Adware.AddLyrics.47 removal

The Adware.AddLyrics.47 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adware.AddLyrics.47 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Authenticode signature is invalid
Network activity detected but not expressed in API logs

How to determine Adware.AddLyrics.47?


File Info:
name: 57E2C5A47FF1120289C8.mlw
path: /opt/CAPEv2/storage/binaries/226740579d51481fcbc74cfb7958ca2a31cc8147b6b2897c60fd47efcd7ba4db
crc32: 2CBD6187
md5: 57e2c5a47ff1120289c883c9f7caf9ff
sha1: b692072b0323917c8bfadd6a902650973f269bc9
sha256: 226740579d51481fcbc74cfb7958ca2a31cc8147b6b2897c60fd47efcd7ba4db
sha512: 6e09c3d3d66bce1e7e271b03bcf924cf26469f57e2d2f10233f6a06d7956bcf619ccd21b997b5232ff101a7d7c9ecc4a9ab812116d98243808f8c3c81480d611
ssdeep: 6144:pvPDMh7YGw5bIa/lpce2MxcBVyvQw1tiwJL:FMh7YFbTpcepcBV5w1tiwR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B9546C7165518439C223057609EC9B7920BEBBA0A3A2DCE317DC1F8D9661AD1F736F32
sha3_384: 8c987e5284c8ba817fb98b86eb7c1a47f228a50ab65c883da21ebd68fba3f39f9a5226b5273caab78f60dec84265706a
ep_bytes: e80d6c0000e97ffeffffcccccccccccc
timestamp: 2014-05-26 09:00:21

Version Info:
ProductVersion: 1.171.0.0
LegalCopyright: Copyright 2013
Translation: 0x0409 0x04b0

Adware.AddLyrics.47 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Agent.lZhB
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Adware.AddLyrics.47
FireEye	Generic.mg.57e2c5a47ff11202
ALYac	Gen:Variant.Adware.AddLyrics.47
Cylance	Unsafe
Alibaba	AdWare:Win32/AddLyrics.aa749018
Cybereason	malicious.47ff11
BitDefenderTheta	Gen:NN.ZexaE.34294.ru0@aGi0hLbi
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Adware.AddLyrics.AF
TrendMicro-HouseCall	TROJ_GEN.R002C0WKM21
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Agent.heur
BitDefender	Gen:Variant.Adware.AddLyrics.47
NANO-Antivirus	Riskware.Win32.AddLyrics.farngs
Ad-Aware	Gen:Variant.Adware.AddLyrics.47
Sophos	Generic PUA LG (PUA)
Comodo	ApplicUnwnt@#17ulrdv2ed42q
VIPRE	Revizer (fs)
TrendMicro	TROJ_GEN.R002C0WKM21
McAfee-GW-Edition	BehavesLike.Win32.BadFile.dh
Emsisoft	Gen:Variant.Adware.AddLyrics.47 (B)
GData	Gen:Variant.Adware.AddLyrics.47
Webroot	Pua.Tuguu.Gen
Avira	ADWARE/AddLyrics.293376.1
Antiy-AVL	Trojan/Generic.ASMalwS.2631F24
Gridinsoft	Ransom.Win32.Wacatac.sa
ViRobot	Adware.Addlyrics.293376
Microsoft	Program:Win32/Wacapew.C!ml
Cynet	Malicious (score: 99)
McAfee	Artemis!57E2C5A47FF1
MAX	malware (ai score=63)
VBA32	BScope.Adware.Agent
APEX	Malicious
Rising	Malware.Heuristic!ET#98% (RDMK:cmRtazpeFrSR10atDMFwvXRwWriS)
Yandex	PUA.Agent!j4IqQant4j0
SentinelOne	Static AI – Malicious PE
Fortinet	Riskware/AddLyrics
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Adware.AddLyrics.47?

Adware.AddLyrics.47 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X