Threat Database Adware Adware.LyricsSay

Adware.LyricsSay

By CagedTech in Adware
Published:
Last updated:

Threat Scorecard

Threat Level: 20 % (Normal)
Infected Computers: 37,521
First Seen: October 11, 2013
Last Seen: November 18, 2025
OS(es) Affected: Windows

The detection of Adware.LyricsSay on your system indicates the presence of unwanted software that may be displaying advertisements, collecting user data, or performing other potentially malicious activities. Adware is a type of software that is designed to display advertisements on a user's computer, often in the form of pop-ups, banners, or sponsored search results. While adware is not typically considered to be as dangerous as other types of malware, such as viruses or trojans, it can still cause problems for users and compromise their online security.

What Is Adware.LyricsSay?

Adware.LyricsSay is a type of adware that is designed to display advertisements on a user's computer. The exact nature and behavior of Adware.LyricsSay may vary, but it is likely to be similar to other types of adware. Adware often spreads through free software downloads, infected websites, or email attachments. Once installed, adware can collect user data, such as browsing history and search queries, and use this information to display targeted advertisements. In some cases, adware may also install additional software or modify system settings without the user's knowledge or consent.

How Adware.LyricsSay Operates

Adware.LyricsSay is likely to operate in a similar way to other types of adware. It may install itself on a user's computer through a variety of means, including free software downloads, infected websites, or email attachments. Once installed, it may collect user data and use this information to display targeted advertisements. Adware may also install additional software or modify system settings without the user's knowledge or consent. In some cases, adware may also attempt to evade detection by anti-virus software or other security tools.

Symptoms of Infection

The symptoms of an Adware.LyricsSay infection may vary, but common signs include an increase in pop-up advertisements, sponsored search results, or other types of unwanted ads. Users may also notice that their browser homepage or search engine has been changed without their consent. In some cases, adware may also cause system slowdowns, crashes, or other problems. If you suspect that your computer has been infected with Adware.LyricsSay, it is essential to take immediate action to remove the adware and prevent further damage.

  • Increased pop-up advertisements or sponsored search results
  • Changes to browser settings, such as a new homepage or search engine
  • System slowdowns, crashes, or other problems
  • Unwanted software installations or system modifications

How to Remove Adware.LyricsSay

  1. Boot your computer in Safe Mode with Networking to prevent the adware from loading
  2. Perform a full scan of your system using a reputable anti-virus tool, such as SpyHunter, to detect and remove the adware
  3. Uninstall any suspicious programs or software that may be related to the adware
  4. Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any changes made by the adware
  5. Reboot your computer and perform a follow-up scan to ensure that the adware has been completely removed

Conclusion

Removing Adware.LyricsSay from your system requires careful attention to detail and a thorough understanding of how adware operates. By following the steps outlined above, you can help to protect your computer and personal data from the risks associated with adware. It is essential to remain vigilant and take proactive steps to prevent future infections, such as avoiding suspicious downloads, using reputable anti-virus software, and keeping your operating system and software up to date. By taking these precautions, you can help to ensure a safe and secure online experience.

Aliases

15 security vendors flagged this file as malicious.

Antivirus Vendor Detection
AVG Generic5.AIIQ
Panda Suspicious file
Sophos Generic PUA HO
Symantec Adware.FindLyrics
McAfee Artemis!07E4730A2571
McAfee Artemis!C2FA21DE1DC8
AVG Generic_r.GS
McAfee-GW-Edition Heuristic.BehavesLike.Win32.Suspicious-BAY.K
McAfee Artemis!FA709705174C
Fortinet Adware/Lyckriks
Antiy-AVL AdWare/Win32.Lyckriks
F-Secure Adware.Generic.600764
Comodo ApplicUnwnt
Sophos Generic PUA MO
Kaspersky not-a-virus:AdWare.Win32.Lyckriks.lb

SpyHunter Detects & Remove Adware.LyricsSay

File System Details

Adware.LyricsSay may create the following file(s):
# File Name MD5 Detections
1. LyricsSay-15-bho64.dll 587fa643a3d99613c20d766ec9181d1e 1,751
2. LyricsSay-1-bho.dll c21a59a30a2b774fa81c95b19e5b779a 973
3. lyricssay-15-bg.exe 0d022d319270d1aed2062891a8fb1d0e 262
4. lyricssay-16-bg.exe 3b93695c2ce43188363b478e185be01f 165
5. LyricsSay-1-enabler.exe dfd48d4408802bf40625f39cc03360de 119
6. 178.dll a428b06df6148464853668771ecb79f4 41
7. LyricsSaypUbMDw.exe 0059fd759d4e98e5fc164923eb4c804b 20
8. M5tq178.exe 312fe86e93f9d7d960163dd38f35e77d 14
9. e0f.exe 2442f711a5130e3cb083945a36947e56 13
10. LyricsSaypUb.exe be7fac06cd1d6ddd68dcdc2a3b8d71f7 11
11. d1LyricsSayn21.exe 36c74b3116aa8fd70f55d5c21cd6a98e 5
12. LyricsSay-15-updater.exe dcf466549fb6cd42bb3ec1176e459629 2
13. LyricsSay-16-chromeinstaller.exe ee5a33456c2fcddad37aa393fdb460f5 2
14. LyricsSay-16-firefoxinstaller.exe ea8e1f8b9a68f21b089d63564954810d 2
15. Oggknmrpx.exe f49bb829214610863d75d762f346f796 1
16. LyricsSay-16-bho.dll 060a3cf9ac0f667cb7d6147beee4eb37 1
17. LyricsSay-15-bho.dll b77fefc66454c169cb6e702df40aea36 1
18. LyricsSay_1060-8002_v122.exe 51c32c1c21cd21d579a34e08215f3301 1
19. LyricsSay-16-bho64.dll 607ae7a94b24e5b272c6184d2596ad8c 1
20. LyricsSay-16-codedownloader.exe c6d6e1ad19e3ca65125c8a0cb927b3b0 1
21. LyricsSay-16-enabler.exe 90176dfc09cb0041355f3a4218f6f978 1
22. LyricsSay-16-updater.exe 1abde968623f78fd5d8c7534205be262 1
23. LyricsSay-15-chromeinstaller.exe 4144910b2506900cc759c4779d574230 1
24. LyricsSay-15-codedownloader.exe af596e7cba9f46da72dd2684a5f22ab4 1
25. LyricsSay-15-enabler.exe 28df513d49a2c3f60b54a810203f1f18 1
26. LyricsSay-15-firefoxinstaller.exe 4936395482195093eede0fb10a1bdd71 1
More files

Registry Details

Adware.LyricsSay may create the following registry entry or registry entries:
CLSID
{11111111-1111-1111-1111-110411151152}
{22222222-2222-2222-2222-220422152252}
{44444444-4444-4444-4444-440444154452}
{55555555-5555-5555-5555-550455155552}
{66666666-6666-6666-6666-660466156652}
Regexp file mask
%WinDir%\System32\Tasks\LyricsSay-1-enabler
%WinDir%\Tasks\LyricsSay-1-enabler.job
Software\AppDataLow\Software\LyricsSay-1
SOFTWARE\Classes\CrossriderApp0041552.BHO
SOFTWARE\Classes\CrossriderApp0041552.BHO.1
SOFTWARE\Classes\CrossriderApp0041552.Sandbox
SOFTWARE\Classes\CrossriderApp0041552.Sandbox.1
Software\InstalledThirdPartyPrograms\EID41552
SOFTWARE\LyricsSay-1
Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110411151152}
Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration\{11111111-1111-1111-1111-110411151152}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{25721a53-294e-4177-9d4a-ff72a748a486}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{344beb71-0de9-46cc-8aa4-67a935d23fe4}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4da6a9c3-3299-4328-a906-fa86ff1272a0}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5e5c21dc-2a32-46fe-b628-7c9a0da4df61}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79606797-a9a0-4c68-aaec-e369a7612da0}
SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\LyricsSay-1-bg.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyricsSay-1-enabler
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411151152}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110411151152}
Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{11111111-1111-1111-1111-110411151152}
SOFTWARE\Wow6432Node\LyricsSay-1
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{25721a53-294e-4177-9d4a-ff72a748a486}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{344beb71-0de9-46cc-8aa4-67a935d23fe4}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3a427c33-ee16-476b-8199-db28c855160d}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{45c7ba75-e8b5-48a0-a746-79b822c963cc}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4da6a9c3-3299-4328-a906-fa86ff1272a0}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5e5c21dc-2a32-46fe-b628-7c9a0da4df61}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{741d0c1f-1250-4006-bdc0-0671383f2db7}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79606797-a9a0-4c68-aaec-e369a7612da0}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{92067849-b941-4a8e-b45b-2ab5ee38df9d}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{b11c38fe-61eb-4a06-b901-b3dcce8e66ca}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\LyricsSay-1-bg.exe
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411151152}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LyricsSay-1

Directories

Adware.LyricsSay may create the following directory or directories:

%PROGRAMFILES%\LyricsSay-1
%PROGRAMFILES(x86)%\LyricsSay-1

URLs

Adware.LyricsSay may call the following URLs:

LyricsSay