Categories: Backdoor

What is “Backdoor:Win32/Prosti.AG”?

The Backdoor:Win32/Prosti.AG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Win32/Prosti.AG virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Backdoor:Win32/Prosti.AG?


File Info:
name: C00D637A7586FCB71D7E.mlwpath: /opt/CAPEv2/storage/binaries/3fd954dff678b49e9ff4abb5697ce2d679a0242c3bd170c45d16b2e799d05672crc32: 1611118Amd5: c00d637a7586fcb71d7e5c31cbfdb7f9sha1: 35a7376938d10f68f5b7f9a9b73911912afd1fe2sha256: 3fd954dff678b49e9ff4abb5697ce2d679a0242c3bd170c45d16b2e799d05672sha512: a9260871946f8a18cd03ee6ec5d583ef777177365ae6b7639cdc59c6eefd3a65e41f0fd5de78a4021b2f91bd8ead16aacd707ddc03d2a902cf58cb4414341923ssdeep: 12288:ip/iN/mlVdtvrYeyZJf7kPK+iqBZn+D73iKHeGspqMFIHjEEN7vda:ipQ/6trYlvYPK+lqD73TeGspqMeHjLNgtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T154F4AE22F2E15837C1332A39DC1BA369982ABF512E2C65462BF55D5C8F3D7813C292D7sha3_384: f7ac89aae48b6dc41c8fa40e393af79ccf98198af5af2264ae736cdba424648bf3e3aecafd3fedc74f9a93ade8b86e63ep_bytes: 558bec83c4f0b84c014a00e8f866f6fftimestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

Backdoor:Win32/Prosti.AG also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Delf.ljsh
AVG	Win32:Prosti-EF [Trj]
Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.Adw.ScreenBlaze.BC2DE056
FireEye	Generic.mg.c00d637a7586fcb7
CAT-QuickHeal	Trojan.Generic.15344
Skyhigh	BehavesLike.Win32.Generic.bh
McAfee	BackDoor-DUG.a
Cylance	unsafe
Zillya	Downloader.Delf.Win32.56759
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0057116a1 )
Alibaba	TrojanDownloader:Win32/Prosti.c9bc6090
K7GW	Trojan ( 0057116a1 )
CrowdStrike	win/malicious_confidence_90% (W)
BitDefenderTheta	AI:Packer.F3DE8B7820
VirIT	Trojan.Win32.DownLoad.CHKH
Symantec	Hacktool.Rootkit
ESET-NOD32	Win32/Adware.ScreenBlaze.AA
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Adware.Screenblaze-1
Kaspersky	Trojan-Downloader.Win32.Delf.uvk
BitDefender	Generic.Adw.ScreenBlaze.BC2DE056
NANO-Antivirus	Trojan.Win32.Delf.vsgy
Avast	Win32:Prosti-EF [Trj]
Tencent	Adware.Win32.ScreenBlaze.aa
Emsisoft	Generic.Adw.ScreenBlaze.BC2DE056 (B)
F-Secure	Trojan.TR/Dldr.Delf.uvk
DrWeb	Trojan.DownLoad.40151
VIPRE	Generic.Adw.ScreenBlaze.BC2DE056
TrendMicro	TROJ_DLOAD.SMMO
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDownloader.Delf.qlw
Varist	W32/ScreenBlaze.A.gen!Eldorado
Avira	TR/Dldr.Delf.uvk
Antiy-AVL	Trojan[Downloader]/Win32.Delf
Kingsoft	Win32.Troj.Undef.a
Microsoft	Backdoor:Win32/Prosti.AG
Xcitium	TrojWare.Win32.TrojanDownloader.Delf.gen@1xqow5
Arcabit	Generic.Adw.ScreenBlaze.BC2DE056
ViRobot	Trojan.Win32.Downloader.758272.AED
ZoneAlarm	Trojan-Downloader.Win32.Delf.uvk
GData	Win32.Trojan-Downloader.ScreenBlaze.A
Google	Detected
AhnLab-V3	Trojan/Win32.Scar.R38823
VBA32	TrojanDownloader.Delf
ALYac	Generic.Adw.ScreenBlaze.BC2DE056
Malwarebytes	ScreenBlaze.Adware.Advertising.DDS
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_DLOAD.SMMO
Rising	Backdoor.Win32.Prosti.xa (CLASSIC)
Yandex	Trojan.DL.Delf!2JuejRsfhm4
Ikarus	Virus.Downloader.Delf
MaxSecure	Trojan.Malware.15169.susgen
Fortinet	W32/Delf.SCB!tr
Cybereason	malicious.a7586f
alibabacloud	Trojan[downloader]:Win/ScreenBlaze.AA