Malware

Win32/DealPly.TS potentially unwanted removal guide

Malware Removal

The Win32/DealPly.TS potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/DealPly.TS potentially unwanted virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Win32/DealPly.TS potentially unwanted?


File Info:

crc32: E52D7C3E
md5: 88ca593879b59a831d4ae93a15bbee2a
name: 88CA593879B59A831D4AE93A15BBEE2A.mlw
sha1: 4f81ad9620538de8d95e373374120ccb043fe972
sha256: d2570005ce49acd60a2a943a6d229e621ca483884ae359cb9974dac06c43efe5
sha512: d38f3c6fcb5c404590b3649ea7fc461e75c1546771360038ac39392339f309391b706af2d574a67d9df520e4ef447510bce485d62f502159ff53757eda4f4618
ssdeep: 3072:q+Ms+IMm2kt8oc96ifAEHz20IXW/uO52MD8ByzF313LH:hR+IMm9dc9zACa0aW/uq2MMyz91j
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Win32/DealPly.TS potentially unwanted also known as:

BkavW32.AIDetect.malware1
LionicAdware.Win32.Generic.2!c
Elasticmalicious (high confidence)
ALYacAdware.DealPly.3.Gen
CylanceUnsafe
ZillyaAdware.DealPly.Win32.143048
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaAdWare:Win32/DealPly.d6a65184
K7GWAdware ( 005380aa1 )
K7AntiVirusAdware ( 005380aa1 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/DealPly.TS potentially unwanted
APEXMalicious
AvastWin32:Adware-gen [Adw]
CynetMalicious (score: 99)
Kasperskynot-a-virus:HEUR:AdWare.Win32.Generic
BitDefenderAdware.DealPly.3.Gen
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
MicroWorld-eScanAdware.DealPly.3.Gen
TencentMalware.Win32.Gencirc.114d039f
Ad-AwareAdware.DealPly.3.Gen
SophosGeneric PUA EP (PUA)
ComodoApplicUnwnt@#2lvegn2yvl7c5
BitDefenderThetaAI:Packer.71D7D7CA1E
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PIG21
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
FireEyeGeneric.mg.88ca593879b59a83
EmsisoftAdware.DealPly.3.Gen (B)
SentinelOneStatic AI – Malicious PE
JiangminAdWare.Generic.orwb
AviraADWARE/DealPly.Gen8
MicrosoftTrojan:Win32/Wacatac.A!ml
ArcabitAdware.DealPly.3.Gen
GDataAdware.DealPly.3.Gen
AhnLab-V3PUP/Win32.DealPly.C2615315
McAfeeArtemis!88CA593879B5
MAXmalware (ai score=99)
VBA32Trojan.Wacatac
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0PIG21
RisingPUF.DealPly!1.B1ED (CLASSIC)
YandexTrojan.GenAsa!kx6qNuD7zlY
FortinetRiskware/DealPly
AVGWin32:Adware-gen [Adw]
Paloaltogeneric.ml

How to remove Win32/DealPly.TS potentially unwanted?

Win32/DealPly.TS potentially unwanted removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment