About “Application.DealAgent.ETS” infection

The Application.DealAgent.ETS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.DealAgent.ETS virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Network activity detected but not expressed in API logs

How to determine Application.DealAgent.ETS?


File Info:
crc32: 4101DCCC
md5: a2a94754832d11aafcd8cad3b114b31e
name: A2A94754832D11AAFCD8CAD3B114B31E.mlw
sha1: f4d1f748d13e577ab9fcd834b331747fc0e7cfd9
sha256: 064e942d6f38712889e0f9c1edbbd989028aff69a5ef542ed5fcc87b222740f8
sha512: 407b80ac067c178bae21f6583c99a2700971322992e211e8c0334fbce080aa29d98a872207e04e9122f1903edeb1bb5e6cc31637eacdd3d6ac200e31aba81370
ssdeep: 24576:ZWvGgcS+znoiYkw00VW5ad47cikIQC4QCaMF4uNXa+MpdAOT4d2y006Kugux2Tr6:ZWIS+zoDVEk47cikFLpNKBAOT4iwvq2i
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: adsafiliados
FileVersion: 1.0.6.45713
CompanyName: 
Comments: This installation was built with Inno Setup.
ProductName: Setup Soft.ware
ProductVersion: 1.0.6.45713
FileDescription: Setup Soft.ware
Translation: 0x0000 0x04b0

Application.DealAgent.ETS also known as:

K7AntiVirus	Adware ( 005104a81 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
ALYac	Application.DealAgent.ETS
Cylance	Unsafe
Zillya	Adware.DealPly.Win32.408732
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	AdWare:Win32/DealPly.9914e739
K7GW	Adware ( 005104a81 )
Cybereason	malicious.4832d1
Symantec	PUA.InstallCore
ESET-NOD32	Win32/InstallCore.Gen.A potentially unwanted
Avast	Win32:Malware-gen
Kaspersky	not-a-virus:AdWare.Win32.DealPly.ewlib
BitDefender	Application.DealAgent.ETS
NANO-Antivirus	Virus.Win32.Gen-Crypt.ccnc
MicroWorld-eScan	Application.DealAgent.ETS
Ad-Aware	Application.DealAgent.ETS
Sophos	QPDownload Download Manager (PUA)
Comodo	Malware@#2jpnjqakv61d7
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.PUPXER.tc
FireEye	Generic.mg.a2a94754832d11aa
Emsisoft	Application.DealAgent.ETS (B)
SentinelOne	Static AI – Suspicious PE
Webroot	W32.Adware.Gen
Antiy-AVL	Trojan/Generic.ASBOL.C21A
Microsoft	Trojan:Win32/Wacatac.A!ml
Arcabit	Application.DealAgent.ETS
ZoneAlarm	not-a-virus:AdWare.Win32.DealPly.ewlib
GData	Win32.Application.InstallCore.LR@gen
McAfee	Artemis!A2A94754832D
MAX	malware (ai score=77)
VBA32	Malware-Cryptor.2LA.gen
Malwarebytes	Adware.InstallCore
TrendMicro-HouseCall	TROJ_GEN.R002H07G821
Rising	Adware.InstallCore!1.AB2C (CLASSIC)
Yandex	PUA.DealPly!G+XmzYPNCcQ
MaxSecure	Trojan.Malware.12132270.susgen
Fortinet	W32/Generic_PUA_PE.A
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Application.DealAgent.ETS?

Application.DealAgent.ETS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X