Backdoor

Backdoor:Win32/Padodor.SK!MTB removal tips

Malware Removal

The Backdoor:Win32/Padodor.SK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Backdoor:Win32/Padodor.SK!MTB virus can do?

  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Backdoor:Win32/Padodor.SK!MTB?



File Info:

name: 9AAAB222A3673EDD8D2E.mlw
path: /opt/CAPEv2/storage/binaries/0ba788781be486688d6fdc7348ae67018ef1803ee9fd50a9a554bbef104d3f89
crc32: 662324E5
md5: 9aaab222a3673edd8d2e0473ca978a46
sha1: f90de890ce0886f84d6c7498793eb14219165484
sha256: 0ba788781be486688d6fdc7348ae67018ef1803ee9fd50a9a554bbef104d3f89
sha512: b3dbf50620185c7b99db46910000a8e150c025de274ae592844c6f3687e4de45ed4c88b86d71c647ea1b49a11f57c78f3e86a7cf88a678795a9656105601c792
ssdeep: 3072:jILWuoIManKj7ZIRy6e3G3/zrB3g3k8p4qI4/HQCC:jt0Ma78RCPBZs/HNC
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C2A36DAF72D12FF2CB9402B26106CCFB7719D079725AB4DF1898C02D0297BA9593B5C9
sha3_384: 6ba578d494f705e991f152074393eba5da03fe1b1b996a1d3bd0b44347452253484e371ae046206f5a11c6f947b0c4cb
ep_bytes: 909067e8000000009090909090589005
timestamp: 2019-02-27 03:39:59


Version Info:

0: [No Data]

Backdoor:Win32/Padodor.SK!MTB also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Padodor.m!c
tehtrisGeneric.Malware
MicroWorld-eScanGenPack:Trojan.Agent.DQQO
SkyhighBehavesLike.Win32.Generic.ch
McAfeeGeneric Malware.bj
MalwarebytesGeneric.Malware.AI.DDS
VIPREGenPack:Trojan.Agent.DQQO
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005780dd1 )
BitDefenderGenPack:Trojan.Agent.DQQO
K7GWTrojan ( 005780dd1 )
Cybereasonmalicious.0ce088
ArcabitGenPack:Trojan.Agent.DQQO
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32Win32/Padodor.NAM
APEXMalicious
ClamAVWin.Packed.Zpack-10013399-0
KasperskyBackdoor.Win32.Padodor.gen
AlibabaBackdoor:Win32/Padodor.99d97d19
NANO-AntivirusTrojan.Win32.Padodor.foufls
ViRobotTrojan.Win.Z.Padodor.103424.WEW
RisingBackdoor.Berbew!1.AF13 (CLASSIC)
SophosMal/Generic-S
F-SecureTrojan.TR/Crypt.ZPACK.Gen
DrWebBackDoor.HangUp.5
TrendMicroTROJ_GEN.R002C0DKB23
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.9aaab222a3673edd
EmsisoftGenPack:Trojan.Agent.DQQO (B)
SentinelOneStatic AI – Malicious PE
MAXmalware (ai score=84)
JiangminBackdoor.Padodor.eykm
GoogleDetected
AviraTR/Crypt.ZPACK.Gen
VaristW32/Pahador.QLFO-8537
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
Kingsoftmalware.kb.a.1000
MicrosoftBackdoor:Win32/Padodor.SK!MTB
ZoneAlarmBackdoor.Win32.Padodor.gen
GDataWin32.Trojan.PSE.1A8ERTK
CynetMalicious (score: 100)
AhnLab-V3Win-Trojan/Berbew.51712
Acronissuspicious
BitDefenderThetaAI:Packer.CD874EAA21
ALYacGenPack:Trojan.Agent.DQQO
TACHYONBackdoor/W32.Padodor
DeepInstinctMALICIOUS
VBA32Backdoor.Padodor
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0DKB23
TencentBackdoor.Win32.Padodor.kp
YandexBackdoor.Padodor.AF
IkarusBackdoor.Win32.Padodor
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.FBNK!tr
AVGWin32:BackdoorX-gen [Trj]
AvastWin32:BackdoorX-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Backdoor:Win32/Padodor.SK!MTB?

Backdoor:Win32/Padodor.SK!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment