Backdoor

Backdoor:Win32/Padodor.SK!MTB information

Malware Removal

The Backdoor:Win32/Padodor.SK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Backdoor:Win32/Padodor.SK!MTB virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Backdoor:Win32/Padodor.SK!MTB?



File Info:

name: A6895907D7CF52C0FB64.mlw
path: /opt/CAPEv2/storage/binaries/d5aa17e7dbc7264d453e2c1e4e36cef8540421f3a80f83239e834cd1d76c43b3
crc32: B0FABD8E
md5: a6895907d7cf52c0fb640b0bfe523b0e
sha1: c2e5c6a611ebb3a17565ff3fc29aed87edb3b417
sha256: d5aa17e7dbc7264d453e2c1e4e36cef8540421f3a80f83239e834cd1d76c43b3
sha512: 6abcffd4400d2d5eff43433d20c2ef848f74b53d1caae98468f939002901a1ee8509662b417741e9a67c47159a2c6d896fd60cb956b583d9abb28b4ee0d9b808
ssdeep: 3072:35TWvbDPun2Pqe3V3/zrB3g3k8p4qI4/HQCC:38Tjun+dPBZs/HNC
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13FA36B6F77546F71E8C406F619D7D0DAFB1AD3F9131A84E22458800EDF6AE3846BE680
sha3_384: 44a8ed8a33c429fffd44d11c11325067a12dd1d8685fca928605a122c53049b1474ce54e07cec89a01800a61f772f144
ep_bytes: 909067e800000000909090909058059f
timestamp: 2019-02-27 03:39:59


Version Info:

0: [No Data]

Backdoor:Win32/Padodor.SK!MTB also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Padodor.m!c
tehtrisGeneric.Malware
DrWebBackDoor.HangUp.5
MicroWorld-eScanGen:Trojan.ShellObject.g8W@a4IOpRm
SkyhighBehavesLike.Win32.Generic.ch
McAfeeGeneric Malware.bj
MalwarebytesGeneric.Malware.AI.DDS
ZillyaTrojan.PadodorGen.Win32.18
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
AlibabaBackdoor:Win32/Padodor.ee204f4f
K7GWTrojan ( 005780dd1 )
Cybereasonmalicious.611ebb
BitDefenderThetaAI:Packer.CD874EAA21
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32Win32/Padodor.NAM
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Trojan.Obfus-38
KasperskyBackdoor.Win32.Padodor.gen
BitDefenderGen:Trojan.ShellObject.g8W@a4IOpRm
NANO-AntivirusTrojan.Win32.Padodor.foufls
AvastWin32:BackdoorX-gen [Trj]
TencentBackdoor.Win32.Padodor.haa
EmsisoftGen:Trojan.ShellObject.g8W@a4IOpRm (B)
F-SecureTrojan.TR/Crypt.ZPACK.Gen
VIPREGen:Trojan.ShellObject.g8W@a4IOpRm
TrendMicroTROJ_GEN.R002C0DLD23
SophosMal/Generic-S
IkarusBackdoor.Win32.Padodor
JiangminBackdoor.Padodor.eytg
VaristW32/Pahador.QLFO-8537
AviraTR/Crypt.ZPACK.Gen
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
Kingsoftmalware.kb.a.1000
MicrosoftBackdoor:Win32/Padodor.SK!MTB
ArcabitTrojan.ShellObject.ECEA30
ViRobotTrojan.Win.Z.Padodor.103424.AAYP
ZoneAlarmBackdoor.Win32.Padodor.gen
GDataWin32.Trojan.PSE.1A8ERTK
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
VBA32Backdoor.Padodor
ALYacGen:Trojan.ShellObject.g8W@a4IOpRm
TACHYONBackdoor/W32.Padodor
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0DLD23
RisingBackdoor.Berbew!1.AF13 (CLASSIC)
YandexBackdoor.Padodor.AF
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.FBNK!tr
AVGWin32:BackdoorX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Backdoor:Win32/Padodor.SK!MTB?

Backdoor:Win32/Padodor.SK!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment