Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Linux.Siggen.673

Added to the Dr.Web virus database: 2018-06-20

Virus description added:

Technical Information

Malicious functions:
Removes itself
Launches itself as a daemon
Network activity:
Awaits incoming connections on ports:
  • 127.0.0.1:3902
Establishes connection:
  • <LOCAL_DNS_SERVER>
  • 95.###.62.169:5600
  • 21#.##7.153.166:80
Other HTTP requests:
  • 127.0.0.1:80/
Sends data to the following servers:
  • 21#.#8.72.53:80
  • 19#.##7.193.215:80
  • 82.##.98.57:80
  • 80.##.73.249:80
  • 22#.##6.80.181:80
  • 23#.##6.204.98:80
  • 66.###.62.122:80
  • 59.###.132.145:80
  • 35.###.251.78:80
  • 56.###.222.190:80
  • 32.##9.53.29:80
  • 17#.##6.75.110:80
  • 17#.##3.205.38:80
  • 31.##.9.118:80
  • 16#.##1.216.233:80
  • 13.###.102.47:80
  • 18#.##3.142.0:80
  • 60.###.170.102:80
  • 13.###.49.138:80
  • 67.###.13.238:80
  • 11#.#.251.229:80
  • 10#.##.187.91:80
  • 16#.##2.114.27:80
  • 15#.##7.242.139:80
  • 21#.#.11.170:80
  • 22#.##0.9.184:80
  • 40.###.134.80:80
  • 21#.##.130.128:80
  • 11#.##2.29.126:80
  • 97.###.202.117:80
  • 44.##.217.3:80
  • 16#.##1.172.208:80
  • 17.##1.8.12:80
  • 52.##9.37.23:80
  • 18#.##3.172.199:80
  • 21#.##4.89.156:80
  • 13#.##1.105.115:80
  • 36.###.24.148:80
  • 18#.##3.78.187:80
  • 24#.##7.124.118:80
  • 16#.##7.187.33:80
  • 96.##.99.136:80
  • 13#.##5.182.175:80
  • 24#.#1.4.36:80
  • 1.##.56.105:80
  • 22#.#8.20.87:80
  • 19.##.252.71:80
  • 58.##.21.136:80
  • 11#.##7.163.142:80
  • 18#.##3.214.118:80
  • 12#.##7.10.38:80
  • 22#.##.146.73:80
  • 20#.##8.148.13:80
  • 25#.##0.241.212:80
  • 18#.##1.211.22:80
  • 68.##4.188.5:80
  • 12#.##3.37.42:80
  • 72.##.73.200:80
  • 61.##4.59.85:80
  • 74.###.206.120:80
  • 25#.#.103.241:80
  • 14#.##6.26.249:80
  • 11.##.50.158:80
  • 22#.##.216.112:80
  • 20#.##8.47.143:80
  • 18#.##.166.214:80
  • 14#.##4.196.57:80
  • 22#.##6.45.67:80
  • 16#.##.139.251:80
  • 16#.##1.32.20:80
  • 15.##.94.6:80
  • 23#.##.86.158:80
  • 62.###.102.68:80
  • 49.###.36.111:80
  • 15#.##.127.103:80
  • 15#.##9.10.45:80
  • 21#.##8.120.155:80
  • 47.###.32.139:80
  • 93.##9.143.9:80
  • 13#.##7.61.45:80
  • 12.###.12.110:80
  • 83.##.2.31:80
  • 16#.##1.202.28:80
  • 12#.##4.187.130:80
  • 55.###.216.248:80
  • 23#.##7.65.217:80
  • 96.##.245.173:80
  • 83.###.201.48:80
  • 23#.##0.44.34:80
  • 46.##.27.113:80
  • 61.##.60.56:80
  • 60.###.95.163:80
  • 10#.##0.189.191:80
  • 57.###.166.172:80
  • 23#.##3.152.72:80
  • 11#.##.155.238:80
  • 58.###.111.201:80
  • 20#.##.197.19:80
  • 12#.#9.86.73:80
  • 82.##.231.235:80
  • 45.###.32.222:80
  • 32.##.144.133:80
  • 21#.##7.153.166:80
  • 72.###.198.222:80
  • 19#.##.213.29:80
  • 54.##.175.68:80
  • 15#.#1.19.41:80
  • 19#.##6.55.143:80
  • 23#.##2.173.161:80
  • 18.###.203.57:80
  • 12#.##6.201.142:80
  • 22.##6.36.60:80
  • 21#.##.73.178:80
  • 23#.#8.39.38:80
  • 20#.##4.36.212:80
  • 83.###.139.203:80
  • 14.##.135.29:80
  • 48.###.212.96:80
  • 13.###.159.245:80
  • 20#.##1.142.252:80
  • 19#.##7.108.41:80
  • 39.##.18.131:80
  • 32.##.163.178:80
  • 14#.##5.49.84:80
  • 20#.#13.13.0:80
  • 35.##.53.154:80
  • 16#.##1.223.171:80
  • 15#.##6.164.14:80
  • 62.###.184.15:80
  • 16#.##4.201.36:80
  • 21#.##7.155.166:80
  • 23#.#.64.53:80
  • 10#.##8.225.32:80
  • 77.##1.29.58:80
  • 21#.##1.187.53:80
  • 20#.##.180.75:80
  • 73.##.106.244:80
  • 11#.##.15.164:80
  • 21#.##.176.128:80
  • 14#.##9.242.115:80
  • 30.###.233.161:80
  • 15#.##3.168.190:80
  • 11#.##.134.57:80
  • 67.##7.5.115:80
  • 23#.##4.80.118:80
  • 82.##.236.181:80
  • 12#.##6.1.189:80
  • 57.###.28.178:80
  • 39.###.217.165:80
  • 22#.##7.161.154:80
  • 15.##.167.138:80
  • 13#.##2.23.70:80
  • 66.##.237.138:80
  • 15#.##.24.233:80
  • 82.##1.0.93:80
  • 13#.#.110.118:80
  • 62.###.39.137:80
  • 23#.##0.234.119:80
  • 24#.##9.204.152:80

Curing recommendations


Linux

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

One month (no registration) or three months (registration and renewal discount)

Download Dr.Web

Download by serial number