Linux.Siggen.454
Added to the Dr.Web virus database:
2018-02-27
Virus description added:
2018-02-26
Technical Information
Malicious functions:
Substitutes application name for:
- smartcash-scheduler
- smartcash-http
- smartcash-httpworker
- smartcash-loadblk
- smartcash-torcontrol
- smartcash-dnsseed
- smartcash-net
- smartcash-addcon
- smartcash-opencon
- smartcash-msghand
- dash-privatesend
- smartcash-wallet
Performs operations with the file system:
Creates folders:
- /root/.smartcash
- /root/.smartcash/database
- /root/.smartcash/blocks
- /root/.smartcash/blocks/index
- /root/.smartcash/chainstate
Creates or modifies files:
- /root/.smartcash/smartnode.conf
- /root/.smartcash/.lock
- /root/.smartcash/smartcashd.pid
- /root/.smartcash/debug.log
- /root/.smartcash/.cookie
- /root/.smartcash/db.log
- /root/.smartcash/blocks/index/LOG
- /root/.smartcash/blocks/index/LOCK
- /root/.smartcash/blocks/index/MANIFEST-000001
- /root/.smartcash/blocks/index/000001.dbtmp
- /root/.smartcash/blocks/index/000003.log
- /root/.smartcash/blocks/index/MANIFEST-000002
- /root/.smartcash/blocks/index/000002.dbtmp
- /root/.smartcash/chainstate/LOG
- /root/.smartcash/chainstate/LOCK
- /root/.smartcash/chainstate/MANIFEST-000001
- /root/.smartcash/chainstate/000001.dbtmp
- /root/.smartcash/chainstate/000003.log
- /root/.smartcash/chainstate/MANIFEST-000002
- /root/.smartcash/chainstate/000002.dbtmp
- /root/.smartcash/blocks/blk00000.dat
- /root/.smartcash/blocks/rev00000.dat
- /root/.smartcash/database/log.0000000001
- /root/.smartcash/__db.80000001.e8305cbc
- /root/.smartcash/wallet.dat
- /root/.smartcash/peers.dat.5164
- /root/.smartcash/banlist.dat.33e3
Deletes files:
- /root/.smartcash/blocks/index/MANIFEST-000001"
- /root/.smartcash/chainstate/MANIFEST-000001"
Network activity:
Awaits incoming connections on ports:
- 127.0.0.1:9679
- 0.0.0.0:9678
Establishes connection:
- 127.0.0.1:9051
- <LOCAL_DNS_SERVER>
- 19#.###.152.162:9678
- 10#.###.223.246:9678
- 45.##.40.165:0
- 45.##.38.200:0
DNS ASK:
- se##.smrt.cash
- se###.smrt.cash
- se###.smrt.cash
- se###.smartcash.org
- se###.smartcash.org
- se##.#martcash.cc
- se###.smartcash.cc
- se###.smartcash.cc
- se###.smartcash.cc
Sends data to the following servers:
Receives data from the following servers:
- 127.0.0.1:9051
- 10#.###.223.246:9678
Curing recommendations
Linux
Free trial
One month (no registration) or three months (registration and renewal discount)
欢迎下载
Dr.Web for Android
-
免费3个月
-
可使用所有保护组件
-
可在AppGallery/Google Pay延期
继续使用此网站意味着您同意我们使用Cookie文件和其他用于收集网站访问统计信息的技术手段。详细信息