JavaScript support is required for our site to be fully operational in your browser.
Linux.Siggen.7627
Added to the Dr.Web virus database:
2024-06-14
Virus description added:
2024-06-14
Technical Information
Malicious functions:
Removes itself
Launches itself as a daemon
Substitutes application name for:
Kills system processes:
Kills the following processes:
[(empty)]
systemd-journal
systemd-udevd
systemd-timesyn
cron
dbus-daemon
rsyslogd
systemd-logind
agetty
systemd
(sd-pam)
dhclient
run.sh
(ogrotate)
install
tmux: client
dash
bash
sleep
stub.sh
tee
ip
readlink
rm
find
mandb
Performs operations with the file system:
Creates or modifies files:
Deletes files:
Mounts file systems:
Network activity:
Awaits incoming connections on ports:
Establishes connection:
8.#.8.8:53
22.##2.42.23:80
20#.##1.35.56:36508
DNS ASK:
me##ing.cc
me####re.ddns.net
Sends data to the following servers:
Receives data from the following servers:
Curing recommendations
Linux
Free trial
One month (no registration) or three months (registration and renewal discount)
Download Dr.Web for Android
Free three-month trial
All protection features available
Renew your trial license in AppGallery/on Google Pay
By continuing to use this website, you are consenting to Doctor Web’s use of cookies and other technologies related to the collection of visitor statistics. Learn more
OK