JavaScript support is required for our site to be fully operational in your browser.
Linux.Siggen.424
Added to the Dr.Web virus database:
2018-02-15
Virus description added:
2018-02-15
Technical Information
Malicious functions:
Substitutes application name for:
bitcoin-scheduler
bitcoin-http
bitcoin-httpworker
bitcoin-loadblk
bitcoin-torcontrol
bitcoin-dnsseed
bitcoin-addcon
bitcoin-net
bitcoin-opencon
bitcoin-msghand
bitcoin-wallet
Performs operations with the file system:
Creates folders:
/root/.litecoin
/root/.litecoin/database
/root/.litecoin/blocks
/root/.litecoin/blocks/index
/root/.litecoin/chainstate
Creates or modifies files:
/root/.litecoin/.lock
/root/.litecoin/litecoin.pid
/root/.litecoin/debug.log
/root/.litecoin/.cookie
/root/.litecoin/db.log
/root/.litecoin/blocks/index/LOG
/root/.litecoin/blocks/index/LOCK
/root/.litecoin/blocks/index/MANIFEST-000001
/root/.litecoin/blocks/index/000001.dbtmp
/root/.litecoin/blocks/index/000003.log
/root/.litecoin/blocks/index/MANIFEST-000002
/root/.litecoin/blocks/index/000002.dbtmp
/root/.litecoin/chainstate/LOG
/root/.litecoin/chainstate/LOCK
/root/.litecoin/chainstate/MANIFEST-000001
/root/.litecoin/chainstate/000001.dbtmp
/root/.litecoin/chainstate/000003.log
/root/.litecoin/chainstate/MANIFEST-000002
/root/.litecoin/chainstate/000002.dbtmp
/root/.litecoin/blocks/blk00000.dat
/root/.litecoin/blocks/rev00000.dat
/root/.litecoin/database/log.0000000001
/root/.litecoin/__db.80000001.a04ec590
/root/.litecoin/wallet.dat
/root/.litecoin/peers.dat.2158
/root/.litecoin/banlist.dat.95cb
Deletes files:
/root/.litecoin/blocks/index/MANIFEST-000001"
/root/.litecoin/chainstate/MANIFEST-000001"
Network activity:
Awaits incoming connections on ports:
127.0.0.1:9332
0.0.0.0:9333
Establishes connection:
DNS ASK:
x9.######.litecoin.loshan.co.uk
lo###n.co.uk
x9.####eed.thrasher.io
th##sher.io
dn#####.litecointools.com
li####intools.com
dn#####.litecoinpool.org
li####inpool.org
dn#####.koin-project.com
ko####roject.com
Sends data to the following servers:
Receives data from the following servers:
Curing recommendations
Linux
Free trial
One month (no registration) or three months (registration and renewal discount)
Download Dr.Web for Android
Free three-month trial
All protection features available
Renew your trial license in AppGallery/on Google Pay
By continuing to use this website, you are consenting to Doctor Web’s use of cookies and other technologies related to the collection of visitor statistics. Learn more
OK