About "ELF:DDoS-Y [Trj]" infection

The ELF:DDoS-Y [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What ELF:DDoS-Y [Trj] virus can do?

Injection (inter-process)
Uses Windows utilities for basic functionality
Attempts to repeatedly call a single API many times in order to delay analysis time
A potential decoy document was displayed to the user
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine ELF:DDoS-Y [Trj]?


File Info:
crc32: 124C4C35
md5: 089a20cf6b2380348f603acf70d8e998
name: tmpjxmz3whj
sha1: 35772dc687046cc5355e2ecce9755854a3a712a8
sha256: 9cea84dfd053ac2159bde7173a58d2c1b6eb54b712b8e3cc67517a3e70dd833c
sha512: caf1185d2cd12ffc86261133c2ce59841f278f0fb958a945d20b70951aab7a83de8ff0e74df1d528d4435bbdafa0c8a25f36aff737129c6f2c14780f44e3b1e0
ssdeep: 3072:QF3AfURwbBosQJhpxNjdXtm0+EP+03a7lj:QFQQJhpxNZdm0+EP+03a7lj
type: ELF 32-bit MSB  executable, PowerPC or cisco 4500, version 1 (SYSV), statically linked, not stripped

Version Info:
0: [No Data]

ELF:DDoS-Y [Trj] also known as:

ClamAV	Unix.Trojan.Mirai-5607483-0
McAfee	Linux/HeliBot!089A20CF6B23
Sangfor	Malware
Arcabit	Trojan.Trojan.Linux.Gafgyt.5
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Linux/Gafgyt.ASH
TrendMicro-HouseCall	Backdoor.Linux.BASHLITE.SMJC10
Avast	ELF:DDoS-Y [Trj]
Cynet	Malicious (score: 85)
Kaspersky	HEUR:Backdoor.Linux.Mirai.b
BitDefender	Gen:Variant.Trojan.Linux.Gafgyt.5
NANO-Antivirus	Trojan.Mirai.hhbwfj
MicroWorld-eScan	Gen:Variant.Trojan.Linux.Gafgyt.5
Rising	Backdoor.Mirai!8.E05B (TFE:15:3tVhtlFBIcM)
Ad-Aware	Gen:Variant.Trojan.Linux.Gafgyt.5
Emsisoft	Gen:Variant.Trojan.Linux.Gafgyt.5 (B)
F-Secure	Malware.LINUX/Gafgyt.pmkqn
DrWeb	Linux.BackDoor.Fgt.203
TrendMicro	Backdoor.Linux.BASHLITE.SMJC10
McAfee-GW-Edition	Linux/HeliBot!089A20CF6B23
FireEye	Gen:Variant.Trojan.Linux.Gafgyt.5
Sophos	Mal/Generic-S
Ikarus	Trojan.Linux.Gafgyt
Cyren	ELF/Trojan.YEXM-7
Jiangmin	Backdoor.Linux.eltw
Avira	LINUX/Gafgyt.pmkqn
Fortinet	ELF/Mirai.BO!tr
Antiy-AVL	Trojan[Backdoor]/Linux.Mirai.b
AegisLab	Trojan.Linux.Mirai.K!c
ZoneAlarm	HEUR:Backdoor.Linux.Mirai.b
Avast-Mobile	ELF:DDoS-S [Trj]
AhnLab-V3	Linux/Gafgyt.Gen44
ALYac	Gen:Variant.Trojan.Linux.Gafgyt.5
Tencent	Linux.Backdoor.Mirai.Glu
MAX	malware (ai score=88)
GData	Linux.Trojan.Gafgyt.B
BitDefenderTheta	Gen:NN.Mirai.34106
AVG	ELF:DDoS-Y [Trj]
Qihoo-360	Linux/Backdoor.6f4

How to remove ELF:DDoS-Y [Trj]?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “ELF:DDoS-Y [Trj]” infection