Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Linux.Siggen.555

Added to the Dr.Web virus database: 2018-04-26

Virus description added:

Technical Information

Malicious functions:
Launches processes:
  • <SAMPLE_FULL_PATH>
  • sh -c LC_ALL=C LANG=C /sbin/ldconfig -p 2>/dev/null
  • /sbin/ldconfig -p
  • /sbin/ldconfig.real -p
Performs operations with the file system:
Modifies file access rights:
  • /tmp/_MEILjWDYc/Crypto.Cipher._AES.so
  • /tmp/_MEILjWDYc/_bsddb.so
  • /tmp/_MEILjWDYc/_codecs_cn.so
  • /tmp/_MEILjWDYc/_codecs_hk.so
  • /tmp/_MEILjWDYc/_codecs_iso2022.so
  • /tmp/_MEILjWDYc/_codecs_jp.so
  • /tmp/_MEILjWDYc/_codecs_kr.so
  • /tmp/_MEILjWDYc/_codecs_tw.so
  • /tmp/_MEILjWDYc/_ctypes.so
  • /tmp/_MEILjWDYc/_hashlib.so
  • /tmp/_MEILjWDYc/_json.so
  • /tmp/_MEILjWDYc/_multibytecodec.so
  • /tmp/_MEILjWDYc/_ssl.so
  • /tmp/_MEILjWDYc/_testcapi.so
  • /tmp/_MEILjWDYc/bz2.so
  • /tmp/_MEILjWDYc/dbm.so
  • /tmp/_MEILjWDYc/future_builtins.so
  • /tmp/_MEILjWDYc/libbz2.so.1.0
  • /tmp/_MEILjWDYc/libcrypto.so.1.0.0
  • /tmp/_MEILjWDYc/libdb-5.3.so
  • /tmp/_MEILjWDYc/libexpat.so.1
  • /tmp/_MEILjWDYc/libffi.so.6
  • /tmp/_MEILjWDYc/libpython2.7.so.1.0
  • /tmp/_MEILjWDYc/libreadline.so.6
  • /tmp/_MEILjWDYc/libssl.so.1.0.0
  • /tmp/_MEILjWDYc/libtinfo.so.5
  • /tmp/_MEILjWDYc/libz.so.1
  • /tmp/_MEILjWDYc/pyexpat.so
  • /tmp/_MEILjWDYc/readline.so
  • /tmp/_MEILjWDYc/resource.so
  • /tmp/_MEILjWDYc/termios.so
  • /tmp/_MEILjWDYc/include/python2.7/pyconfig.h
  • /tmp/_MEILjWDYc/lib/python2.7/config-i386-linux-gnu/Makefile
Creates folders:
  • /tmp/_MEILjWDYc
  • /tmp/_MEILjWDYc/include
  • /tmp/_MEILjWDYc/include/python2.7
  • /tmp/_MEILjWDYc/lib
  • /tmp/_MEILjWDYc/lib/python2.7
  • /tmp/_MEILjWDYc/lib/python2.7/config-i386-linux-gnu
Deletes folders:
  • /tmp/_MEILjWDYc/include/python2.7"
  • /tmp/_MEILjWDYc/include"
  • /tmp/_MEILjWDYc/lib/python2.7/config-i386-linux-gnu"
  • /tmp/_MEILjWDYc/lib/python2.7"
  • /tmp/_MEILjWDYc/lib"
  • /tmp/_MEILjWDYc"
Creates or modifies files:
  • /tmp/_MEILjWDYc/Crypto.Cipher._AES.so
  • /tmp/_MEILjWDYc/_bsddb.so
  • /tmp/_MEILjWDYc/_codecs_cn.so
  • /tmp/_MEILjWDYc/_codecs_hk.so
  • /tmp/_MEILjWDYc/_codecs_iso2022.so
  • /tmp/_MEILjWDYc/_codecs_jp.so
  • /tmp/_MEILjWDYc/_codecs_kr.so
  • /tmp/_MEILjWDYc/_codecs_tw.so
  • /tmp/_MEILjWDYc/_ctypes.so
  • /tmp/_MEILjWDYc/_hashlib.so
  • /tmp/_MEILjWDYc/_json.so
  • /tmp/_MEILjWDYc/_multibytecodec.so
  • /tmp/_MEILjWDYc/_ssl.so
  • /tmp/_MEILjWDYc/_testcapi.so
  • /tmp/_MEILjWDYc/bz2.so
  • /tmp/_MEILjWDYc/dbm.so
  • /tmp/_MEILjWDYc/future_builtins.so
  • /tmp/_MEILjWDYc/libbz2.so.1.0
  • /tmp/_MEILjWDYc/libcrypto.so.1.0.0
  • /tmp/_MEILjWDYc/libdb-5.3.so
  • /tmp/_MEILjWDYc/libexpat.so.1
  • /tmp/_MEILjWDYc/libffi.so.6
  • /tmp/_MEILjWDYc/libpython2.7.so.1.0
  • /tmp/_MEILjWDYc/libreadline.so.6
  • /tmp/_MEILjWDYc/libssl.so.1.0.0
  • /tmp/_MEILjWDYc/libtinfo.so.5
  • /tmp/_MEILjWDYc/libz.so.1
  • /tmp/_MEILjWDYc/pyexpat.so
  • /tmp/_MEILjWDYc/readline.so
  • /tmp/_MEILjWDYc/resource.so
  • /tmp/_MEILjWDYc/termios.so
  • /tmp/_MEILjWDYc/include/python2.7/pyconfig.h
  • /tmp/_MEILjWDYc/lib/python2.7/config-i386-linux-gnu/Makefile
Deletes files:
  • /tmp/_MEILjWDYc/pyexpat.so"
  • /tmp/_MEILjWDYc/_codecs_tw.so"
  • /tmp/_MEILjWDYc/libdb-5.3.so"
  • /tmp/_MEILjWDYc/_bsddb.so"
  • /tmp/_MEILjWDYc/_ssl.so"
  • /tmp/_MEILjWDYc/_codecs_iso2022.so"
  • /tmp/_MEILjWDYc/_json.so"
  • /tmp/_MEILjWDYc/libtinfo.so.5"
  • /tmp/_MEILjWDYc/_codecs_cn.so"
  • /tmp/_MEILjWDYc/dbm.so"
  • /tmp/_MEILjWDYc/_codecs_kr.so"
  • /tmp/_MEILjWDYc/libssl.so.1.0.0"
  • /tmp/_MEILjWDYc/termios.so"
  • /tmp/_MEILjWDYc/readline.so"
  • /tmp/_MEILjWDYc/future_builtins.so"
  • /tmp/_MEILjWDYc/libexpat.so.1"
  • /tmp/_MEILjWDYc/resource.so"
  • /tmp/_MEILjWDYc/libbz2.so.1.0"
  • /tmp/_MEILjWDYc/include/python2.7/pyconfig.h"
  • /tmp/_MEILjWDYc/lib/python2.7/config-i386-linux-gnu/Makefile"
  • /tmp/_MEILjWDYc/Crypto.Cipher._AES.so"
  • /tmp/_MEILjWDYc/libreadline.so.6"
  • /tmp/_MEILjWDYc/_codecs_jp.so"
  • /tmp/_MEILjWDYc/libz.so.1"
  • /tmp/_MEILjWDYc/libcrypto.so.1.0.0"
  • /tmp/_MEILjWDYc/libffi.so.6"
  • /tmp/_MEILjWDYc/_hashlib.so"
  • /tmp/_MEILjWDYc/_ctypes.so"
  • /tmp/_MEILjWDYc/_multibytecodec.so"
  • /tmp/_MEILjWDYc/_codecs_hk.so"
  • /tmp/_MEILjWDYc/libpython2.7.so.1.0"
  • /tmp/_MEILjWDYc/_testcapi.so"
  • /tmp/_MEILjWDYc/bz2.so"
Other:
Collects RAM information

Curing recommendations


Linux

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

One month (no registration) or three months (registration and renewal discount)

Download Dr.Web

Download by serial number