Home Malware Programs Adware Boby Lyrics

Boby Lyrics

Posted: February 23, 2015

Threat Metric

Threat Level: 7/10
Infected PCs: 9,139
First Seen: August 1, 2013
Last Seen: October 20, 2024
OS(es) Affected: Windows

Boby Lyrics pretends to be a useful application that displays lyrics while users watch YouTube videos. Boby Lyrics is a product by Revizer Technologies Ltd and is known to be classified an adware-supported application. Boby Lyrics is distributed using bundling technique and created for the benefit of adware creators. The Boby Lyrics application may cause your system to display plenty of annoying advertisements and keep a record of your online activities. Collecting browsing history and habits is done in order to present relevant ads that users are more likely to click. In addition, Boby Lyrics may alter your default home page and search engine provider.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES%\BobyLyrics-15\BobyLyrics-15-bho.dll File name: BobyLyrics-15-bho.dll
Size: 598.52 KB (598528 bytes)
MD5: a010cd7a8e3d66bd5ed35645371d0611
Detection count: 635
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\BobyLyrics-15
Group: Malware file
Last Updated: August 17, 2017
%PROGRAMFILES(x86)%\ver3BobyLyrics\b1BobyLyricsAn175.exe File name: b1BobyLyricsAn175.exe
Size: 162.3 KB (162304 bytes)
MD5: 6be35e86fc628bed436a0c41c08478d6
Detection count: 595
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\ver3BobyLyrics
Group: Malware file
Last Updated: December 10, 2018
%PROGRAMFILES%\BobyLyrics-1\BobyLyrics-1-updater.exe File name: BobyLyrics-1-updater.exe
Size: 363.52 KB (363520 bytes)
MD5: fb269fba9d06bd2a0f56fee5661bab67
Detection count: 560
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\BobyLyrics-1
Group: Malware file
Last Updated: August 17, 2017
%PROGRAMFILES%\BobyLyrics-soft\BobyLyricsvzQ.exe File name: BobyLyricsvzQ.exe
Size: 383.48 KB (383488 bytes)
MD5: b44a78e8b05c6c4d8105d9ab3002a6e4
Detection count: 497
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\BobyLyrics-soft
Group: Malware file
Last Updated: November 14, 2019
%PROGRAMFILES(x86)%\ver3BobyLyrics\z4BobyLyricsh21.exe File name: z4BobyLyricsh21.exe
Size: 423.42 KB (423424 bytes)
MD5: 4eb45e4974113cd0eac63e0b729ffdf0
Detection count: 431
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\ver3BobyLyrics
Group: Malware file
Last Updated: December 10, 2018
%PROGRAMFILES%\BobyLyrics-1\BobyLyrics-1-codedownloader.exe File name: BobyLyrics-1-codedownloader.exe
Size: 487.42 KB (487424 bytes)
MD5: 0b59b00aa49e3ed3b0cd21882a636bb9
Detection count: 405
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\BobyLyrics-1
Group: Malware file
Last Updated: October 23, 2013
C:\Program Files\BobyLyrics-soft\BobyLyricsvzQjvw.exe File name: BobyLyricsvzQjvw.exe
Size: 77.31 KB (77312 bytes)
MD5: 273976b8a2b7ecf058d45d025f4c6c6f
Detection count: 377
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files\BobyLyrics-soft\BobyLyricsvzQjvw.exe
Group: Malware file
Last Updated: October 17, 2021
%PROGRAMFILES%\BobyLyrics-soft\BobyLyricsvzQ158.exe File name: BobyLyricsvzQ158.exe
Size: 142.84 KB (142848 bytes)
MD5: 01b8b87108692a71ca2a3b7136a9824b
Detection count: 354
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\BobyLyrics-soft
Group: Malware file
Last Updated: August 17, 2017
%PROGRAMFILES(x86)%\BobyLyrics-15\BobyLyrics-15-bho64.dll File name: BobyLyrics-15-bho64.dll
Size: 963.07 KB (963072 bytes)
MD5: 394a19388c384807d32a6f66e93125ee
Detection count: 54
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\BobyLyrics-15
Group: Malware file
Last Updated: August 17, 2017
%PROGRAMFILES%\BobyLyrics\BobyLyrics155.exe File name: BobyLyrics155.exe
Size: 180.73 KB (180736 bytes)
MD5: 82d7bfe001610023773744c89d035621
Detection count: 49
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\BobyLyrics
Group: Malware file
Last Updated: May 15, 2020
%PROGRAMFILES%\BobyLyrics-1\BobyLyrics-1-bho.dll File name: BobyLyrics-1-bho.dll
Size: 598.52 KB (598528 bytes)
MD5: 114b859f75229f32f27034bdd2e6c845
Detection count: 40
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\BobyLyrics-1
Group: Malware file
Last Updated: August 17, 2017
%PROGRAMFILES%\BobyLyrics-15\BobyLyrics-15-updater.exe File name: BobyLyrics-15-updater.exe
Size: 367.1 KB (367104 bytes)
MD5: 5ba0a85d85dcc146bf954fc36f0b80c8
Detection count: 37
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\BobyLyrics-15
Group: Malware file
Last Updated: October 23, 2013
%PROGRAMFILES%\bobylyrics-15\bobylyrics-15-bg.exe File name: bobylyrics-15-bg.exe
Size: 738.3 KB (738304 bytes)
MD5: 556735687ca8aabf9aacb3d84a515d62
Detection count: 28
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\bobylyrics-15
Group: Malware file
Last Updated: August 17, 2017
%PROGRAMFILES(x86)%\BobyLyrics-15\BobyLyrics-15-firefoxinstaller.exe File name: BobyLyrics-15-firefoxinstaller.exe
Size: 732.16 KB (732160 bytes)
MD5: 91cef1e7bc7cc35bfb4be523cb509567
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\BobyLyrics-15
Group: Malware file
Last Updated: October 23, 2013
%PROGRAMFILES%\BobyLyrics\125.dll File name: 125.dll
Size: 137.72 KB (137728 bytes)
MD5: cc2f0e8f2101ab177d343ecaa0bf1391
Detection count: 16
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\BobyLyrics
Group: Malware file
Last Updated: August 17, 2017
%PROGRAMFILES%\BobyLyrics\126.dll File name: 126.dll
Size: 134.65 KB (134656 bytes)
MD5: 4ea7b5ca873a24298e885f174ccfa545
Detection count: 14
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\BobyLyrics
Group: Malware file
Last Updated: August 17, 2017
%PROGRAMFILES%\BobyLyrics-1\BobyLyrics-1-enabler.exe File name: BobyLyrics-1-enabler.exe
Size: 346.62 KB (346624 bytes)
MD5: 5f3ec2f0b7dc017c452cb08b870ddb83
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\BobyLyrics-1
Group: Malware file
Last Updated: August 17, 2017
%PROGRAMFILES%\BobyLyrics\128.dll File name: 128.dll
Size: 137.21 KB (137216 bytes)
MD5: 24d6cc6514aced074b60c7c325bda0a7
Detection count: 7
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\BobyLyrics
Group: Malware file
Last Updated: August 17, 2017

