Lyrics Fan

By LoneStar in Adware

Threat Scorecard

Ranking:	9,197
Threat Level:	20 % (Normal)
Infected Computers:	32,425

First Seen:	September 24, 2013
Last Seen:	February 20, 2024
OS(es) Affected:	Windows

Lyrics Fan is a potentially unwanted program, which may be linked to adware, insert associated toolbars or have other unknown aims. Lyrics Fan may use confusing tactics to raise traffic of the certain comercial website and benefit from the pay-per-click methods. Lyrics Fan may access the attacked computer packaged with freeware and shareware applications (video recording/streaming, download-managers or PDF creators). Lyrics Fan may also be packed within the custom installer on many unprotected download websites, so if the computer user has downloaded a particular program from unsafe download websites, he might have also installed Lyrics Fan throughout the setup process of the particular program. Lyrics Fan can be installed on Google Chrome, Internet Explorer and Mozilla Firefox. Lyrics Fan may interrupt the PC user whenever he starts surfing the net. Lyrics Fan may display disturbing pop-up ads carrying web-links that divert to doubtful websites.

Table of Contents

Aliases

2 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
McAfee-GW-Edition	Heuristic.BehavesLike.Win32.Suspicious-BAY.K
Sophos	Lyrmix Agent

SpyHunter Detects & Remove Lyrics Fan

File System Details

Lyrics Fan may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	LyricsFan-2-codedownloader.exe	afa3b99fde80f4c614542e5b8fca8b56	2,682
Name: LyricsFan-2-codedownloader.exe MD5: afa3b99fde80f4c614542e5b8fca8b56 Size: 487.42 KB (487424 bytes) Detections: 2,682 Type: Executable File Path: %PROGRAMFILES(x86)%\LyricsFan-2 Group: Malware file Last Updated: April 25, 2019
2.	LyricsFan-1-codedownloader.exe	e5e300dd6065d9f71b3e51c7fd11973c	2,635
Name: LyricsFan-1-codedownloader.exe MD5: e5e300dd6065d9f71b3e51c7fd11973c Size: 487.42 KB (487424 bytes) Detections: 2,635 Type: Executable File Path: %PROGRAMFILES%\LyricsFan-1 Group: Malware file Last Updated: September 25, 2013
3.	LyricsFan-2-updater.exe	4d90b3b1c1b89c4d3d23c4e676e5073f	2,578
Name: LyricsFan-2-updater.exe MD5: 4d90b3b1c1b89c4d3d23c4e676e5073f Size: 363.52 KB (363520 bytes) Detections: 2,578 Type: Executable File Path: %PROGRAMFILES(x86)%\LyricsFan-2 Group: Malware file Last Updated: April 25, 2019
4.	LyricsFan-2-firefoxinstaller.exe	973e6573d0a5346c3b918714c3eb13e9	1,680
Name: LyricsFan-2-firefoxinstaller.exe MD5: 973e6573d0a5346c3b918714c3eb13e9 Size: 722.94 KB (722944 bytes) Detections: 1,680 Type: Executable File Path: %PROGRAMFILES(x86)%\LyricsFan-2 Group: Malware file Last Updated: June 10, 2014
5.	LyricsFan-21-enabler.exe	515f5833ae2316b5d1699559d91cc536	1,547
Name: LyricsFan-21-enabler.exe MD5: 515f5833ae2316b5d1699559d91cc536 Size: 346.62 KB (346624 bytes) Detections: 1,547 Type: Executable File Path: %PROGRAMFILES%\LyricsFan-21 Group: Malware file Last Updated: June 10, 2014
6.	LyricsFan-21-codedownloader.exe	60a906086a5046f610bffc00846d1f62	1,367
Name: LyricsFan-21-codedownloader.exe MD5: 60a906086a5046f610bffc00846d1f62 Size: 487.42 KB (487424 bytes) Detections: 1,367 Type: Executable File Path: %PROGRAMFILES%\LyricsFan-21 Group: Malware file Last Updated: June 10, 2014
7.	LyricsFan-1-firefoxinstaller.exe	2f7615c396a51d8a69ce9323a52eb3ca	1,359
Name: LyricsFan-1-firefoxinstaller.exe MD5: 2f7615c396a51d8a69ce9323a52eb3ca Size: 722.94 KB (722944 bytes) Detections: 1,359 Type: Executable File Path: %PROGRAMFILES%\LyricsFan-1 Group: Malware file Last Updated: January 23, 2022
8.	LyricsFan-21-updater.exe	cdf373e695616b911872d02ce42f1733	1,287
Name: LyricsFan-21-updater.exe MD5: cdf373e695616b911872d02ce42f1733 Size: 363.52 KB (363520 bytes) Detections: 1,287 Type: Executable File Path: %PROGRAMFILES%\LyricsFan-21 Group: Malware file Last Updated: June 10, 2014
9.	LyricsFan-2-bho64.dll	470628e76a736e1e6c14819d84639d95	1,244
Name: LyricsFan-2-bho64.dll MD5: 470628e76a736e1e6c14819d84639d95 Size: 940.54 KB (940544 bytes) Detections: 1,244 Type: Dynamic link library Path: %PROGRAMFILES(x86)%\LyricsFan-2 Group: Malware file Last Updated: April 25, 2019
10.	LyricsFan-2-bho.dll	6f873dec55fab602e3c41e7a93f673d4	860
Name: LyricsFan-2-bho.dll MD5: 6f873dec55fab602e3c41e7a93f673d4 Size: 598.52 KB (598528 bytes) Detections: 860 Type: Dynamic link library Path: C:\Program Files (x86)\LyricsFan-2\LyricsFan-2-bho.dll Group: Malware file Last Updated: September 4, 2023
11.	LyricsFan-1-enabler.exe	4b28f97499af54a82da31c0ab58a4c83	772
Name: LyricsFan-1-enabler.exe MD5: 4b28f97499af54a82da31c0ab58a4c83 Size: 343.55 KB (343552 bytes) Detections: 772 Type: Executable File Path: %PROGRAMFILES%\LyricsFan-1 Group: Malware file Last Updated: September 24, 2013
12.	LyricsFan-21-firefoxinstaller.exe	ee5b71f3491aaa486f5ef229ae11540e	771
Name: LyricsFan-21-firefoxinstaller.exe MD5: ee5b71f3491aaa486f5ef229ae11540e Size: 722.94 KB (722944 bytes) Detections: 771 Type: Executable File Path: %PROGRAMFILES(x86)%\LyricsFan-21 Group: Malware file Last Updated: August 7, 2018
13.	LyricsFan-1-bho64.dll	6fd131375424dc12701bcd01dffe3f21	746
Name: LyricsFan-1-bho64.dll MD5: 6fd131375424dc12701bcd01dffe3f21 Size: 940.54 KB (940544 bytes) Detections: 746 Type: Dynamic link library Path: %PROGRAMFILES(x86)%\LyricsFan-1 Group: Malware file Last Updated: July 9, 2019
14.	LyricsFan-2-enabler.exe	41fa0a64f9354eaca4b4e7730513be75	730
Name: LyricsFan-2-enabler.exe MD5: 41fa0a64f9354eaca4b4e7730513be75 Size: 346.62 KB (346624 bytes) Detections: 730 Type: Executable File Path: %PROGRAMFILES(x86)%\LyricsFan-2 Group: Malware file Last Updated: June 10, 2014
15.	LyricsFan-1-bho.dll	ed214c458e89e0e1e9c30ef975ec9ec7	659
Name: LyricsFan-1-bho.dll MD5: ed214c458e89e0e1e9c30ef975ec9ec7 Size: 598.52 KB (598528 bytes) Detections: 659 Type: Dynamic link library Path: %PROGRAMFILES%\LyricsFan-1 Group: Malware file Last Updated: September 24, 2013
16.	LyricsFan-22-enabler.exe	56c9d9da5152a0682ad886deedf29865	592
Name: LyricsFan-22-enabler.exe MD5: 56c9d9da5152a0682ad886deedf29865 Size: 346.62 KB (346624 bytes) Detections: 592 Type: Executable File Path: %PROGRAMFILES%\LyricsFan-22 Group: Malware file Last Updated: June 10, 2014
