Malware

Win32/Pronny.FK malicious file

Malware Removal

The Win32/Pronny.FK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Pronny.FK virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Win32/Pronny.FK?


File Info:

name: 13B0C102F2D58FD484A6.mlw
path: /opt/CAPEv2/storage/binaries/f734b912fe599ccf2a293492bb852008e068763ed29374ff63d5bc0fa5883834
crc32: D8138570
md5: 13b0c102f2d58fd484a61c7ffa458d40
sha1: 166af40df1620949d4776f3fdbe09fb30c00fcc2
sha256: f734b912fe599ccf2a293492bb852008e068763ed29374ff63d5bc0fa5883834
sha512: 02d509f839b37cfa88f6d98d345f5358e0ec590a6bc6771b4996bec0e13992c77ea6de431c4a4e6f458737120ea59cfbc7b07d01e5e65af82c4a68b25a34b600
ssdeep: 1536:7fuvbDCqG84caEz0+nCsNAhz74yWzVaAgGV4VE:Kq84vz74yOsAgG
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13B93E72FBE09A064D526A13636FBCBEA14577C185B3BC1872614F7BE6DA7F001C19A07
sha3_384: 2956ba113266331045551a7a0bd4785971df7128fa147048105e38df76f1bb216bef7fe0d906213a81d8302a246ffd7a
ep_bytes: 6878124000e8eeffffff000000000000
timestamp: 2012-10-09 18:48:14

Version Info:

Translation: 0x0409 0x04b0
ProductName: mericarp
FileVersion: 2.96
ProductVersion: 2.96
InternalName: Adagerebbe
OriginalFilename: Adagerebbe.exe

Win32/Pronny.FK also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Barys.2644
FireEyeGeneric.mg.13b0c102f2d58fd4
CAT-QuickHealTrojan.Beebone.D
SkyhighBehavesLike.Win32.VBObfus.mt
McAfeeW32/Autorun.worm.sl
MalwarebytesGeneric.Malware.AI.DDS
SangforSuspicious.Win32.Save.vb
K7AntiVirusEmailWorm ( 003c363a1 )
K7GWEmailWorm ( 003c363a1 )
Cybereasonmalicious.2f2d58
BaiduWin32.Worm.Pronny.dq
VirITWorm.Win32.VB.JK
SymantecW32.Changeup
tehtrisGeneric.Malware
ESET-NOD32Win32/Pronny.FK
APEXMalicious
ClamAVWin.Trojan.VB-1595
KasperskyWorm.Win32.Vobfus.aiha
BitDefenderGen:Variant.Barys.2644
NANO-AntivirusTrojan.Win32.VB.cojapo
AvastWin32:VB-AERT [Trj]
TencentWorm.Win32.Vobfus.hv
TACHYONWorm/W32.Vobfus.90112.C
SophosMal/SillyFDC-AC
GoogleDetected
F-SecureTrojan.TR/Dropper.Gen
DrWebWin32.HLLW.Autoruner1.27508
VIPREGen:Variant.Barys.2644
TrendMicroWORM_VOBFUS.SMIV
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.Barys.2644 (B)
IkarusVirus.Win32.VB
VaristW32/Vobfus.AT.gen!Eldorado
AviraTR/Dropper.Gen
Antiy-AVLWorm/Win32.WBNA.gen
Kingsoftmalware.kb.a.1000
MicrosoftWorm:Win32/Vobfus.JN
XcitiumTrojWare.Win32.Pronny.EE@4qvpy8
ArcabitTrojan.Barys.DA54
ZoneAlarmWorm.Win32.Vobfus.aiha
GDataGen:Variant.Barys.2644
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Menti.R27300
Acronissuspicious
BitDefenderThetaAI:Packer.F469B28D20
MAXmalware (ai score=81)
VBA32Worm.VBNA
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallWORM_VOBFUS.SMIV
RisingWorm.Vobfus!8.10E (TFE:3:lcEAeq79k0H)
YandexTrojan.GenAsa!QBPV5vTj+HU
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.9870406.susgen
FortinetW32/Injector.ADYA!tr
AVGWin32:VB-AERT [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)
alibabacloudWorm:Win/Vobfus.1d85df10

How to remove Win32/Pronny.FK?

Win32/Pronny.FK removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment