Backdoor

Backdoor:Win32/Padodor.SK!MTB removal tips

Malware Removal

The Backdoor:Win32/Padodor.SK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor:Win32/Padodor.SK!MTB virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Backdoor:Win32/Padodor.SK!MTB?


File Info:

name: 91430C478BE17B618339.mlw
path: /opt/CAPEv2/storage/binaries/63b2a5ef2b4fdc852c29a2b0ed6afa4d846fdf61e078e0730f16d3078e83d578
crc32: 3A1071C5
md5: 91430c478be17b618339430ac1abf19f
sha1: f16abe9e9fc795e96bbee349f6dc2f87f578773e
sha256: 63b2a5ef2b4fdc852c29a2b0ed6afa4d846fdf61e078e0730f16d3078e83d578
sha512: 572a7d94ca3624a42698dae453294d3a115d710be41f9c70aa6d2dbfd59a74327f7e6feb7e8232eac64000cf1e47b653be5c5533a9f4128d60023d3113e41300
ssdeep: 3072:Gtgsr54vEg5uy9DDYek888888qE9eFKPD375lHzpa1P:65JnyZE9eYr75lHzpaF
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C7A39D2B91791FE3DE421DB4210E98CBB298C42442BF84B655DDCB3B63ABA3471F5781
sha3_384: 88cba48a58f3423e60fcae1665b6c5e6003c68596345333e205c0ce949b4554b859e187d74d01572fcf84009c2afedeb
ep_bytes: 909060909090b8001040009090bb38de
timestamp: 1987-08-01 05:39:38

Version Info:

0: [No Data]

Backdoor:Win32/Padodor.SK!MTB also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.102778
CAT-QuickHealBackdoor.Padodor
SkyhighBehavesLike.Win32.Generic.nc
McAfeeTrojan-FVOJ!91430C478BE1
MalwarebytesGeneric.Malware.AI.DDS
VIPRETrojan.GenericKDZ.102778
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
BitDefenderTrojan.GenericKDZ.102778
K7GWTrojan ( 005780dd1 )
Cybereasonmalicious.e9fc79
BitDefenderThetaAI:Packer.F2DCBEC921
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Padodor.AB
APEXMalicious
ClamAVWin.Trojan.Crypted-30
KasperskyBackdoor.Win32.Padodor.gen
NANO-AntivirusTrojan.Win32.Padodor.kcrgfq
RisingBackdoor.Berbew!8.115 (TFE:2:ZeYZK1nV71S)
TACHYONBackdoor/W32.Padodor
SophosTroj/Padodo-Gen
F-SecureTrojan.TR/Crypt.ZPACK.Gen
DrWebBackDoor.Wdozer
ZillyaTrojan.Padodor.Win32.1674143
TrendMicroTROJ_GEN.R03BC0DJQ23
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.91430c478be17b61
EmsisoftTrojan.GenericKDZ.102778 (B)
IkarusTrojan.Crypt
JiangminBackdoor.Padodor.dblt
GoogleDetected
AviraTR/Crypt.ZPACK.Gen
VaristW32/Backdoor.DKIC-2994
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
Kingsoftmalware.kb.a.1000
MicrosoftBackdoor:Win32/Padodor.SK!MTB
ArcabitTrojan.Generic.D1917A
ZoneAlarmBackdoor.Win32.Padodor.gen
GDataWin32.Trojan.PSE.6Y5R0K
CynetMalicious (score: 100)
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
VBA32Backdoor.Padodor
ALYacTrojan.GenericKDZ.102778
MAXmalware (ai score=87)
DeepInstinctMALICIOUS
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0DJQ23
TencentBackdoor.Win32.Padodor.kl
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Qukart.A!tr
AVGWin32:Padodor-V [Trj]
AvastWin32:Padodor-V [Trj]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Backdoor:Win32/Padodor.SK!MTB?

Backdoor:Win32/Padodor.SK!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment