Threat Database Adware Adware:Win32/Lollipop

Adware:Win32/Lollipop

By GoldSparrow in Adware

Threat Scorecard

Ranking: 3,627
Threat Level: 20 % (Normal)
Infected Computers: 35,321
First Seen: July 26, 2013
Last Seen: September 20, 2023
OS(es) Affected: Windows

Adware:Win32/Lollipop Image

Adware:Win32/Lollipop is often installed by a third party bundler. Some examples of threats designed to install Adware:Win32/Lollipop include SoftwareBundler:Win32/Lollipox and SoftwareBundler:Win32/Lollipos. It is important to note that it is usually possible to opt out of installing the Adware:Win32/Lollipop, meaning that being careful when installing new software is essential in order to avoid these kinds of threats. There are numerous installers bundled with popular freeware programs that are designed to install Adware:Win32/Lollipop and similar threats.

The Adware:Win32/Lollipop Uses Three Different Attack Methods

Initially, Adware:Win32/Lollipop will drop its executable file on the victim's computer. Adware:Win32/Lollipop then creates various files, which are dropped on various local folders. Every time the victim's operating system starts up, the Adware:Win32/Lollipop executable file will start up automatically. One of the interesting aspects of Adware:Win32/Lollipop is that Adware:Win32/Lollipop will modify its approach depending on the victim's operating system and security software. Adware:Win32/Lollipop will typically use one of the following three methods to attack a computer:

  1. Adware:Win32/Lollipop makes changes to the infected computer's registry, which allow Adware:Win32/Lollipop to start up automatically along with the operating system.
  2. Adware:Win32/Lollipop may create a new Registry entry that ensures that Adware:Win32/Lollipop runs automatically.
  3. Adware:Win32/Lollipop may also create a shortcut to its executable located in the Start-up folder, causing Adware:Win32/Lollipop to start up in the same manner as other programs designed to start up automatically upon start-up.

Adware:Win32/Lollipop is designed to force computer users to view online advertisements. An icon and pop-up windows may also appear on the victim's computer and Desktop without warning.

It is important to first uninstall Adware:Win32/Lollipop through normal means in order to ensure that all traces of this threat are gone from the targeted computer. Once Adware:Win32/Lollipop has been uninstalled, it is then necessary to use a reliable anti-malware program to scan the infected computer. This is due to the fact that pop-up advertisements and redirects associated with Adware:Win32/Lollipop may expose your Web browser to websites containing malicious content or promoting known online scams. It is usually then necessary to undo manually various changes that may have been made to your computer's and Web browser's settings.

SpyHunter Detects & Remove Adware:Win32/Lollipop

File System Details

Adware:Win32/Lollipop may create the following file(s):
# File Name MD5 Detections
1. lollipop.exe f784b22cae24132ab47e5cc9a418fb56 261
2. lollipop.exe ce1aa59fc711c39a345f0770fc30da8d 163
3. lollipop.exe 49e6cd136af22d388ab269433bd450e4 125
4. lollipop.exe a8603dad83a708d02fede9b5f955c936 122
5. lollipop.exe e6942689b4772ab1bcf4b2ea23bdf3e2 107
6. lollipop_03301529.exe 1516bdc7a7e693b49a01bfdba91e01d3 90
7. lollipop.exe ea3334f4564e40dcbd9b0d9d34552024 87
8. lollipop.exe 0042eeaa9638c47e5266ca48132ae913 84
9. lollipop_04181622.exe 244dd30974fc4f829a13b8d1fac89ad3 80
10. lollipop_01230933.exe 7d85fdea6827d949a7cc1344a80fe50c 71
11. lollipop.exe 3f604b4404be7f51f04acb7b1dabce55 70
12. lollipop.exe e8645db170e4abced4a268f97508c98a 62
13. lollipop.exe 0f074dceb553c9e8ddb082192bd30772 57
14. lollipop.exe 2c2684159c9b3a34b13ae5c08a7c062e 55
15. lollipop.exe 9f3ba5ca4b0fe8d69c1cb82727a5a50d 51
16. lollipop_04292001.exe efc8f8a5c58d6d85cd186460b193b0fd 47
17. lollipop_05062010.exe 0af7c5be58a67ac3d098ce137fa43c73 35
18. 723c2264d7ebe25354f2b1ba124e42b07ba14c30ca5d38fae27b76020f974bae 4346196036df6d4bb56d6f95114ef1a4 34
19. lollipop.exe 1cff4f77ad9e41693e0104f9e56f688c 34
20. lollipop.exe d04b6a8d3d8bad6f4633a8ddd09c85df 32
21. lollipop_03121320.exe 30b4343424ba93fed75f9f9b2195d0b4 31
22. lollipop.exe 06b1d77b281f1636ea21863967427ec9 28
23. Lollipop.exe 4bbad0a89d8526106ca6b7423e21e8c8 28
24. lollipop.exe a8c1bf27edb90bf21875f6bdbfa4f526 27
25. lollipop_04231403.exe a4f65a4be87844d554d2af2eec8a1635 25
26. lollipop_03261342.exe 6e092fe93f0cf96b36a0f975c135abb7 24
27. %LOCALAPPDATA%\Lollipop\lollipop.bat
28. %LOCALAPPDATA%\Lollipop\logo.ico
29. %LOCALAPPDATA%\Lollipop\Lollipop.lpd
30. %LOCALAPPDATA%\Lollipop\Lollipop_ps.lpd
31. LollipopInstaller.exe 78931038c829f9c9ab11af8447a72bd9 0
More files

Registry Details

Adware:Win32/Lollipop may create the following registry entry or registry entries:
File name without path
Lollipop.lnk
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce lollipop = "%LOCALAPPDATA%\Lollipop\lollipop.exe" lollipop
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER\Software\Wow6432Node\Google\Chrome\Extensions\nchpfiddbhbdnagofhkjlaiaejmkdcla path = "nchpfiddbhbdnagofhkjlaiaejmkdcla.crx"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run lollipop = "%LOCALAPPDATA%\Lollipop\lollipop.exe" lollipop
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER\Software\Google\Chrome\Extensions\nchpfiddbhbdnagofhkjlaiaejmkdcla path = "nchpfiddbhbdnagofhkjlaiaejmkdcla.crx"
HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER\Software\Mozilla\Extensions [ec8030f7-c20a-464f-9b0e-13a3a9e97384] = "[773F14E2-D643-4642-905E-1124C9A2170B].xpi"
Software\Classes\Applications\lollipop.exe
Software\lollipop

Directories

Adware:Win32/Lollipop may create the following directory or directories:

%APPDATA%\lollipop
%LOCALAPPDATA%\Lollipop
%UserProfile%\Local Settings\Application Data\Lollipop
%WINDIR%\system32\config\systemprofile\appdata\local\lollipop
%WINDIR%\syswow64\config\systemprofile\appdata\local\lollipop

Trending

Most Viewed

Loading...