How does 'Chopper' high-severity malware, 'NiktoSanner' hacktool and 'Dirtelti' backdoor attack? how to run a full scan on the machine and follow remediation instructions.

Question

How does 'Chopper' high-severity malware, 'NiktoSanner' hacktool and 'Dirtelti' backdoor attack? how to run a full scan on the machine and follow remediation instructions.

Bimala Shrestha 135

'Chopper' high-severity malware, 'NiktoSanner' hacktool and 'Dirtelti' backdoor was detected (Agentless). How does 'Chopper' high-severity malware, 'NiktoSanner' hacktool and 'Dirtelti' backdoor attack?

How to run a full scan on the machine and follow remediation instructions in Azure.

Accepted answer

0 additional answers

Your answer

Answer 1

Givary-MSFT 35,626 Microsoft Employee Moderator

@Bimala Shrestha Thank you for reaching out to us, for similar issue you created another post on friday, As I understand you are looking for steps to run a full scan on the device which is impacted by the malware.

Refer to this learn doc - https://learn.microsoft.com/en-us/defender-endpoint/run-scan-microsoft-defender-antivirus which has the steps on how to initiate a scan, if this doesn't help, I have pinged you on teams, we can have a conversation over there.

Givary-MSFT 35,626 Reputation points Microsoft Employee Moderator

2025-04-21T04:55:34.3733333+00:00

@Bimala Shrestha We connected offline and worked with our support team and followed the below action plan:

For the recommendations suggested on the MDE portal for the device in question:

To turn on real-time protection (turn off Passive mode), you can run mdatp config real-time-protection --value enabled

To turn on PUA protection in block mode, you can run: mdatp threat policy set --type potentially_unwanted_application --action block

Also, following suggestions have been recommended:

Requested to check the files and directories and investigate whether these files are present, quarantined, or removed by antivirus, or whether it was a false positive.

Shared insights about the MSRC portal (MSRC - Microsoft Security Response Center), which deals with vulnerabilities and compromises via Microsoft related IoCs.

Let me know if you have any further questions, feel free to post back.

Share via

How does 'Chopper' high-severity malware, 'NiktoSanner' hacktool and 'Dirtelti' backdoor attack? how to run a full scan on the machine and follow remediation instructions.

0 additional answers

Your answer