JavaScript support is required for our site to be fully operational in your browser.
Linux.Siggen.445
Added to the Dr.Web virus database:
2018-02-21
Virus description added:
2018-02-21
Technical Information
Malicious functions:
Gains root privileges
Launches itself as a daemon
Launches processes:
sh -c getprop ro.build.display.id
getprop ro.build.display.id
Kills the following processes:
Performs operations with the file system:
Modifies file access rights:
/dev/socket/helperd_server.lockpid
/proc/690/oom_adj
Creates folders:
Creates or modifies files:
/acct/uid/0/tasks
/data/local/tmp/.tmpb696942502466
/system/lib/testtemptest123
/data/local/tmp/.tmpb691878089592
/dev/socket/helperd_server.lock
/dev/socket/helperd_server.lockpid
/proc/690/oom_adj
Deletes files:
/data/local/tmp/.tmpb696942502466"
/data/local/tmp/.tmpb691878089592"
Locks files:
/dev/socket/helperd_server.lock
Curing recommendations
Linux
Free trial
One month (no registration) or three months (registration and renewal discount)
Download Dr.Web for Android
Free three-month trial
All protection features available
Renew your trial license in AppGallery/on Google Pay
By continuing to use this website, you are consenting to Doctor Web’s use of cookies and other technologies related to the collection of visitor statistics. Learn more
OK