Application.Deceptor.AFT removal

The Application.Deceptor.AFT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.Deceptor.AFT virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it

How to determine Application.Deceptor.AFT?


File Info:
crc32: F17A8ED5
md5: 13cb4c66b367b1d3780af0f9f547890b
name: peb1037.exe
sha1: f7ed84148bbaf5be0518ea23d06a078c9d8cb798
sha256: 05dea288027cb92b4a75bc825b63ee4adc55c736e754045b1552f46b439de204
sha512: 89ce5632223fe305c3b57d9b2c77b3365ae3754759d1bf1fce834c1aa6f601565cd2cba6fc7f260615e2673d8c82e31e17e09132760e613b04ec369399b4378a
ssdeep: 196608:zwhaFi+FgDHlXC4hjwp919uhEQUdXsUxdWGPrbggY:zw4nFyQ4h859uJUfBPQgY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (c) 1997 - 2013 Inkline Software Labs. All rights reserved.                               
FileVersion: 2.0.0.0             
CompanyName: inKline Global, Inc.                                        
Comments: This installation was built with Inno Setup.
ProductName: PCRepairClinic                                              
ProductVersion: 2                   
FileDescription: PCRepairClinic                                              
Translation: 0x0000 0x04b0

Application.Deceptor.AFT also known as:

MicroWorld-eScan	Application.Deceptor.AFT
McAfee	Artemis!13CB4C66B367
Cylance	Unsafe
K7AntiVirus	Riskware ( dec001de1 )
BitDefender	Application.Deceptor.AFT
K7GW	Riskware ( dec001de1 )
TrendMicro	PUA.Win32.PCRepair.AA
GData	Application.Deceptor.AFT
Kaspersky	Hoax.Win32.DeceptPCClean.cy
Ad-Aware	Application.Deceptor.AFT
Emsisoft	Application.Deceptor.AFT (B)
Comodo	ApplicUnwnt@#26bvr3u0x1anb
F-Secure	PotentialRisk.PUA/PCRepairClinic.A
DrWeb	Program.Unwanted.1319
Zillya	Tool.DeceptPCClean.Win32.153
McAfee-GW-Edition	Artemis!PUP
FireEye	Application.Deceptor.AFT
Sophos	Mal/Generic-S
Jiangmin	Hoax.DeceptPCClean.akf
Avira	PUA/PCRepairClinic.A
Endgame	malicious (high confidence)
Arcabit	Application.Deceptor.AFT
ZoneAlarm	Hoax.Win32.DeceptPCClean.cy
Microsoft	Misleading:Win32/Lodi
MAX	malware (ai score=100)
Panda	PUP/PCRepairClinic
ESET-NOD32	a variant of Win32/UwS.PCRepairClinic.B
TrendMicro-HouseCall	PUA.Win32.PCRepair.AA
AVG	FileRepMetagen [Malware]
MaxSecure	Trojan.Malware.73744554.susgen

How to remove Application.Deceptor.AFT?

Application.Deceptor.AFT removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X