TubeSing-3

TubeSing-3

Known Adware

by CrossLyrics

What is TubeSing-3?

TubeSing-3 is software application developed by CrossLyrics. It is most commonly found on computers running Windows 7 with nearly 47.37% of installations running this operating system. TubeSing-3's installer is typically 5.00 MB in size and installs around 15 files. The most common release is 1.28.153.5 with 78.95% of all installations currently using this version.

TubeSing-3 is most popular in the United States with 21.05% of installations residing in this country.

About TubeSing-3?

TubeSing is a web browser extension that has been classified as adware due to its ability to control and manipulate the user's browser. Specifically, in Internet Explorer, the program operates as a Browser Helper Object. This extension has the capability to redirect web searches and inject various forms of advertising, including contextual link ads, banner ads, and popups. Additionally, TubeSing has been known to hijack advertising on unrelated websites and inject its own advertising, including pop-overs, while also taking over known ad serving sites. This adware is commonly bundled with other unwanted third-party applications and can also infect systems through web browser exploits. While the program does come with an uninstaller and is listed in the Windows Add/Remove Programs, thoroughly removing it can be challenging and may require the use of an anti-malware product.

Multiple virus scanners have detected malware in TubeSing-3.

utils.exe (MD5: f1a29be906984b1117d485721e25aa44) has been flagged by 22 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.Packed.ScrambleWrapper.C
Bkav FE HW32.CDB
ESET-NOD32 Win32/Packed.ScrambleWrapper.C
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.TubeSing.A
TrendMicro-HouseCall TROJ_GEN.F47V0930
VIPRE Antivirus Adware.AddLyrics (fs)
Lavasoft Ad-Aware Adware.Generic.606863
Antiy-AVL AdWare/Win32.Lyckriks
AVG Generic5.AIIQ
Bitdefender Adware.Generic.606863
F-Secure Adware.Generic.606863
G Data Adware.Generic.606863
Jiangmin AdWare/Lyckriks.dm
K7 AntiVirus Trojan ( 0048e2ed1 )
K7GW Trojan ( 0048e2ed1 )
Kaspersky not-a-virus:AdWare.Win32.Lyckriks.ly
McAfee Artemis!63B6140B7021
McAfee-GW-Edition Artemis!63B6140B7021
MicroWorld-eScan Adware.Generic.606863
Sophos Generic PUA GO
Symantec Adware.FindLyrics
TubeSing-3-updater.exe (MD5: 3e7cbcef69d972d30cc79d2354e0ea42) has been flagged by 12 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.Toolbar.CrossRider.I
ESET-NOD32 probably a variant of Win32/Toolbar.CrossRider.I
K7 AntiVirus Riskware
K7GW Riskware
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.Lyrics.A
McAfee Artemis!3E7CBCEF69D9
McAfee-GW-Edition Artemis!3E7CBCEF69D9
Symantec WS.Reputation.1
TrendMicro-HouseCall TROJ_GEN.F47V0929
VIPRE Antivirus Crossrider (fs)
AVG Generic5.AJKA
TubeSing-3-firefoxinstaller.exe (MD5: 111dbccf33e4b9cffbaf40f594d7c017) has been flagged by 12 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.Toolbar.CrossRider.J
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
K7 AntiVirus Trojan ( 0048c68d1 )
K7GW Trojan ( 0048c68d1 )
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.Lyrics.A
McAfee Artemis!111DBCCF33E4
McAfee-GW-Edition Artemis!111DBCCF33E4
Symantec Adware.FindLyrics
TrendMicro-HouseCall TROJ_GEN.R047H05JN13
VIPRE Antivirus Crossrider (fs)
AVG Generic5.AJKA
TubeSing-3-enabler.exe (MD5: b851ec9e48208c9947f4bd79bf734796) has been flagged by 7 scanners:
Scanner Software Result
AVG Generic5.AJKA
Baidu-International Trojan.Win32.Toolbar.CrossRider.I
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.Lyrics.A
TrendMicro-HouseCall TROJ_GEN.F47V1022
VIPRE Antivirus Crossrider (fs)
TubeSing-3-codedownloader.exe (MD5: d8f7e8408b72df5025da483f09819c4e) has been flagged by 7 scanners:
Scanner Software Result
AVG Generic_r.GS
Baidu-International Trojan.Win32.Toolbar.aEio
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.Lyrics.A
TrendMicro-HouseCall TROJ_GEN.F47V1022
VIPRE Antivirus Crossrider (fs)

Startup Entries

Startup tasks:
  • TubeSing-3-enabler.exe is automatically launched at startup through a scheduled task named TubeSing-3-enabler.
  • TubeSing-3-firefoxinstaller.exe is automatically launched at startup through a scheduled task named TubeSing-3-firefoxinstaller.
  • TubeSing-3-updater.exe is automatically launched at startup through a scheduled task named TubeSing-3-updater.
  • TubeSing-3-codedownloader.exe is automatically launched at startup through a scheduled task named TubeSing-3-codedownloader.
  • TubeSing-3-chromeinstaller.exe is automatically launched at startup through a scheduled task named TubeSing-3-chromeinstaller.

Software Details

URL:
–
Support:
–
Installation path:
C:\Program Files\tubesing-3
Uninstaller:
C:\Program Files\TubeSing-3\Uninstall.exe /fromcontrolpanel=1
Size:
5.00 MB
Language:
English

TubeSing-3 Executable Details

Primary executable:
utils.exe
Name:
TubeSing-3
Path:
C:\Program Files\tubesing-3\utils.exe
MD5:
f1a29be906984b1117d485721e25aa44
SHA-1:
–
SHA-256:
–
Files installed by TubeSing-3
File Type Filename MD5
EXE
98bd3c8d22fdf6a11f438bea9c51bd88
DLL
6df8e437dbb7154f1f1757cf76931c5d
DLL
dd33e619ebb4afd9da55bb6a4aab98c1
EXE
ee11add575b8f25ce069f23ffde7ec46
DLL
8ab75a457631efc086ade3b2ec7a7a6e