PennyBee

By GoldSparrow in Adware

Threat Scorecard

Ranking:	6,146
Threat Level:	20 % (Normal)
Infected Computers:	45,183

First Seen:	July 1, 2014
Last Seen:	August 19, 2025
OS(es) Affected:	Windows

PennyBee is an adware program that renders advertisements that may attempt to offer various discounts or coupon deals for shopping online. The PennyBee Ads may come as pop-up ads when you are surfing the internet. Some of the PennyBee Ads may redirect you to various unwanted sites or pages that try to advertise other products and services. The PennyBee Ads may also reduce the performance of your web browser making it difficult or aggravating for surfing the web. The PennyBee program may have several associated files that load with the installation of random freeware programs or bundled applications. Removing the PennyBee files and add-ons may require using an antispyware tool designed to eliminate adware and browser hijacker files.

Table of Contents

SpyHunter Detects & Remove PennyBee

File System Details

PennyBee may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	PennyBee.exe.vir	f7181e6df93cb6123363915fe97079a3	3,827
Name: PennyBee.exe.vir MD5: f7181e6df93cb6123363915fe97079a3 Size: 57.85 KB (57856 bytes) Detections: 3,827 Path: C:\AdwCleaner.BackupByPortableAppC\Quarantine\C\Program Files (x86)\PennyBee\PennyBee.exe.vir Group: Malware file Last Updated: February 3, 2023
2.	A0058046.exe	3e01a07597677e78805a1947e0b52a8e	1,639
Name: A0058046.exe MD5: 3e01a07597677e78805a1947e0b52a8e Size: 464.95 KB (464952 bytes) Detections: 1,639 Type: Executable File Path: J:\System Volume Information\_restore{27B1F6D6-B036-447D-9353-49093C891238}\RP125\A0058046.exe Group: Malware file Last Updated: August 10, 2021
3.	PennyBee.exe	68090de5d41ec985fc6de24a578308f0	1,519
Name: PennyBee.exe MD5: 68090de5d41ec985fc6de24a578308f0 Size: 57.85 KB (57856 bytes) Detections: 1,519 Type: Executable File Path: C:\Program Files\PennyBee\PennyBee.exe Group: Malware file Last Updated: July 28, 2025
4.	wpennybeed.exe	fa8f5a2775273a35fffb8157a5ecf449	1,006
Name: wpennybeed.exe MD5: fa8f5a2775273a35fffb8157a5ecf449 Size: 209.97 KB (209976 bytes) Detections: 1,006 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data\pennybee Group: Malware file Last Updated: April 18, 2020
5.	wpennybeed.exe47122	2c1611c7d509dd1c19f011c7a91a38a1	923
Name: wpennybeed.exe47122 MD5: 2c1611c7d509dd1c19f011c7a91a38a1 Size: 209.97 KB (209976 bytes) Detections: 923 Path: C:\-\04 [OK] Unidade C\ProgramData\pennybee\wpennybeed.exe47122 Group: Malware file Last Updated: April 13, 2022
6.	lyricsgizmL32.exe	3fb6073eb13c7203053393398494ec98	17
Name: lyricsgizmL32.exe MD5: 3fb6073eb13c7203053393398494ec98 Size: 124.41 KB (124416 bytes) Detections: 17 Type: Executable File Path: %ALLUSERSPROFILE%\lyricsgizm2\1.1.0.25 Group: Malware file Last Updated: July 27, 2017
7.	wlyricsgizmd.exe	4909e8769c6f39726240772e2c508213	16
Name: wlyricsgizmd.exe MD5: 4909e8769c6f39726240772e2c508213 Size: 209.44 KB (209440 bytes) Detections: 16 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data\lyricsgizm2\1.1.0.20 Group: Malware file Last Updated: July 27, 2017
8.	lyricsgizm.exe	e1b69a2a405ed4f7c70291872858725a	16
Name: lyricsgizm.exe MD5: e1b69a2a405ed4f7c70291872858725a Size: 392.73 KB (392736 bytes) Detections: 16 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data\lyricsgizm2\1.1.0.20 Group: Malware file Last Updated: July 27, 2017
9.	bkup.dat	59dea63ada82c0785a0f0198e4b27c27	16
Name: bkup.dat MD5: 59dea63ada82c0785a0f0198e4b27c27 Size: 18.48 KB (18486 bytes) Detections: 16 Type: Data file Path: %APPDATA%\PennyBee\UpdateProc Group: Malware file Last Updated: July 7, 2017
10.	UpdateTask.exe	7297a1d8001a2de6462126f394d2e4c4	14
Name: UpdateTask.exe MD5: 7297a1d8001a2de6462126f394d2e4c4 Size: 479.74 KB (479744 bytes) Detections: 14 Type: Executable File Path: %APPDATA%\PennyBee\UpdateProc Group: Malware file Last Updated: March 23, 2016
11.	PennyBeeW.exe	02418c3533493e0ac6df342d64186d4d	6
Name: PennyBeeW.exe MD5: 02418c3533493e0ac6df342d64186d4d Size: 309.24 KB (309248 bytes) Detections: 6 Type: Executable File Path: %PROGRAMFILES%\PennyBee Group: Malware file Last Updated: March 6, 2023
12.	pennybeepro.exe	43dacdf4ee757f16230c585db0ebad4d	5
Name: pennybeepro.exe MD5: 43dacdf4ee757f16230c585db0ebad4d Size: 376.86 KB (376864 bytes) Detections: 5 Type: Executable File Path: %ALLUSERSPROFILE%\pennybeepro2\1.1.0.21 Group: Malware file Last Updated: March 26, 2016
13.	pennybeeproD32.exe	102701e0a5ad26f1ac4340e9d9743f4c	4
Name: pennybeeproD32.exe MD5: 102701e0a5ad26f1ac4340e9d9743f4c Size: 126.97 KB (126976 bytes) Detections: 4 Type: Executable File Path: %ALLUSERSPROFILE%\pennybeepro2\1.1.0.23 Group: Malware file Last Updated: October 2, 2014
14.	pennybeeprol64.exe	dd6d5b2ae17a7b0ae4cfdff39a90bfa9	1
Name: pennybeeprol64.exe MD5: dd6d5b2ae17a7b0ae4cfdff39a90bfa9 Size: 199.68 KB (199680 bytes) Detections: 1 Type: Executable File Path: %ALLUSERSPROFILE%\pennybeepro2\1.1.0.20 Group: Malware file Last Updated: October 2, 2014
15.	Ipygi120.sys	dc1633d35a8468f7b59cdf01832ac250	1
Name: Ipygi120.sys MD5: dc1633d35a8468f7b59cdf01832ac250 Size: 24.69 KB (24696 bytes) Detections: 1 Type: System file Path: \??\C:\windows\system32\Drivers Group: Malware file Last Updated: August 10, 2015
16.	Jefdad120.sys	0758fb8fa82c1c60b51e9881dda66e94	1
Name: Jefdad120.sys MD5: 0758fb8fa82c1c60b51e9881dda66e94 Size: 24.18 KB (24184 bytes) Detections: 1 Type: System file Path: \??\C:\windows\system32\Drivers Group: Malware file Last Updated: August 10, 2015
17.	wpennybeeprod.exe	91f82effca8f74a894d48b10ea21b37a	1
Name: wpennybeeprod.exe MD5: 91f82effca8f74a894d48b10ea21b37a Size: 162.3 KB (162304 bytes) Detections: 1 Type: Executable File Path: %ALLUSERSPROFILE%\pennybeepro2\1.1.0.25 Group: Malware file Last Updated: March 26, 2016
18.	988adae5538c14759e6e6ed4e52d2fdd	988adae5538c14759e6e6ed4e52d2fdd	1
Name: 988adae5538c14759e6e6ed4e52d2fdd MD5: 988adae5538c14759e6e6ed4e52d2fdd Size: 134.51 KB (134512 bytes) Detections: 1 Group: Malware file Last Updated: January 16, 2018

More files

Registry Details

PennyBee may create the following registry entry or registry entries:

CLSID

{903260FE-C27C-4585-AC5C-2BB4AAB6C019}

{A983DCA3-7CCD-4C76-B894-57ADEE66AFDC}

{ECCD8756-E877-457F-8C44-4EC20055DDB5}

Regexp file mask

%windir%\System32\Tasks\pennybee Runner[RANDOM CHARACTERS]

%windir%\System32\Tasks\pennybee[RANDOM CHARACTERS]

%windir%\Tasks\pennybee Runner[RANDOM CHARACTERS]

%windir%\Tasks\pennybee[RANDOM CHARACTERS]

HKEY..\..\..\..{RegistryKeys}

Software\AppDataLow\Software\pennybee

SOFTWARE\Microsoft\Tracing\PennyBeeW_RASAPI32

SOFTWARE\Microsoft\Tracing\PennyBeeW_RASMANCS

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\pennybee Runner.job

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\pennybee Runner.job.fp

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\PennyBee.job

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\PennyBee.job.fp

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\pennybeepro Runner.job

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\pennybeepro Runner.job.fp

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PennyBee

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\pennybee Runner

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\pennybeepro Runner

SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\PennyBee.exe

SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PennyBee

Software\PennyBee

SOFTWARE\pennybeepro

SOFTWARE\Wow6432Node\Microsoft\Tracing\PennyBeeW_RASAPI32

SOFTWARE\Wow6432Node\Microsoft\Tracing\PennyBeeW_RASMANCS

SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\PennyBee.exe

SOFTWARE\Wow6432Node\pennybeepro

SYSTEM\ControlSet001\services\pennybee

SYSTEM\ControlSet001\services\pennybeepro

SYSTEM\ControlSet001\services\wpennybeed

SYSTEM\CurrentControlSet\services\pennybee

SYSTEM\CurrentControlSet\services\pennybeepro

SYSTEM\CurrentControlSet\services\wpennybeed

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}

pennybee

pennybeepro

Directories

PennyBee may create the following directory or directories:

%ALLUSERSPROFILE%\Application Data\pennybee

%ALLUSERSPROFILE%\lyricsgizm

%ALLUSERSPROFILE%\lyricsgizm2

%ALLUSERSPROFILE%\mhvixutt

%ALLUSERSPROFILE%\pennybee

%ALLUSERSPROFILE%\pennybeepro

%ALLUSERSPROFILE%\pennybeepro2

%APPDATA%\tifro

%LOCALAPPDATA%\PennyBee

%PROGRAMFILES%\PennyBee

%PROGRAMFILES(x86)%\PennyBee

%USERPROFILE%\AppData\LocalLow\pennybee

%USERPROFILE%\AppData\LocalLow\pennybeepro

%UserProfile%\Local Settings\Application Data\PennyBee

%appdata%\Hemkajdoa

%appdata%\OyijLya

%appdata%\Rikfootov

%appdata%\Vyhliwe

%appdata%\pennybee

%appdata%\pennybeepro

EnigmaSoft’s Payment Processor Digital River GmbH Filing for Bankruptcy Does Not Impact SpyHunter Customers’ Anti-Malware Protection

Search

Change Region

PennyBee

Threat Scorecard

EnigmaSoft Threat Scorecard

SpyHunter Detects & Remove PennyBee

File System Details

Registry Details

Directories

Submit Comment

Trending

Cybertron Ransomware

Beebone

Chainbase Airdrop Scam

Most Viewed

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen

Discord Is Stuck on Gray Screen