Hey you,
BE IN THE KNOW!

35,000 ransomware infections per month and you still believe you are protected?

Sign up to receive:

  • alerts
  • news
  • free how-to-remove guides

of the newest online threats - directly to your inbox:


Remove Get-A-Clip Adware from Your Computer

get-a-clip-main-logoAn ad-supported program posing as online video downloader from YouTube called Get-A-Clip has been reported to advertise risky third-party websites. The suspicious software may collect user information and slow down the computer by heavily advertising third-party content. Advertisements may be linking to different sites, and this is the main reason experts consider this program indirectly dangerous.

NameGet-a-Clip
TypeAdware, rogue software
Short DescriptionThe program may collect user information and display advertisements leading to third-party websites.
SymptomsThe user may witness different pop-ups, banners, highlighted text and other ads while browsing.
Distribution MethodVia direct download, bundling or other forms of advertisement.
Detection ToolDownload Malware Removal Tool, to See If Your System Has Been Affected by Get-a-Clip
User Experience Join our forum to discuss Get-a-Clip.

Get-A-Clip – How Did I Get it

There are two main methods which are most likely to have slithered Get-A-Clip on your computer. One of them is by directly downloading the app. Since the interest for YouTube downloaders is huge, many users search for them online. Websites such as download.cnet.com offer different types of software and get -a- clip’s installer is one of them. The 17.1 MB installer’s name is “gcl-install-v5.0.exe” and it installs in %Program Files%.

get-a-clip-installer-sensorstechforum

Not only this, but the software may also be available online via being bundled with other applications. This is a very aggressive and in the same time effective marketing tool to slither third-party software. The bundled program can be found in the “Custom” or “Advanced” installation option of any software installer you may have downloaded online, for example:

→ “Add Get-A-Clip as a free extra to {program name}” with an opt-in box or an “I Agree” button.

Get-A-Clip In Detail

Once installed on your computer, the program creates a folder named Get-A-Clip in %ProgramFiles%, called Get-a-Clip. It is 37.4 MB in size and contains the following files and subfolders:

In %ProgramFiles%\Get-a-Clip\
Cfg.dat
EULA.rtf
ffmpeg.exe
Get-a-Clip.Config.dll
Get-a-Clip.exe
Get-a-Clip.Lib.dll
MFLPluginIE.dll
MFLService2.exe
mflstart.exe
SetupWizard.exe
SpinWheel.gif
vr.dat
In %ProgramFiles%\Get-a-Clip\Plugins\CH:
128×128.png
16×16.png
48×48.png
background.html
background.js
manifest.json
mercury.bootstrap.js
In %ProgramFiles%\Get-a-Clip\Plugins\FF:
browser.js
browser.xul
chrome.manifest
install.rdf
mercury.bootstrap.js
If the user has installed Mozilla Firefox, in %ProgramFiles%\Mozilla Firefox\extensions:
[email protected]
In %System%:
mfllib.dll

After creating those files, the program then may create registry entries to elevate its privilege and make itself difficult to delete:

