LyricsBuddy

By LoneStar in Adware

Threat Scorecard

Ranking:	10,713
Threat Level:	20 % (Normal)
Infected Computers:	13,579

First Seen:	October 2, 2013
Last Seen:	September 15, 2023
OS(es) Affected:	Windows

LyricsBuddy is an adware that may be installed into the PC bundled with other free software programs that computer users download from the net. LyricsBuddy may show annoying random pop-up adverts or adverts connected with the PC user's browsing routine, which may encompass offers and discounts, on the desktop of the machine. LyricsBuddy may offer the computer user checking some price comparisons, for example, when the web user is visiting online shopping or social networking websites. The pop-up ads of LyricsBuddy may press the PC user to click on them. If the PC user clicks on any pop-up adverts, LyricsBuddy may unwillingly reroute him to advertising or even infectious websites. LyricsBuddy may advertise dubious advertising websites, services and products. LyricsBuddy may also collect information about the web user's search requests, browsing habits and websites he is visiting. This data can be very beneficial and used by attackers for marketing campaigns, especially, displaying targeted pop-up adverts. LyricsBuddy is not a malware infection, but it may set the computer system in danger of being infected with malware and lead to numerous irritating activities on the PC.

Table of Contents

Aliases

2 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
McAfee	Artemis!7CC630196DEE
McAfee	Artemis!651F7CC04FD9

SpyHunter Detects & Remove LyricsBuddy

File System Details

LyricsBuddy may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	LyricsBuddy-2-updater.exe	d8d9142fecb6ef655e58723344e6b5e0	105
Name: LyricsBuddy-2-updater.exe MD5: d8d9142fecb6ef655e58723344e6b5e0 Size: 367.1 KB (367104 bytes) Detections: 105 Type: Executable File Path: %PROGRAMFILES%\LyricsBuddy-2 Group: Malware file Last Updated: August 24, 2017
2.	LyricsBuddy-2-codedownloader.exe	303cd3b6bd13d6fb2dce9cefbabfb291	92
Name: LyricsBuddy-2-codedownloader.exe MD5: 303cd3b6bd13d6fb2dce9cefbabfb291 Size: 494.59 KB (494592 bytes) Detections: 92 Type: Executable File Path: %PROGRAMFILES%\LyricsBuddy-2 Group: Malware file Last Updated: August 24, 2017
3.	di8LyricsBuddyjl175.exe	cd897d8d2f55760c903590d8265aa551	92
Name: di8LyricsBuddyjl175.exe MD5: cd897d8d2f55760c903590d8265aa551 Size: 158.72 KB (158720 bytes) Detections: 92 Type: Executable File Path: %PROGRAMFILES(x86)%\di7LyricsBuddy Group: Malware file Last Updated: August 24, 2017
4.	LyricsBuddy-2-chromeinstaller.exe	2ada1ad98508a8adf6eee75f17c4acaf	80
Name: LyricsBuddy-2-chromeinstaller.exe MD5: 2ada1ad98508a8adf6eee75f17c4acaf Size: 471.04 KB (471040 bytes) Detections: 80 Type: Executable File Path: %PROGRAMFILES%\LyricsBuddy-2 Group: Malware file Last Updated: August 24, 2017
5.	LyricsBuddy-2-enabler.exe	a116a7789f7d12a1499fea3e7ca3689b	68
Name: LyricsBuddy-2-enabler.exe MD5: a116a7789f7d12a1499fea3e7ca3689b Size: 343.55 KB (343552 bytes) Detections: 68 Type: Executable File Path: %PROGRAMFILES%\LyricsBuddy-2 Group: Malware file Last Updated: August 24, 2017
6.	di6LyricsBuddyM.exe	23e25455c304ea57d71acab46051a465	68
Name: di6LyricsBuddyM.exe MD5: 23e25455c304ea57d71acab46051a465 Size: 98.3 KB (98304 bytes) Detections: 68 Type: Executable File Path: %PROGRAMFILES(x86)%\di7LyricsBuddy Group: Malware file Last Updated: August 24, 2017
7.	di1LyricsBuddyd16.exe	8eaece76da02cbb8b58204b1b71a1274	61
Name: di1LyricsBuddyd16.exe MD5: 8eaece76da02cbb8b58204b1b71a1274 Size: 422.4 KB (422400 bytes) Detections: 61 Type: Executable File Path: %PROGRAMFILES(x86)%\di7LyricsBuddy Group: Malware file Last Updated: August 24, 2017
8.	LyricsBuddyGvh158.exe	56d8e1e860f11857bac1132767e015eb	55
Name: LyricsBuddyGvh158.exe MD5: 56d8e1e860f11857bac1132767e015eb Size: 142.84 KB (142848 bytes) Detections: 55 Type: Executable File Path: %PROGRAMFILES%\LyricsBuddy-soft Group: Malware file Last Updated: August 24, 2017
9.	LyricsBuddyGvhQcw.exe	feee440ff3b547d37d8c9f5a60940877	46
Name: LyricsBuddyGvhQcw.exe MD5: feee440ff3b547d37d8c9f5a60940877 Size: 77.31 KB (77312 bytes) Detections: 46 Type: Executable File Path: %PROGRAMFILES%\LyricsBuddy-soft Group: Malware file Last Updated: August 24, 2017
10.	LyricsBuddyGvh.exe	eb65a6a0e51c307c3130ce26a85e442d	33
Name: LyricsBuddyGvh.exe MD5: eb65a6a0e51c307c3130ce26a85e442d Size: 383.48 KB (383488 bytes) Detections: 33 Type: Executable File Path: %PROGRAMFILES%\LyricsBuddy-soft Group: Malware file Last Updated: August 24, 2017
11.	j2AutoLyricsd58.exe	217e35b97693327c30b75cd5fa371f5b	20
Name: j2AutoLyricsd58.exe MD5: 217e35b97693327c30b75cd5fa371f5b Size: 513.53 KB (513536 bytes) Detections: 20 Type: Executable File Path: %PROGRAMFILES(x86)%\ver9AutoLyrics Group: Malware file Last Updated: January 7, 2015
12.	Uninstall.exe	880e1604b0cdfbf8377696fc9012fd96	17
Name: Uninstall.exe MD5: 880e1604b0cdfbf8377696fc9012fd96 Size: 115.2 KB (115200 bytes) Detections: 17 Type: Executable File Path: %PROGRAMFILES(x86)%\LyricsBuddy-2 Group: Malware file Last Updated: August 24, 2017
13.	LyricsBuddy-2-bho64.dll	ff5e4dbe69580820ed6da86d8179946c	11
Name: LyricsBuddy-2-bho64.dll MD5: ff5e4dbe69580820ed6da86d8179946c Size: 963.07 KB (963072 bytes) Detections: 11 Type: Dynamic link library Path: C:\Program Files (x86)\LyricsBuddy-2\LyricsBuddy-2-bho64.dll Group: Malware file Last Updated: April 10, 2022
14.	V3oA178.exe	031891689aa657de8551cd2eff253b96	10
Name: V3oA178.exe MD5: 031891689aa657de8551cd2eff253b96 Size: 292.35 KB (292352 bytes) Detections: 10 Type: Executable File Path: %PROGRAMFILES%\ver9AutoLyrics Group: Malware file Last Updated: January 7, 2015
15.	178.dll	6aec603d6b6cd00cc8f332ae3ea2dd16	9
Name: 178.dll MD5: 6aec603d6b6cd00cc8f332ae3ea2dd16 Size: 222.72 KB (222720 bytes) Detections: 9 Type: Dynamic link library Path: %PROGRAMFILES%\ver9AutoLyrics Group: Malware file Last Updated: January 7, 2015
16.	LyricsBuddyosrmXw.exe	10998d2ffe6dd8e329bdc1a87dadb61b	8
Name: LyricsBuddyosrmXw.exe MD5: 10998d2ffe6dd8e329bdc1a87dadb61b Size: 77.31 KB (77312 bytes) Detections: 8 Type: Executable File Path: %PROGRAMFILES%\LyricsBuddy-soft Group: Malware file Last Updated: August 24, 2017
17.	H4R.exe	2d65a3cad1ca2d2f1861bbcf0200544b	8
Name: H4R.exe MD5: 2d65a3cad1ca2d2f1861bbcf0200544b Size: 256 KB (256000 bytes) Detections: 8 Type: Executable File Path: %PROGRAMFILES%\ver9AutoLyrics Group: Malware file Last Updated: January 7, 2015
18.	LyricsBuddyGvhQcw.exe	efeea3d8fdaffa90ec72830314b55437	7
Name: LyricsBuddyGvhQcw.exe MD5: efeea3d8fdaffa90ec72830314b55437 Size: 77.31 KB (77312 bytes) Detections: 7 Type: Executable File Path: %PROGRAMFILES%\LyricsBuddy Group: Malware file Last Updated: August 24, 2017
19.	LyricsBuddyGvh161.exe	0dd2162d4ef62cd5358d5a76d97d9152	7
Name: LyricsBuddyGvh161.exe MD5: 0dd2162d4ef62cd5358d5a76d97d9152 Size: 143.87 KB (143872 bytes) Detections: 7 Type: Executable File Path: %PROGRAMFILES%\LyricsBuddy Group: Malware file Last Updated: August 24, 2017
20.	O8LyricsBuddyok175.exe	04dfd0c49060408bd88e330838ec1c16	6
Name: O8LyricsBuddyok175.exe MD5: 04dfd0c49060408bd88e330838ec1c16 Size: 161.28 KB (161280 bytes) Detections: 6 Type: Executable File Path: %PROGRAMFILES%\ver9LyricsBuddy Group: Malware file Last Updated: August 24, 2017
21.	L9LyricsBuddyJ.exe	69360e8a63ffaf671bb0df9eef6e45fa	4
Name: L9LyricsBuddyJ.exe MD5: 69360e8a63ffaf671bb0df9eef6e45fa Size: 100.86 KB (100864 bytes) Detections: 4 Type: Executable File Path: %PROGRAMFILES%\ver9LyricsBuddy Group: Malware file Last Updated: August 24, 2017
22.	LyricsBuddyGvh.exe	8207c2677048be3f15c459453f20dbc7	3
Name: LyricsBuddyGvh.exe MD5: 8207c2677048be3f15c459453f20dbc7 Size: 365.05 KB (365056 bytes) Detections: 3 Type: Executable File Path: %PROGRAMFILES%\LyricsBuddy Group: Malware file Last Updated: August 24, 2017
23.	175.dll	f712e8d1eacdc55ecddbf29925686a76	3
Name: 175.dll MD5: f712e8d1eacdc55ecddbf29925686a76 Size: 193.02 KB (193024 bytes) Detections: 3 Type: Dynamic link library Path: %PROGRAMFILES%\ver9LyricsBuddy Group: Malware file Last Updated: August 24, 2017
24.	x9LyricsBuddyC65.exe	29298711c9c59e410293962aa6cbac36	3
Name: x9LyricsBuddyC65.exe MD5: 29298711c9c59e410293962aa6cbac36 Size: 423.42 KB (423424 bytes) Detections: 3 Type: Executable File Path: %PROGRAMFILES%\ver9LyricsBuddy Group: Malware file Last Updated: August 24, 2017
25.	LyricsBuddy-2-enabler.exe	14c871aa82d7aae58162a8f480601495	2
Name: LyricsBuddy-2-enabler.exe MD5: 14c871aa82d7aae58162a8f480601495 Size: 355.84 KB (355840 bytes) Detections: 2 Type: Executable File Path: %PROGRAMFILES%\LyricsBuddy-2 Group: Malware file Last Updated: August 24, 2017
26.	LyricsBuddy-2-codedownloader.exe	bffdb939fc94e0382318e5a09c1b1e82	1
Name: LyricsBuddy-2-codedownloader.exe MD5: bffdb939fc94e0382318e5a09c1b1e82 Size: 568.32 KB (568320 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES%\LyricsBuddy-2 Group: Malware file Last Updated: August 24, 2017
27.	lyricsbuddy-1-bg.exe	3664eac4631427c24f31c053c61d66d6	1
Name: lyricsbuddy-1-bg.exe MD5: 3664eac4631427c24f31c053c61d66d6 Size: 855.9 KB (855902 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES%\lyricsbuddy-1 Group: Malware file Last Updated: August 24, 2017
28.	LyricsBuddyosr.exe	166c8161bb17fa752a44d1a7c435f06f	1
Name: LyricsBuddyosr.exe MD5: 166c8161bb17fa752a44d1a7c435f06f Size: 383.48 KB (383488 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES(x86)%\LyricsBuddy-soft Group: Malware file Last Updated: August 24, 2017

More files

Registry Details

LyricsBuddy may create the following registry entry or registry entries:

CLSID

{11111111-1111-1111-1111-110411181168}

{22222222-2222-2222-2222-220422182268}

{44444444-4444-4444-4444-440444184468}

{55555555-5555-5555-5555-550455185568}

{66666666-6666-6666-6666-660466186668}

Regexp file mask

%WinDir%\System32\Tasks\LyricsBuddy[RANDOM CHARACTERS]

%WinDir%\Tasks\LyricsBuddy[RANDOM CHARACTERS].job

HKEY..\..\..\..{RegistryKeys}

Software\AppDataLow\Software\LyricsBuddy-1

SOFTWARE\Classes\CrossriderApp0041868.BHO

SOFTWARE\Classes\CrossriderApp0041868.BHO.1

SOFTWARE\Classes\CrossriderApp0041868.Sandbox

SOFTWARE\Classes\CrossriderApp0041868.Sandbox.1

Software\InstalledThirdPartyPrograms\EID41868

Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration\{11111111-1111-1111-1111-110411181168}

SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0cf4b7fe-baa5-4490-badb-dee7095a7c93}

SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{42d03a8d-49f3-4dd1-bb8e-0886cbf7a36c}

SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8a03bfd1-725d-406c-aa0c-6350e32904bd}

SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e6b0854c-1f05-400e-849b-6ffb2a28b8d1}

SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f38e2d34-0a90-46f4-9d5c-298da7fe0b4d}

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsBuddy-1-enabler.job

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsBuddy-1-enabler.job.fp

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyricsBuddy-1-enabler

SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411181168}

Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{11111111-1111-1111-1111-110411181168}

SOFTWARE\Wow6432Node\LyricsBuddy-1

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{42d03a8d-49f3-4dd1-bb8e-0886cbf7a36c}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8a03bfd1-725d-406c-aa0c-6350e32904bd}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e6b0854c-1f05-400e-849b-6ffb2a28b8d1}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f38e2d34-0a90-46f4-9d5c-298da7fe0b4d}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\LyricsBuddy-1-bg.exe

SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411181168}

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}

LyricsBuddy-1

URLs

LyricsBuddy may call the following URLs:

LyricsBuddy

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

LyricsBuddy

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove LyricsBuddy

File System Details

Registry Details

URLs

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen