What is LyricsSay-15?

LyricsSay-15 is software application developed by Showpass. It is most commonly found on computers running Windows 7 with nearly 58.62% of installations running this operating system. LyricsSay-15's installer is typically 2.00 MB in size and installs around 15 files.

LyricsSay-15 is most popular in the United States with 41.86% of installations residing in this country.

About LyricsSay-15?

LyricsSay is a web browser extension that functions as adware, designed to exert control over the user's browser by redirecting web searches and injecting advertising. The program operates as a Browser Helper Object in Internet Explorer, and engages in behaviors such as hijacking advertising on non-associated websites and injecting its own advertising in various formats including contextual link ads, banner ads, popups, and pop-overs. This includes the hijacking of known ad serving sites.

Multiple virus scanners have detected malware in LyricsSay-15.

utils.exe (MD5: 1c5ec6e8c2e89e3e9e6aa02c75e0657a) has been flagged by 21 scanners:

Scanner Software	Version	Result
avast!	2014.9-131025	Win32:Dropper-gen [Drp]
Bitdefender	1.0.20.1490	Gen:Adware.AddLyrics.1
Bkav FE	1.3.0.4261	W32.Clod008.Trojan
Dr.Web	9.0.0.0298	Trojan.Crossrider.9
Emsisoft Anti-Malware	8.13.10.25.01	Gen:Adware.AddLyrics
G Data	13.10.22	Gen:Adware.AddLyrics
Malwarebytes	v2013.10.25.01	PUP.Optional.Lyrics.S
McAfee	5600.7238	Artemis!1C5EC6E8C2E8
McAfee-GW-Edition	7.7238	Artemis!1C5EC6E8C2E8
Norman	10.20131025	Suspicious_Gen5.AHARZ
TrendMicro-HouseCall	7.2.298	TROJ_GEN.F47V1011
Baidu-International	3.5.1.41473	Trojan.Win32.Toolbar.CrossRider.H
ESET-NOD32	8909	a variant of Win32/Toolbar.CrossRider.H
Fortinet FortiGate	5.1.147.0	Adware/Lyckriks
K7 AntiVirus	9.173.9850	Riskware
Kaspersky	9.0.0.837	not-a-virus:AdWare.Win32.Lyckriks.lb
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
Sophos	4.93.0	Generic PUA MO
VIPRE Antivirus	22312	Crossrider (fs)
Symantec	20131.1.5.61	Adware.FindLyrics
Panda Antivirus	10.0.3.5	Suspicious file

LyricsSay-15-updater.exe (MD5: c2fa21de1dc88c33f4286989252503ba) has been flagged by 11 scanners:

Scanner Software	Version	Result
Baidu-International	3.5.1.41473	Trojan.Win32.Toolbar.CrossRider.I
ESET-NOD32	8919	probably a variant of Win32/Toolbar.CrossRider.I
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
McAfee	5.600.0.1067	Artemis!C2FA21DE1DC8
McAfee-GW-Edition	2013	Artemis!C2FA21DE1DC8
VIPRE Antivirus	22408	Crossrider (fs)
Bkav FE	1.3.0.4415	W32.Clodbf6.Trojan.80d1
Malwarebytes	1.75.0.1	PUP.Optional.Lyrics.S
Panda Antivirus	10.0.3.5	Suspicious file
Symantec	20131.1.5.61	Adware.FindLyrics
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0C1H05JE13

LyricsSay-15-firefoxinstaller.exe (MD5: b5eaf0bceb08eb3b29dbed620e79877e) has been flagged by 12 scanners:

Scanner Software	Version	Result
ESET-NOD32	8941	a variant of Win32/Toolbar.CrossRider.J
Malwarebytes	1.75.0.1	PUP.Optional.Lyrics.S
Sophos	4.93.0	Generic PUA PJ
Symantec	20131.1.5.61	Adware.FindLyrics
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0C1H05JF13
VIPRE Antivirus	22564	Crossrider (fs)
Baidu-International	3.5.1.41473	Trojan.Win32.Toolbar.CrossRider.I
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
McAfee	5.600.0.1067	Artemis!C2FA21DE1DC8
McAfee-GW-Edition	2013	Artemis!C2FA21DE1DC8
Bkav FE	1.3.0.4415	W32.Clodbf6.Trojan.80d1
Panda Antivirus	10.0.3.5	Suspicious file

LyricsSay-15-enabler.exe (MD5: 1ca07e685f1bd261be91c5d4ed3419c4) has been flagged by 12 scanners:

Scanner Software	Version	Result
Baidu-International	3.5.1.41473	Trojan.Win32.Toolbar.CrossRider.I
ESET-NOD32	8919	probably a variant of Win32/Toolbar.CrossRider.I
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
McAfee	5.600.0.1067	Artemis!1CA07E685F1B
McAfee-GW-Edition	2013	Heuristic.BehavesLike.Win32.Suspicious-BAY.K
VIPRE Antivirus	22408	Crossrider (fs)
Malwarebytes	1.75.0.1	PUP.Optional.Lyrics.S
Sophos	4.93.0	Generic PUA PJ
Symantec	20131.1.5.61	Adware.FindLyrics
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0C1H05JF13
Bkav FE	1.3.0.4415	W32.Clodbf6.Trojan.80d1
Panda Antivirus	10.0.3.5	Suspicious file

LyricsSay-15-codedownloader.exe (MD5: fa709705174c339f282deeab4e29ce3c) has been flagged by 11 scanners:

Scanner Software	Version	Result
Baidu-International	3.5.1.41473	Trojan.Win32.Toolbar.CrossRider.I
ESET-NOD32	8911	a variant of Win32/Toolbar.CrossRider.I
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
McAfee	5.600.0.1067	Artemis!FA709705174C
McAfee-GW-Edition	2013	Heuristic.BehavesLike.Win32.Suspicious-BAY.K
VIPRE Antivirus	22346	Crossrider (fs)
Bkav FE	1.3.0.4415	W32.Clodbf6.Trojan.80d1
Malwarebytes	1.75.0.1	PUP.Optional.Lyrics.S
Panda Antivirus	10.0.3.5	Suspicious file
Symantec	20131.1.5.61	Adware.FindLyrics
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0C1H05JE13

Startup Entries

Startup tasks:

LyricsSay-15-firefoxinstaller.exe is automatically launched at startup through a scheduled task named LyricsSay-15-firefoxinstaller.
LyricsSay-15-chromeinstaller.exe is automatically launched at startup through a scheduled task named LyricsSay-15-chromeinstaller.
LyricsSay-15-updater.exe is automatically launched at startup through a scheduled task named LyricsSay-15-updater.
LyricsSay-15-enabler.exe is automatically launched at startup through a scheduled task named LyricsSay-15-enabler.
LyricsSay-15-codedownloader.exe is automatically launched at startup through a scheduled task named LyricsSay-15-codedownloader.

Software Details

URL:

–

Support:

–

Installation path:

C:\Program Files\lyricssay-15

Uninstaller:

C:\Program Files\LyricsSay-15\Uninstall.exe /fromcontrolpanel=1

Size:

2.00 MB

Language:

English

LyricsSay-15 Executable Details

Primary executable:

utils.exe

Name:

LyricsSay-15

Path:

C:\Program Files\lyricssay-15\utils.exe

MD5:

1c5ec6e8c2e89e3e9e6aa02c75e0657a

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

LyricsSay-15-buttonutil64.exe

7b7f65d6ed24d0688e07e4e7856a74e3

EXE

LyricsSay-15-buttonutil.exe

c14557d3bf8e1106ea747f16f1f4307a

DLL

LyricsSay-15-bho64.dll

Malware

587fa643a3d99613c20d766ec9181d1e

DLL

LyricsSay-15-bho.dll

Malware

3f1f9bbfcd2ee1e9648b00b9e37253a4

EXE

LyricsSay-15-bg.exe

0d022d319270d1aed2062891a8fb1d0e