Should I remove “Application.DealAgent.AGDP”?

The Application.DealAgent.AGDP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Application.DealAgent.AGDP virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid

How to determine Application.DealAgent.AGDP?

File Info:
name: 41EDAD612509CD4BCC91.mlw
path: /opt/CAPEv2/storage/binaries/f0793a605b6144b1c54ad993de8977330f2609dfedd98d485f2bbee011d51054
crc32: 4F9CFD98
md5: 41edad612509cd4bcc916caac4550d2b
sha1: 013ecb4885b4e9ec7f02af00e73317b04ffe3406
sha256: f0793a605b6144b1c54ad993de8977330f2609dfedd98d485f2bbee011d51054
sha512: 8d2dac66242a85e0a32a70e47968588777f83d89f949d5d87914f63597d88b3bbfaeb22e822fe0a7eb89d637282fa224f19e806eb0633c60b9c29d1498d7d99b
ssdeep: 24576:f6/8rDLTjU5/59s7/wYlg316RAM2NQbSJB0B4SQjNagXU0Pgd60OtZ5+/WmMQbdG:fO6XUsLlY16ZYJBXdPkO8aYNgVP
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T179753314DB81B935E030CABE4936224E4A3B3F2A7C7D6419758E84DEDB779B2111378B
sha3_384: a26d525445091402c0fa398414d805301b420ede91e5652c749d66758f58eea6e692e6a17dacb942fae8730f625ffdf3
ep_bytes: 558bec83c4c453565733c08945f08945
timestamp: 1992-06-19 22:22:17

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName:                                                             
FileDescription: Cugacufoh Setup                                             
FileVersion:                     
LegalCopyright:                                                                                                     
ProductName: Cugacufoh                                                   
ProductVersion: 1.6.7               
Translation: 0x0000 0x04b0

Application.DealAgent.AGDP also known as:

How to remove Application.DealAgent.AGDP?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.