FÜR NUTZER

Meine Bibliothek

+ Zur Bibliothek hinzufügen

Suche

Support 24/7 | Regeln zur Anfragenübermittlung

Schreiben Sie uns

Online-Formular

Telefon

+49 (0) 170 488 40 28

Forum

Ihre Anfragen

Alle: -
Offen: -
Letzte Anfrage: -

Rufen Sie uns an

+7 (495) 789-45-86

DE

RU CN DE EN ES FR IT JP KZ UZ PL BY

Dr.Web vxCube

Sign in to Dr.Web vxCube

Analyse von virenabhängigen Vorfällen

Virenbibliothek

Wissensdatenbank

Technologies

Begriffe

Schulung und Training

Mythen

Mythen über Virenschutzsoftware

Linux.Siggen.3966

Added to the Dr.Web virus database: 2021-06-08

Virus description added: 2021-06-08

Technical Information

Malicious functions:

Removes itself

Launches itself as a daemon

Substitutes application name for:

/bin/sshd
[kworker/1:2]

Kills the following processes:

<SAMPLE>

Network activity:

Awaits incoming connections on ports:

127.0.0.1:7780

Establishes connection:

8.#.8.8:53
8.#.4.4:53
1.#.1.1:53

DNS ASK:

qp###.#palzmcnvbv.xyz

Curing recommendations

Linux

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

One month (no registration) or three months (registration and renewal discount)

Download Dr.Web

Download by serial number