Malware

How to remove “Application.DealAgent.AGVB”?

Malware Removal

The Application.DealAgent.AGVB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Application.DealAgent.AGVB virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Network activity detected but not expressed in API logs

How to determine Application.DealAgent.AGVB?


File Info:

crc32: A436FEDF
md5: f9b49f5c97218795afe9a0271b9ba9b6
name: F9B49F5C97218795AFE9A0271B9BA9B6.mlw
sha1: ffb59dd9d6a2a3fdead9f7cdad6b73ac4685775d
sha256: 4cba2537b195b63e1448f0811bd63b8b3cee6ff545efd4469789b4b9ced501b2
sha512: ce645e6a6ca93606ff01f38ce10e1dab5fd8ae1ad1e1c5d208217854846ffeb6090fa636ac9a170fa2612d5e5d28339d467fbf72e1b84d50170791d83d8e7e81
ssdeep: 24576:CtivACOpWid76NDTLISosGzu0sNkm2hBVu2SZfbtvtHGevywPV21yYHHyl7uh:CEYvLWrEsGz/sNklBVoZHHGt+iyZU
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: adsafiliados
FileVersion: 1.0.6.45713
CompanyName: adsafiliados
Comments: This installation was built with Inno Setup.
ProductName: Setup Soft.ware
ProductVersion: 1.0.6.45713
FileDescription: Setup Soft.ware
Translation: 0x0000 0x04b0

Application.DealAgent.AGVB also known as:

LionicAdware.Win32.DealPly.2!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacApplication.DealAgent.AGVB
CylanceUnsafe
SangforAdware.Win32.InstallCore.1
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaAdWare:Win32/DealPly.8388cdae
Cybereasonmalicious.c97218
SymantecTrojan.Gen.2
ESET-NOD32Win32/InstallCore.Gen.A potentially unwanted
APEXMalicious
AvastWin32:Malware-gen
Kasperskynot-a-virus:AdWare.Win32.DealPly.bmscc
BitDefenderApplication.DealAgent.AGVB
NANO-AntivirusVirus.Win32.Gen.ccmw
MicroWorld-eScanApplication.DealAgent.AGVB
TencentWin32.Adware.Dealply.Efui
Ad-AwareApplication.DealAgent.AGVB
SophosInnoMod (PUA)
ComodoMalware@#2aqu6o0codmnp
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.PUP.tc
FireEyeGeneric.mg.f9b49f5c97218795
EmsisoftApplication.DealAgent.AGVB (B)
SentinelOneStatic AI – Malicious PE
WebrootAdware.Installcore
KingsoftWin32.Troj.DealPly.ef.(kcloud)
MicrosoftTrojan:Win32/Wacatac.A!ml
ArcabitApplication.DealAgent.AGVB
SUPERAntiSpywarePUP.InstallCore/Variant
ZoneAlarmnot-a-virus:AdWare.Win32.DealPly.heur
GDataWin32.Application.InstallCore.LR@gen
AhnLab-V3PUP/Win32.InstallCore.R196464
McAfeeArtemis!F9B49F5C9721
MAXmalware (ai score=75)
VBA32Malware-Cryptor.2LA.gen
MalwarebytesAdware.InstallCore
PandaPUP/Multitoolbar
TrendMicro-HouseCallTROJ_GEN.R002H0CD621
RisingAdware.InstallCore!1.A30C (CLASSIC)
FortinetRiskware/InstallCore_Gen
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Application.DealAgent.AGVB?

Application.DealAgent.AGVB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment