PUA

PUA:Win32/Lyrics information

Malware Removal

The PUA:Win32/Lyrics is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUA:Win32/Lyrics virus can do?

  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • Authenticode signature is invalid

How to determine PUA:Win32/Lyrics?


File Info:

name: 01E47CB0A1B3C79A137A.mlw
path: /opt/CAPEv2/storage/binaries/ab938c6193c4d3cef8d2d69091bfc73b11404d31704cf95db795b83a05aa77c3
crc32: 1B68905D
md5: 01e47cb0a1b3c79a137abb502f21eb96
sha1: df6af9162f0a64101e878c01a977bd588c88d666
sha256: ab938c6193c4d3cef8d2d69091bfc73b11404d31704cf95db795b83a05aa77c3
sha512: ef0601e2ee638d2c71700a02c9228463277faf1b503dbf505ce32cb8a50bf5af0eb57828d58f2f846d47593927083f7aca72cb3dd69c0e66f65ae743358eed51
ssdeep: 98304:DGLvHEyK/5Nuo8p3Ri0+xFc6GcZCFPvBFO+bWALOK48HSOWRAvojIPkI9WLzntII:DakyCNuVphi0s63va/AaqHSJWAHrSJC
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E556332CD97C1725DC43243E0A56A62513393D3D88CE51BF98069FB27A173CEE89B52E
sha3_384: 9bba9a895a8459b00f8569424974bd6e1bc0a8830cc39a34001e1501aeeb83ca48e8146690346064ff7336afbd1b9408
ep_bytes: 81ecd4020000535556576a2033ed5e89
timestamp: 2012-02-24 19:19:59

Version Info:

Comments: Copyright (c) 2014
FileDescription: Just For Windows
FileVersion: 1.190.0.1
LegalCopyright: Copyright (c) 2014
Translation: 0x0000 0x04b0

PUA:Win32/Lyrics also known as:

Elasticmalicious (high confidence)
DrWebTrojan.Lyrics.621
MicroWorld-eScanGen:Variant.Adware.Strictor.82217
FireEyeGen:Variant.Adware.Strictor.82217
ALYacGen:Variant.Adware.Strictor.82217
CylanceUnsafe
ZillyaAdware.Strictor.Win32.39
SangforPUAAdvertising.Win32.Lyrics.mt
K7AntiVirusAdware ( 004b9ae81 )
AlibabaAdWare:Win32/Montiera.f2372161
K7GWAdware ( 004b9ae81 )
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderThetaGen:NN.ZedlaF.34114.Hu4@aKgkZcci
CyrenW32/AddLyrics.F.gen!Eldorado
SymantecTrojan Horse
ESET-NOD32a variant of Win32/Adware.AddLyrics.DM
APEXMalicious
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderGen:Variant.Adware.Strictor.82217
NANO-AntivirusTrojan.Win32.Lyrics.drsnha
AvastWin32:Adware-gen [Adw]
Ad-AwareGen:Variant.Adware.Strictor.82217
EmsisoftGen:Variant.Adware.Strictor.82217 (B)
ComodoApplicUnwnt@#12tomvms5w8au
BaiduWin32.Adware.AddLyrics.a
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.PUP.tc
SophosGeneric PUA NP (PUA)
GDataNSIS.Adware.AddLyrics.I
WebrootPua.Blockandsurf
AviraHEUR/AGEN.1118280
GridinsoftRansom.Win32.Occamy.sa
ArcabitTrojan.Adware.Strictor.D14129
ViRobotAdware.Addlyrics.5913859
MicrosoftPUA:Win32/Lyrics
AhnLab-V3Adware/Win32.AddLyrics.R137749
McAfeeArtemis!01E47CB0A1B3
MAXmalware (ai score=99)
VBA32BScope.Adware.AddLyrics
MalwarebytesPUP.Optional.VeriBrowse
TrendMicro-HouseCallTROJ_GEN.R002H0CLB21
RisingTrojan.Win32.Generic.18963BA1 (C64:YzY0OuJjJV9XTmeI)
YandexPUA.AddLyrics!TBcaVEoZIH4
AVGWin32:Adware-gen [Adw]
Cybereasonmalicious.0a1b3c
PandaTrj/Genetic.gen

How to remove PUA:Win32/Lyrics?

PUA:Win32/Lyrics removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment