Adware.SingAlong

Posted: June 13, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Ranking:	12,267
Threat Level:	2/10
Infected PCs:	56,388

First Seen:	June 13, 2013
Last Seen:	March 10, 2025
OS(es) Affected:	Windows

Adware.SingAlong is a Potentially Unwanted Program often identified as a variant of AddLyrics, due to the similarities between the two programs. Like AddLyrics, Adware.SingAlong uses the provision of YouTube-injected lyrics as an excuse for displaying extra advertising content in your Web browser. Because Adware.SingAlong's advertisements have a high chance of endangering your PC and are displayed in a semi-invasive format, malware experts find that deleting Adware.SingAlong with a good anti-adware product is best for your PC, in all ordinary circumstances.

The Wavers in the Persuasive Tune of Adware.SingAlong's Marketing Plan

Adware.SingAlong is an add-on seen, so far, within Internet Explorer as a Browser Helper Object, as well as a Chrome extension. With a marketing plan that crystallizes around providing music video lyrics for YouTube content, Adware.SingAlong may seem like a useful product, but Adware.SingAlong also may include extra functions for its personal profit that are far more invasive than necessary. Besides the excuse of its lyrics function, Adware.SingAlong also injects advertisements into your Web browser automatically.

Malware experts found that most Adware.SingAlong advertisements use distinct tags, to prevent them from being misidentified as a native part of a website's content. However, Adware.SingAlong advertisements are injected into unrelated Web pages and cannot be blocked as long as Adware.SingAlong is functional. Adware.SingAlong's website, Xenomorph.net, also has received poor ratings from several Web reputation organizations and occasionally even flags positive for low-level PC threats.
Current investigations by malware researchers find no evidence of Adware.SingAlong including functions that would harm your PC intentionally. Despite that, Adware.SingAlong advertisements are unlikely to be filtered for the viewers' safety and may include other adware.

Muting the Adware that Takes Liberties with YouTube

The prominence of YouTube among streaming media domains also has caused a steady rise in the development of YouTube-related adware and other PUPs. Even though some functions from Adware.SingAlong add-ons may be useful for music fans, malware researchers consider the price in browser security excessively high for the limited features Adware.SingAlong provides.

Since Adware.SingAlong exploits default Windows features to launch automatically, Adware.SingAlong should be assumed to be open unless you take extra steps to deactivate Adware.SingAlong. Adware.SingAlong is not categorized as a threat or high-level threat, and removing Adware.SingAlong should be simple for any PC user who has access to competent anti-adware programs. On the other end of things, unless you scan downloaded files regularly, you may find it difficult to avoid installing Adware.SingAlong by accident. Malware experts have confirmed Adware.SingAlong's distribution through free software-based bundles. Websites and other download sources known to distribute adware continue to be a risk to your browser that any Web surfer will find little benefit in trusting.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

C:\Program Files (x86)\SingAlong\Uninstall.exe

File name: Uninstall.exe
Size: 130.76 KB (130769 bytes)
MD5: fd1761b6f83e9d7f40f8a1b839b15e27
Detection count: 98
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files (x86)\SingAlong\Uninstall.exe
Group: Malware file
Last Updated: June 2, 2022

%PROGRAMFILES%\SingAlong\singalng.dll

File name: singalng.dll
Size: 133.52 KB (133528 bytes)
MD5: fa4b2fb58b8094507eb8b32c2f830dbd
Detection count: 74
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\SingAlong
Group: Malware file
Last Updated: April 24, 2014

%PROGRAMFILES%\SingAlong\SingalngUpdater.exe

File name: SingalngUpdater.exe
Size: 183.26 KB (183269 bytes)
MD5: 5cf06aecfeb071639d61879d8945f3a0
Detection count: 52
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\SingAlong
Group: Malware file
Last Updated: April 24, 2014

C:\Users\<username>\AppData\Local\Temp\SingAlong.exe

File name: SingAlong.exe
Size: 283.64 KB (283649 bytes)
MD5: 5e6ca35358f8265b15b39831c9b6dbd3
Detection count: 19
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Temp\SingAlong.exe
Group: Malware file
Last Updated: April 8, 2022

%USERPROFILE%\Local Settings\Application Data\SingAlong\vaeibfra.dll

File name: vaeibfra.dll
Size: 847.87 KB (847872 bytes)
MD5: d3a64fd2f717e841bce0ebd6c9d74041
Detection count: 7
File type: Dynamic link library
Mime Type: unknown/dll
Path: %USERPROFILE%\Local Settings\Application Data\SingAlong
Group: Malware file
Last Updated: July 1, 2013

%PROGRAMFILES%\SingAlong\chrome.crx"

File name: %PROGRAMFILES%\SingAlong\chrome.crx"
Mime Type: unknown/crx"
Group: Malware file

%PROGRAMFILES%\SingAlong\FF\chrome.manifest

File name: %PROGRAMFILES%\SingAlong\FF\chrome.manifest
Mime Type: unknown/manifest
Group: Malware file

%PROGRAMFILES%\SingAlong\FF\chrome\content\icon.png

File name: %PROGRAMFILES%\SingAlong\FF\chrome\content\icon.png
Mime Type: unknown/png
Group: Malware file

%PROGRAMFILES%\SingAlong\FF\chrome\content\main.js

File name: %PROGRAMFILES%\SingAlong\FF\chrome\content\main.js
File type: JavaScript file
Mime Type: unknown/js
Group: Malware file

%PROGRAMFILES%\SingAlong\FF\chrome\content\overlay.xul

File name: %PROGRAMFILES%\SingAlong\FF\chrome\content\overlay.xul
Mime Type: unknown/xul
Group: Malware file

%PROGRAMFILES%\SingAlong\FF\install.rdf

File name: %PROGRAMFILES%\SingAlong\FF\install.rdf
Mime Type: unknown/rdf
Group: Malware file

%PROGRAMFILES%\SingAlong\SingalngUpdater.exe

File name: %PROGRAMFILES%\SingAlong\SingalngUpdater.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

%PROGRAMFILES%\SingAlong\Uninstall.exe

File name: %PROGRAMFILES%\SingAlong\Uninstall.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

%WINDIR%\Tasks\Sing Along Update.job

File name: %WINDIR%\Tasks\Sing Along Update.job
Mime Type: unknown/job
Group: Malware file

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{6492E171-2427-4932-B414-33574A089F5E}{93F03FA6-C8F8-4850-B304-38ECC85ED3AB}{D929B5F2-1CF3-4564-9A03-FC3FDD588064}HKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\SingAlongSOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{6492E171-2427-4932-B414-33574A089F5E}Software\Mozilla\Firefox\Extensions\singalong@xenophesoft.comSoftware\SingAlongSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{6492E171-2427-4932-B414-33574A089F5E}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{6492E171-2427-4932-B414-33574A089F5E}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}singalong@xenophesoft.com

Additional Information

The following directories were created:

%PROGRAMFILES%\SingAlong%PROGRAMFILES(x86)%\SingAlong