Backdoor:Win32/Padodor.SK!MTB removal instruction

The Backdoor:Win32/Padodor.SK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor:Win32/Padodor.SK!MTB virus can do?

Creates an indicator observed in Territorial Disputes report SIG40
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Backdoor:Win32/Padodor.SK!MTB?


File Info:
name: D96C15E8FE2675273B1D.mlw
path: /opt/CAPEv2/storage/binaries/7207369a811e47a21e63c627bed7fccd87e40b6b06764940d4f4d4eafb77a269
crc32: 228DEF67
md5: d96c15e8fe2675273b1d7d7f8e9c59ef
sha1: 78d1cd88358e00daeae008db921c58f1ace9e866
sha256: 7207369a811e47a21e63c627bed7fccd87e40b6b06764940d4f4d4eafb77a269
sha512: 5108cc5554ecc5053f9d03bec03916fbfdca59ae625d479ea267ad53ec83ca7bdaf5387be6d6e4e1d13dd43297287f31c1e65d71006fa13356718c72dd38c286
ssdeep: 1536:1/lz13D/j+zVA0aL/7NgvUvhGefyKQ0WMwM/plUNuOM6bOLXi8PmCofGV:1bDLuC7VHBWygIDrLXfzoeV
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13BA37D5EBE390F22FFB20178053E65827F36C5650DA8A89005CA9F0D575BF583EBA2D1
sha3_384: 304a14ac6b869a9ae308c052d4f420fe0c5473ddb4fb4ca54798ade95fe854af2c547256842b36d256a308b83690acbf
ep_bytes: 9090906067e800000000909058909090
timestamp: 1987-08-01 05:39:38

Version Info:
0: [No Data]

Backdoor:Win32/Padodor.SK!MTB also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Padodor.m!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKDZ.102778
FireEye	Generic.mg.d96c15e8fe267527
Skyhigh	BehavesLike.Win32.Generic.nc
McAfee	Generic Malware.bj
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005780dd1 )
BitDefender	Trojan.GenericKDZ.102778
K7GW	Trojan ( 005780dd1 )
Cybereason	malicious.8358e0
Arcabit	Trojan.Generic.D1917A
BitDefenderTheta	AI:Packer.89FC6AB71E
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	Win32/Padodor.AB
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Malware.Padodor-10012876-0
Kaspersky	Backdoor.Win32.Padodor.gen
Alibaba	Backdoor:Win32/Padodor.32c0a74b
NANO-Antivirus	Trojan.Win32.Padodor.jpvoex
ViRobot	Trojan.Win.Z.Padodor.97792.AJRC
Tencent	Backdoor.Win32.Padodor.kp
Emsisoft	Trojan.GenericKDZ.102778 (B)
F-Secure	Trojan.TR/Crypt.XPACK.Gen
DrWeb	BackDoor.Wdozer
VIPRE	Trojan.GenericKDZ.102778
TrendMicro	TROJ_GEN.R002C0DK423
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanProxy.Qukart.dlvb
Varist	W32/Backdoor.DKIC-2994
Avira	TR/Crypt.XPACK.Gen
MAX	malware (ai score=84)
Antiy-AVL	Trojan[Proxy]/Win32.Qukart.gen
Kingsoft	malware.kb.a.1000
Microsoft	Backdoor:Win32/Padodor.SK!MTB
ZoneAlarm	Backdoor.Win32.Padodor.gen
GData	Trojan.GenericKDZ.102778
Google	Detected
AhnLab-V3	Win-Trojan/Berbew.51712
Acronis	suspicious
VBA32	Backdoor.Padodor
ALYac	Trojan.GenericKDZ.102778
TACHYON	Backdoor/W32.Padodor
DeepInstinct	MALICIOUS
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002C0DK423
Rising	Backdoor.Padodor!8.118 (TFE:5:fGiz2IHxOJD)
Ikarus	Trojan.Win32.Padodor
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Qukart.A!tr
AVG	Win32:Padodor-V [Trj]
Avast	Win32:Padodor-V [Trj]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Backdoor:Win32/Padodor.SK!MTB?

Backdoor:Win32/Padodor.SK!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X