OMG Music Plus

OMG Music Plus

Known Adware

by Bundlore LTD

What is OMG Music Plus?

OMG Music Plus is software application developed by Bundlore LTD. It is most commonly found on computers running Windows 7 with nearly 66.67% of installations running this operating system. OMG Music Plus's installer is typically 7.00 MB in size and installs around 30 files. The most common release is 1.34.4.10 with 50.00% of all installations currently using this version.

OMG Music Plus is most popular in the United States with 44.44% of installations residing in this country.

OMG Music Plus adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About OMG Music Plus?

OMG Music Plus is a software program designed to modify a user's start page and search provider to a partner or affiliate search engine. It leverages the Crossrider framework to publish and update browser extensions for Internet Explorer, Chrome, and Firefox. The software is distributed through Bundlore, a download manager that bundles various adware components.

Multiple virus scanners have detected malware in OMG Music Plus.

utils.exe (MD5: fcd23934f3e1c21a1a6de77de2b34cfd) has been flagged by 45 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.VMDetector.E
Bkav FE HW32.CDB
ESET-NOD32 a variant of Win32/Packed.VMDetector.E
Symantec Trojan.ADH.SMH
TrendMicro-HouseCall TROJ_GE.A20295AD
Lavasoft Ad-Aware Gen:Application.Heur.Xv0@myw!tzoO
AhnLab-V3 PUP/Win32.CrossRider
Antiy-AVL RiskWare[WebToolbar]/Win32.CrossRider.agq
Arcabit Application.Heur.ED7CF2
avast! Win32:Crossrider-AP [PUP]
AVG Toolbar.Crossrider.J
Avira ADWARE/CrossRider.gr
AVware Crossrider (fs)
Bitdefender Gen:Application.Heur.Xv0@myw!tzoO
Comodo Security Application.Win32.CrossRider.CK
Cyren W32/AdLoad.AK2.gen!Eldorado
Dr.Web Trojan.Crossrider.27550
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Prot W32/AdLoad.AK2.gen!Eldorado
F-Secure Gen:Application.Heur.Xv0@myw!tzoO
G Data Gen:Application.Heur.Xv0@myw!tzoO
Kaspersky not-a-virus:WebToolbar.Win32.CrossRider.agq
Malwarebytes PUP.Optional.CrossRider.A
McAfee Artemis!A222C4818070
McAfee-GW-Edition BehavesLike.Win32.AdwareCross.th
MicroWorld-eScan Gen:Application.Heur.Xv0@myw!tzoO
NANO AntiVirus Trojan.Win32.Crossrider.ddzdfm
Panda Antivirus Trj/Genetic.gen
Qihoo-360 Win32/Virus.Adware.7c5
SUPERAntiSpyware Adware.CrossRider/Variant
Tencent Win32.Adware.Bp-browser.Luqs
Trend Micro TROJ_GEN.R0C1C0EGI15
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CrossRider.Win32.64
ALYac Adware.Generic.952538
Emsisoft Anti-Malware Adware.Generic.952538 (B)
IKARUS anti.virus AdWare.CrossRider
K7 AntiVirus Trojan ( 004984e91 )
K7GW Trojan ( 004984e91 )
Sophos AppRider
Agnitum Outpost PUA.CrossRider!
nProtect Adware.Generic.938747
Rising Antivirus PE:Trojan.Win32.Generic.1739A398!389653400
Avira AntiVir Adware/CrossRider.AD
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
OMG Music Plus-updater.exe (MD5: 2acada975a2b968f13d01912916b8a75) has been flagged by 25 scanners:
Scanner Software Result
Lavasoft Ad-Aware Adware.Generic.905665
Baidu-International Adware.Win32.CrossRider.X
Bitdefender Adware.Generic.905665
Dr.Web Trojan.Crossrider.7209
Emsisoft Anti-Malware Adware.Generic.905665 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.X
F-Secure Adware.Generic.905665
G Data Adware.Generic.905665
K7 AntiVirus Trojan ( 00495b741 )
K7GW Trojan ( 00495b741 )
Malwarebytes PUP.Optional.OMGMusicPlus.A
McAfee Artemis!154B57C3C554
McAfee-GW-Edition Artemis!154B57C3C554
MicroWorld-eScan Adware.Generic.905665
Sophos Generic PUA IG
SUPERAntiSpyware Trojan.Agent/Gen-Crossrider
Symantec Adware.Crossid
TrendMicro-HouseCall TROJ_GEN.R0C1H05C814
VIPRE Antivirus Crossrider (fs)
Antiy-AVL Trojan/Win32.SGeneric
AVG Generic5.AOGY
nProtect Trojan.Generic.11165538
Qihoo-360 Malware.QVM10.Gen
Avira AntiVir Adware/CrossRider.AD
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
OMG Music Plus-firefoxinstaller.exe (MD5: cbac4bcb2c448d582bfa3f60962b191e) has been flagged by 34 scanners:
Scanner Software Result
Lavasoft Ad-Aware Adware.Generic.911466
avast! Win32:Adware-gen [Adw]
AVG MultiBundle.V
Baidu-International Adware.Win32.CrossRider.Y
Bitdefender Adware.Generic.911466
Dr.Web Trojan.Crossrider.8431
Emsisoft Anti-Malware Adware.Generic.911466
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.Y
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Secure Adware.Generic.911466
G Data Adware.Generic.911466
IKARUS anti.virus AdWare.SuspectCRC
K7 AntiVirus Trojan
K7GW Trojan ( 004958cc1 )
Malwarebytes PUP.Optional.OMGMusicPlus.A
McAfee Artemis!129A73035373
McAfee-GW-Edition Artemis!129A73035373
MicroWorld-eScan Adware.Generic.911466
NANO AntiVirus Trojan.Win32.Crossrider.cwaizj
Sophos Generic PUA BG
Symantec Adware.Crossid
TrendMicro-HouseCall TROJ_GEN.R0C1H05C814
VIPRE Antivirus Crossrider (fs)
Antiy-AVL GrayWare[AdWare:not-a-virus]/Win32.Lyckriks
Comodo Security ApplicUnwnt
Jiangmin AdWare/Lyckriks.ff
Kaspersky not-a-virus:AdWare.Win32.Lyckriks.mk
Kingsoft AntiVirus Win32.Troj.Lyckriks.mk.(kcloud)
Trend Micro TROJ_GEN.R0CBC0OB214
Vba32 AntiVirus AdWare.Lyckriks
SUPERAntiSpyware Trojan.Agent/Gen-Crossrider
nProtect Trojan.Generic.11165538
Qihoo-360 Malware.QVM10.Gen
Avira AntiVir Adware/CrossRider.AD
OMG Music Plus-enabler.exe (MD5: 0e44063f24e50821c3bd66a7dab7f5ef) has been flagged by 24 scanners:
Scanner Software Result
Lavasoft Ad-Aware Trojan.Generic.11165538
AVG MultiBundle.U
Baidu-International Adware.Win32.Lyrics.71
Bitdefender Trojan.Generic.11165538
Dr.Web Trojan.Crossrider.950
Emsisoft Anti-Malware Trojan.Generic.11165538 (B)
F-Secure Trojan.Generic.11165538
G Data Trojan.Generic.11165538
Malwarebytes PUP.Optional.OMGMusicPlus.A
MicroWorld-eScan Trojan.Generic.11165538
nProtect Trojan.Generic.11165538
TrendMicro-HouseCall TROJ_GEN.F47V0320
VIPRE Antivirus Crossrider (fs)
Symantec WS.Reputation.1
ESET-NOD32 a variant of Win64/Toolbar.Crossrider.C
K7 AntiVirus Trojan ( 004956811 )
K7GW Trojan ( 004956811 )
McAfee Artemis!0E44063F24E5
SUPERAntiSpyware (-1) Unable to load input file.
McAfee-GW-Edition Artemis!2ACADA975A2B
Sophos AppRider
Qihoo-360 Malware.QVM10.Gen
Avira AntiVir Adware/CrossRider.AD
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
OMG Music Plus-codedownloader.exe (MD5: c6df1505f4cb57e2c00630138b041ed6) has been flagged by 38 scanners:
Scanner Software Result
Lavasoft Ad-Aware Adware.Generic.909955
Antiy-AVL Trojan/Win32.SGeneric
AVG Generic5.AOGY
Baidu-International Adware.Win32.CrossRider.X
Bitdefender Adware.Generic.909955
Dr.Web Trojan.Crossrider.7193
Emsisoft Anti-Malware Adware.Generic.909955 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.X
F-Secure Adware.Generic.909955
G Data Adware.Generic.909955
Malwarebytes PUP.Optional.OMGMusicPlus.A
McAfee Artemis!DCE4B40945F2
McAfee-GW-Edition Artemis!DCE4B40945F2
MicroWorld-eScan Adware.Generic.909955
Sophos Generic PUA DN
Symantec Adware.Crossid
TrendMicro-HouseCall TROJ_GEN.R0C1H05C714
VIPRE Antivirus Crossrider (fs)
nProtect Trojan.Generic.11165538
ALYac Adware.Generic.945803
avast! Win32:Crossrider-AG [PUP]
Avira Adware/CrossRider.A.3024
AVware Crossrider (fs)
Comodo Security ApplicUnwnt
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Prot W32/A-eb9ef301!Eldorado
K7 AntiVirus Trojan ( 004984e91 )
K7GW Trojan ( 004984e91 )
NANO AntiVirus Trojan.Win32.Crossrider.dapcca
Panda Antivirus Trj/Genetic.gen
Qihoo-360 HEUR/Malware.QVM10.Gen
Trend Micro TROJ_GEN.R0CBC0OED14
Zillya Adware.CrossRider.Win32.186
Agnitum Outpost PUA.CrossRider!
Rising Antivirus PE:Trojan.Win32.Generic.1739A398!389653400
SUPERAntiSpyware (-1) Unable to load input file.
Avira AntiVir Adware/CrossRider.AD
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)

Software Behaviors

Scheduled tasks:
  • OMG Music Plus-firefoxinstaller.exe is scheduled as a task named 'OMG Music Plus-firefoxinstaller'.

Startup Entries

Startup tasks:
  • OMG Music Plus-codedownloader.exe is automatically launched at startup through a scheduled task named OMG Music Plus-codedownloader.
  • a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-5.exe is automatically launched at startup through a scheduled task named a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-5.
  • a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-4.exe is automatically launched at startup through a scheduled task named a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-4.
  • a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-3.exe is automatically launched at startup through a scheduled task named a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-3.
  • a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-2.exe is automatically launched at startup through a scheduled task named a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-2.
  • OMG Music Plus-nova.exe is automatically launched at startup through a scheduled task named 38dc2d6c-0e23-442d-966c-5b490621625e-7.

Software Details

URL:
https://www.bundlore.com
Support:
–
Installation path:
C:\Program Files\omg music plus
Uninstaller:
C:\Program Files\OMG Music Plus\Uninstall.exe /fromcontrolpanel=1
Size:
7.00 MB
Language:
English

OMG Music Plus Executable Details

Primary executable:
utils.exe
Name:
OMG Music Plus
Path:
C:\Program Files\omg music plus\utils.exe
MD5:
fcd23934f3e1c21a1a6de77de2b34cfd
SHA-1:
–
SHA-256:
–
Files installed by OMG Music Plus
File Type Filename MD5
EXE
a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-3.exe
Malware
a222c48180701e286602fe196efbe93f
EXE
a2ef8f4e-714e-4382-9f92-4c6c03a1d6b3-2.exe
Malware
987bd3171ffb5f79e124ef5227d62b4e
EXE
549f22a9-c74c-46f9-827b-72873c4937a3-5.exe
Malware
9e0c539f7ad3822e2441286ae390c4ee
EXE
549f22a9-c74c-46f9-827b-72873c4937a3-4.exe
Malware
5ec29c9f3d75adab0f7d41c85253a629
EXE
549f22a9-c74c-46f9-827b-72873c4937a3-3.exe
Malware
5b811a4af950b579cdd07d0ba26db1e6
EXE
549f22a9-c74c-46f9-827b-72873c4937a3-2.exe
Malware
2f604f6465845d8cf9f12b80e1889013
EXE
38dc2d6c-0e23-442d-966c-5b490621625e-5.exe
Malware
716abe84c69b899e9b40f7ebd0cf1d69
EXE
38dc2d6c-0e23-442d-966c-5b490621625e-4.exe
Malware
c79babebaf02241826d9b42e7b2a6c7d
EXE
38dc2d6c-0e23-442d-966c-5b490621625e-2.exe
Malware
e5be0002d0b460b0d86760f63cfc62c8
DLL
OMG Music Plus-nova.dll
6aea11f1be781f82904f457a4ef2515a