Home / malware

PDF

PUA:Win32/Lyrics

First posted on 02 July 2016.
Source: Microsoft

Aliases :

There are no other names known for PUA:Win32/Lyrics.

Explanation :

Installation

It can be digitally signed by the following vendors:

• PayByAds ltd.
• Pay-by-Ads Ltd

We have seen this application using product names such as:

• Uninstaller
• Tester
• Dropbox
• Tandem

This application communicates with domains such as:

• snk.jstickets.net
• tyc.clstrjava.net
• dx.drivemac.net
• pages.findopen.net
• xml.fastinstaller.net

For example:

• snk.jstickets.net/report/reported/?
• snk.jstickets.net/report/diag/?
• dx.drivemac.net/report/reported/?

This description was published using automated analysis.

Last update 02 July 2016

 

TOP