Backdoor

How to remove “Backdoor:Win32/Berbew!pz”?

Malware Removal

The Backdoor:Win32/Berbew!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor:Win32/Berbew!pz virus can do?

  • Sample contains Overlay data
  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Backdoor:Win32/Berbew!pz?


File Info:

name: DDC3415083933984A773.mlw
path: /opt/CAPEv2/storage/binaries/7790b1d518049beafad3a4dabfa41ade841dbb7ae8c488affbf4f70160ee23c0
crc32: DE8F240B
md5: ddc3415083933984a773dc218ca823f3
sha1: 4496f45c0097e5e7680592d75c9b71cd337f6cde
sha256: 7790b1d518049beafad3a4dabfa41ade841dbb7ae8c488affbf4f70160ee23c0
sha512: f2c6b8db501c83ddcd7fc5ec72be05045d00cb8eb9223ff4ac183f9f1cc5cb8f7ea16e2dfa4fc9098d0a6f6d63d7032c15a575b4c78e89d57baa3c9c6223a46c
ssdeep: 3072:5xhaKBvbt5e/H3NJXScEAeFKPD375lHzpa1P2FU6UK7q4+5DbGTO6GQd3JSZO5fT:5xhjZt5S39EAeYr75lHzpaF2e6UK+42Y
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B314AD4BA0A11FE2FB5302BE1049275EFEF5652FC8E9D1FE39C8718CE2128C55759892
sha3_384: a8085af3f1d0849c20932b9212eb705847ae6cd30339445502fe3789d12ef933d2295a5942b94c20c333e7ce70843e6f
ep_bytes: 60909090b8001040009090bb38de4000
timestamp: 1987-08-01 05:39:38

Version Info:

0: [No Data]

Backdoor:Win32/Berbew!pz also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Padodor.m!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.103285
ClamAVWin.Malware.Padodor-10013598-0
FireEyeGeneric.mg.ddc3415083933984
CAT-QuickHealTrojan.GenericIH.S13286062
SkyhighBehavesLike.Win32.Backdoor.cc
McAfeeTrojan-FVOJ!DDC341508393
Cylanceunsafe
VIPRETrojan.GenericKDZ.103285
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
AlibabaBackdoor:Win32/Padodor.f20afade
K7GWTrojan ( 005780dd1 )
CrowdStrikewin/malicious_confidence_100% (W)
ArcabitTrojan.Generic.D19375
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Padodor.AB
APEXMalicious
CynetMalicious (score: 100)
KasperskyBackdoor.Win32.Padodor.gen
BitDefenderTrojan.GenericKDZ.103285
NANO-AntivirusTrojan.Win32.Padodor.kbogde
AvastWin32:Padodor-V [Trj]
TencentBackdoor.Win32.Padodor.kl
TACHYONBackdoor/W32.Padodor
SophosMal/Padodor-A
F-SecureTrojan.TR/Crypt.XDR.Gen
DrWebBackDoor.Wdozer
ZillyaTrojan.PadodorGen.Win32.16
TrendMicroTROJ_GEN.R002C0DA424
Trapminemalicious.high.ml.score
EmsisoftTrojan.GenericKDZ.103285 (B)
SentinelOneStatic AI – Malicious PE
JiangminBackdoor.Padodor.eycj
GoogleDetected
AviraTR/Crypt.XDR.Gen
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
Kingsoftmalware.kb.a.1000
MicrosoftBackdoor:Win32/Berbew!pz
ZoneAlarmBackdoor.Win32.Padodor.gen
GDataWin32.Trojan.PSE.6Y5R0K
VaristW32/Backdoor.DKIC-2994
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
BitDefenderThetaAI:Packer.DE1D8BC221
ALYacTrojan.GenericKDZ.103285
MAXmalware (ai score=82)
VBA32Backdoor.Padodor
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0DA424
RisingBackdoor.Padodor!8.118 (TFE:5:hZCzzPv8nBJ)
YandexTrojan.GenAsa!p1fO5hhCx5A
IkarusTrojan.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
AVGWin32:Padodor-V [Trj]
Cybereasonmalicious.c0097e
DeepInstinctMALICIOUS

How to remove Backdoor:Win32/Berbew!pz?

Backdoor:Win32/Berbew!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment