Application.DealAgent.JGL removal instruction

The Application.DealAgent.JGL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.DealAgent.JGL virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Network activity detected but not expressed in API logs

How to determine Application.DealAgent.JGL?


File Info:
crc32: A5310F70
md5: 0e72c497ac7ed40f7340304af23e74db
name: 0E72C497AC7ED40F7340304AF23E74DB.mlw
sha1: 7de41ae911afb1473172fecc59c6cf665a42cce7
sha256: e00b486ae7f13b458c86380d53121cb1aed9ae3c02198ef2b37774b07d388f55
sha512: 7b0332cabe34db14381a18faa95809147fe02dd373bc26939ba362fafe482854e084565aa8996862e4b2566b0f3f7743bc3e9567552aa059d8e0ec6777f762f9
ssdeep: 24576:PfiWnK+0OjehnlAycljK0Gd3kpT8Yck6S1ZdAii+l7uh:PqE0OWlAnA0GCV3JdAiDU
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Web                                                                                                 
FileVersion: 5.8.2.7             
CompanyName: Pucibaho                                                    
Comments: This installation was built with Inno Setup.
ProductName: Kahaf                                                       
ProductVersion: 4.8.4                                             
FileDescription: Kahaf Setup                                                 
Translation: 0x0000 0x04b0

Application.DealAgent.JGL also known as:

Elastic	malicious (high confidence)
ALYac	Application.DealAgent.JGL
Malwarebytes	PUP.Optional.InstallCore
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Application.DealAgent.JGL
Cybereason	malicious.7ac7ed
Symantec	Trojan.Gen.MBT
ESET-NOD32	Win32/InstallCore.Gen.A potentially unwanted
Cynet	Malicious (score: 100)
Kaspersky	not-a-virus:AdWare.Win32.DealPly.dkieb
NANO-Antivirus	Virus.Win32.Gen.ccmw
MicroWorld-eScan	Application.DealAgent.JGL
Ad-Aware	Application.DealAgent.JGL
Sophos	InnoMod (PUA)
McAfee-GW-Edition	BehavesLike.Win32.BadFile.tc
FireEye	Generic.mg.0e72c497ac7ed40f
Emsisoft	Application.DealAgent.JGL (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Wacatac.A!ml
ZoneAlarm	not-a-virus:AdWare.Win32.DealPly.dkieb
GData	Win32.Application.InstallCore.LR@gen
AhnLab-V3	Malware/Gen.Generic.C2570382
McAfee	Artemis!0E72C497AC7E
MAX	malware (ai score=71)
VBA32	Malware-Cryptor.2LA.gen
Rising	Adware.InstallCore!1.A30C (CLASSIC)
Fortinet	Adware/DealPly
Panda	Trj/CI.A

How to remove Application.DealAgent.JGL?

Application.DealAgent.JGL removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X