Backdoor

What is “Backdoor:Win32/Padodor.SK!MTB”?

Malware Removal

The Backdoor:Win32/Padodor.SK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Backdoor:Win32/Padodor.SK!MTB virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Backdoor:Win32/Padodor.SK!MTB?



File Info:

name: 245EDE9C8F79A5AABF8B.mlw
path: /opt/CAPEv2/storage/binaries/0c940de73a252412d394405f350b56110741f2592dd05f249420896bc7c8bf59
crc32: 64195A32
md5: 245ede9c8f79a5aabf8b74b9693d2220
sha1: 21d405163d036f496d181d61f67dc055653de53b
sha256: 0c940de73a252412d394405f350b56110741f2592dd05f249420896bc7c8bf59
sha512: 65c3c1c1fa79f725c4b423b5361c68d2663f09297a250a8c3bef50aabb06faad0a52aff12b23fac9097004c2b1f33189aeb8bb8f2994cee8eb1c543e3dcd43f3
ssdeep: 1536:rRbKaqPuP8fAwcuk4UrWmP6yWxhYyCV19zQYOd5ijJnD5ir3oGuiWDD:rlOW0ezXWmSHE3O7AJnD5tvv
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13BC36C6BA3441FBEC78302712707AACFF72E913443B991925B6CC09E1297E1A53B95E1
sha3_384: 295ac155daece9db1eb3aeaaf47a3726521f7256148bd5b5114f9b7e9ea5980aa141ad65041ce46637090be91786762d
ep_bytes: 90906090909090b8001040009090906a
timestamp: 1982-02-08 05:39:38


Version Info:

0: [No Data]

Backdoor:Win32/Padodor.SK!MTB also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Padodor.m!c
Elasticmalicious (high confidence)
DrWebBackDoor.Wdozer
MicroWorld-eScanGen:Trojan.ShellObject.h8W@aqG68Ic
SkyhighBehavesLike.Win32.Generic.ch
McAfeeTrojan-FVOJ!245EDE9C8F79
Cylanceunsafe
ZillyaTrojan.PadodorGen.Win32.22
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
AlibabaBackdoor:Win32/Padodor.2027dec4
K7GWTrojan ( 005780dd1 )
Cybereasonmalicious.63d036
BitDefenderThetaAI:Packer.129D9E5E21
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32Win32/Padodor.AB
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Trojan.Crypted-32
KasperskyBackdoor.Win32.Padodor.gen
BitDefenderGen:Trojan.ShellObject.h8W@aqG68Ic
NANO-AntivirusTrojan.Win32.Padodor.kbvxuh
AvastWin32:Padodor-V [Trj]
TencentBackdoor.Win32.Padodor.kp
TACHYONBackdoor/W32.Padodor
EmsisoftGen:Trojan.ShellObject.h8W@aqG68Ic (B)
F-SecureTrojan.TR/Crypt.XDR.Gen
VIPREGen:Trojan.ShellObject.h8W@aqG68Ic
TrendMicroTROJ_GEN.R03BC0DL623
SophosMal/Padodor-A
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.J9SS1X
JiangminBackdoor.Padodor.erlj
VaristW32/Backdoor.DKIC-2994
AviraTR/Crypt.XDR.Gen
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
Kingsoftmalware.kb.a.1000
ArcabitTrojan.ShellObject.E2D24F
ZoneAlarmBackdoor.Win32.Padodor.gen
MicrosoftBackdoor:Win32/Padodor.SK!MTB
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
VBA32Backdoor.Padodor
MAXmalware (ai score=85)
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0DL623
RisingRansom.PornoAsset!8.6AA (TFE:2:ZGASfuO0gFH)
IkarusTrojan.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.BJQV!tr
AVGWin32:Padodor-V [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Backdoor:Win32/Padodor.SK!MTB?

Backdoor:Win32/Padodor.SK!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment