LyricsSay-15

LyricsSay-15

Known Adware

by Showpass

What is LyricsSay-15?

LyricsSay-15 is software application developed by Showpass. It is most commonly found on computers running Windows 7 with nearly 58.62% of installations running this operating system. LyricsSay-15's installer is typically 2.00 MB in size and installs around 15 files.

LyricsSay-15 is most popular in the United States with 41.86% of installations residing in this country.

About LyricsSay-15?

LyricsSay is a web browser extension that functions as adware, designed to exert control over the user's browser by redirecting web searches and injecting advertising. The program operates as a Browser Helper Object in Internet Explorer, and engages in behaviors such as hijacking advertising on non-associated websites and injecting its own advertising in various formats including contextual link ads, banner ads, popups, and pop-overs. This includes the hijacking of known ad serving sites.

Multiple virus scanners have detected malware in LyricsSay-15.

utils.exe (MD5: 1c5ec6e8c2e89e3e9e6aa02c75e0657a) has been flagged by 21 scanners:
Scanner Software Result
avast! Win32:Dropper-gen [Drp]
Bitdefender Gen:Adware.AddLyrics.1
Bkav FE W32.Clod008.Trojan
Dr.Web Trojan.Crossrider.9
Emsisoft Anti-Malware Gen:Adware.AddLyrics
G Data Gen:Adware.AddLyrics
Malwarebytes PUP.Optional.Lyrics.S
McAfee Artemis!1C5EC6E8C2E8
McAfee-GW-Edition Artemis!1C5EC6E8C2E8
Norman Suspicious_Gen5.AHARZ
TrendMicro-HouseCall TROJ_GEN.F47V1011
Baidu-International Trojan.Win32.Toolbar.CrossRider.H
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.H
Fortinet FortiGate Adware/Lyckriks
K7 AntiVirus Riskware
Kaspersky not-a-virus:AdWare.Win32.Lyckriks.lb
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Sophos Generic PUA MO
VIPRE Antivirus Crossrider (fs)
Symantec Adware.FindLyrics
Panda Antivirus Suspicious file
LyricsSay-15-updater.exe (MD5: c2fa21de1dc88c33f4286989252503ba) has been flagged by 11 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.Toolbar.CrossRider.I
ESET-NOD32 probably a variant of Win32/Toolbar.CrossRider.I
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
McAfee Artemis!C2FA21DE1DC8
McAfee-GW-Edition Artemis!C2FA21DE1DC8
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.Clodbf6.Trojan.80d1
Malwarebytes PUP.Optional.Lyrics.S
Panda Antivirus Suspicious file
Symantec Adware.FindLyrics
TrendMicro-HouseCall TROJ_GEN.R0C1H05JE13
LyricsSay-15-firefoxinstaller.exe (MD5: b5eaf0bceb08eb3b29dbed620e79877e) has been flagged by 12 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Malwarebytes PUP.Optional.Lyrics.S
Sophos Generic PUA PJ
Symantec Adware.FindLyrics
TrendMicro-HouseCall TROJ_GEN.R0C1H05JF13
VIPRE Antivirus Crossrider (fs)
Baidu-International Trojan.Win32.Toolbar.CrossRider.I
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
McAfee Artemis!C2FA21DE1DC8
McAfee-GW-Edition Artemis!C2FA21DE1DC8
Bkav FE W32.Clodbf6.Trojan.80d1
Panda Antivirus Suspicious file
LyricsSay-15-enabler.exe (MD5: 1ca07e685f1bd261be91c5d4ed3419c4) has been flagged by 12 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.Toolbar.CrossRider.I
ESET-NOD32 probably a variant of Win32/Toolbar.CrossRider.I
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
McAfee Artemis!1CA07E685F1B
McAfee-GW-Edition Heuristic.BehavesLike.Win32.Suspicious-BAY.K
VIPRE Antivirus Crossrider (fs)
Malwarebytes PUP.Optional.Lyrics.S
Sophos Generic PUA PJ
Symantec Adware.FindLyrics
TrendMicro-HouseCall TROJ_GEN.R0C1H05JF13
Bkav FE W32.Clodbf6.Trojan.80d1
Panda Antivirus Suspicious file
LyricsSay-15-codedownloader.exe (MD5: fa709705174c339f282deeab4e29ce3c) has been flagged by 11 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.Toolbar.CrossRider.I
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.I
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
McAfee Artemis!FA709705174C
McAfee-GW-Edition Heuristic.BehavesLike.Win32.Suspicious-BAY.K
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.Clodbf6.Trojan.80d1
Malwarebytes PUP.Optional.Lyrics.S
Panda Antivirus Suspicious file
Symantec Adware.FindLyrics
TrendMicro-HouseCall TROJ_GEN.R0C1H05JE13

Startup Entries

Startup tasks:
  • LyricsSay-15-firefoxinstaller.exe is automatically launched at startup through a scheduled task named LyricsSay-15-firefoxinstaller.
  • LyricsSay-15-chromeinstaller.exe is automatically launched at startup through a scheduled task named LyricsSay-15-chromeinstaller.
  • LyricsSay-15-updater.exe is automatically launched at startup through a scheduled task named LyricsSay-15-updater.
  • LyricsSay-15-enabler.exe is automatically launched at startup through a scheduled task named LyricsSay-15-enabler.
  • LyricsSay-15-codedownloader.exe is automatically launched at startup through a scheduled task named LyricsSay-15-codedownloader.

Software Details

URL:
–
Support:
–
Installation path:
C:\Program Files\lyricssay-15
Uninstaller:
C:\Program Files\LyricsSay-15\Uninstall.exe /fromcontrolpanel=1
Size:
2.00 MB
Language:
English

LyricsSay-15 Executable Details

Primary executable:
utils.exe
Name:
LyricsSay-15
Path:
C:\Program Files\lyricssay-15\utils.exe
MD5:
1c5ec6e8c2e89e3e9e6aa02c75e0657a
SHA-1:
–
SHA-256:
–
Files installed by LyricsSay-15
File Type Filename MD5
EXE
uninstall.exe
756f238d9d267a4a550f792f5522c68e
EXE
utils.exe
Malware
1c5ec6e8c2e89e3e9e6aa02c75e0657a
EXE
LyricsSay-15-helper.exe
696ee6612f365a4e6bd9cf3613a8d373
DLL
LyricsSay-15-buttonutil64.dll
a4b1b7181d3dfa6fcf5dc476a43e4d8a
DLL
LyricsSay-15-buttonutil.dll
3f33c9fc028bc688571532f666476a3a
EXE
LyricsSay-15-updater.exe
Malware
c2fa21de1dc88c33f4286989252503ba
EXE
LyricsSay-15-firefoxinstaller.exe
Malware
b5eaf0bceb08eb3b29dbed620e79877e
EXE
LyricsSay-15-enabler.exe
Malware
1ca07e685f1bd261be91c5d4ed3419c4
EXE
LyricsSay-15-codedownloader.exe
Malware
fa709705174c339f282deeab4e29ce3c
EXE
LyricsSay-15-chromeinstaller.exe
Malware
6fa1ee998d78f593d9e4ee7545f3ef95