB (311296 bytes)
MD5: cca968de092461782b642900b54879c2
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %ProgramFiles(x86)%\LyricsFan-1
Group: Malware file
Last Updated: January 23, 2022
%ProgramFiles(x86)%\LyricsFan-1\LyricsFan-1-buttonutil.exe File name: LyricsFan-1-buttonutil.exe
Size: 338.94 KB (338944 bytes)
MD5: 089c0165223715c696c14e85ed7513c4
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %ProgramFiles(x86)%\LyricsFan-1
Group: Malware file
Last Updated: March 17, 2021

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{11111111-1111-1111-1111-110411181158}{22222222-2222-2222-2222-220422182258}{44444444-4444-4444-4444-440444184458}{55555555-5555-5555-5555-550455185558}{66666666-6666-6666-6666-660466186658}{A8720491-9558-4C0D-9E35-30EED15DFB2B}HKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\LyricsFan-1SOFTWARE\Classes\CrossriderApp0041858.BHOSOFTWARE\Classes\CrossriderApp0041858.BHO.1SOFTWARE\Classes\CrossriderApp0041858.SandboxSOFTWARE\Classes\CrossriderApp0041858.Sandbox.1Software\InstalledBrowserExtensions\LyricsSOFTWARE\LyricsFan-1Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110411181158}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{02f3d374-3c7d-4775-8f80-ae1eea424fc1}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6612e022-c83a-4c81-a935-d3d9e5a81e4b}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{71474ef2-3c48-4fe8-aa7b-c12a7abc667e}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f415c929-4cd1-4aea-a0a2-9bc0aa55d7ca}SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\LyricsFan-1-bg.exeSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-chromeinstaller.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-chromeinstaller.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-codedownloader.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-codedownloader.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-enabler.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-enabler.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-firefoxinstaller.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-firefoxinstaller.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-updater.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-updater.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyricsFan-1-chromeinstallerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyricsFan-1-codedownloaderSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyricsFan-1-enablerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyricsFan-1-firefoxinstallerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyricsFan-1-updaterSOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411181158}SOFTWARE\Wow6432Node\LyricsFan-1SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{02f3d374-3c7d-4775-8f80-ae1eea424fc1}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2a5d1635-bde4-4bf5-a85e-f879be1546bc}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6612e022-c83a-4c81-a935-d3d9e5a81e4b}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{71474ef2-3c48-4fe8-aa7b-c12a7abc667e}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f415c929-4cd1-4aea-a0a2-9bc0aa55d7ca}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\LyricsFan-1-bg.exeSYSTEM\ControlSet001\Services\LyricsFanSYSTEM\ControlSet002\Services\LyricsFanSYSTEM\CurrentControlSet\Services\LyricsFanHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}LyricsFan-1

Additional Information

The following directories were created:
%PROGRAMFILES%\LyricsFan-soft%PROGRAMFILES%\ver4LyricsFan%PROGRAMFILES(x86)%\LyricsFan-soft%ProgramFiles%\LyricsFan-1%ProgramFiles(x86)%\LyricsFan-1
The following URL's were detected:
LyricsFan-1
Loading...