Backdoor:Win32/Padodor.SK!MTB removal instruction

The Backdoor:Win32/Padodor.SK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Win32/Padodor.SK!MTB virus can do?

• Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
• Creates an indicator observed in Territorial Disputes report SIG40
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Anomalous binary characteristics
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Backdoor:Win32/Padodor.SK!MTB?

File Info:
name: D0A1A2B75E13BD1F2D95.mlw
path: /opt/CAPEv2/storage/binaries/5813cc3e2abb41e0754a4acc2cc7163020cad0f05aec38c6d1f860a1467c5545
crc32: C17F1F58
md5: d0a1a2b75e13bd1f2d9521adda298805
sha1: 797ac83ddec535b8afa48a9d5d9406857402b2f3
sha256: 5813cc3e2abb41e0754a4acc2cc7163020cad0f05aec38c6d1f860a1467c5545
sha512: 1c2aa4b0272e454ddbbd972de00c5dcb4b9b286675e7a2ee150b9d6b4cb7986aba41e4405d1206c1d8cbdc782e0d595bf6bb024f78d8f131926e0b3bec347392
ssdeep: 3072:8VflLHG/uHT6YsrB5pusgb3a3+X13XRzT:wflLm/uHT6YIB7up7aOl3BzT
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11DA37D4A61542FF7C74107752A69708EA75CB12BC3BE83B11C3B804E6B6BE3D2376981
sha3_384: db6db2aacd5d1276476a4cc77c614a3c437b0558f4a8b5a0244b4d12e27e40a3a5118ef0e34a173cfe8c1317c66d6665
ep_bytes: 90906090909090b800104000bb38de40
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Backdoor:Win32/Padodor.SK!MTB also known as:

How to remove Backdoor:Win32/Padodor.SK!MTB?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.