Advice Request Would it be possible for the Ransomware to leave any kind of backdoor?

[Rebsat]

Hello everyone. I was wondering to know after a successful ransomware infection and cleanup by one of the Emsisoft decryptor tools, Would it be possible for the ransomware to leave any kind of backdoor in the PC?Though. How about after a full restore from backup? Thank you very much

 

[brod56]

Probably yes. I recommend you to run HitmanPro and backup all your files in order to reinstall Windows then. The safest way possible for sure.

 

[Arequire]

If I remember correctly PokemonGo left a backdoor on systems it infected, so yes it's entirely possible but that's the only instance of it happening that I can remember.

To clarify: I mean PokemonGo ransomware and not the Pokémon Go app.

 

[Winter Soldier]

Depending on the ransomware type, yes it is possible that a backdoor module is present, usually it uses an encrypted channel to communicate with its server or C&C.
Please consider that if your backup is stored on your system's HDD, also using another partition, the ransomware could have access to this backup, encrypting the data.
So it is necessary to have also a backup's copy on offline and external support.