Backdoor

What is “Backdoor.Agent.Mirai”?

Malware Removal

The Backdoor.Agent.Mirai is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Agent.Mirai virus can do?

  • Injection (inter-process)
  • Injection with CreateRemoteThread in a remote process
  • Uses Windows utilities for basic functionality
  • Network activity detected but not expressed in API logs
  • Harvests information related to installed mail clients

How to determine Backdoor.Agent.Mirai?


File Info:

crc32: CE742FCD
md5: eb86ddf58f2aa2baedd19d50d8657adf
name: upload_file
sha1: 357f2fe36acc8e0a2581fb6573186fd31859f1fe
sha256: a15ba6f48db4d7f3443e38b92e243ee6de12cb4d69b86e68168d46aa3e006bc3
sha512: 7ceaf2ed04fab3f90fb2252cfa4c620243883a0885930dbff3635b5386a0eee2e53a75e79ba6b340ba0cdbc0f4372b6c92aabaa676f8445c207477a454d07ddc
ssdeep: 768:CQIJLxhkRdcQuI2xXhT+avIC9rmy3iHI1h+tlLPPQpg:CbJLxhkRZYxXQW+tlL3Qpg
type: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped

Version Info:

0: [No Data]

Backdoor.Agent.Mirai also known as:

MicroWorld-eScanTrojan.Linux.Mirai.1
FireEyeTrojan.Linux.Mirai.1
McAfeeLinux/Mirai.l
AegisLabTrojan.Linux.Mirai.K!c
SangforMalware
SymantecTrojan.Gen.NPE
TrendMicro-HouseCallPossible_MIRAI.SMLBO13
AvastELF:Mirai-APD [Trj]
KasperskyHEUR:Backdoor.Linux.Mirai.b
BitDefenderTrojan.Linux.Mirai.1
Ad-AwareTrojan.Linux.Mirai.1
EmsisoftTrojan.Linux.Mirai.1 (B)
Comodo.UnclassifiedMalware@0
F-SecureMalware.LINUX/Mirai.eiqny
DrWebLinux.Mirai.793
TrendMicroPossible_MIRAI.SMLBO13
McAfee-GW-EditionLinux/Mirai.l
SophosMal/Generic-S
SentinelOneDFI – Malicious ELF
Avast-MobileELF:MiraiDownloader-IA [Trj]
JiangminBackdoor.Linux.ezzk
AviraLINUX/Mirai.eiqny
MAXmalware (ai score=100)
Antiy-AVLTrojan[Backdoor]/Linux.Mirai.b
MicrosoftTrojan:Win32/Ymacco.AAA1
ArcabitTrojan.Linux.Mirai.1
ZoneAlarmHEUR:Backdoor.Linux.Mirai.b
GDataTrojan.Linux.Mirai.1
CynetMalicious (score: 85)
BitDefenderThetaGen:NN.Mirai.34566
ALYacBackdoor.Agent.Mirai
ESET-NOD32a variant of Linux/Mirai.BAB
RisingBackdoor.Mirai!8.E05B (TFE:14:7vS9xqAnpxJ)
IkarusTrojan.Linux.Mirai
FortinetELF/Mirai.AT!tr
AVGELF:Mirai-APD [Trj]
Qihoo-360Linux/Backdoor.6f4

How to remove Backdoor.Agent.Mirai?

Backdoor.Agent.Mirai removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment