Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Linux.Siggen.1951

Added to the Dr.Web virus database: 2019-07-08

Virus description added:

Technical Information

Malicious functions:
Removes itself
Launches itself as a daemon
Substitutes application name for:
  • vi9i0pifkik0
Network activity:
Awaits incoming connections on ports:
  • 127.0.0.1:8888
Establishes connection:
  • 8.#.8.8:53
  • 5.###.227.65:6593
Sends data to the following servers:
  • 63.###.105.60:8000
  • 70.##.94.19:80
  • 96.###.37.178:88
  • 40.##5.204.4:88
  • 33.##.224.94:8000
  • 11#.##.122.149:8000
  • 19#.###.105.186:8080
  • 17#.##1.246.16:80
  • 18#.##5.82.141:88
  • 30.###.144.86:88
  • 54.##.218.55:88
  • 21#.###.176.177:8000
  • 18.###.109.131:8080
  • 57.##.232.240:8080
  • 19#.###.244.225:8000
  • 23.##.75.247:8080
  • 5.###.227.65:6593
  • 20#.##2.39.47:8000
  • 77.###.97.172:81
  • 79.##.29.187:80
  • 22#.##.145.237:81
  • 11#.##1.101.50:88
  • 16#.##.86.165:8000
  • 18#.##5.171.225:81
  • 23.##.178.161:81
  • 20#.##0.200.47:88
  • 22#.###.178.102:8080
  • 11#.##.167.159:8000
  • 12#.##3.181.84:81
  • 45.##.45.180:80
  • 12#.##4.80.180:8000
  • 12#.##5.24.60:80
  • 51.##.67.143:81
  • 25#.##8.45.77:88
  • 26.###.27.179:81
  • 17#.##.175.168:80
  • 22#.##.167.222:88
  • 10#.###.197.212:8080
  • 11#.##.51.130:80
  • 24#.#8.24.13:81
  • 20#.##7.126.84:8080
  • 22#.###.214.179:8000
  • 13#.##.23.166:8080
  • 1.##.95.199:80
  • 21#.##6.93.44:8080
  • 51.##1.155.0:88
  • 58.###.246.106:80
  • 97.##.211.254:80
  • 13#.###.220.237:8080
  • 18#.##2.104.162:88
  • 11#.##.179.14:80
  • 93.###.216.194:80
  • 15#.##8.64.217:88
  • 16#.###.244.167:8000
  • 10.##.98.219:8080
  • 16#.##3.35.252:8000
  • 72.##1.84.70:80
  • 22#.##.142.229:80
  • 19#.##.11.154:81
  • 36.###.237.94:8000
  • 20#.##4.40.228:8000
  • 69.#.230.63:81
  • 22#.##.129.198:88
  • 10#.##3.65.111:88
  • 14#.##7.176.44:81
  • 22#.##3.194.18:81
  • 21#.##2.195.7:8080
  • 15#.##.19.212:8080
  • 86.###.168.90:81
  • 13#.##0.217.81:80
  • 17.###.21.188:88
  • 91.###.37.184:8080
  • 20.###.40.137:80
  • 11#.##4.113.33:81
  • 71.###.10.139:8000
  • 84.##3.187.2:88
  • 67.###.252.152:80
  • 15#.#.102.7:88
  • 31.###.185.141:8080
  • 11#.##.229.135:8080
  • 18#.##6.37.225:81
  • 13#.##.15.152:80
  • 15#.##.78.151:88
  • 93.###.211.70:81
  • 10#.##2.23.93:88
  • 24#.##3.116.190:88
  • 77.##.128.43:81
  • 19#.##8.224.240:88
  • 19#.##2.232.201:80
  • 9.###.135.221:80
  • 69.###.30.217:8080
  • 15.###.191.172:81
  • 18#.##2.110.22:80
  • 13#.##1.174.91:81
  • 12#.##9.72.19:88
  • 61.###.93.185:88
  • 61.##3.37.77:88
  • 14#.##0.0.201:8000
  • 13#.##8.13.226:80
  • 15#.##.252.11:81
  • 15#.##2.14.190:81
  • 18#.##.118.107:81
  • 23#.##5.2.215:81
  • 27.##1.1.120:81
  • 24#.##.159.139:80
  • 33.###.144.84:8080
  • 59.###.212.179:88
  • 11.###.73.172:81
  • 21#.#22.0.18:88
  • 41.###.171.145:8000
  • 38.###.168.145:8000
  • 17#.###.136.215:8080
  • 69.##.50.140:8000
  • 11#.#0.72.45:81
  • 3.###.233.137:80
  • 15#.###.239.245:8080
  • 21#.#2.20.69:88
  • 12#.##8.111.75:88
  • 30.##.228.148:81
  • 15#.##.201.92:81
  • 17#.#.126.62:8000
  • 8.###.252.213:8000
  • 28.##.195.129:81
  • 85.##.81.225:81
  • 17#.##9.189.61:88
  • 35.###.30.175:8000
  • 10.##.31.79:8080
  • 18#.##3.216.188:88
  • 20#.#.72.203:81
  • 10#.##0.11.29:88
  • 68.##.213.32:88
  • 31.###.115.189:8080
  • 21#.##.198.57:88
  • 25#.##7.222.5:8080
  • 9.###.204.108:88
  • 19#.##3.27.20:8080
  • 21#.##9.165.16:80
  • 22#.##.183.74:80
  • 19.#.184.2:81
  • 19#.##.252.74:88
  • 20#.##.126.79:8080
  • 23#.##4.217.35:88
  • 98.###.189.235:8000
  • 79.###.166.19:88
  • 20#.##.205.189:88
  • 45.##.138.68:81
  • 11#.#7.85.70:81
  • 44.###.130.222:81
  • 19#.##0.22.119:80
  • 13#.##7.59.14:88
  • 18#.##4.149.16:81
  • 23#.###.127.117:8080
  • 24#.#.168.100:8080
  • 37.###.242.165:88
  • 12#.###.216.106:8080
  • 14#.##3.56.228:8080
  • 22#.##8.76.154:88
  • 17#.##3.13.29:81
  • 24#.##5.156.44:80
  • 10.###.188.29:81
  • 21#.##4.142.86:8080

Curing recommendations


Linux

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

One month (no registration) or three months (registration and renewal discount)

Download Dr.Web

Download by serial number