Application.Bundler.DealPly.D removal

The Application.Bundler.DealPly.D is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.Bundler.DealPly.D virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Application.Bundler.DealPly.D?


File Info:
name: 6F454C067F939BB2E061.mlw
path: /opt/CAPEv2/storage/binaries/40d577ea87fb68c4629f7597ebc2757b1d39decd2733da47bdfb50a3dc4b8891
crc32: 96875266
md5: 6f454c067f939bb2e061835d34dba833
sha1: c7438d942f5d66f71822d807d890ea30b68dea5e
sha256: 40d577ea87fb68c4629f7597ebc2757b1d39decd2733da47bdfb50a3dc4b8891
sha512: 4e3571bf3c85f1ad8115db9a4cfeb4b5c174cc54c50d1830e2cbb97baf0c7d9bb502c24c99e35885a601b0d07ac93c7668c08a83aceb29bdf7a72820b54560c1
ssdeep: 3072:VRTP8Qd4nFkn0ei6YZmi0dIluZMGGR5e51xQmVXK/o4FseccNMq9:VRggqhei6imjIliYSDq/ZZ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D8145A79B2929676C86178FD8C0487CA5B55BC341E240C26B2F43F4C5AB6683DE2E4DF
sha3_384: a320738764866de3d73c23df479d5cc9162a15776084eae09c8cb9f2989b5cc8d3b890cf2587e3f3547b2799b8a73ed1
ep_bytes: 558bec83c4f0b8246d4100e848defeff
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Application.Bundler.DealPly.D also known as:

Lionic	Trojan.Win32.Wabot.lh0Z
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoad3.36754
MicroWorld-eScan	Application.Bundler.DealPly.D
FireEye	Generic.mg.6f454c067f939bb2
ALYac	Application.Bundler.DealPly.D
Cylance	Unsafe
K7AntiVirus	Trojan ( 7000000f1 )
Alibaba	AdWare:Win32/DealPly.e56a063d
K7GW	Trojan ( 7000000f1 )
CrowdStrike	win/grayware_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZelphiF.34638.mGW@aq!xNEmi
VirIT	Adware.Win32.Amonetize.C
Symantec	PUA.Astromenda!gen4
ESET-NOD32	a variant of Win32/DealPly.M potentially unwanted
TrendMicro-HouseCall	ADW_POPAD
Kaspersky	not-a-virus:AdWare.Win32.Vosteran.abli
BitDefender	Application.Bundler.DealPly.D
NANO-Antivirus	Virus.Win32.Gen.ccmw
SUPERAntiSpyware	PUP.SaveSense/Variant
Avast	Win32:Adware-DMG [Adw]
Tencent	Malware.Win32.Gencirc.114cc8f5
Ad-Aware	Application.Bundler.DealPly.D
Comodo	ApplicUnwnt@#uruwkosxxw8b
Zillya	Tool.Bundler.Win32.4332
TrendMicro	ADW_POPAD
SentinelOne	Static AI – Suspicious PE
Emsisoft	Application.Bundler.DealPly.D (B)
GData	Application.Bundler.DealPly.D
Jiangmin	AdWare.Vosteran.aq
Avira	ADWARE/DealPly.Gen
Microsoft	Trojan:AndroidOS/Mploit!rfn
Cynet	Malicious (score: 99)
VBA32	Adware.Vosteran
APEX	Malicious
Rising	Trojan.Occamy!8.F1CD (CLOUD)
Yandex	Trojan.GenAsa!qoB9/JaCAGA
AVG	Win32:Adware-DMG [Adw]
Cybereason	malicious.67f939

How to remove Application.Bundler.DealPly.D?

Application.Bundler.DealPly.D removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X