Application.DealAgent.QLP removal

The Application.DealAgent.QLP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Application.DealAgent.QLP virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Application.DealAgent.QLP?


File Info:
crc32: 872FBB0B
md5: d5383e95c2acf6f0e979f823e66e27ec
name: D5383E95C2ACF6F0E979F823E66E27EC.mlw
sha1: 403cdac3e1b285867f257637fd73eaf0dff386d1
sha256: c025d0af64f1e83f6755bc609e7f5c0c775ea0a5ef46a1b6b1111a956f181440
sha512: ac429634d13b4af6022f6b7fdec8c8a6e4fdb0c65bc73a61b94e30cb0776695c6a4a959bd27faddea54f939157bdfbaa09844c80c7f79d9189f1fb0b1b35f815
ssdeep: 24576:m6+/xG5wsnXplZy9MR6y7EvmQA8x9HehvsM7sLaAS58CMBTlP0QjcpMXVJoT:mH/A/5eMQyQvVAg9H0lILaV5TGpf8
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion: 5.1.1.6             
CompanyName:                                                             
Comments: This installation was built with Inno Setup.
ProductName: Keruponog                                                   
ProductVersion: 4.4                                               
FileDescription: Keruponog Setup                                             
Translation: 0x0000 0x04b0

Application.DealAgent.QLP also known as:

Bkav	W32.AIDetect.malware2
Lionic	Adware.Win32.DealPly.2!c
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader26.21566
ALYac	Application.DealAgent.QLP
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Application.DealAgent.QLP
Cybereason	malicious.5c2acf
Symantec	PUA.InstallCore
ESET-NOD32	Win32/InstallCore.Gen.A potentially unwanted
Kaspersky	not-a-virus:AdWare.Win32.DealPly.heur
Alibaba	AdWare:Win32/InstallCore.78db9b53
NANO-Antivirus	Virus.Win32.Gen-Crypt.ccnc
MicroWorld-eScan	Application.DealAgent.QLP
Ad-Aware	Application.DealAgent.QLP
Sophos	InnoMod (PUA)
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.PUPInstaller.tc
FireEye	Generic.mg.d5383e95c2acf6f0
Emsisoft	Application.DealAgent.QLP (B)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Adware.Installcore
Microsoft	Trojan:Win32/Azorult!ml
SUPERAntiSpyware	PUP.InstallCore/Variant
ZoneAlarm	not-a-virus:AdWare.Win32.DealPly.heur
GData	Win32.Application.InstallCore.LR@gen
McAfee	Artemis!D5383E95C2AC
MAX	malware (ai score=76)
VBA32	Malware-Cryptor.2LA.gen
Rising	Adware.InstallCore!1.AB2C (CLASSIC)
Fortinet	Riskware/InstallCore_Gen
Qihoo-360	Win32/Adware.Generic.HgIASZYA

How to remove Application.DealAgent.QLP?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Application.DealAgent.QLP removal