What is “Application.DealAlpha.1.Gen”?

The Application.DealAlpha.1.Gen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.DealAlpha.1.Gen virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Reads data out of its own binary image
Network activity detected but not expressed in API logs

How to determine Application.DealAlpha.1.Gen?


File Info:
crc32: D2465402
md5: 6ccd5ef580d64d59908d0bc71b90ef92
name: k-lite_codec_pack_2867704248-14.8.4.exe
sha1: 40d7fee17946bad08dcc4869478e0357abc493fd
sha256: 3d68669c9562140f2578772688dfd6cca64cfcea31ee405437da33adaa468b1a
sha512: 86675c24a83e44eb812b755db3a69e870b3967071c6ab7f84d6c23e01ece58c0b315f6a158c818398dcb3a4dbc41ddeb3cc09c825f4911a93e1dc7e96c59fa56
ssdeep: 49152:OWzMP1bULcBp5wtV2PHYNazOQ9m4Pvmo8M8sc9wkq/PMeLI:OWzMSLc/5w2PHTzvExsCN+PLLI
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion: 3.5.5.5             
CompanyName:                                                             
Comments: This installation was built with Inno Setup.
ProductName: Basobefu                                                    
ProductVersion: 5.7.2                                             
FileDescription: Basobefu Setup                                              
Translation: 0x0000 0x04b0

Application.DealAlpha.1.Gen also known as:

MicroWorld-eScan	Application.DealAlpha.1.Gen
FireEye	Generic.mg.6ccd5ef580d64d59
CAT-QuickHeal	Trojan.InstallCore
Qihoo-360	Win32/Sorter.AVE.70InnoSetup.A
McAfee	InstallCore
Cylance	Unsafe
VIPRE	Adware.InstallCore
Sangfor	Malware
K7AntiVirus	Adware ( 0053289d1 )
BitDefender	Application.DealAlpha.1.Gen
K7GW	Adware ( 0053289d1 )
Cybereason	malicious.580d64
Invincea	heuristic
Symantec	PUA.InstallCore
APEX	Malicious
ClamAV	Win.Malware.Installcore-6912929-0
GData	Win32.Application.InstallCore.LX
Kaspersky	not-a-virus:HEUR:Downloader.Win32.DealPly.gen
Alibaba	Downloader:Win32/DealPly.95dc02f0
NANO-Antivirus	Trojan.Win32.DealPly.fsgszj
ViRobot	Adware.Installcore.2135400
Endgame	malicious (high confidence)
Emsisoft	Application.InstallCore (A)
Comodo	Malware@#11175qhs8y741
DrWeb	Trojan.InstallCore.3465
McAfee-GW-Edition	InstallCore
Trapmine	malicious.high.ml.score
Sophos	Install Core (PUA)
Cyren	W32/InstallCore.BW.gen!Eldorado
Jiangmin	AdWare.DealPly.lqre
Webroot	W32.Adware.Gen
Arcabit	Application.DealAlpha.1.Gen
ZoneAlarm	not-a-virus:HEUR:Downloader.Win32.DealPly.gen
Microsoft	PUA:Win32/InstallCore
AhnLab-V3	Win-PUP/HALOMOT.Exp
Acronis	suspicious
VBA32	Trojan.InstallCore
MAX	malware (ai score=99)
Malwarebytes	PUP.Optional.InstallCore
Panda	PUP/Multitoolbar
ESET-NOD32	Win32/InstallCore.Gen.B potentially unwanted
Yandex	PUA.Downloader!
Fortinet	Riskware/InstallCore
CrowdStrike	win/malicious_confidence_100% (D)
MaxSecure	Trojan.Malware.73422099.susgen

How to remove Application.DealAlpha.1.Gen?

Application.DealAlpha.1.Gen removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X