Categories: Backdoor

Backdoor:Linux/Gafgyt.cf!MTB removal

The Backdoor:Linux/Gafgyt.cf!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Linux/Gafgyt.cf!MTB virus can do?

Injection (inter-process)
Injection with CreateRemoteThread in a remote process
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Backdoor:Linux/Gafgyt.cf!MTB?


File Info:
crc32: B4EA7AD2md5: 845c602272b5c36001a258be830404f4name: upload_filesha1: 637a01de73ba21a52968d43bb9e79e25715e44d3sha256: cedea16b371c274b2557ec48b177f0dc2af86e4390b973db6193d412f65294f9sha512: 3bd51050f63edd8d524c3f9a36e2c16daabdb9edd891e33913513ba1acb8126f7a7add1cf6aea0d7952e1cde22e1e57ee9f72adc9a9162f076fd43c658ced15essdeep: 768:rlg42rkzrgtYmU/dlVf8aMODwZdb0Oimge1qdbFhIAL/qMVmfuLPrK5uH5o70ss:hgFwzrgtdU/xMOIJire6/jLyxsDaAtype: ELF 32-bit LSB  executable, ARM, version 1, statically linked, not stripped
Version Info:
0: [No Data]

Backdoor:Linux/Gafgyt.cf!MTB also known as:

DrWeb	Linux.BackDoor.Fgt.3409
MicroWorld-eScan	Gen:Variant.Trojan.Linux.Gafgyt.5
FireEye	Gen:Variant.Trojan.Linux.Gafgyt.5
ALYac	Gen:Variant.Trojan.Linux.Gafgyt.5
BitDefenderTheta	Gen:NN.Mirai.34282
Cyren	E32/Trojan.CRMZ-3
Symantec	Trojan.Gen.NPE
TrendMicro-HouseCall	TROJ_GEN.R002C0PIQ20
Avast	ELF:Mirai-AVT [Trj]
Cynet	Malicious (score: 85)
Kaspersky	HEUR:Backdoor.Linux.Gafgyt.bj
BitDefender	Gen:Variant.Trojan.Linux.Gafgyt.5
AegisLab	Trojan.Linux.Gafgyt.m!c
Ad-Aware	Gen:Variant.Trojan.Linux.Gafgyt.5
Sophos	Mal/Generic-S
Comodo	Malware@#lmbyxoct1wv6
F-Secure	Malware.LINUX/Gafgyt.xiisr
TrendMicro	TROJ_GEN.R002C0PIQ20
McAfee-GW-Edition	GenericRXKT-CI!845C602272B5
Emsisoft	Gen:Variant.Trojan.Linux.Gafgyt.5 (B)
Ikarus	Trojan.Linux.Mirai
GData	Gen:Variant.Trojan.Linux.Gafgyt.5
Jiangmin	Backdoor.Linux.erdz
Avira	LINUX/Gafgyt.xiisr
Antiy-AVL	Trojan[Backdoor]/Linux.Gafgyt.bj
Microsoft	Backdoor:Linux/Gafgyt.cf!MTB
Arcabit	Trojan.Trojan.Linux.Gafgyt.5
ZoneAlarm	HEUR:Backdoor.Linux.Gafgyt.bj
Avast-Mobile	ELF:Mirai-AVT [Trj]
AhnLab-V3	Linux/Gafgyt.Gen44
McAfee	GenericRXKT-CI!845C602272B5
ESET-NOD32	a variant of Linux/Gafgyt.AYI
Rising	Backdoor.Gafgyt!8.56E (TFE:14:IsAEzIlNWME)
MAX	malware (ai score=88)
Fortinet	ELF/Gafgyt.AYI!tr
AVG	ELF:Mirai-AVT [Trj]
Qihoo-360	Linux/Backdoor.745