Adware.LyricsPlug

Posted: November 13, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	2/10
Infected PCs:	3,225

First Seen:	November 13, 2013
Last Seen:	November 4, 2021
OS(es) Affected:	Windows

LyricsPlug is a PUP or Potentially Unwanted Program that's known for its display of advertisements that are injected into your browser. Because these types of advertisements often are sources of performance issues and even attacks against your computer, deleting LyricsPlug always is recommended by malware researchers, even if you find some benefits from its lyrics-related feature set. Distribution methods for LyricsPlug, like most other adware products of the same type, are expected to be using software bundles on free software sources as ways to install LyricsPlug along with a more desirable program that encourages you to download Bizzybolt in the first place. Accordingly, user behavior remains at the root of LyricsPlug problems, even if good security products can clean up the aftereffects of a PC user's mistakes.

When Your Browser's Plugin Equates to Advertisements

LyricsPlug is adware intended to profit off of PC users who are more interested in singing to songs than they are in watching the integrity of their Web browser. Although LyricsPlug does provide some minor lyrics-based features and doesn't attack your PC, LyricsPlug still is considered a PUP that, in most situations, should be removed for your browser's ultimate well-being. Malware experts may be happy that LyricsPlug only confines its negative functions to those of a typical adware add-on, but the lack of harmful intent doesn't excuse browser functions such as:

Injecting hyperlinks, banners and other advertising content. By changing a Web page as it's loaded to show new content, LyricsPlug may interfere with how you access these websites, slow down your browser or block aspects of the interface.
Loading full-sized window advertisements through pop-ups, pop-unders (similar to pop-ups, but underneath your main browser window) or interstitial content.

LyricsPlug's advertisements are possible sources of attacks against your PC, and malware researchers consider it unwise, at best, to trust advertisements promoted by sources that haven't been verified to filter content for the collective safety of their viewers. Threats are often seen traveling through these types of insecure advertisement networks including disguised phishing attacks that collect private information, threats disguised as software updates and fraudulent security products promoted through simulations of system scans, although this list isn't conclusive.

Pulling the Plug on this Lyrical Adware

Keeping your browser to sites that don't distribute adware and other low-level PC threats such as browser hijackers or pseudo-illegitimate toolbars, offers one of the easiest ways of avoiding a LyricsPlug problem. If there's any question as to whether or not an installer could be bundling LyricsPlug or another Potentially Unwanted Program, anti-malware analysis should be able to detect most types of bundlers during a basic file scan. LyricsPlug appears to be predominant on Windows computers, but malware researchers also have seen all, but indistinguishable adware issues plaguing other operating systems.

If the time comes to remove LyricsPlug and its advertisements from your Web browser, you usually shouldn't resort to default software uninstallation methods (the Control Panel or your browser's add-on settings, for example) as primary options. Most adware products may uninstall themselves incompletely or not at all. To ensure your computer's absolute safety, using good security tools to remove LyricsPlug always is recommended whenever malware experts consider it to be applicable.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

%PROGRAMFILES(x86)%\LyricsPlug\lplugUpdater.exe

File name: lplugUpdater.exe
Size: 118.27 KB (118272 bytes)
MD5: 33c3b6fc471ea5ae647e48565ef6fa6b
Detection count: 230
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\LyricsPlug
Group: Malware file
Last Updated: November 13, 2013

%PROGRAMFILES%\LyricsPlug\lrcsplug.dll

File name: lrcsplug.dll
Size: 127.48 KB (127488 bytes)
MD5: ac534fd601db44ba5e452b7b1d5ac3f7
Detection count: 63
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\LyricsPlug
Group: Malware file
Last Updated: November 13, 2013

More files

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\LyricsPlug

Additional Information

The following directories were created:

%LocalAppData%\Google\Chrome\User Data\Default\Extensions\imidjjbllhcgdgpggpgnojjphnponilb%LocalAppData%\Google\Chrome\User Data\Default\databases\chrome-extension_imidjjbllhcgdgpggpgnojjphnponilb_0%ProgramFiles%\LyricsPlug%ProgramFiles(x86)%\LyricsPlug