Backdoor.Vools
ThreatDown is now the name of the Malwarebytes line of business products. References to Malwarebytes below reflect the amazing technology used to first identify the threat.
Short bio
Backdoor.Vools is Malwarebytes detection name for a Backdoor that steals information from the affected system and consequently download and installs other malware.
Type of infection
Backdoor.Vools typically installs a crypto-currency-miner on the affected system after communicating back system information. Backdoor.Vools spreads using the SMB vulnerability released by the ShadowBrokers and connects to other machines at port 445.
Protection
Malwarebytes blocks Backdoor.Vools
Business remediation
How to remove Backdoor.Vools with the Malwarebytes Nebula console
You can use the Malwarebytes Anti-Malware Nebula console to scan endpoints.
Nebula endpoint tasks menu
Choose the Scan + Quarantine option. Afterwards you can check the Detections page to see which threats were found.
On the Quarantine page you can see which threats were quarantined and restore them if necessary.
Home remediation
Malwarebytes can detect and remove Backdoor.Vools without further user interaction.