Backdoor

How to remove “Backdoor:Win32/Padodor.SK!MTB”?

Malware Removal

The Backdoor:Win32/Padodor.SK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Backdoor:Win32/Padodor.SK!MTB virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • Uses Windows utilities for basic functionality
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Backdoor:Win32/Padodor.SK!MTB?



File Info:

name: 83AB7409EA821BAA9C98.mlw
path: /opt/CAPEv2/storage/binaries/f00e3071a3f78cb0f3c7b598fc447aa83eb1453336b6d53047bd29b0533d61f9
crc32: 457247CD
md5: 83ab7409ea821baa9c98bf5dee9722e4
sha1: f967aedda9d2567f59d3e861e2511650320862e5
sha256: f00e3071a3f78cb0f3c7b598fc447aa83eb1453336b6d53047bd29b0533d61f9
sha512: 1463b87c28499319e62aa98654823fb0a95e2f2b2461806418bacccb12226a94cee234f356ba87c698d79a5bff02a86e71174442fc3d8b479a9514ba1c581754
ssdeep: 1536:MCHCkEDLJn6G+r16KtxIp0VBBnpsRQfhRkRLJzeLD9N0iQGRNQR8RyV+32rR:1E/56GMc+Rf0eZSJdEN0s4WE+3K
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CB939DDFB9603E33C5950270632A4C916BDAE67BAE26E4F0085CD01E8FD77214735EA5
sha3_384: 1167e2149213d91001ccc664385c908a64e7472635d3703cacecf7f06686415248b97a829d99c7f033c78af53a31f6d9
ep_bytes: 90909067e80000000090905890909090
timestamp: 2017-10-15 03:39:59


Version Info:

0: [No Data]

Backdoor:Win32/Padodor.SK!MTB also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Padodor.m!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Trojan.ShellObject.f8W@aeOesjp
ClamAVWin.Trojan.Qukart-10012701-0
SkyhighBehavesLike.Win32.Generic.nc
McAfeeGenericRXHD-SL!1849D8B14FE2
Cylanceunsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
AlibabaBackdoor:Win32/Padodor.d773712b
K7GWTrojan ( 005780dd1 )
CrowdStrikewin/malicious_confidence_100% (W)
ArcabitTrojan.ShellObject.E8EEEC
BitDefenderThetaAI:Packer.2ABBEDA021
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32Win32/Padodor.NAM
APEXMalicious
CynetMalicious (score: 100)
KasperskyBackdoor.Win32.Padodor.gen
BitDefenderGen:Trojan.ShellObject.f8W@aeOesjp
NANO-AntivirusTrojan.Win32.Padodor.foufls
AvastWin32:BackdoorX-gen [Trj]
TencentBackdoor.Win32.Padodor.kg
EmsisoftGen:Trojan.ShellObject.f8W@aeOesjp (B)
F-SecureTrojan.TR/Crypt.ZPACK.Gen
DrWebBackDoor.HangUp.5
VIPREGen:Trojan.ShellObject.f8W@aeOesjp
TrendMicroTROJ_GEN.R03BC0DLL23
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
JiangminBackdoor.Padodor.ewpp
AviraTR/Crypt.ZPACK.Gen
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
Kingsoftmalware.kb.a.1000
MicrosoftBackdoor:Win32/Padodor.SK!MTB
ViRobotTrojan.Win.Z.Padodor.95744.EWXQ
ZoneAlarmBackdoor.Win32.Padodor.gen
GDataGen:Trojan.ShellObject.f8W@aeOesjp
VaristW32/Pahador.QLFO-8537
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
VBA32Backdoor.Padodor
ALYacGen:Trojan.ShellObject.f8W@aeOesjp
TACHYONBackdoor/W32.Padodor
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0DLL23
RisingBackdoor.Berbew!1.AF13 (CLASSIC)
YandexBackdoor.Padodor.AF
IkarusTrojan.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.FBNK!tr
AVGWin32:BackdoorX-gen [Trj]
Cybereasonmalicious.da9d25
DeepInstinctMALICIOUS

How to remove Backdoor:Win32/Padodor.SK!MTB?

Backdoor:Win32/Padodor.SK!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment