Backdoor:Win32/OlympicDestroyer.PA!MTB malicious file

The Backdoor:Win32/OlympicDestroyer.PA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Win32/OlympicDestroyer.PA!MTB virus can do?

• Executable code extraction
• Creates RWX memory
• A process created a hidden window
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Uses Windows utilities for basic functionality
• Attempts to delete volume shadow copies
• Attempts to restart the guest VM
• A process attempted to delay the analysis task by a long amount of time.
• Modifies boot configuration settings
• Steals private information from local Internet browsers
• Collects information about installed applications
• Clears Windows events or logs
• Creates a copy of itself
• Uses suspicious command line tools or Windows utilities

How to determine Backdoor:Win32/OlympicDestroyer.PA!MTB?

File Info:
crc32: 4BF66209
md5: a87d23c94647807ab6dc5eb8cc7340e1
name: A87D23C94647807AB6DC5EB8CC7340E1.mlw
sha1: 694be496d5fced0dbffd7cfc5cac92d445624b73
sha256: 5f37829988e827f05b42774db94e8a15e87e9de12e61b89c91bf5fddee90650c
sha512: 8466186cdc340ce5485c5e426db6fe04f52a9d64cc6451b0eb2e53dfec02c503bd6d19b113d6c159e920308331620d3811a8d155f73e3adaf5e37c1e33ec5b50
ssdeep: 49152:R9dnjR2nRMWHrVDoqNcVhcAwARGcWRrLy3pNq:3dV2RMUrVDEVHLRGdRrLy5N
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Backdoor:Win32/OlympicDestroyer.PA!MTB also known as:

How to remove Backdoor:Win32/OlympicDestroyer.PA!MTB?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.