Backdoor

Should I remove “Backdoor:Win32/Padodor.SK!MTB”?

Malware Removal

The Backdoor:Win32/Padodor.SK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Backdoor:Win32/Padodor.SK!MTB virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Backdoor:Win32/Padodor.SK!MTB?



File Info:

name: EB1AC1B6E5CA616E507F.mlw
path: /opt/CAPEv2/storage/binaries/291ea3fa7bb422a5a31135d877df9165e7f14c291d90bc36a40f2adddde33d38
crc32: BA6174D9
md5: eb1ac1b6e5ca616e507f2cc3863a16d5
sha1: 801c127af252c0bafc86009e39e2adc9bb8a51ce
sha256: 291ea3fa7bb422a5a31135d877df9165e7f14c291d90bc36a40f2adddde33d38
sha512: e637c68212d1a63f29d23cf5eefc282f58a5c1322529d8a87724e272f58b77ce3cada04e183e329a8f7616ce2c08f73d313f932aa0ca6bcb0e948deb4ff77a9b
ssdeep: 3072:uzvfPi3LMmKmbqG1DpsKxRW1+XTeyDpwoTRBmDRGGurhUI:uzPi4VIpsKU+X6Zm7UI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11EA37B9B72490E7FD980C3B15D2BB8B5BA25CA7C575C89E007A98C1DE35BE0601FB5B0
sha3_384: b5ee7e1aa3b60428279ce7a855e1c9d44c19de23366741129929b7bd3979a9bac1e51607dc1cbfd393700570c13825c2
ep_bytes: 906067e8000000009090909090589005
timestamp: 2016-06-02 03:39:59


Version Info:

0: [No Data]

Backdoor:Win32/Padodor.SK!MTB also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Padodor.4!c
tehtrisGeneric.Malware
MicroWorld-eScanGenPack:Trojan.Agent.DQQO
CAT-QuickHealBackdoor.Padodor
SkyhighBehavesLike.Win32.Generic.nh
ALYacGenPack:Trojan.Agent.DQQO
MalwarebytesGeneric.Malware.AI.DDS
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
BitDefenderGenPack:Trojan.Agent.DQQO
K7GWTrojan ( 005780dd1 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaAI:Packer.AF4775D21E
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32Win32/Padodor.NAM
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Packed.Zpack-10001780-0
KasperskyBackdoor.Win32.Padodor.gen
AlibabaBackdoor:Win32/Padodor.49ae4690
NANO-AntivirusTrojan.Win32.Padodor.foufls
TencentTrojan.Win32.Qukart.ya
TACHYONBackdoor/W32.Padodor
SophosMal/Generic-S
F-SecureTrojan.TR/Crypt.ZPACK.Gen2
DrWebBackDoor.HangUp.5
VIPREGenPack:Trojan.Agent.DQQO
TrendMicroTROJ_GEN.R03BC0DJT23
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.eb1ac1b6e5ca616e
EmsisoftGenPack:Trojan.Agent.DQQO (B)
IkarusBackdoor.Win32.Padodor
JiangminBackdoor.Padodor.eyaa
VaristW32/Pahador.QLFO-8537
AviraTR/Crypt.ZPACK.Gen2
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
Kingsoftmalware.kb.a.1000
MicrosoftBackdoor:Win32/Padodor.SK!MTB
ArcabitGenPack:Trojan.Agent.DQQO
ZoneAlarmBackdoor.Win32.Padodor.gen
GDataGenPack:Trojan.Agent.DQQO
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
VBA32Backdoor.Padodor
MAXmalware (ai score=85)
DeepInstinctMALICIOUS
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0DJT23
RisingBackdoor.Berbew!1.AF13 (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
AVGWin32:BackdoorX-gen [Trj]
Cybereasonmalicious.af252c
AvastWin32:BackdoorX-gen [Trj]

How to remove Backdoor:Win32/Padodor.SK!MTB?

Backdoor:Win32/Padodor.SK!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment