Backdoor

What is “Backdoor:Win32/Padodor.SK!MTB”?

Malware Removal

The Backdoor:Win32/Padodor.SK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor:Win32/Padodor.SK!MTB virus can do?

  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Backdoor:Win32/Padodor.SK!MTB?


File Info:

name: BF0C0576E80F9B17674C.mlw
path: /opt/CAPEv2/storage/binaries/70db1fbab6fddaaff387eb097dca8d930aa92885cf8638b24f732c4319b70be4
crc32: 26E84D8E
md5: bf0c0576e80f9b17674c2a49ca90c3b9
sha1: 06c6be18f4beeaa3cd25b4c8ed76d49c5445cf86
sha256: 70db1fbab6fddaaff387eb097dca8d930aa92885cf8638b24f732c4319b70be4
sha512: 493c99ec8f4ea65b425c93cfa50c9a72989d2d9e2e38979d11efad50a05abdde9d6820aed397c4778b82577684df6522c2cf8c8fd093bef31ba05925a0e58256
ssdeep: 1536:S4trnF7FR9bTqB+bswvxKu9LD09IvFXYTA20LO3D5zwXXKfOOQ/4BrGTI5Yxj:Dtzbflowvf9LI+XkAlOTaXmU/4kT0Yxj
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F7939E1B6359CFB1C28212FCA106DBBE3392549BC3B709FC5C688BC9CD0B6667536489
sha3_384: dbf8c83856b3223b9a40a546d8af0b10981c59a2f039c7e313a69a439c1efab5af38f0b092ae0e015adffa31d63eb37d
ep_bytes: 9090b8001040009090906a0490909090
timestamp: 1987-08-01 05:39:38

Version Info:

0: [No Data]

Backdoor:Win32/Padodor.SK!MTB also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Padodor.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanDeepScan:Generic.Dacic.1DA3E11F.A.BB241D69
ClamAVWin.Trojan.Obfus-38
FireEyeGeneric.mg.bf0c0576e80f9b17
SkyhighBehavesLike.Win32.Generic.nc
McAfeeArtemis!BF0C0576E80F
MalwarebytesGeneric.Malware.AI.DDS
VIPREDeepScan:Generic.Dacic.1DA3E11F.A.BB241D69
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaBackdoor:Win32/Padodor.6226da33
K7GWTrojan ( 005780dd1 )
K7AntiVirusTrojan ( 005780dd1 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GenKryptik.EZNP
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderDeepScan:Generic.Dacic.1DA3E11F.A.BB241D69
NANO-AntivirusTrojan.Win32.HangUp.jzcwcv
AvastWin32:Padodor-V [Trj]
TencentBackdoor.Win32.Padodor.km
EmsisoftDeepScan:Generic.Dacic.1DA3E11F.A.BB241D69 (B)
F-SecureTrojan.TR/Crypt.ZPACK.Gen2
DrWebBackDoor.HangUp.44049
ZillyaTrojan.QukartGen.Win32.2
TrendMicroTROJ_GEN.R03BC0DB924
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.PPR6P4
JiangminBackdoor.Padodor.exys
GoogleDetected
AviraTR/Crypt.ZPACK.Gen2
MAXmalware (ai score=88)
Antiy-AVLTrojan/Win32.GenKryptik
Kingsoftmalware.kb.a.1000
ArcabitDeepScan:Generic.Dacic.1DA3E11F.A.BB241D69
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftBackdoor:Win32/Padodor.SK!MTB
VaristW32/Agent.FTJ.gen!Eldorado
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
BitDefenderThetaAI:Packer.000626751E
ALYacDeepScan:Generic.Dacic.1DA3E11F.A.BB241D69
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0DB924
RisingBackdoor.Padodor!8.118 (TFE:5:ANhzeVHq5GO)
IkarusTrojan.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agent.B077!tr
AVGWin32:Padodor-V [Trj]
Cybereasonmalicious.8f4bee
DeepInstinctMALICIOUS

How to remove Backdoor:Win32/Padodor.SK!MTB?

Backdoor:Win32/Padodor.SK!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment