Technical Information
To ensure autorun and distribution:
Creates or modifies the following files:
- /etc/rc.d/init.d/bluetooth
- /etc/cron.hourly/96anacron
Malicious functions:
Launches itself as a daemon
Performs operations with the file system:
Modifies file access rights:
- /etc/cron.hourly/96anacron
Creates or modifies files:
- /root/{5f58d6f0-bb9c-46e2-a4da-8ebc746f24a5}/log.log
- /var/tmp/.369676C75C3BCC37831BCF4A88A9231B.pid
- /var/tmp/.6362FF6499C9A3B44A8BC842D3C07812.pid
Locks files:
- /var/tmp/.369676C75C3BCC37831BCF4A88A9231B.pid
Changes time of creation/access/modification of files:
- /etc/cron.hourly/96anacron
- /etc/cron.hourly/
