Backdoor

Backdoor.Linux.Mirai.cg removal guide

Malware Removal

The Backdoor.Linux.Mirai.cg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Linux.Mirai.cg virus can do?

  • Injection (inter-process)
  • Injection with CreateRemoteThread in a remote process
  • Uses Windows utilities for basic functionality
  • A potential decoy document was displayed to the user
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Backdoor.Linux.Mirai.cg?


File Info:

crc32: 30BF8AB5
md5: fcabf72f553b9667110f836e6658f2b1
name: upload_file
sha1: 0727bca462a2362b0628bb2d0958fc36c5f54cb7
sha256: e528e3bd14ff8cf590e7df878df774db16e85030a4d6673141fb2a3a2befc6ab
sha512: 365de23785a24b553d3db503ff8da0db0e5477889bfdb798f25d9f32acec92d685f9f5c0e48469e86829aed0856f1742421fe7386092a0240631fc321d0d6f84
ssdeep: 768:MutL7cSXdhwJxnhicLlMkMJoO9q3UELQy:bJXahiXhoLb
type: ELF 32-bit LSB executable, ARM, EABI4 version 1 (GNU/Linux), statically linked, stripped

Version Info:

0: [No Data]

Backdoor.Linux.Mirai.cg also known as:

MicroWorld-eScanTrojan.GenericKD.34356430
McAfeeRDN/Generic BackDoor
AegisLabTrojan.Linux.Mirai.K!c
SymantecTrojan.Gen.NPE
TrendMicro-HouseCallBackdoor.Linux.MIRAI.USELVHD20
AvastELF:Mirai-GH [Trj]
ClamAVUnix.Trojan.Mirai-8041689-0
GDataLinux.Trojan.Agent.MF3HM6
KasperskyHEUR:Backdoor.Linux.Mirai.cg
BitDefenderTrojan.GenericKD.34356430
RisingBackdoor.Mirai/Linux!1.C800 (CLASSIC)
Ad-AwareTrojan.GenericKD.34356430
DrWebLinux.BackDoor.Fgt.3633
TrendMicroBackdoor.Linux.MIRAI.USELVHD20
FireEyeTrojan.GenericKD.34356430
SophosMal/Generic-S
IkarusTrojan.Linux.Gafgyt
JiangminBackdoor.Linux.fftv
MicrosoftTrojan:Win32/Skeeyah.A!rfn
ArcabitTrojan.Generic.D20C3CCE
Avast-MobileELF:Mirai-GH [Trj]
CynetMalicious (score: 85)
ESET-NOD32a variant of Linux/Gafgyt.AZP
TencentLinux.Backdoor.Mirai.Egoh
FortinetELF/Gafgyt.AZP!tr
AVGELF:Mirai-GH [Trj]
Qihoo-360Linux/Backdoor.9c5

How to remove Backdoor.Linux.Mirai.cg?

Backdoor.Linux.Mirai.cg removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment