Home Malware Programs Adware Adware.LyriXeeker

Adware.LyriXeeker

Posted: September 18, 2013

Threat Metric

Threat Level: 2/10
Infected PCs: 87,117
First Seen: September 18, 2013
Last Seen: October 31, 2022
OS(es) Affected: Windows

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES(x86)%\LyriXeeker\LyriXupdate.exe File name: LyriXupdate.exe
Size: 227.84 KB (227840 bytes)
MD5: edcc1adb51b6389f510b83bee1951fc7
Detection count: 1,452
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\LyriXeeker
Group: Malware file
Last Updated: August 25, 2017
C:\Program Files\LyriXeeker\128.dll File name: 128.dll
Size: 137.72 KB (137728 bytes)
MD5: 7e5f1e9d90c933e54c58730f3cc8c245
Detection count: 1,415
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Program Files\LyriXeeker\128.dll
Group: Malware file
Last Updated: September 15, 2022
%PROGRAMFILES(x86)%\LyriXeeker-1\LyriXeeker-1-bho64.dll File name: LyriXeeker-1-bho64.dll
Size: 940.54 KB (940544 bytes)
MD5: 1a8b331fcc6736a13be3c83244bd3915
Detection count: 1,293
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\LyriXeeker-1
Group: Malware file
Last Updated: January 1, 2019
%PROGRAMFILES(x86)%\LyriXeeker\LyriXupdate.exe File name: LyriXupdate.exe
Size: 227.84 KB (227840 bytes)
MD5: aa6db829b5abe4b013cb1600bcf0609a
Detection count: 1,241
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\LyriXeeker
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES%\LyriXeeker\LyriXupdate.exe File name: LyriXupdate.exe
Size: 227.84 KB (227840 bytes)
MD5: 4f8f21c7b6fada295395067ee627d13f
Detection count: 932
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyriXeeker
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES%\LyriXeeker-1\LyriXeeker-1-bho.dll File name: LyriXeeker-1-bho.dll
Size: 598.52 KB (598528 bytes)
MD5: bb212b74376af866427e7f7348f3c3bd
Detection count: 703
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\LyriXeeker-1
Group: Malware file
Last Updated: September 19, 2020
%PROGRAMFILES(x86)%\LyriXeeker\LyriXupdate.exe File name: LyriXupdate.exe
Size: 227.84 KB (227840 bytes)
MD5: 2e6d20eb1422a643f8a60946f77969e2
Detection count: 602
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\LyriXeeker
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES%\LyriXeeker-21\LyriXeeker-21-codedownloader.exe File name: LyriXeeker-21-codedownloader.exe
Size: 487.42 KB (487424 bytes)
MD5: 6a2469d93f846ac0236f4ec89b4705da
Detection count: 497
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyriXeeker-21
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES%\LyriXeeker-21\LyriXeeker-21-updater.exe File name: LyriXeeker-21-updater.exe
Size: 363.52 KB (363520 bytes)
MD5: 402c3af8e9b096f3e60733f50369843b
Detection count: 447
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyriXeeker-21
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES%\LyriXeeker\130.dll File name: 130.dll
Size: 145.92 KB (145920 bytes)
MD5: 270ffce01a8b1ed3770c1857f5c7e233
Detection count: 443
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\LyriXeeker
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES%\LyriXeeker\LyriXupdate.exe File name: LyriXupdate.exe
Size: 227.84 KB (227840 bytes)
MD5: 1b7082f468ba97c4e27787fb6e957792
Detection count: 412
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyriXeeker
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES%\LyriXeeker-21\LyriXeeker-21-chromeinstaller.exe File name: LyriXeeker-21-chromeinstaller.exe
Size: 484.86 KB (484864 bytes)
MD5: aa4bb67c00836bf057d5d682641a1ced
Detection count: 377
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyriXeeker-21
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES%\LyriXeeker-22\LyriXeeker-22-enabler.exe File name: LyriXeeker-22-enabler.exe
Size: 346.62 KB (346624 bytes)
MD5: 10fe3882f59c2247388d73a04a77c692
Detection count: 372
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyriXeeker-22
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES%\LyriXeeker\LyriXupdate.exe File name: LyriXupdate.exe
Size: 227.84 KB (227840 bytes)
MD5: fe1101b3deaa4ea6159e399c96407419
Detection count: 337
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyriXeeker
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES%\LyriXeeker\130.dll File name: 130.dll
Size: 145.4 KB (145408 bytes)
MD5: ddc2c95fb96bd855bdd0a6d8ac1ac32e
Detection count: 335
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\LyriXeeker
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES%\LyriXeeker-22\LyriXeeker-22-updater.exe File name: LyriXeeker-22-updater.exe
Size: 391.68 KB (391680 bytes)
MD5: b50bf2d2cb595033564d6acf983384eb
Detection count: 302
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyriXeeker-22
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES%\LyriXeeker\130.dll File name: 130.dll
Size: 145.4 KB (145408 bytes)
MD5: 318f2787f34c93d591857b79c9e8f0a2
Detection count: 274
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\LyriXeeker
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES%\LyriXeeker-21\LyriXeeker-21-firefoxinstaller.exe File name: LyriXeeker-21-firefoxinstaller.exe
Size: 722.94 KB (722944 bytes)
MD5: 711507f5c41b8c14b98add94f468dacb
Detection count: 241
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyriXeeker-21
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES(x86)%\LyriXeeker-15\LyriXeeker-15-firefoxinstaller.exe File name: LyriXeeker-15-firefoxinstaller.exe
Size: 722.94 KB (722944 bytes)
MD5: aba63d28805e92ac9fb88ad6307f377c
Detection count: 237
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\LyriXeeker-15
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES%\LyriXeeker-2\LyriXeeker-2-enabler.exe File name: LyriXeeker-2-enabler.exe
Size: 346.62 KB (346624 bytes)
MD5: 352d5a482176e7e55d1b5e23d57744b9
Detection count: 215
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyriXeeker-2
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES%\LyriXeeker-22\LyriXeeker-22-firefoxinstaller.exe File name: LyriXeeker-22-firefoxinstaller.exe
Size: 722.94 KB (722944 bytes)
MD5: bd3a91ba843e29c33600fcc02bd51e36
Detection count: 211
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LyriXeeker-22
Group: Malware file
Last Updated: August 25, 2017
%PROGRAMFILES(x86)%\LyriXeeker-15\LyriXeeker-15-codedownloader.exe File name: LyriXeeker-15-codedownloader.exe
Size: 487.42 KB (487424 bytes)
MD5: 8c4b3a3b737e5c65b3a2b211fa6e7c34
Detection count: 190
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\LyriXeeker-15
Group: Malware file
Last Updated: August 25, 2017

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{11111111-1111-1111-1111-110411181156}{22222222-2222-2222-2222-220422182256}{55555555-5555-5555-5555-550455185556}{66666666-6666-6666-6666-660466186656}Regexp file mask%WINDIR%\System32\Tasks\LyriXeeker-1-chromeinstaller%WINDIR%\System32\Tasks\LyriXeeker-1-codedownloader%WINDIR%\System32\Tasks\LyriXeeker-1-enabler%WINDIR%\System32\Tasks\LyriXeeker-1-firefoxinstaller%WINDIR%\System32\Tasks\LyriXeeker-1-updater%WINDIR%\Tasks\LyriXeeker-1-chromeinstaller.job%WINDIR%\Tasks\LyriXeeker-1-codedownloader.job%WINDIR%\Tasks\LyriXeeker-1-enabler.job%WINDIR%\Tasks\LyriXeeker-1-firefoxinstaller.job%WINDIR%\Tasks\LyriXeeker-1-updater.jobHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\LyriXeeker-1SOFTWARE\Classes\CrossriderApp0041856.BHOSOFTWARE\Classes\CrossriderApp0041856.BHO.1SOFTWARE\Classes\CrossriderApp0041856.SandboxSOFTWARE\Classes\CrossriderApp0041856.Sandbox.1Software\InstalledBrowserExtensions\Lyrics\41856SOFTWARE\InstalledThirdPartyPrograms\EID41856Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration\{11111111-1111-1111-1111-110411181156}SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\LyriXeeker-1-bg.exeSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-chromeinstallerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-codedownloaderSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-enablerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-firefoxinstallerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-updaterSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411181156}Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{11111111-1111-1111-1111-110411181156}SOFTWARE\Wow6432Node\LyriXeeker-1SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{090bb045-13a7-447c-b78e-30b1ddb41389}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2fa47400-045a-4ff8-81a2-377f157a4e5a}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37237a65-5777-43f2-ba9b-339de5a29d22}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4b7fb8aa-25e0-4a1d-ba79-f77e674dd6a2}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{90b3c11d-5652-4b5a-886b-9e20a42dbadc}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\LyriXeeker-1-bg.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411181156}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411181156}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}LyriXeeker-1

Additional Information

The following directories were created:
%PROGRAMFILES%\LyriXeeker-1%PROGRAMFILES(x86)%\LyriXeeker-1
The following URL's were detected:
LyriXeeker-1
Loading...