Application.Deceptor.PV malicious file

The Application.Deceptor.PV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.Deceptor.PV virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Application.Deceptor.PV?


File Info:
name: 9FBD018458ABCABE516D.mlw
path: /opt/CAPEv2/storage/binaries/a2dc668baa18eacbd84fa9108c0cb5efe27bc1866c41e40720eee59e6d6a3260
crc32: 8E3147E5
md5: 9fbd018458abcabe516d3171507e1668
sha1: 36cb47189bf886bd6abf92a5dd1362214fa2c8ad
sha256: a2dc668baa18eacbd84fa9108c0cb5efe27bc1866c41e40720eee59e6d6a3260
sha512: 6bef45d8ed13b534a2888810b0f688aee1058fddabf1070c2c457325233c8edac52c98e82c456800d894bbef66543dee542d8edf2159750bb11c1daef2dc31b3
ssdeep: 98304:eoKA7uihw1gMyAEIWST/rzio7L5L12oqOMxCoy:HN161rAYi05pTkK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F3063302F3D30836FB284A398DA5C58C3E37B9A929F5416E1DF9D64E0C792C36C36592
sha3_384: 5adff5ad4c6705d9d84015d566d25ef02ff0befc7ea53fc56b941dd59195ebf0081c18b23e4f49febf8c59ffe5e9aac7
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2011-12-20 14:16:50

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: LionSea Software                                            
FileDescription: Smart Speed Up Windows Pro Setup                            
FileVersion:                     
LegalCopyright:                                                                                                     
ProductName: Smart Speed Up Windows Pro                                  
ProductVersion: 4.4.5               
Translation: 0x0000 0x04b0

Application.Deceptor.PV also known as:

Lionic	Trojan.Win32.Deceptor.4!c
MicroWorld-eScan	Application.Deceptor.PV
ALYac	Application.Deceptor.PV
Cylance	unsafe
CrowdStrike	win/grayware_confidence_90% (D)
Arcabit	Application.Deceptor.PV
VirIT	Deceptor.SmartSpeedUpWind.
Symantec	Trojan.Gen.2
BitDefender	Application.Deceptor.PV
Sophos	LionSea SmartPCFixer (PUA)
VIPRE	Application.Deceptor.PV
Emsisoft	Application.Deceptor.PV (B)
GData	Application.Deceptor.PV
Malwarebytes	Generic.Malware.AI.DDS
Ikarus	PUA.SpeedyOpt
DeepInstinct	MALICIOUS

How to remove Application.Deceptor.PV?

Application.Deceptor.PV removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X