Malware

Win32/DealPly.OF potentially unwanted (file analysis)

Malware Removal

The Win32/DealPly.OF potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/DealPly.OF potentially unwanted virus can do?

  • Creates RWX memory
  • Network activity detected but not expressed in API logs

How to determine Win32/DealPly.OF potentially unwanted?


File Info:

crc32: 34839B80
md5: 504989f55e27075246f704e155cae727
name: 504989F55E27075246F704E155CAE727.mlw
sha1: bc411961c1d937c0fa9a4944d9b343f7b75c4f2e
sha256: 1ef48e41adfdb9757150dcf68107ac6c12ccd0b4536b00372898340e86759ec3
sha512: 50a93c5a74e02ced27e3099897ae42ed873bf79280d3c8800c294cd1bff372a05e41ad7855a8a3fab8ce8af39bf6d0fb9238a34cd18ec4017561a33e844c1afa
ssdeep: 24576:v9jJ1/kihjzCHdNBdSQ0HYmjD80aOyuCn8:XhIvSDjD80kuCn
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/DealPly.OF potentially unwanted also known as:

BkavW32.AIDetect.malware1
K7AntiVirusAdware ( 0051ed201 )
LionicAdware.Win32.Agent.2!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CylanceUnsafe
ZillyaAdware.Agent.Win32.164727
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaAdWare:Win32/DealPly.b44b020b
K7GWAdware ( 0051ed201 )
Cybereasonmalicious.55e270
CyrenW32/DealPly.V.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/DealPly.OF potentially unwanted
APEXMalicious
AvastWin32:DealPly-AJ [Adw]
Kasperskynot-a-virus:HEUR:AdWare.Win32.Agent.gen
BitDefenderAdware.DealPly.1.Gen
NANO-AntivirusVirus.Win32.Gen.ccmw
MicroWorld-eScanAdware.DealPly.1.Gen
TencentMalware.Win32.Gencirc.10c8cb1c
Ad-AwareAdware.DealPly.1.Gen
SophosGeneric PUA LM (PUA)
ComodoApplicUnwnt@#vmhvj4xt9q46
BitDefenderThetaGen:NN.ZelphiF.34294.5OW@aO@M05ji
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0GKH21
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
FireEyeAdware.DealPly.1.Gen
EmsisoftAdware.DealPly.1.Gen (B)
SentinelOneStatic AI – Malicious PE
JiangminAdWare.DealPly.filz
AviraHEUR/AGEN.1112084
Antiy-AVLTrojan/Generic.ASMalwS.25E3808
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftTrojan:Win32/Wacatac.A!ml
ArcabitAdware.DealPly.1.Gen
GDataAdware.DealPly.1.Gen
AhnLab-V3Pup/Win32.RL_DealPly.R265483
Acronissuspicious
McAfeeArtemis!504989F55E27
MAXmalware (ai score=99)
VBA32Adware.Puwaders
MalwarebytesMalware.AI.723959011
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0GKH21
RisingAdware.DealPly!1.AA42 (CLASSIC)
YandexPUA.Agent!Hq+B5e2hQlk
IkarusPUA.DealPly
MaxSecureTrojan.Malware.300983.susgen
FortinetAdware/Generic
AVGWin32:DealPly-AJ [Adw]
Paloaltogeneric.ml

How to remove Win32/DealPly.OF potentially unwanted?

Win32/DealPly.OF potentially unwanted removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment