Malware

ELF:Mirai-FY [Trj] removal

Malware Removal

The ELF:Mirai-FY [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What ELF:Mirai-FY [Trj] virus can do?

  • Injection (inter-process)
  • Injection with CreateRemoteThread in a remote process
  • Uses Windows utilities for basic functionality
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Network activity detected but not expressed in API logs

How to determine ELF:Mirai-FY [Trj]?


File Info:

crc32: 4FBF2FCC
md5: 89f0a67a93221f986ddf556b3726e306
name: tmpnvc_t5up
sha1: cf59f6622b051bfcfc9cac29f018dd6bdd32665a
sha256: 139724dc89627bf7d3e47e487f45657d9d24deef3a5db5fc99ef11c199d4b10d
sha512: 056fe71a28b09bba31d4afa798dc47756d6bb33a880818bea4c208684747b3e0ea610a77973ee25a464b33157ceb1dff82c1d41ef09ccdb77efdbab87964e626
ssdeep: 768:3tuDqJ41RdWmqWGzcekXpHGnz9pslJRvTodTNOdtbySNL:wDU4XstAekZHGnzoLRvP
type: ELF 32-bit LSB executable, ARM, version 1, statically linked, stripped

Version Info:

0: [No Data]

ELF:Mirai-FY [Trj] also known as:

ClamAVUnix.Dropper.Mirai-7540663-0
FireEyeTrojan.Linux.Mirai.1
TrendMicro-HouseCallPossible_MIRAI.SMLBO13
AvastELF:Mirai-FY [Trj]
GDataTrojan.Linux.Mirai.1
KasperskyHEUR:Backdoor.Linux.Mirai.b
BitDefenderTrojan.Linux.Mirai.1
MicroWorld-eScanTrojan.Linux.Mirai.1
Ad-AwareTrojan.Linux.Mirai.1
EmsisoftTrojan.Linux.Mirai.1 (B)
DrWebLinux.Mirai.58
TrendMicroPossible_MIRAI.SMLBO13
IkarusTrojan.Linux.Mirai
ArcabitTrojan.Linux.Mirai.1
ZoneAlarmHEUR:Backdoor.Linux.Mirai.b
Avast-MobileELF:Mirai-FY [Trj]
BitDefenderThetaGen:NN.Mirai.34128
ALYacTrojan.Linux.Mirai.1
ESET-NOD32a variant of Linux/Mirai.AHE
TencentBackdoor.Linux.Mirai.waw
MAXmalware (ai score=82)
FortinetELF/Mirai.AE!tr
AVGELF:Mirai-FY [Trj]

How to remove ELF:Mirai-FY [Trj]?

ELF:Mirai-FY [Trj] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment