| TM Detection | OPR |
|---|---|
| Backdoor.Win64.SHADOWPAD.AD | 15.751.00 |
| Backdoor.Win64.SHADOWPAD.AE | 15.803.00 |
| Backdoor.Win64.SHADOWPAD.DAM | 15.827.00 |
| Backdoor.Win64.SHADOWPAD.SM | 15.791.00 |
| Predictive Machine Learning (Trend X) Detection |
|---|
| Troj.Win32.TRX.XXPE50FFF034 |
| Sandbox Detection |
|---|
| VAN_MALWARE.UMXX |
Actions to Take
Make sure that your product software is patched and up to date. Refer to the following KB articles:
- SECURITY BULLETIN: Directory Traversal Vulnerability in Trend Micro Apex One, OfficeScan and Worry-Free Business Security
- SECURITY BULLETIN: Multiple Critical Vulnerabilities in Trend Micro Apex One and OfficeScan
Trend Micro Endpoint Product using best practices should be able to detect and clean this malware. For more information, refer to the KB article on Best practices in configuring OfficeScan (OSCE) for malware protection.
For machines that are isolated or without agents installed, you can use ATTK online Clean Tool to clean the infected machine. Refer to this KB article.