JavaScript support is required for our site to be fully operational in your browser.
Linux.Siggen.844
Added to the Dr.Web virus database:
2018-08-15
Virus description added:
2018-08-15
Technical Information
To ensure autorun and distribution:
Creates or modifies the following files:
Malicious functions:
Launches itself as a daemon
Launches processes:
sh -c cd /etc/init.d/
sh -c mv /tmp/.sendmail /etc/init.d/ssh
mv /tmp/.sendmail /etc/init.d/ssh
sh -c chmod 755 /etc/init.d/ssh
chmod 755 /etc/init.d/ssh
sh -c cp -rf <SAMPLE_FULL_PATH> /lib/.zaxxlog>/dev/null
cp -rf <SAMPLE_FULL_PATH> /lib/.zaxxlog
sh -c chmod 755 /lib/.zaxxlog
chmod 755 /lib/.zaxxlog
Performs operations with the file system:
Modifies file access rights:
/etc/init.d/ssh
/lib/.zaxxlog
Creates or modifies files:
/tmp/.sendmail
/lib/.zaxxlog
Deletes files:
/tmp/.sendmail
/etc/init.d/ssh
/lib/.zaxxlog
Network activity:
Establishes connection:
DNS ASK:
Curing recommendations
Linux
Free trial
One month (no registration) or three months (registration and renewal discount)
Download Dr.Web for Android
Free three-month trial
All protection features available
Renew your trial license in AppGallery/on Google Pay
By continuing to use this website, you are consenting to Doctor Web’s use of cookies and other technologies related to the collection of visitor statistics. Learn more
OK