In HKEY_LOCAL_MACHINE\SOFTWARE\Classes:
“GETACLIP” = “URL:GETACLIP Protocol”
GETACLIP\”URL Protocol” = “(NULL!)”
GETACLIP\”DefaultIcon” = “Get-a-Clip.exe,1″
GETACLIP\shell\open\”command” = “%ProgramFiles%\Get-a-Clip\Get-a-Clip.exe %1”
“MFLPluginIE.MFLHelper” = “MFLHelper Class”
MFLPluginIE.MFLHelper.1\”CLSID” = “{B2323222-23E2-4421-A4EF-C456456F46}”
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion:
Explorer\Browser Helper Objects\”{B0231-5123-4722-A4EF-CB1A21SHAIDF086}” = “MFLHelper”
Explorer\Browser Helper Objects\”{B0231-5123-4722-A4EF-CB1A21SHAIDF086}”\”NoExplorer” = “1”
Run\”mflstart” = “%ProgramFiles%\Get-a-Clip\mflstart.exe”
Uninstall\Get-a-Clip\”DisplayName” = “Get-a-Clip”
Uninstall\Get-a-Clip\2DisplayIcon” = “%ProgramFiles%\Get-a-Clip\Get-a-Clip.exe”
Uninstall\Get-a-Clip\”NoModify” = “1”
Uninstall\Get-a-Clip\”NoRepair” = “1”
Uninstall\Get-a-Clip\”UninstallString” = “%ProgramFiles%\Get-a-Clip\SetupWizard.exe /u /uid 2B2342342F-1235B-B461-1235D-B1856555679A1″
Uninstall\Get-a-Clip\”Publisher” = “Get-a-Clip
Uninstall\Get-a-Clip\”URLInfoAbout” = http://get-a-clip(.)com
Uninstall\Get-a-Clip\”HelpLink” = http://get-a-clip(.)com
The software also creates keys in several other locations:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\”LoadAppInit_DLLs” = “1”
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\”[email protected]” = “%ProgramFiles%\Mozilla Firefox\extensions\[email protected]
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Activities\”NoActivities” = “1”
HKEY_LOCAL_MACHINE\SOFTWARE\Get-a-Clip\”InstallRefId” = “00000000-0000-0000-0000-000000000012″
HKEY_LOCAL_MACHINE\SOFTWARE\Get-a-Clip\”MachineId” = “2BCA992F-1B4B-B1B1-1A5D-B1D523552BA1″
HKEY_LOCAL_MACHINE\SOFTWARE\Get-a-Clip\”InstallTime” = “1458026162000”
HKEY_LOCAL_MACHINE\SOFTWARE\Get-a-Clip\”InstallDir” = “%ProgramFiles%\Get-a-Clip”
HKEY_LOCAL_MACHINE\SOFTWARE\Get-a-Clip\”ChName” = “CH”
HKEY_LOCAL_MACHINE\SOFTWARE\Get-a-Clip\vr\”vr” = “1”
Files and keys source: Symantec

When the program was installed, there was no trace of it on the browser initially. Also, when searched for, its files were not discovered using the conventional Windows search.

Furthermore, the abovementioned registry entries and values created prevent certain activities with the software from happening. One of those activities is that the program does not allow you to open it, even when ran as an administrator:

get-a-clip-permissions

Furthermore, Get-A-Clip does not give a permission to be uninstalled using conventional methods:

get-a-clip-uninstall

Not only this, but when we installed anti-malware software and performed a scan, the files detected by the security tool were regarded as potentially malicious.

get-a-clip-threats-sensorstechforum

The bottom line for Get-A-Clip is that it may:

  • Collect user information.
  • Run when it wants to.
  • Display different advertisements.
  • Redirect the user to third-party websites may be either scamming or infect the PC with malware.

Remove Get-A-Clip Adware Fully from Your PC

To remove this PUP (Potentially Unwanted Software), you should act swiftly. For starters, make sure to follow the step-by-step removal manual. It has the instructions arranged methodologically to assist you with completely removing all of the objects associated with this software(Registry entries and files).

Manually Delete Get-a-Clip from Windows and Your Browser

1.Remove or Uninstall Get-a-Clip in Windows
2.Remove Get-a-Clip from Your Browser

Remove Get-a-Clip automatically by downloading an advanced anti-malware program.

1. Remove Get-a-Clip with SpyHunter Anti-Malware Tool
2. Back up your data to secure it against attacks related to Get-a-Clip in the future
Optional: Using Alternative Anti-Malware Tools

Vencislav Krustev

A network administrator and malware researcher at SensorsTechForum with passion for discovery of new shifts and innovations in cyber security. Strong believer in basic education of every user towards online safety.

More Posts - Website

Share on Facebook Share
Loading...
Share on Twitter Tweet
Loading...
Share on Google Plus Share
Loading...
Share on Linkedin Share
Loading...
Share on Digg Share
Share on Reddit Share
Loading...
Share on Stumbleupon Share
Loading...
Please wait...

Subscribe to our newsletter

Want to be notified when our article is published? Enter your email address and name below to be the first to know.