Backdoor

Backdoor.Berbew.S30943575 information

Malware Removal

The Backdoor.Berbew.S30943575 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Berbew.S30943575 virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Backdoor.Berbew.S30943575?


File Info:

name: 45947337A3E80F172D1E.mlw
path: /opt/CAPEv2/storage/binaries/08c34200a0fcc1a8f430ec9a4514ebbc94ca250acade277c2231699faf60adca
crc32: 1609D760
md5: 45947337a3e80f172d1e34e1207dbf7c
sha1: 699e3f6ef902639fd336f84d88fbc46fda051c3f
sha256: 08c34200a0fcc1a8f430ec9a4514ebbc94ca250acade277c2231699faf60adca
sha512: 8457942229d77b3a9fb09460b3d47d8593aa77b898d5f072ff0f72a8f4d628539d69b466c336a09862ec4c5e8d21a2c1fe92b6ef5e880315aa54b4d517f383cd
ssdeep: 1536:pokfAXodtbZdbA3BZkJW/EGhwG6awsHT/U4urSix9RQ+ozR5R45WtqV9R2R462iW:GOAXod1bA37kc/NEawaT/U4umix9e+4O
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10CA36B2B76150F53EE83C3F53E0B59F5AE36C5B82E5E9A82038C405D306F91752BAB85
sha3_384: 4b7212fe162f88b98d8ff76ee0f405b5284981e8aa3b5aea63088fdf8d5a07b13ea182c8b0989105ab9889affe6e7c51
ep_bytes: 90609090909067e80000000090909090
timestamp: 2012-04-24 03:39:59

Version Info:

0: [No Data]

Backdoor.Berbew.S30943575 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Padodor.m!c
tehtrisGeneric.Malware
DrWebBackDoor.HangUp.5
MicroWorld-eScanGen:Trojan.ShellObject.g8W@aq1NpPf
CAT-QuickHealBackdoor.Berbew.S30943575
SkyhighBehavesLike.Win32.Generic.nc
McAfeeTrojan-FVOK!45947337A3E8
Cylanceunsafe
ZillyaTrojan.Padodor.Win32.683398
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
AlibabaBackdoor:Win32/Padodor.7c765c34
K7GWTrojan ( 005780dd1 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaAI:Packer.617771141E
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32Win32/Padodor.NAM
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Trojan.Crypted-30
KasperskyBackdoor.Win32.Padodor.gen
BitDefenderGen:Trojan.ShellObject.g8W@aq1NpPf
NANO-AntivirusTrojan.Win32.Padodor.fnqyvr
AvastWin32:BackdoorX-gen [Trj]
TencentBackdoor.Win32.Padodor.kp
TACHYONBackdoor/W32.Padodor
EmsisoftGen:Trojan.ShellObject.g8W@aq1NpPf (B)
F-SecureTrojan.TR/Crypt.XDR.Gen
VIPREGen:Trojan.ShellObject.g8W@aq1NpPf
TrendMicroTROJ_GEN.R03BC0DL723
SophosTroj/Padodor-M
SentinelOneStatic AI – Malicious PE
JiangminBackdoor.Padodor.bfxy
VaristW32/Pahador.QLFO-8537
AviraTR/Crypt.XDR.Gen
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
Kingsoftmalware.kb.a.1000
ArcabitTrojan.ShellObject.E0E85D
ViRobotTrojan.Win.Z.Padodor.98304.EHLS
ZoneAlarmBackdoor.Win32.Padodor.gen
GDataWin32.Trojan.PSE.HBYHFC
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
VBA32Backdoor.Padodor
MAXmalware (ai score=86)
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0DL723
RisingBackdoor.Berbew!1.AF13 (CLASSIC)
YandexBackdoor.Padodor.AF
IkarusBackdoor.Win32.Padodor
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.BJQV!tr
AVGWin32:BackdoorX-gen [Trj]
Cybereasonmalicious.ef9026
DeepInstinctMALICIOUS

How to remove Backdoor.Berbew.S30943575?

Backdoor.Berbew.S30943575 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment