JavaScript support is required for our site to be fully operational in your browser.
Linux.Siggen.4150
Added to the Dr.Web virus database: 2021-08-12
Virus description added: 2021-08-12
Technical Information
Malicious functions:
Launches itself as a daemon
Substitutes application name for:
vT5V5cfHTvPRfCfJIVQmbbmRQQubQbcu
Kills the following processes:
rpcbind
cron
systemd-logind
acpid
dbus-daemon
agetty
exim4
bash
run.sh
systemd
Network activity:
Awaits incoming connections on ports:
Establishes connection:
8.#.8.8:53
23.###.201.100:4782
25#.###.255.255:4782
Attacks using a special dictionary (brute-force technique) via the Telnet protocol.
Curing recommendations
Linux
Free trial
One month (no registration) or three months (registration and renewal discount)
Download
Free three-month trial
All protection features available
Renew your trial license in
By continuing to use this website, you are consenting to Doctor Web’s use of cookies and other technologies related to the collection of visitor statistics. Learn more
OK