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{11111111-1111-1111-1111-110411151137}{11111111-1111-1111-1111-110411411160}{22222222-2222-2222-2222-220422412260}{44444444-4444-4444-4444-440444414460}{55555555-5555-5555-5555-550455155537}{66666666-6666-6666-6666-660466156637}{d2f524ce-0889-46d9-97d3-a11f9d4d8d45}Regexp file mask%temp%\BobyLyrics[RANDOM CHARACTERS]HKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\BobyLyricsSoftware\AppDataLow\Software\BobyLyrics-1Software\AppDataLow\Software\BobyLyrics-15Software\AppDataLow\Software\BobyLyrics-16SOFTWARE\BobyLyrics-1SOFTWARE\BobyLyrics-16SOFTWARE\Classes\CrossriderApp0043914.SandboxSOFTWARE\Classes\CrossriderApp0043914.Sandbox.1Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\BobyLyrics-15Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\BobyLyrics-16Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110411151137}Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110411391114}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{03e147c7-39d9-44cf-aa32-d9412df0ac2b}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{046c881d-0e1d-4fc5-8e9e-a0ccef6e6789}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3a5e52f9-faa0-46c7-8cdf-0b1b4f917799}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6076b0ed-1458-46c8-9d77-f9614594cb47}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{b9f732cc-e4b7-4617-aba1-6fbc27c4292d}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{dc817a49-1588-4283-a9eb-94d7b54c927f}SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\BobyLyrics-15-bg.exeSOFTWARE\Microsoft\Tracing\Blyricsupd_RASAPI32SOFTWARE\Microsoft\Tracing\Blyricsupd_RASMANCSSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Boby Lyrics Update.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Boby Lyrics Update.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-1-chromeinstaller.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-1-chromeinstaller.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-1-codedownloader.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-1-codedownloader.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-1-enabler.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-1-enabler.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-1-firefoxinstaller.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-1-firefoxinstaller.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-1-updater.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-1-updater.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-15-chromeinstaller.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-15-chromeinstaller.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-15-codedownloader.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-15-codedownloader.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-15-enabler.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-15-enabler.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-15-firefoxinstaller.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-15-firefoxinstaller.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-15-updater.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\BobyLyrics-15-updater.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Boby Lyrics UpdateSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BobyLyrics-1-chromeinstallerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BobyLyrics-1-codedownloaderSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BobyLyrics-1-enablerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BobyLyrics-1-firefoxinstallerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BobyLyrics-1-updaterSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BobyLyrics-15-chromeinstallerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BobyLyrics-15-codedownloaderSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BobyLyrics-15-enablerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BobyLyrics-15-firefoxinstallerSoftware\Mozilla\Firefox\Extensions\lyrics@bobylyrics.coSoftware\Mozilla\Firefox\Extensions\{214af10b-6fec-4f33-a495-58c06205503e}Software\Mozilla\Firefox\Extensions\{27b9d298-3b63-4f5c-a723-1db3812ff13c}Software\Mozilla\Firefox\Extensions\{5fd43569-e769-47e4-8dba-f8ea8e77819b}Software\Mozilla\Firefox\Extensions\{cd282161-5776-4093-a0d6-af2c5b8cb31f}SOFTWARE\Wow6432Node\BobyLyrics-1SOFTWARE\Wow6432Node\BobyLyrics-15SOFTWARE\Wow6432Node\BobyLyrics-16SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{03a901cb-7b5d-43a1-aa68-cb4907e843fd}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2d9a9dc5-88d7-407e-89a4-a569a8dff3da}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9e557a33-1f68-49a9-ba20-748bbac1ec05}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{afd1c46f-2aff-41c3-9434-faa169ce2de2}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f9fc31c3-2523-48ac-9eb3-b2830f78e6eb}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\BobyLyrics-1-bg.exeSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\BobyLyrics-15-bg.exeSOFTWARE\Wow6432Node\Microsoft\Tracing\Blyricsupd_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\Blyricsupd_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411151137}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411391114}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}lyrics@bobylyrics.co

Additional Information

The following directories were created:
%ProgramFiles%\BobyLyrics%ProgramFiles%\BobyLyrics-1%ProgramFiles%\BobyLyrics-15%ProgramFiles%\BobyLyrics-16%ProgramFiles(x86)%\BobyLyrics%ProgramFiles(x86)%\BobyLyrics-1%ProgramFiles(x86)%\BobyLyrics-15
Loading...