Categories: Backdoor

Backdoor:Win32/Prosti.R removal instruction

The Backdoor:Win32/Prosti.R is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Win32/Prosti.R virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Executable file is packed/obfuscated with NsPack
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Backdoor:Win32/Prosti.R?


File Info:
name: 4B0A24EA8B568CFDEC73.mlwpath: /opt/CAPEv2/storage/binaries/a65000a034c353db36aa853d83ddd7919d3f7fa68b83472d74a725eaf52c8ba6crc32: 873585ECmd5: 4b0a24ea8b568cfdec73607df59d2d73sha1: 97adaf0767e59e04a8fa2a8692429529b5a35916sha256: a65000a034c353db36aa853d83ddd7919d3f7fa68b83472d74a725eaf52c8ba6sha512: f6294fab21cc3e1062eef96c42199f0dea900bd5ae5d5448c11760d0d68d7be1d4008c2e91b77a133065400f7a5aefc1f417536b215ea2909c571734a4b86abcssdeep: 1536:LRx2+sTeldtW+B1plG0DC7fuXrkh6NkggCH3EPEXkS1T1Xptej7yR0sF1cPu:dxEelzBtG8CTerg6NkqH3YCtn+7tsbc2type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T14C730283D7B1BE6FE0C85879C31D6570807F768280B9DF0DC6C4969AEA5A79590C02AFsha3_384: fdeea6b4364dc7ec7d55b7b079185ccedd2de681a9e4d0e4bd9ec6c6bffe9efa7145d583718e76f869c812b357605a98ep_bytes: 6850b04400e80000000083c404e80000timestamp: 2008-01-22 08:36:45
Version Info:
0: [No Data]

Backdoor:Win32/Prosti.R also known as:

Bkav	W32.AIDetect.malware1
Lionic	Heuristic.File.Generic.00×1!p
MicroWorld-eScan	Generic.Malware.FLBEn!dld!.FB9C4C7E
ClamAV	Win.Trojan.Packed-74
FireEye	Generic.mg.4b0a24ea8b568cfd
ALYac	Generic.Malware.FLBEn!dld!.FB9C4C7E
Cylance	Unsafe
VIPRE	Generic.Malware.FLBEn!dld!.FB9C4C7E
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 005257651 )
Alibaba	Backdoor:Win32/Prosti.5dac6e1f
K7GW	Trojan ( 005257651 )
Cybereason	malicious.a8b568
Cyren	W32/Threat-IKNP.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
Zoner	Probably Heur.ExeHeaderP
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	Backdoor.Win32.Prosti.ek
BitDefender	Generic.Malware.FLBEn!dld!.FB9C4C7E
NANO-Antivirus	Trojan.Win32.OnLineGames.npxz
Avast	Win32:RPoly [Cryp]
Tencent	Win32.Backdoor.Prosti.Iflw
Ad-Aware	Generic.Malware.FLBEn!dld!.FB9C4C7E
Emsisoft	Generic.Malware.FLBEn!dld!.FB9C4C7E (B)
Comodo	Packed.Win32.Klone.~KA@1jbcwy
DrWeb	BackDoor.IRC.Sdbot.18537
Zillya	Trojan.OnLineGames.Win32.45836
TrendMicro	Mal_Pai-9
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.lc
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A + Mal/EncPk-BN
SentinelOne	Static AI – Malicious PE
GData	Generic.Malware.FLBEn!dld!.FB9C4C7E
Jiangmin	Trojan/PSW.OnLineGames.ajsn
Webroot	W32.Prosti.Gen
Avira	TR/Crypt.NSPM.Gen
Antiy-AVL	Trojan/Generic.ASMalwFH.12
Arcabit	Generic.Malware.FLBEn!dld!.FB9C4C7E
ZoneAlarm	Backdoor.Win32.Prosti.ek
Microsoft	Backdoor:Win32/Prosti.R
Google	Detected
AhnLab-V3	Win32/RPCrypt.Suspicious
McAfee	Artemis!4B0A24EA8B56
MAX	malware (ai score=100)
VBA32	BScope.Backdoor.Delf
Malwarebytes	Trojan.MalPack.NSPack
TrendMicro-HouseCall	Mal_Pai-9
Rising	Backdoor.Hupigon!8.B57 (TFE:1:p2w2lVEPLaI)
Ikarus	Trojan.Crypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PEMask.A!tr
BitDefenderTheta	AI:Packer.81ECDCFC1D
AVG	Win32:RPoly [Cryp]
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_90% (W)