JavaScript support is required for our site to be fully operational in your browser.
Linux.MulDrop.30
Added to the Dr.Web virus database:
2018-04-17
Virus description added:
2018-04-16
Technical Information
Malicious functions:
Launches processes:
/bin/bash <SAMPLE_FULL_PATH> -c exec '<SAMPLE_FULL_PATH>' \"$@\" <SAMPLE_FULL_PATH>
<SAMPLE_FULL_PATH>
/bin/bash <SAMPLE_FULL_PATH> -c
chmod 777 xinet NetworkAdapter
rm -rf output
sed -i s/\r// xinet
nohup /usr/sbin/NetworkAdapter --no-daemon
/usr/sbin/NetworkAdapter --no-daemon
nohup /usr/sbin/xinet -stayalive -pidfile /var/run/xinetd.pid
/usr/sbin/xinet -stayalive -pidfile /var/run/xinetd.pid
rm -rf output /usr/sbin/output
basename <SAMPLE_FULL_PATH>
Performs operations with the file system:
Creates or modifies files:
/usr/sbin"/output
/usr/sbin/output
/root/.bashrc
Deletes files:
/usr/sbin"/output"
/usr/sbin/output"
Curing recommendations
Linux
Free trial
One month (no registration) or three months (registration and renewal discount)
Download Dr.Web for Android
Free three-month trial
All protection features available
Renew your trial license in AppGallery/on Google Pay
By continuing to use this website, you are consenting to Doctor Web’s use of cookies and other technologies related to the collection of visitor statistics. Learn more
OK