17.	lyricsfan-1-bg.exe	8685771707f3b9c9c00e7ffb64fb7b7b	181
Name: lyricsfan-1-bg.exe MD5: 8685771707f3b9c9c00e7ffb64fb7b7b Size: 738.3 KB (738304 bytes) Detections: 181 Type: Executable File Path: %PROGRAMFILES(x86)%\lyricsfan-1 Group: Malware file Last Updated: January 23, 2022
18.	132.dll	434af3c4629e2891a91cc982a91ee672	36
Name: 132.dll MD5: 434af3c4629e2891a91cc982a91ee672 Size: 145.92 KB (145920 bytes) Detections: 36 Type: Dynamic link library Path: %PROGRAMFILES%\Lyrics_Fan Group: Malware file Last Updated: August 25, 2017
19.	1056710_stp.EXE	dce33aec7a7c50d88dc5e5c8c6235ebc	24
Name: 1056710_stp.EXE MD5: dce33aec7a7c50d88dc5e5c8c6235ebc Size: 5.49 MB (5497929 bytes) Detections: 24 Type: Executable File Path: F:\Users\<username>\AppData\Local\Temp\is1070216317\1056710_stp.EXE Group: Malware file Last Updated: May 23, 2023
20.	utils.exe	49969f5ccfa76ca801ad078bd208dc04	18
Name: utils.exe MD5: 49969f5ccfa76ca801ad078bd208dc04 Size: 1.01 MB (1019391 bytes) Detections: 18 Type: Executable File Path: C:\Program Files (x86)\LyricsFan-1\utils.exe Group: Malware file Last Updated: February 20, 2024
21.	LyricsFan-1-buttonutil64.exe	6affed5d22441299fb97510871951ec8	7
Name: LyricsFan-1-buttonutil64.exe MD5: 6affed5d22441299fb97510871951ec8 Size: 443.39 KB (443392 bytes) Detections: 7 Type: Executable File Path: %ProgramFiles(x86)%\LyricsFan-1 Group: Malware file Last Updated: December 21, 2023
22.	LyricsFan-1-helper.exe	cca968de092461782b642900b54879c2	4
Name: LyricsFan-1-helper.exe MD5: cca968de092461782b642900b54879c2 Size: 311.29 KB (311296 bytes) Detections: 4 Type: Executable File Path: %ProgramFiles(x86)%\LyricsFan-1 Group: Malware file Last Updated: January 23, 2022
23.	LyricsFan-1-buttonutil.exe	089c0165223715c696c14e85ed7513c4	3
Name: LyricsFan-1-buttonutil.exe MD5: 089c0165223715c696c14e85ed7513c4 Size: 338.94 KB (338944 bytes) Detections: 3 Type: Executable File Path: %ProgramFiles(x86)%\LyricsFan-1 Group: Malware file Last Updated: March 17, 2021
24.	lrcsfans.exe	1dece6105523694c31004e5bbe61c033	1
Name: lrcsfans.exe MD5: 1dece6105523694c31004e5bbe61c033 Size: 246.78 KB (246784 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES%\Lyrics_Fan Group: Malware file Last Updated: August 25, 2017
25.	133.dll	2081f27102e0857ef66537f8de6c7088	1
Name: 133.dll MD5: 2081f27102e0857ef66537f8de6c7088 Size: 146.43 KB (146432 bytes) Detections: 1 Type: Dynamic link library Path: %PROGRAMFILES%\Lyrics_Fan Group: Malware file Last Updated: August 25, 2017
26.	lrcsfans.exe	fe88c602c78367135a33da0127c4e587	1
Name: lrcsfans.exe MD5: fe88c602c78367135a33da0127c4e587 Size: 234.49 KB (234496 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES%\Lyrics_Fan Group: Malware file Last Updated: August 25, 2017
27.	125.dll	d588bff77b7d811ebfc43fad36a4079a	1
Name: 125.dll MD5: d588bff77b7d811ebfc43fad36a4079a Size: 137.72 KB (137728 bytes) Detections: 1 Type: Dynamic link library Path: %PROGRAMFILES%\Lyrics_Fan Group: Malware file Last Updated: August 25, 2017

More files

Registry Details

Lyrics Fan may create the following registry entry or registry entries:

CLSID

{11111111-1111-1111-1111-110411181158}

{22222222-2222-2222-2222-220422182258}

{44444444-4444-4444-4444-440444184458}

{55555555-5555-5555-5555-550455185558}

{66666666-6666-6666-6666-660466186658}

{A8720491-9558-4C0D-9E35-30EED15DFB2B}

HKEY..\..\..\..{RegistryKeys}

Software\AppDataLow\Software\LyricsFan-1

SOFTWARE\Classes\CrossriderApp0041858.BHO

SOFTWARE\Classes\CrossriderApp0041858.BHO.1

SOFTWARE\Classes\CrossriderApp0041858.Sandbox

SOFTWARE\Classes\CrossriderApp0041858.Sandbox.1

Software\InstalledBrowserExtensions\Lyrics

SOFTWARE\LyricsFan-1

Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110411181158}

SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{02f3d374-3c7d-4775-8f80-ae1eea424fc1}

SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6612e022-c83a-4c81-a935-d3d9e5a81e4b}

SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{71474ef2-3c48-4fe8-aa7b-c12a7abc667e}

SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f415c929-4cd1-4aea-a0a2-9bc0aa55d7ca}

SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\LyricsFan-1-bg.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-chromeinstaller.job

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-chromeinstaller.job.fp

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-codedownloader.job

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-codedownloader.job.fp

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-enabler.job

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-enabler.job.fp

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-firefoxinstaller.job

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-firefoxinstaller.job.fp

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-updater.job

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\LyricsFan-1-updater.job.fp

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyricsFan-1-chromeinstaller

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyricsFan-1-codedownloader

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyricsFan-1-enabler

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyricsFan-1-firefoxinstaller

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyricsFan-1-updater

SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411181158}

SOFTWARE\Wow6432Node\LyricsFan-1

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{02f3d374-3c7d-4775-8f80-ae1eea424fc1}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2a5d1635-bde4-4bf5-a85e-f879be1546bc}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6612e022-c83a-4c81-a935-d3d9e5a81e4b}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{71474ef2-3c48-4fe8-aa7b-c12a7abc667e}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f415c929-4cd1-4aea-a0a2-9bc0aa55d7ca}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\LyricsFan-1-bg.exe

SYSTEM\ControlSet001\Services\LyricsFan

SYSTEM\ControlSet002\Services\LyricsFan

SYSTEM\CurrentControlSet\Services\LyricsFan

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}

LyricsFan-1

Directories

Lyrics Fan may create the following directory or directories:

%PROGRAMFILES%\LyricsFan-soft

%PROGRAMFILES%\ver4LyricsFan

%PROGRAMFILES(x86)%\LyricsFan-soft

%ProgramFiles%\LyricsFan-1

%ProgramFiles(x86)%\LyricsFan-1

URLs

Lyrics Fan may call the following URLs:

LyricsFan-1

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Lyrics Fan

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove Lyrics Fan

File System Details

Registry Details

Directories

URLs

Submit Comment

Trending

Ldhy Ransomware

Ssj4.io

MIRROR Ransomware

Most Viewed

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error

What is Msedge.exe?