Adware.LyriXeeker

By Domesticus in Browser Hijackers

Threat Scorecard

Threat Level:	20 % (Normal)
Infected Computers:	37,196

First Seen:	September 18, 2013
Last Seen:	October 31, 2022
OS(es) Affected:	Windows

Adware.LyriXeeker is adware that has been associated with numerous issues that range from innocuous to very disruptive. Adware.LyriXeeker has been linked to problems such as pop-up advertisements, browser redirects and system performance issues. The objective of Adware.LyriXeeker is to display advertisements on the affected Web browser. Although Adware.LyriXeeker is usually marketed as a useful tool, these types of components are usually categorized as PUPs (Potentially Unwanted Programs) because they cause irritating symptoms. Regardless of its claims, Adware.LyriXeeker is designed to expose computer users to advertisements instead of providing any type of useful service.

Table of Contents

Malware Researchers Consider Adware.LyriXeeker and Similar PUPs Potentially Harmful

Adware.LyriXeeker should be removed at once from the affected computer. Among the main reasons for this is the fact that Adware.LyriXeeker and PUPs that are linked with Adware.LyriXeeker are installed as Web browser extensions, browser helper objects or add-ons. This means that Adware.LyriXeeker is particularly harmful because Adware.LyriXeeker has open access to data on the affected Web browser. Adware.LyriXeeker may be used to keep tabs on your online activity, save data about your Web browsing habits and history, and then relay it to marketers or deliver advertisements based on it to your Web browser in the form of pop-up windows. Privacy concerns associated with Adware.LyriXeeker have resulted in malware analysts becoming worried about Adware.LyriXeeker and its potential effects on your Web browser. Any of the supposed benefits delivered by Adware.LyriXeeker may be found on free alternatives that are free of unwanted advertising material.

What Makes PUPs Like Adware.LyriXeeker Different from Other Potential Threats?

PUPs such as Adware.LyriXeeker are not considered as unsafe as other threats (such as Trojans, worms, viruses or rootkits) because they are often less difficult to remove and have fewer long term effects. However, content associated with Adware.LyriXeeker is still potentially threatening and may expose your computer to more risky components. Web browsers exposed to Adware.LyriXeeker may become very difficult to operate due to the constant interruptions, redirects and other irritating symptoms. This is more notable when content associated with Adware.LyriXeeker is not installed alone. Most PUPs are not stand-alone attacks but are often installed along with several other adware or browser hijacker infections. The result may make the affected Web browser crash frequently, take a very long time to load a normal Web page and display numerous other performance issues.

SpyHunter Detects & Remove Adware.LyriXeeker

File System Details

Adware.LyriXeeker may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	LyriXupdate.exe	edcc1adb51b6389f510b83bee1951fc7	620
Name: LyriXupdate.exe MD5: edcc1adb51b6389f510b83bee1951fc7 Size: 227.84 KB (227840 bytes) Detections: 620 Type: Executable File Path: %PROGRAMFILES(x86)%\LyriXeeker Group: Malware file Last Updated: August 25, 2017
2.	128.dll	7e5f1e9d90c933e54c58730f3cc8c245	604
Name: 128.dll MD5: 7e5f1e9d90c933e54c58730f3cc8c245 Size: 137.72 KB (137728 bytes) Detections: 604 Type: Dynamic link library Path: C:\Program Files\LyriXeeker\128.dll Group: Malware file Last Updated: September 15, 2022
3.	LyriXeeker-1-bho64.dll	1a8b331fcc6736a13be3c83244bd3915	552
Name: LyriXeeker-1-bho64.dll MD5: 1a8b331fcc6736a13be3c83244bd3915 Size: 940.54 KB (940544 bytes) Detections: 552 Type: Dynamic link library Path: %PROGRAMFILES(x86)%\LyriXeeker-1 Group: Malware file Last Updated: January 1, 2019
4.	LyriXupdate.exe	aa6db829b5abe4b013cb1600bcf0609a	530
Name: LyriXupdate.exe MD5: aa6db829b5abe4b013cb1600bcf0609a Size: 227.84 KB (227840 bytes) Detections: 530 Type: Executable File Path: %PROGRAMFILES(x86)%\LyriXeeker Group: Malware file Last Updated: August 25, 2017
5.	LyriXupdate.exe	4f8f21c7b6fada295395067ee627d13f	398
Name: LyriXupdate.exe MD5: 4f8f21c7b6fada295395067ee627d13f Size: 227.84 KB (227840 bytes) Detections: 398 Type: Executable File Path: %PROGRAMFILES%\LyriXeeker Group: Malware file Last Updated: August 25, 2017
6.	LyriXeeker-1-bho.dll	bb212b74376af866427e7f7348f3c3bd	300
Name: LyriXeeker-1-bho.dll MD5: bb212b74376af866427e7f7348f3c3bd Size: 598.52 KB (598528 bytes) Detections: 300 Type: Dynamic link library Path: %PROGRAMFILES%\LyriXeeker-1 Group: Malware file Last Updated: September 19, 2020
7.	LyriXupdate.exe	2e6d20eb1422a643f8a60946f77969e2	257
Name: LyriXupdate.exe MD5: 2e6d20eb1422a643f8a60946f77969e2 Size: 227.84 KB (227840 bytes) Detections: 257 Type: Executable File Path: %PROGRAMFILES(x86)%\LyriXeeker Group: Malware file Last Updated: August 25, 2017
8.	LyriXupdate.exe	27771390a4af4285475014263dc0ac26	246
Name: LyriXupdate.exe MD5: 27771390a4af4285475014263dc0ac26 Size: 227.84 KB (227840 bytes) Detections: 246 Type: Executable File Path: %PROGRAMFILES%\LyriXeeker Group: Malware file Last Updated: August 25, 2017
9.	LyriXeeker-21-codedownloader.exe	6a2469d93f846ac0236f4ec89b4705da	212
Name: LyriXeeker-21-codedownloader.exe MD5: 6a2469d93f846ac0236f4ec89b4705da Size: 487.42 KB (487424 bytes) Detections: 212 Type: Executable File Path: %PROGRAMFILES%\LyriXeeker-21 Group: Malware file Last Updated: August 25, 2017
10.	130.dll	f12206bbd451fd85427e80c4bd504168	191
Name: 130.dll MD5: f12206bbd451fd85427e80c4bd504168 Size: 145.4 KB (145408 bytes) Detections: 191 Type: Dynamic link library Path: %PROGRAMFILES%\LyriXeeker Group: Malware file Last Updated: August 25, 2017
11.	LyriXeeker-21-updater.exe	402c3af8e9b096f3e60733f50369843b	191
Name: LyriXeeker-21-updater.exe MD5: 402c3af8e9b096f3e60733f50369843b Size: 363.52 KB (363520 bytes) Detections: 191 Type: Executable File Path: %PROGRAMFILES%\LyriXeeker-21 Group: Malware file Last Updated: August 25, 2017
12.	130.dll	270ffce01a8b1ed3770c1857f5c7e233	189
Name: 130.dll MD5: 270ffce01a8b1ed3770c1857f5c7e233 Size: 145.92 KB (145920 bytes) Detections: 189 Type: Dynamic link library Path: %PROGRAMFILES%\LyriXeeker Group: Malware file Last Updated: August 25, 2017
13.	128.dll	36bdf8938ec94ac59cd0dd9bb7a8560f	182
Name: 128.dll MD5: 36bdf8938ec94ac59cd0dd9bb7a8560f Size: 137.72 KB (137728 bytes) Detections: 182 Type: Dynamic link library Path: %PROGRAMFILES%\LyriXeeker Group: Malware file Last Updated: August 25, 2017
14.	LyriXupdate.exe	1b7082f468ba97c4e27787fb6e957792	176
Name: LyriXupdate.exe MD5: 1b7082f468ba97c4e27787fb6e957792 Size: 227.84 KB (227840 bytes) Detections: 176 Type: Executable File Path: %PROGRAMFILES%\LyriXeeker Group: Malware file Last Updated: August 25, 2017
15.	LyriXeeker-15-bho64.dll	e69a8d29e0e46822c1fc6ce83a5bb177	167
Name: LyriXeeker-15-bho64.dll MD5: e69a8d29e0e46822c1fc6ce83a5bb177 Size: 954.36 KB (954368 bytes) Detections: 167 Type: Dynamic link library Path: %PROGRAMFILES(x86)%\LyriXeeker-15 Group: Malware file Last Updated: August 25, 2017
16.	LyriXeeker-21-chromeinstaller.exe	aa4bb67c00836bf057d5d682641a1ced	161
Name: LyriXeeker-21-chromeinstaller.exe MD5: aa4bb67c00836bf057d5d682641a1ced Size: 484.86 KB (484864 bytes) Detections: 161 Type: Executable File Path: %PROGRAMFILES%\LyriXeeker-21 Group: Malware file Last Updated: August 25, 2017
17.	LyriXeeker-22-enabler.exe	10fe3882f59c2247388d73a04a77c692	159
Name: LyriXeeker-22-enabler.exe MD5: 10fe3882f59c2247388d73a04a77c692 Size: 346.62 KB (346624 bytes) Detections: 159 Type: Executable File Path: %PROGRAMFILES%\LyriXeeker-22 Group: Malware file Last Updated: August 25, 2017
18.	LyriXupdate.exe	fe1101b3deaa4ea6159e399c96407419	144
Name: LyriXupdate.exe MD5: fe1101b3deaa4ea6159e399c96407419 Size: 227.84 KB (227840 bytes) Detections: 144 Type: Executable File Path: %PROGRAMFILES%\LyriXeeker Group: Malware file Last Updated: August 25, 2017
19.	130.dll	ddc2c95fb96bd855bdd0a6d8ac1ac32e	143
Name: 130.dll MD5: ddc2c95fb96bd855bdd0a6d8ac1ac32e Size: 145.4 KB (145408 bytes) Detections: 143 Type: Dynamic link library Path: %PROGRAMFILES%\LyriXeeker Group: Malware file Last Updated: August 25, 2017
20.	LyriXeeker-22-updater.exe	b50bf2d2cb595033564d6acf983384eb	129
Name: LyriXeeker-22-updater.exe MD5: b50bf2d2cb595033564d6acf983384eb Size: 391.68 KB (391680 bytes) Detections: 129 Type: Executable File Path: %PROGRAMFILES%\LyriXeeker-22 Group: Malware file Last Updated: August 25, 2017
21.	130.dll	318f2787f34c93d591857b79c9e8f0a2	117
Name: 130.dll MD5: 318f2787f34c93d591857b79c9e8f0a2 Size: 145.4 KB (145408 bytes) Detections: 117 Type: Dynamic link library Path: %PROGRAMFILES%\LyriXeeker Group: Malware file Last Updated: August 25, 2017
22.	LyriXeeker-21-firefoxinstaller.exe	711507f5c41b8c14b98add94f468dacb	103
Name: LyriXeeker-21-firefoxinstaller.exe MD5: 711507f5c41b8c14b98add94f468dacb Size: 722.94 KB (722944 bytes) Detections: 103 Type: Executable File Path: %PROGRAMFILES%\LyriXeeker-21 Group: Malware file Last Updated: August 25, 2017
23.	LyriXeeker-15-firefoxinstaller.exe	aba63d28805e92ac9fb88ad6307f377c	101
Name: LyriXeeker-15-firefoxinstaller.exe MD5: aba63d28805e92ac9fb88ad6307f377c Size: 722.94 KB (722944 bytes) Detections: 101 Type: Executable File Path: %PROGRAMFILES(x86)%\LyriXeeker-15 Group: Malware file Last Updated: August 25, 2017
24.	LyriXeeker-2-enabler.exe	352d5a482176e7e55d1b5e23d57744b9	92
Name: LyriXeeker-2-enabler.exe MD5: 352d5a482176e7e55d1b5e23d57744b9 Size: 346.62 KB (346624 bytes) Detections: 92 Type: Executable File Path: %PROGRAMFILES%\LyriXeeker-2 Group: Malware file Last Updated: August 25, 2017
25.	LyriXeeker-22-firefoxinstaller.exe	bd3a91ba843e29c33600fcc02bd51e36	90
Name: LyriXeeker-22-firefoxinstaller.exe MD5: bd3a91ba843e29c33600fcc02bd51e36 Size: 722.94 KB (722944 bytes) Detections: 90 Type: Executable File Path: %PROGRAMFILES%\LyriXeeker-22 Group: Malware file Last Updated: August 25, 2017
26.	LyriXeeker-15-codedownloader.exe	8c4b3a3b737e5c65b3a2b211fa6e7c34	81
Name: LyriXeeker-15-codedownloader.exe MD5: 8c4b3a3b737e5c65b3a2b211fa6e7c34 Size: 487.42 KB (487424 bytes) Detections: 81 Type: Executable File Path: %PROGRAMFILES(x86)%\LyriXeeker-15 Group: Malware file Last Updated: August 25, 2017

More files

Registry Details

Adware.LyriXeeker may create the following registry entry or registry entries:

CLSID

{11111111-1111-1111-1111-110411181156}

{22222222-2222-2222-2222-220422182256}

{55555555-5555-5555-5555-550455185556}

{66666666-6666-6666-6666-660466186656}

Regexp file mask

%WINDIR%\System32\Tasks\LyriXeeker-1-chromeinstaller

%WINDIR%\System32\Tasks\LyriXeeker-1-codedownloader

%WINDIR%\System32\Tasks\LyriXeeker-1-enabler

%WINDIR%\System32\Tasks\LyriXeeker-1-firefoxinstaller

%WINDIR%\System32\Tasks\LyriXeeker-1-updater

%WINDIR%\Tasks\LyriXeeker-1-chromeinstaller.job

%WINDIR%\Tasks\LyriXeeker-1-codedownloader.job

%WINDIR%\Tasks\LyriXeeker-1-enabler.job

%WINDIR%\Tasks\LyriXeeker-1-firefoxinstaller.job

%WINDIR%\Tasks\LyriXeeker-1-updater.job

HKEY..\..\..\..{RegistryKeys}

Software\AppDataLow\Software\LyriXeeker-1

SOFTWARE\Classes\CrossriderApp0041856.BHO

SOFTWARE\Classes\CrossriderApp0041856.BHO.1

SOFTWARE\Classes\CrossriderApp0041856.Sandbox

SOFTWARE\Classes\CrossriderApp0041856.Sandbox.1

Software\InstalledBrowserExtensions\Lyrics\41856

SOFTWARE\InstalledThirdPartyPrograms\EID41856

Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration\{11111111-1111-1111-1111-110411181156}

SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\LyriXeeker-1-bg.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-chromeinstaller

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-codedownloader

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-enabler

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-firefoxinstaller

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-updater

SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411181156}

Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{11111111-1111-1111-1111-110411181156}

SOFTWARE\Wow6432Node\LyriXeeker-1

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{090bb045-13a7-447c-b78e-30b1ddb41389}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2fa47400-045a-4ff8-81a2-377f157a4e5a}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37237a65-5777-43f2-ba9b-339de5a29d22}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4b7fb8aa-25e0-4a1d-ba79-f77e674dd6a2}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{90b3c11d-5652-4b5a-886b-9e20a42dbadc}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\LyriXeeker-1-bg.exe

SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411181156}

SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411181156}

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}

LyriXeeker-1

Directories

Adware.LyriXeeker may create the following directory or directories:

%PROGRAMFILES%\LyriXeeker-1

%PROGRAMFILES(x86)%\LyriXeeker-1

URLs

Adware.LyriXeeker may call the following URLs:

LyriXeeker-1

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Adware.LyriXeeker

Threat Scorecard

EnigmaSoft Threat Scorecard

Malware Researchers Consider Adware.LyriXeeker and Similar PUPs Potentially Harmful

What Makes PUPs Like Adware.LyriXeeker Different from Other Potential Threats?

SpyHunter Detects & Remove Adware.LyriXeeker

File System Details

Registry Details

Directories

URLs

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen