OMG Music Plus

OMG Music Plus

Known Adware

by Bundlore LTD

What is OMG Music Plus?

OMG Music Plus is software application developed by Bundlore LTD. It is most commonly found on computers running Windows 7 with nearly 66.67% of installations running this operating system. OMG Music Plus's installer is typically 7.00 MB in size and installs around 30 files. The most common release is 1.34.4.10 with 50.00% of all installations currently using this version.

OMG Music Plus is most popular in the United States with 44.44% of installations residing in this country.

OMG Music Plus adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About OMG Music Plus?

OMG Music Plus is a software program designed to modify a user's start page and search provider to a partner or affiliate search engine. It leverages the Crossrider framework to publish and update browser extensions for Internet Explorer, Chrome, and Firefox. The software is distributed through Bundlore, a download manager that bundles various adware components.

Multiple virus scanners have detected malware in OMG Music Plus.

utils.exe (MD5: fcd23934f3e1c21a1a6de77de2b34cfd) has been flagged by 45 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.VMDetector.E
Bkav FE HW32.CDB
ESET-NOD32 a variant of Win32/Packed.VMDetector.E
Symantec Trojan.ADH.SMH
TrendMicro-HouseCall TROJ_GE.A20295AD
Lavasoft Ad-Aware Gen:Application.Heur.Xv0@myw!tzoO
AhnLab-V3 PUP/Win32.CrossRider
Antiy-AVL RiskWare[WebToolbar]/Win32.CrossRider.agq
Arcabit Application.Heur.ED7CF2
avast! Win32:Crossrider-AP [PUP]
AVG Toolbar.Crossrider.J
Avira ADWARE/CrossRider.gr
AVware Crossrider (fs)
Bitdefender Gen:Application.Heur.Xv0@myw!tzoO
Comodo Security Application.Win32.CrossRider.CK
Cyren W32/AdLoad.AK2.gen!Eldorado
Dr.Web Trojan.Crossrider.27550
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Prot W32/AdLoad.AK2.gen!Eldorado
F-Secure Gen:Application.Heur.Xv0@myw!tzoO
G Data Gen:Application.Heur.Xv0@myw!tzoO
Kaspersky not-a-virus:WebToolbar.Win32.CrossRider.agq
Malwarebytes PUP.Optional.CrossRider.A
McAfee Artemis!A222C4818070
McAfee-GW-Edition BehavesLike.Win32.AdwareCross.th
MicroWorld-eScan Gen:Application.Heur.Xv0@myw!tzoO
NANO AntiVirus Trojan.Win32.Crossrider.ddzdfm
Panda Antivirus Trj/Genetic.gen
Qihoo-360 Win32/Virus.Adware.7c5
SUPERAntiSpyware Adware.CrossRider/Variant
Tencent Win32.Adware.Bp-browser.Luqs
Trend Micro TROJ_GEN.R0C1C0EGI15
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CrossRider.Win32.64
ALYac Adware.Generic.952538
Emsisoft Anti-Malware Adware.Generic.952538 (B)
IKARUS anti.virus AdWare.CrossRider
K7 AntiVirus Trojan ( 004984e91 )
K7GW Trojan ( 004984e91 )
Sophos AppRider
Agnitum Outpost PUA.CrossRider!
nProtect Adware.Generic.938747
Rising Antivirus PE:Trojan.Win32.Generic.1739A398!389653400
Avira AntiVir Adware/CrossRider.AD
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
OMG Music Plus-updater.exe (MD5: 2acada975a2b968f13d01912916b8a75) has been flagged by 25 scanners:
Scanner Software Result
Lavasoft Ad-Aware Adware.Generic.905665
Baidu-International Adware.Win32.CrossRider.X
Bitdefender Adware.Generic.905665
Dr.Web Trojan.Crossrider.7209
Emsisoft Anti-Malware Adware.Generic.905665 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.X
F-Secure Adware.Generic.905665
G Data Adware.Generic.905665
K7 AntiVirus Trojan ( 00495b741 )
K7GW Trojan ( 00495b741 )
Malwarebytes PUP.Optional.OMGMusicPlus.A
McAfee Artemis!154B57C3C554
McAfee-GW-Edition Artemis!154B57C3C554
MicroWorld-eScan Adware.Generic.905665
Sophos Generic PUA IG
SUPERAntiSpyware Trojan.Agent/Gen-Crossrider
Symantec Adware.Crossid
TrendMicro-HouseCall TROJ_GEN.R0C1H05C814
VIPRE Antivirus Crossrider (fs)
Antiy-AVL Trojan/Win32.SGeneric
AVG Generic5.AOGY
nProtect Trojan.Generic.11165538
Qihoo-360 Malware.QVM10.Gen
Avira AntiVir Adware/CrossRider.AD
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
OMG Music Plus-firefoxinstaller.exe (MD5: cbac4bcb2c448d582bfa3f60962b191e) has been flagged by 34 scanners:
Scanner Software Result
Lavasoft Ad-Aware Adware.Generic.911466
avast! Win32:Adware-gen [Adw]
AVG MultiBundle.V
Baidu-International Adware.Win32.CrossRider.Y
Bitdefender Adware.Generic.911466
Dr.Web Trojan.Crossrider.8431
Emsisoft Anti-Malware Adware.Generic.911466
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.Y
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Secure Adware.Generic.911466
G Data Adware.Generic.911466
IKARUS anti.virus AdWare.SuspectCRC
K7 AntiVirus Trojan
K7GW Trojan ( 004958cc1 )
Malwarebytes PUP.Optional.OMGMusicPlus.A
McAfee Artemis!129A73035373
McAfee-GW-Edition Artemis!129A73035373
MicroWorld-eScan Adware.Generic.911466
NANO AntiVirus Trojan.Win32.Crossrider.cwaizj
Sophos Generic PUA BG
Symantec Adware.Crossid
TrendMicro-HouseCall TROJ_GEN.R0C1H05C814
VIPRE Antivirus Crossrider (fs)
Antiy-AVL GrayWare[AdWare:not-a-virus]/Win32.Lyckriks
Comodo Security ApplicUnwnt
Jiangmin AdWare/Lyckriks.ff
Kaspersky not-a-virus:AdWare.Win32.Lyckriks.mk
Kingsoft AntiVirus Win32.Troj.Lyckriks.mk.(kcloud)
Trend Micro TROJ_GEN.R0CBC0OB214
Vba32 AntiVirus AdWare.Lyckriks
SUPERAntiSpyware Trojan.Agent/Gen-Crossrider
nProtect Trojan.Generic.11165538
Qihoo-360 Malware.QVM10.Gen
Avira AntiVir Adware/CrossRider.AD
OMG Music Plus-enabler.exe (MD5: 0e44063f24e50821c3bd66a7dab7f5ef) has been flagged by 24 scanners:
Scanner Software Result
Lavasoft Ad-Aware Trojan.Generic.11165538
AVG MultiBundle.U
Baidu-International Adware.Win32.Lyrics.71
Bitdefender Trojan.Generic.11165538
Dr.Web Trojan.Crossrider.950
Emsisoft Anti-Malware Trojan.Generic.11165538 (B)
F-Secure Trojan.Generic.11165538
G Data Trojan.Generic.11165538
Malwarebytes PUP.Optional.OMGMusicPlus.A
MicroWorld-eScan Trojan.Generic.11165538
nProtect Trojan.Generic.11165538
TrendMicro-HouseCall TROJ_GEN.F47V0320
VIPRE Antivirus Crossrider (fs)
Symantec WS.Reputation.1
ESET-NOD32 a variant of Win64/Toolbar.Crossrider.C
K7 AntiVirus Trojan ( 004956811 )
K7GW Trojan ( 004956811 )
McAfee Artemis!0E44063F24E5
SUPERAntiSpyware (-1) Unable to load input file.
McAfee-GW-Edition Artemis!2ACADA975A2B
Sophos AppRider
Qihoo-360 Malware.QVM10.Gen
Avira AntiVir Adware/CrossRider.AD
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
OMG Music Plus-codedownloader.exe (MD5: c6df1505f4cb57e2c00630138b041ed6) has been flagged by 38 scanners:
Scanner Software Result
Lavasoft Ad-Aware Adware.Generic.909955
Antiy-AVL Trojan/Win32.SGeneric
AVG Generic5.AOGY
Baidu-International Adware.Win32.CrossRider.X
Bitdefender Adware.Generic.909955
Dr.Web Trojan.Crossrider.7193
Emsisoft Anti-Malware Adware.Generic.909955 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.X
F-Secure Adware.Generic.909955
G Data Adware.Generic.909955
Malwarebytes PUP.Optional.OMGMusicPlus.A
McAfee Artemis!DCE4B40945F2
McAfee-GW-Edition Artemis!DCE4B40945F2
MicroWorld-eScan Adware.Generic.909955
Sophos Generic PUA DN
Symantec Adware.Crossid
TrendMicro-HouseCall TROJ_GEN.R0C1H05C714
VIPRE Antivirus Crossrider (fs)
nProtect Trojan.Generic.11165538
ALYac Adware.Generic.945803
avast! Win32:Crossrider-AG [PUP]
Avira Adware/CrossRider.A.3024
AVware Crossrider (fs)
Comodo Security ApplicUnwnt
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Prot W32/A-eb9ef301!Eldorado
K7 AntiVirus Trojan ( 004984e91 )
K7GW Trojan ( 004984e91 )
NANO AntiVirus Trojan.Win32.Crossrider.dapcca
Panda Antivirus Trj/Genetic.gen
Qihoo-360 HEUR/Malware.QVM10.Gen
Trend Micro TROJ_GEN.R0CBC0OED14
Zillya Adware.CrossRider.Win32.186
Agnitum Outpost PUA.CrossRider!
Rising Antivirus PE:Trojan.Win32.Generic.1739A398!389653400
SUPERAntiSpyware (-1) Unable to load input file.
Avira AntiVir Adware/CrossRider.AD
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)

