Backdoor

Padodor.Backdoor.Bot.DDS information

Malware Removal

The Padodor.Backdoor.Bot.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Padodor.Backdoor.Bot.DDS virus can do?

  • Sample contains Overlay data
  • Creates an indicator observed in Territorial Disputes report SIG40
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Padodor.Backdoor.Bot.DDS?


File Info:

name: BA573E6F45997048D686.mlw
path: /opt/CAPEv2/storage/binaries/7fd05ea371317ed69d1a73c71b3eb91b877b0224ff29f57c57bef30381a82eee
crc32: 87C63E6F
md5: ba573e6f45997048d686b23b92d076fc
sha1: 1beb318f4e1f5d5b877821c27b3ffdf8244977db
sha256: 7fd05ea371317ed69d1a73c71b3eb91b877b0224ff29f57c57bef30381a82eee
sha512: 1ff5b4a174edb4b6671a9b7a7646944b7a0359fd822ef7a9f4b960d4c5ed2ccfe8d4f035ae3d5d2d634667c16996cecfada760b459459c6de641c42623eaee0a
ssdeep: 6144:OeqHfPSxAMz3/fc/UmKyIxLDXXoq9FJZCUmKyIxLjh:OeqHfPSe732XXf9Do3i
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19C74AD06E1ED9E1FEA8DC67785C10EF3A9C702CAA2F464DE321E88B569438317C7595C
sha3_384: 47d9a67905d99056f47518f99a8497b5ad83f51894136317b23cdbed94c9aaf63270275f45e16040b5e42a473f2a09ba
ep_bytes: 90609090909090b8001040006a049090
timestamp: 1977-12-31 05:39:38

Version Info:

0: [No Data]

Padodor.Backdoor.Bot.DDS also known as:

BkavW32.AIDetectNet.01
tehtrisGeneric.Malware
CynetMalicious (score: 100)
FireEyeGeneric.mg.ba573e6f45997048
CAT-QuickHealTrojan.GenericIH.S13286062
McAfeeGenericRXPE-AP!144B76BFA11B
Cylanceunsafe
ZillyaTrojan.QukartGen.Win32.1
SangforTrojan.Win32.Save.a
K7AntiVirusProxy-Program ( 003b8b111 )
K7GWProxy-Program ( 003b8b111 )
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/Backdoor.DKIC-2994
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32Win32/Padodor.AB
APEXMalicious
ClamAVWin.Trojan.Crypted-30
KasperskyBackdoor.Win32.Padodor.gen
BitDefenderGenPack:Trojan.GenericKDZ.98109
NANO-AntivirusTrojan.Win32.Padodor.iwnckw
MicroWorld-eScanGenPack:Trojan.GenericKDZ.98109
AvastWin32:Padodor-V [Trj]
TencentTrojan.Win32.Qukart.ya
TACHYONBackdoor/W32.Padodor
EmsisoftGenPack:Trojan.GenericKDZ.98109 (B)
F-SecureTrojan.TR/Crypt.XDR.Gen
DrWebBackDoor.Wdozer
VIPREGenPack:Trojan.GenericKDZ.98109
McAfee-GW-EditionBehavesLike.Win32.Backdoor.fc
Trapminemalicious.high.ml.score
SophosTroj/Padodo-Gen
SentinelOneStatic AI – Malicious PE
GDataGenPack:Trojan.GenericKDZ.98109
JiangminBackdoor.Padodor.erlb
AviraTR/Crypt.XDR.Gen
Antiy-AVLTrojan[Proxy]/Win32.Qukart.gen
ArcabitGenPack:Trojan.Generic.D17F3D
ZoneAlarmBackdoor.Win32.Padodor.gen
MicrosoftBackdoor:Win32/Berbew.AA!MTB
GoogleDetected
AhnLab-V3Win-Trojan/Berbew.51712
BitDefenderThetaAI:Packer.E2DD51CF21
ALYacGenPack:Trojan.GenericKDZ.98109
MAXmalware (ai score=85)
VBA32Backdoor.Padodor
MalwarebytesPadodor.Backdoor.Bot.DDS
PandaTrj/Genetic.gen
RisingRansom.PornoAsset!8.6AA (TFE:2:1QjD8ksFU9R)
YandexBackdoor.Padodor!A5nRMmhQe3Q
IkarusBackdoor.Win32.Padodor
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Qukart.A!tr
AVGWin32:Padodor-V [Trj]
DeepInstinctMALICIOUS

How to remove Padodor.Backdoor.Bot.DDS?

Padodor.Backdoor.Bot.DDS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment