OMG Music Plus

OMG Music Plus

Known Adware

by Bundlore LTD

What is OMG Music Plus?

OMG Music Plus is software application developed by Bundlore LTD. It is most commonly found on computers running Windows 7 with nearly 66.67% of installations running this operating system. OMG Music Plus's installer is typically 7.00 MB in size and installs around 30 files. The most common release is 1.34.4.10 with 50.00% of all installations currently using this version.

OMG Music Plus is most popular in the United States with 44.44% of installations residing in this country.

OMG Music Plus adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About OMG Music Plus?

OMG Music Plus is a software program designed to modify a user's start page and search provider to a partner or affiliate search engine. It leverages the Crossrider framework to publish and update browser extensions for Internet Explorer, Chrome, and Firefox. The software is distributed through Bundlore, a download manager that bundles various adware components.

Multiple virus scanners have detected malware in OMG Music Plus.

utils.exe (MD5: fcd23934f3e1c21a1a6de77de2b34cfd) has been flagged by 45 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.VMDetector.E
Bkav FE HW32.CDB
ESET-NOD32 a variant of Win32/Packed.VMDetector.E
Symantec Trojan.ADH.SMH
TrendMicro-HouseCall TROJ_GE.A20295AD
Lavasoft Ad-Aware Gen:Application.Heur.Xv0@myw!tzoO
AhnLab-V3 PUP/Win32.CrossRider
Antiy-AVL RiskWare[WebToolbar]/Win32.CrossRider.agq
Arcabit Application.Heur.ED7CF2
avast! Win32:Crossrider-AP [PUP]
AVG Toolbar.Crossrider.J
Avira ADWARE/CrossRider.gr
AVware Crossrider (fs)
Bitdefender Gen:Application.Heur.Xv0@myw!tzoO
Comodo Security Application.Win32.CrossRider.CK
Cyren W32/AdLoad.AK2.gen!Eldorado
Dr.Web Trojan.Crossrider.27550
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Prot W32/AdLoad.AK2.gen!Eldorado
F-Secure Gen:Application.Heur.Xv0@myw!tzoO
G Data Gen:Application.Heur.Xv0@myw!tzoO
Kaspersky not-a-virus:WebToolbar.Win32.CrossRider.agq
Malwarebytes PUP.Optional.CrossRider.A
McAfee Artemis!A222C4818070
McAfee-GW-Edition BehavesLike.Win32.AdwareCross.th
MicroWorld-eScan Gen:Application.Heur.Xv0@myw!tzoO
NANO AntiVirus Trojan.Win32.Crossrider.ddzdfm
Panda Antivirus Trj/Genetic.gen
Qihoo-360 Win32/Virus.Adware.7c5
SUPERAntiSpyware Adware.CrossRider/Variant
Tencent Win32.Adware.Bp-browser.Luqs
Trend Micro TROJ_GEN.R0C1C0EGI15
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CrossRider.Win32.64
ALYac Adware.Generic.952538
Emsisoft Anti-Malware Adware.Generic.952538 (B)
IKARUS anti.virus AdWare.CrossRider
K7 AntiVirus Trojan ( 004984e91 )
K7GW Trojan ( 004984e91 )
Sophos AppRider
Agnitum Outpost PUA.CrossRider!
nProtect Adware.Generic.938747
Rising Antivirus PE:Trojan.Win32.Generic.1739A398!389653400
Avira AntiVir Adware/CrossRider.AD
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
OMG Music Plus-updater.exe (MD5: 2acada975a2b968f13d01912916b8a75) has been flagged by 25 scanners:
Scanner Software Result
Lavasoft Ad-Aware Adware.Generic.905665
Baidu-International Adware.Win32.CrossRider.X
Bitdefender Adware.Generic.905665
Dr.Web Trojan.Crossrider.7209
Emsisoft Anti-Malware Adware.Generic.905665 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.X
F-Secure Adware.Generic.905665
G Data Adware.Generic.905665
K7 AntiVirus Trojan ( 00495b741 )
K7GW Trojan ( 00495b741 )
Malwarebytes PUP.Optional.OMGMusicPlus.A
McAfee Artemis!154B57C3C554
McAfee-GW-Edition Artemis!154B57C3C554
MicroWorld-eScan Adware.Generic.905665
Sophos Generic PUA IG
SUPERAntiSpyware Trojan.Agent/Gen-Crossrider
Symantec Adware.Crossid
TrendMicro-HouseCall TROJ_GEN.R0C1H05C814
VIPRE Antivirus Crossrider (fs)
Antiy-AVL Trojan/Win32.SGeneric
AVG Generic5.AOGY
nProtect Trojan.Generic.11165538
Qihoo-360 Malware.QVM10.Gen
Avira AntiVir Adware/CrossRider.AD
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
OMG Music Plus-firefoxinstaller.exe (MD5: cbac4bcb2c448d582bfa3f60962b191e) has been flagged by 34 scanners:
Scanner Software Result
Lavasoft Ad-Aware Adware.Generic.911466
avast! Win32:Adware-gen [Adw]
AVG MultiBundle.V
Baidu-International Adware.Win32.CrossRider.Y
Bitdefender Adware.Generic.911466
Dr.Web Trojan.Crossrider.8431
Emsisoft Anti-Malware Adware.Generic.911466
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.Y
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Secure Adware.Generic.911466
G Data Adware.Generic.911466
IKARUS anti.virus AdWare.SuspectCRC
K7 AntiVirus Trojan
K7GW Trojan ( 004958cc1 )
Malwarebytes PUP.Optional.OMGMusicPlus.A
McAfee Artemis!129A73035373
McAfee-GW-Edition Artemis!129A73035373
MicroWorld-eScan Adware.Generic.911466
NANO AntiVirus Trojan.Win32.Crossrider.cwaizj
Sophos Generic PUA BG
Symantec Adware.Crossid
TrendMicro-HouseCall TROJ_GEN.R0C1H05C814
VIPRE Antivirus Crossrider (fs)
Antiy-AVL GrayWare[AdWare:not-a-virus]/Win32.Lyckriks
Comodo Security ApplicUnwnt
Jiangmin AdWare/Lyckriks.ff
Kaspersky not-a-virus:AdWare.Win32.Lyckriks.mk
Kingsoft AntiVirus Win32.Troj.Lyckriks.mk.(kcloud)
Trend Micro TROJ_GEN.R0CBC0OB214
Vba32 AntiVirus AdWare.Lyckriks
SUPERAntiSpyware Trojan.Agent/Gen-Crossrider
nProtect Trojan.Generic.11165538
Qihoo-360 Malware.QVM10.Gen
Avira AntiVir Adware/CrossRider.AD
OMG Music Plus-enabler.exe (MD5: 0e44063f24e50821c3bd66a7dab7f5ef) has been flagged by 24 scanners:
Scanner Software Result
Lavasoft Ad-Aware Trojan.Generic.11165538
AVG MultiBundle.U
Baidu-International Adware.Win32.Lyrics.71
Bitdefender Trojan.Generic.11165538
Dr.Web Trojan.Crossrider.950
Emsisoft Anti-Malware Trojan.Generic.11165538 (B)
F-Secure Trojan.Generic.11165538
G Data Trojan.Generic.11165538
Malwarebytes PUP.Optional.OMGMusicPlus.A
MicroWorld-eScan Trojan.Generic.11165538
nProtect Trojan.Generic.11165538
TrendMicro-HouseCall TROJ_GEN.F47V0320
VIPRE Antivirus Crossrider (fs)
Symantec WS.Reputation.1
ESET-NOD32 a variant of Win64/Toolbar.Crossrider.C
K7 AntiVirus Trojan ( 004956811 )
K7GW Trojan ( 004956811 )
McAfee Artemis!0E44063F24E5
SUPERAntiSpyware (-1) Unable to load input file.
McAfee-GW-Edition Artemis!2ACADA975A2B
Sophos AppRider
Qihoo-360 Malware.QVM10.Gen
Avira AntiVir Adware/CrossRider.AD
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
OMG Music Plus-codedownloader.exe (MD5: c6df1505f4cb57e2c00630138b041ed6) has been flagged by 38 scanners:
Scanner Software Result
Lavasoft Ad-Aware Adware.Generic.909955
Antiy-AVL Trojan/Win32.SGeneric
AVG Generic5.AOGY
Baidu-International Adware.Win32.CrossRider.X
Bitdefender Adware.Generic.909955
Dr.Web Trojan.Crossrider.7193
Emsisoft Anti-Malware Adware.Generic.909955 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.X
F-Secure Adware.Generic.909955
G Data Adware.Generic.909955
Malwarebytes PUP.Optional.OMGMusicPlus.A
McAfee Artemis!DCE4B40945F2
McAfee-GW-Edition Artemis!DCE4B40945F2
MicroWorld-eScan Adware.Generic.909955
Sophos Generic PUA DN
Symantec Adware.Crossid
TrendMicro-HouseCall TROJ_GEN.R0C1H05C714
VIPRE Antivirus Crossrider (fs)
nProtect Trojan.Generic.11165538
ALYac Adware.Generic.945803
avast! Win32:Crossrider-AG [PUP]
Avira Adware/CrossRider.A.3024
AVware Crossrider (fs)
Comodo Security ApplicUnwnt
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Prot W32/A-eb9ef301!Eldorado
K7 AntiVirus Trojan ( 004984e91 )
K7GW Trojan ( 004984e91 )
NANO AntiVirus Trojan.Win32.Crossrider.dapcca
Panda Antivirus Trj/Genetic.gen
Qihoo-360 HEUR/Malware.QVM10.Gen
Trend Micro TROJ_GEN.R0CBC0OED14
Zillya Adware.CrossRider.Win32.186
Agnitum Outpost PUA.CrossRider!
Rising Antivirus PE:Trojan.Win32.Generic.1739A398!389653400
SUPERAntiSpyware (-1) Unable to load input file.
Avira AntiVir Adware/CrossRider.AD
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)

Software Behaviors

Scheduled tasks:
  • OMG Music Plus-firefoxinstaller.exe is scheduled as a task named 'OMG Music Plus-firefoxinstaller'.

Startup Entries

Startup tasks:
  • OMG Music Plus-codedownloader.exe is automatically launched at startup through a scheduled task named OMG Music Plus-codedownloader.
  • a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-5.exe is automatically launched at startup through a scheduled task named a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-5.
  • a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-4.exe is automatically launched at startup through a scheduled task named a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-4.
  • a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-3.exe is automatically launched at startup through a scheduled task named a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-3.
  • a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-2.exe is automatically launched at startup through a scheduled task named a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-2.
  • OMG Music Plus-nova.exe is automatically launched at startup through a scheduled task named 38dc2d6c-0e23-442d-966c-5b490621625e-7.

Software Details

URL:
https://www.bundlore.com
Support:
–
Installation path:
C:\Program Files\omg music plus
Uninstaller:
C:\Program Files\OMG Music Plus\Uninstall.exe /fromcontrolpanel=1
Size:
7.00 MB
Language:
English

OMG Music Plus Executable Details

Primary executable:
utils.exe
Name:
OMG Music Plus
Path:
C:\Program Files\omg music plus\utils.exe
MD5:
fcd23934f3e1c21a1a6de77de2b34cfd
SHA-1:
–
SHA-256:
–
Files installed by OMG Music Plus
File Type Filename MD5
EXE
uninstall.exe
d04d9940ebf62cc1cd81348ab86c0a2f
EXE
utils.exe
Malware
fcd23934f3e1c21a1a6de77de2b34cfd
XPI
49182.xpi
9e95c04cf38decc4ddc76550b9a32c2a
EXE
OMG Music Plus-helper.exe
3a24dfb11e395a4f2100a8bdceba6b17
DLL
OMG Music Plus-buttonutil64.dll
5e4fa039a94f603c69eeb4d02134c35a
DLL
OMG Music Plus-buttonutil.dll
79e755133a6ca5cac42ef93cf75a18e7
EXE
OMG Music Plus-updater.exe
Malware
2acada975a2b968f13d01912916b8a75
EXE
OMG Music Plus-firefoxinstaller.exe
Adware
cbac4bcb2c448d582bfa3f60962b191e
EXE
OMG Music Plus-enabler.exe
Malware
0e44063f24e50821c3bd66a7dab7f5ef
EXE
OMG Music Plus-codedownloader.exe
Malware
c6df1505f4cb57e2c00630138b041ed6