MetroLyrics Toolbar

MetroLyricsMetroLyrics (www.metrolyrics.com), features over 262,000 music lyrics and it is one of the first free sites to add the latest lyrics as new songs come out. The toolbar lets user easily access the links at MetroLyrics. The toolbar lets user search lyrics at the MetroLyrics or the web search with Yahoo or Google search.The toolbar keeps a watch on the user’s browsing habits and shows a lot of popup ads from different advertisers.Characteristics/Symptoms: Collects information about the pages visitedSlows the browser Can change the default search settings and homepageCommunicates with the host serverShows popup ads from different advertisersCreates Cookies Date of Found: 2006-03-06Security Level: HighOperating OS: WIN XPInstallation Type: Installed through EXEOperation: After InstallationTime of Operation: After Browser Restart.Screenshot:2. Installation Sample and Image2.1. Installation SampleOrigin URL: http://www.metrolyrics.com/MetroLyrics Toolbar.exe 3. Changes after installation 3.1. Process: Files and Location: 3.2 Directories:MetroLyrics Toolbar creates following directories:C:\Program Files\MetroLyrics ToolbarC:\Documents and Settings\All Users\Start Menu\Programs\MetroLyricsC:\Documents and Settings\All Users\Start Menu\Programs\MetroLyrics\Toolbar3.3. ActiveX Information ActiveX Screenshot:File location

General information:

Malware Name: MetroLyrics Toolbar
Malware Type: Toolbar
Company Name: MetroLyrics
Company URL: http://www.metrolyrics.com/
Threat Level: High
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Browser Restart.

Company Description:

MetroLyrics (www.metrolyrics.com), features over 262,000 music lyrics and it is one of the first free sites to add the latest lyrics as new songs come out. The toolbar lets user easily access the links at MetroLyrics. The toolbar lets user search lyrics at the MetroLyrics or the web search with Yahoo or Google search.

Spyware Description:

MetroLyricsMetroLyrics (www.metrolyrics.com), features over 262,000 music lyrics and it is one of the first free sites to add the latest lyrics as new songs come out. The toolbar lets user easily access the links at MetroLyrics. The toolbar lets user search lyrics at the MetroLyrics or the web search with Yahoo or Google search.The toolbar keeps a watch on the user’s browsing habits and shows a lot of popup ads from different advertisers.Characteristics/Symptoms: Collects information about the pages visitedSlows the browser Can change the default search settings and homepageCommunicates with the host serverShows popup ads from different advertisersCreates Cookies Date of Found: 2006-03-06Security Level: HighOperating OS: WIN XPInstallation Type: Installed through EXEOperation: After InstallationTime of Operation: After Browser Restart.Screenshot:2. Installation Sample and Image2.1. Installation SampleOrigin URL: http://www.metrolyrics.com/MetroLyrics Toolbar.exe 3. Changes after installation 3.1. Process: Files and Location: 3.2 Directories:MetroLyrics Toolbar creates following directories:C:\Program Files\MetroLyrics ToolbarC:\Documents and Settings\All Users\Start Menu\Programs\MetroLyricsC:\Documents and Settings\All Users\Start Menu\Programs\MetroLyrics\Toolbar3.3. ActiveX Information ActiveX Screenshot:File location

Characteristics/Symptoms:

    -> Collects information about the pages visited -> Slows the browser -> Can change the default search settings and homepage -> Communicates with the host server -> Shows popup ads from different advertisers -> Creates Cookies0

Additional information might be found here:

google Search at Google for MetroLyrics Toolbar
bing Search at Bing for MetroLyrics Toolbar
yahoo Search at Yahoo for MetroLyrics Toolbar

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\MetroLyrics Toolbar\License.txt 16767 Text Document
C:\Program Files\MetroLyrics Toolbar\MetroLyrics Default.ini 3552 Configuration Settings
C:\Program Files\MetroLyrics Toolbar\MetroLyrics.bmp 7006 Bitmap Image

Folder information Created after Installation:

Folder Location
C:\Documents and Settings\All Users\Start Menu\Programs\MetroLyrics
C:\Program Files\MetroLyrics Toolbar

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Internet Explorer\Toolbar\{ED4EB1BD-03A0-4484-93A3-2BAA7CD146A2}\MetroLyrics Toolbar
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MetroLyrics Toolbar_is1
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MetroLyrics Toolbar_is1