AdWare.Win32.DealPly.deeiq removal tips

The AdWare.Win32.DealPly.deeiq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What AdWare.Win32.DealPly.deeiq virus can do?

Creates RWX memory
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine AdWare.Win32.DealPly.deeiq?


File Info:
crc32: 0DFC5968
md5: ca48bb9d5ffa82237e44b5eca2bad087
name: CA48BB9D5FFA82237E44B5ECA2BAD087.mlw
sha1: 6601cbcdcb57fe4ac20ead39b9faf5b3d414c404
sha256: 238f3dae9c17447f46f574952aa09b7dd8009ea9c7a246923356734ea14244ba
sha512: a5983b5f3f888dbe6bb1cda573201eefd2373b8cda5a44ebf84f7c84acc9b4dc715ad9df3db8a4d9b21463e1724fbfe5422753481ec9a62c01cca1afd5487e3a
ssdeep: 6144:YVrtikLsoDgx2yTrmfBUnVBc4AxekKI/3s91hXhs50FwXP:YDLhDgMyTrASVa4eeOkHHFwX
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: Tohucomegu Software Ltd. All Rights Reserved
InternalName: sogiduh
FileVersion: 1.8.20.73
CompanyName: Tohucomegu Software Ltd.
LegalTrademarks: Tohucomegu Software Ltd.
ProductName: Solumad Kimopebi Lasid
ProductVersion: 1.8.42.52
FileDescription: 
OriginalFilename: sogiduh.exe
Translation: 0x0409 0x04b0

AdWare.Win32.DealPly.deeiq also known as:

K7AntiVirus	Adware ( 00529a881 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	Adware.DealPly.AL8
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Adware ( 00529a881 )
Cybereason	malicious.d5ffa8
Cyren	W32/DealPly.BJ.gen!Eldorado
Symantec	PUA.Gen.2
ESET-NOD32	a variant of Win32/DealPly.JS potentially unwanted
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
Kaspersky	not-a-virus:AdWare.Win32.DealPly.deeiq
BitDefender	Adware.DealPly.1.Gen
NANO-Antivirus	Virus.Win32.Gen-Crypt.ccnc
MicroWorld-eScan	Adware.DealPly.1.Gen
Tencent	Win32.Adware.Dealply.Syro
Ad-Aware	Adware.DealPly.1.Gen
Sophos	DealPly Updater (PUA)
Comodo	ApplicUnwnt@#1qh40mdl07hlo
BitDefenderTheta	Gen:NN.ZelphiF.34294.rmKfa0rnRkmi
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
FireEye	Generic.mg.ca48bb9d5ffa8223
Emsisoft	Adware.DealPly.1.Gen (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1126504
Antiy-AVL	Trojan/Generic.ASMalwS.20A7A02
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Wacatac.A!ml
GData	Adware.DealPly.1.Gen
AhnLab-V3	PUP/Win32.DealPly.C1926284
Acronis	suspicious
McAfee	Artemis!CA48BB9D5FFA
MAX	malware (ai score=97)
VBA32	Adware.DealPly
Malwarebytes	Malware.AI.4194283550
Panda	Trj/Genetic.gen
Rising	Adware.DealPly!1.AA42 (CLASSIC)
Yandex	PUA.DealPly!szOq7qwYy6s
Ikarus	PUA.DealPly
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Adware/DealFly
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml

How to remove AdWare.Win32.DealPly.deeiq?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

AdWare.Win32.DealPly.deeiq removal tips