PennyBee

By GoldSparrow in Adware

Threat Scorecard

Ranking:	5,277
Threat Level:	20 % (Normal)
Infected Computers:	44,984

First Seen:	July 1, 2014
Last Seen:	March 13, 2024
OS(es) Affected:	Windows

PennyBee is an adware program that renders advertisements that may attempt to offer various discounts or coupon deals for shopping online. The PennyBee Ads may come as pop-up ads when you are surfing the internet. Some of the PennyBee Ads may redirect you to various unwanted sites or pages that try to advertise other products and services. The PennyBee Ads may also reduce the performance of your web browser making it difficult or aggravating for surfing the web. The PennyBee program may have several associated files that load with the installation of random freeware programs or bundled applications. Removing the PennyBee files and add-ons may require using an antispyware tool designed to eliminate adware and browser hijacker files.

Table of Contents

SpyHunter Detects & Remove PennyBee

File System Details

PennyBee may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	PennyBeeW.exe	51c551e4aad4470700e4a0da67a25539	631
Name: PennyBeeW.exe MD5: 51c551e4aad4470700e4a0da67a25539 Size: 337.92 KB (337920 bytes) Detections: 631 Type: Executable File Path: C:\Users\<username>\AppData\Local\PennyBee\PennyBeeW.exe Group: Malware file Last Updated: March 16, 2023
2.	PennyBeeW.exe	6a98a83c9da42578ab09939c4340610b	259
Name: PennyBeeW.exe MD5: 6a98a83c9da42578ab09939c4340610b Size: 338.43 KB (338432 bytes) Detections: 259 Type: Executable File Path: %USERPROFILE%\Downloads\Desktop\verwijderen Group: Malware file Last Updated: November 21, 2019
3.	bkup.dat	f8619e990e55052080df605eb5074e13	71
Name: bkup.dat MD5: f8619e990e55052080df605eb5074e13 Size: 17.63 KB (17635 bytes) Detections: 71 Type: Data file Path: %APPDATA%\PennyBee\UpdateProc Group: Malware file Last Updated: July 7, 2017
4.	bkup.dat	dbec003302250b918ae1265dae301aff	66
Name: bkup.dat MD5: dbec003302250b918ae1265dae301aff Size: 15.61 KB (15610 bytes) Detections: 66 Type: Data file Path: %APPDATA%\PennyBee\UpdateProc Group: Malware file Last Updated: July 7, 2017
5.	bkup.dat	f198667563258c863e14b811dcbfe975	63
Name: bkup.dat MD5: f198667563258c863e14b811dcbfe975 Size: 15.6 KB (15601 bytes) Detections: 63 Type: Data file Path: %APPDATA%\PennyBee\UpdateProc Group: Malware file Last Updated: July 7, 2017
6.	bkup.dat	94164756d62b33971173d3f1d49f64b8	19
Name: bkup.dat MD5: 94164756d62b33971173d3f1d49f64b8 Size: 17.14 KB (17149 bytes) Detections: 19 Type: Data file Path: %APPDATA%\PennyBee\UpdateProc Group: Malware file Last Updated: July 7, 2017
7.	bkup.dat	07d21133ee38286f0c4974015777b0d2	17
Name: bkup.dat MD5: 07d21133ee38286f0c4974015777b0d2 Size: 19.29 KB (19290 bytes) Detections: 17 Type: Data file Path: %APPDATA%\PennyBee\UpdateProc Group: Malware file Last Updated: July 7, 2017
8.	bkup.dat	76df4c0702b977f52d500d1cc5502bfe	17
Name: bkup.dat MD5: 76df4c0702b977f52d500d1cc5502bfe Size: 17.13 KB (17137 bytes) Detections: 17 Type: Data file Path: %APPDATA%\PennyBee\UpdateProc Group: Malware file Last Updated: July 7, 2017
9.	wlyricsgizmd.exe	4909e8769c6f39726240772e2c508213	16
Name: wlyricsgizmd.exe MD5: 4909e8769c6f39726240772e2c508213 Size: 209.44 KB (209440 bytes) Detections: 16 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data\lyricsgizm2\1.1.0.20 Group: Malware file Last Updated: July 27, 2017
10.	lyricsgizm.exe	e1b69a2a405ed4f7c70291872858725a	16
Name: lyricsgizm.exe MD5: e1b69a2a405ed4f7c70291872858725a Size: 392.73 KB (392736 bytes) Detections: 16 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data\lyricsgizm2\1.1.0.20 Group: Malware file Last Updated: July 27, 2017
11.	bkup.dat	59dea63ada82c0785a0f0198e4b27c27	16
Name: bkup.dat MD5: 59dea63ada82c0785a0f0198e4b27c27 Size: 18.48 KB (18486 bytes) Detections: 16 Type: Data file Path: %APPDATA%\PennyBee\UpdateProc Group: Malware file Last Updated: July 7, 2017
12.	bkup.dat	d5e440d40efdeec356564201c4e6d10b	15
Name: bkup.dat MD5: d5e440d40efdeec356564201c4e6d10b Size: 18.57 KB (18573 bytes) Detections: 15 Type: Data file Path: %APPDATA%\PennyBee\UpdateProc Group: Malware file Last Updated: July 7, 2017
13.	bkup.dat	f8039491253f43f24eca691d67d4d2cb	14
Name: bkup.dat MD5: f8039491253f43f24eca691d67d4d2cb Size: 15.12 KB (15123 bytes) Detections: 14 Type: Data file Path: %APPDATA%\PennyBee\UpdateProc Group: Malware file Last Updated: July 7, 2017
14.	UpdateTask.exe	7297a1d8001a2de6462126f394d2e4c4	14
Name: UpdateTask.exe MD5: 7297a1d8001a2de6462126f394d2e4c4 Size: 479.74 KB (479744 bytes) Detections: 14 Type: Executable File Path: %APPDATA%\PennyBee\UpdateProc Group: Malware file Last Updated: March 23, 2016
15.	bkup.dat	4dbb66b0e900b8f50f7711b2edb495cc	12
Name: bkup.dat MD5: 4dbb66b0e900b8f50f7711b2edb495cc Size: 16.89 KB (16890 bytes) Detections: 12 Type: Data file Path: %APPDATA%\PennyBee\UpdateProc Group: Malware file Last Updated: July 7, 2017
16.	bkup.dat	0194bd78c6112a80074b18ac6514f433	12
Name: bkup.dat MD5: 0194bd78c6112a80074b18ac6514f433 Size: 15.84 KB (15841 bytes) Detections: 12 Type: Data file Path: %APPDATA%\PennyBee\UpdateProc Group: Malware file Last Updated: July 7, 2017
17.	pennybeepro.exe	e67de6c177092310f7f2cba4fbb20bad	10
Name: pennybeepro.exe MD5: e67de6c177092310f7f2cba4fbb20bad Size: 709.48 KB (709482 bytes) Detections: 10 Type: Executable File Path: %ALLUSERSPROFILE%\pennybeepro2\1.1.0.25 Group: Malware file Last Updated: March 26, 2016
18.	wpennybeeprod.exe	eaf340a2b90ecd451d565a5e7f924bc7	10
Name: wpennybeeprod.exe MD5: eaf340a2b90ecd451d565a5e7f924bc7 Size: 413.1 KB (413108 bytes) Detections: 10 Type: Executable File Path: %ALLUSERSPROFILE%\pennybeepro2\1.1.0.25 Group: Malware file Last Updated: March 26, 2016
19.	PennyBeeW.exe	02418c3533493e0ac6df342d64186d4d	6
Name: PennyBeeW.exe MD5: 02418c3533493e0ac6df342d64186d4d Size: 309.24 KB (309248 bytes) Detections: 6 Type: Executable File Path: %PROGRAMFILES%\PennyBee Group: Malware file Last Updated: March 6, 2023
20.	pennybeepro.exe	43dacdf4ee757f16230c585db0ebad4d	5
Name: pennybeepro.exe MD5: 43dacdf4ee757f16230c585db0ebad4d Size: 376.86 KB (376864 bytes) Detections: 5 Type: Executable File Path: %ALLUSERSPROFILE%\pennybeepro2\1.1.0.21 Group: Malware file Last Updated: March 26, 2016
21.	wpennybeeprod.exe	50b52d5a70c97248ee8d68ca332f9584	5
Name: wpennybeeprod.exe MD5: 50b52d5a70c97248ee8d68ca332f9584 Size: 200.73 KB (200736 bytes) Detections: 5 Type: Executable File Path: %ALLUSERSPROFILE%\pennybeepro2\1.1.0.21 Group: Malware file Last Updated: March 26, 2016
22.	PennyBeeW.exe	2c002ca5893cc88995e81743e8d10883	4
Name: PennyBeeW.exe MD5: 2c002ca5893cc88995e81743e8d10883 Size: 338.43 KB (338432 bytes) Detections: 4 Type: Executable File Path: %LOCALAPPDATA%\PennyBee Group: Malware file Last Updated: March 19, 2016
23.	PennyBeeW.exe	afc7c41fdab0b55f64edd1b26b672400	2
Name: PennyBeeW.exe MD5: afc7c41fdab0b55f64edd1b26b672400 Size: 315.92 KB (315920 bytes) Detections: 2 Type: Executable File Path: %PROGRAMFILES%\PennyBee Group: Malware file Last Updated: December 2, 2018
24.	PennyBeeW.exe	dcea3b89795dd0145955f6c7cba3802f	1
Name: PennyBeeW.exe MD5: dcea3b89795dd0145955f6c7cba3802f Size: 430.08 KB (430080 bytes) Detections: 1 Type: Executable File Path: %LOCALAPPDATA%\PennyBee Group: Malware file Last Updated: March 19, 2016
25.	PennyBeeW.exe	d7a3331d2b3129f5f9a74dd80daef1a9	1
Name: PennyBeeW.exe MD5: d7a3331d2b3129f5f9a74dd80daef1a9 Size: 337.92 KB (337920 bytes) Detections: 1 Type: Executable File Path: %LOCALAPPDATA%\PennyBee Group: Malware file Last Updated: March 19, 2016
26.	PennyBeeW.exe	fb83611535e261f58f3a6e686a396628	1
Name: PennyBeeW.exe MD5: fb83611535e261f58f3a6e686a396628 Size: 313.34 KB (313344 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES%\PennyBee Group: Malware file Last Updated: March 19, 2016
27.	Ipygi120.sys	dc1633d35a8468f7b59cdf01832ac250	1
Name: Ipygi120.sys MD5: dc1633d35a8468f7b59cdf01832ac250 Size: 24.69 KB (24696 bytes) Detections: 1 Type: System file Path: \??\C:\windows\system32\Drivers Group: Malware file Last Updated: August 10, 2015
28.	Jefdad120.sys	0758fb8fa82c1c60b51e9881dda66e94	1
Name: Jefdad120.sys MD5: 0758fb8fa82c1c60b51e9881dda66e94 Size: 24.18 KB (24184 bytes) Detections: 1 Type: System file Path: \??\C:\windows\system32\Drivers Group: Malware file Last Updated: August 10, 2015
29.	wpennybeeprod.exe	91f82effca8f74a894d48b10ea21b37a	1
Name: wpennybeeprod.exe MD5: 91f82effca8f74a894d48b10ea21b37a Size: 162.3 KB (162304 bytes) Detections: 1 Type: Executable File Path: %ALLUSERSPROFILE%\pennybeepro2\1.1.0.25 Group: Malware file Last Updated: March 26, 2016
30.	988adae5538c14759e6e6ed4e52d2fdd	988adae5538c14759e6e6ed4e52d2fdd	1
Name: 988adae5538c14759e6e6ed4e52d2fdd MD5: 988adae5538c14759e6e6ed4e52d2fdd Size: 134.51 KB (134512 bytes) Detections: 1 Group: Malware file Last Updated: January 16, 2018

More files

Registry Details

PennyBee may create the following registry entry or registry entries:

CLSID

{903260FE-C27C-4585-AC5C-2BB4AAB6C019}

{A983DCA3-7CCD-4C76-B894-57ADEE66AFDC}

{ECCD8756-E877-457F-8C44-4EC20055DDB5}

Regexp file mask

%windir%\System32\Tasks\pennybee Runner[RANDOM CHARACTERS]

%windir%\System32\Tasks\pennybee[RANDOM CHARACTERS]

%windir%\Tasks\pennybee Runner[RANDOM CHARACTERS]

%windir%\Tasks\pennybee[RANDOM CHARACTERS]

HKEY..\..\..\..{RegistryKeys}

Software\AppDataLow\Software\pennybee

SOFTWARE\Microsoft\Tracing\PennyBeeW_RASAPI32

SOFTWARE\Microsoft\Tracing\PennyBeeW_RASMANCS

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\pennybee Runner.job

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\pennybee Runner.job.fp

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\PennyBee.job

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\PennyBee.job.fp

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\pennybeepro Runner.job

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\pennybeepro Runner.job.fp

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PennyBee

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\pennybee Runner

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\pennybeepro Runner

SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\PennyBee.exe

SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PennyBee

Software\PennyBee

SOFTWARE\pennybeepro

SOFTWARE\Wow6432Node\Microsoft\Tracing\PennyBeeW_RASAPI32

SOFTWARE\Wow6432Node\Microsoft\Tracing\PennyBeeW_RASMANCS

SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\PennyBee.exe

SOFTWARE\Wow6432Node\pennybeepro

SYSTEM\ControlSet001\services\pennybee

SYSTEM\ControlSet001\services\pennybeepro

SYSTEM\ControlSet001\services\wpennybeed

SYSTEM\CurrentControlSet\services\pennybee

SYSTEM\CurrentControlSet\services\pennybeepro

SYSTEM\CurrentControlSet\services\wpennybeed

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}

pennybee

pennybeepro

Directories

PennyBee may create the following directory or directories:

%ALLUSERSPROFILE%\Application Data\pennybee

%ALLUSERSPROFILE%\lyricsgizm

%ALLUSERSPROFILE%\lyricsgizm2

%ALLUSERSPROFILE%\mhvixutt

%ALLUSERSPROFILE%\pennybee

%ALLUSERSPROFILE%\pennybeepro

%ALLUSERSPROFILE%\pennybeepro2

%APPDATA%\tifro

%LOCALAPPDATA%\PennyBee

%PROGRAMFILES%\PennyBee

%PROGRAMFILES(x86)%\PennyBee

%USERPROFILE%\AppData\LocalLow\pennybee

%USERPROFILE%\AppData\LocalLow\pennybeepro

%UserProfile%\Local Settings\Application Data\PennyBee

%appdata%\Hemkajdoa

%appdata%\OyijLya

%appdata%\Rikfootov

%appdata%\Vyhliwe

%appdata%\pennybee

%appdata%\pennybeepro

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

PennyBee

Threat Scorecard

EnigmaSoft Threat Scorecard

SpyHunter Detects & Remove PennyBee

File System Details

Registry Details

Directories

Submit Comment

Trending

SaveFrom.net

Softcnapp

Ma1x0 Ransomware

Most Viewed

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error

What is Msedge.exe?