Software Behaviors

Scheduled tasks:
  • OMG Music Plus-firefoxinstaller.exe is scheduled as a task named 'OMG Music Plus-firefoxinstaller'.

Startup Entries

Startup tasks:
  • OMG Music Plus-codedownloader.exe is automatically launched at startup through a scheduled task named OMG Music Plus-codedownloader.
  • a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-5.exe is automatically launched at startup through a scheduled task named a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-5.
  • a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-4.exe is automatically launched at startup through a scheduled task named a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-4.
  • a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-3.exe is automatically launched at startup through a scheduled task named a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-3.
  • a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-2.exe is automatically launched at startup through a scheduled task named a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-2.
  • OMG Music Plus-nova.exe is automatically launched at startup through a scheduled task named 38dc2d6c-0e23-442d-966c-5b490621625e-7.

Software Details

URL:
https://www.bundlore.com
Support:
–
Installation path:
C:\Program Files\omg music plus
Uninstaller:
C:\Program Files\OMG Music Plus\Uninstall.exe /fromcontrolpanel=1
Size:
7.00 MB
Language:
English

OMG Music Plus Executable Details

Primary executable:
utils.exe
Name:
OMG Music Plus
Path:
C:\Program Files\omg music plus\utils.exe
MD5:
fcd23934f3e1c21a1a6de77de2b34cfd
SHA-1:
–
SHA-256:
–
Files installed by OMG Music Plus
File Type Filename MD5
EXE
OMG Music Plus-chromeinstaller.exe
Toolbar
68dadb52ccad853796b769c1d3d968ea
EXE
OMG Music Plus-buttonutil64.exe
d3c9a4761d1d364828db5215d00ecac9
EXE
OMG Music Plus-buttonutil.exe
359b4994d29ca9d06d74299cb1ad4d6a
DLL
OMG Music Plus-bho64.dll
Malware
acb2816a2cd9550d7b4569a7dd7d3e7b
DLL
OMG Music Plus-bho.dll
Adware
9f7299c7d6b3860eddf2c034c89c452a
EXE
OMG Music Plus-bg.exe
4b8009ba48e31c89f587f7a13bab6394
CRX
49182.crx
be3ca918e0fe9b698532b557cd870c52
EXE
OMG Music Plus-nova.exe
Malware
2c4521e97a147834ec72e923c0fa2bbe
EXE
a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-5.exe
Malware
f7ce341902201b308ad330ad0f3faa6f
EXE
a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-4.exe
Malware
da3a25d2ddeafb90f2faa7f592419e8c