Categories: Malware

ELF:Mirai-GW [Trj] removal guide

The ELF:Mirai-GW [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What ELF:Mirai-GW [Trj] virus can do?

Injection (inter-process)
Uses Windows utilities for basic functionality
Attempts to repeatedly call a single API many times in order to delay analysis time
A potential decoy document was displayed to the user
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine ELF:Mirai-GW [Trj]?


File Info:
crc32: 86AD0120md5: c441b45dcdc4178eb06cde5c45cca94ename: upload_filesha1: 530cb5356800539d14772a34cec0f6c0d0154debsha256: 9b24335dcd4bf743660ba8975fdafc53338f4bdbbc8411602a29dde5dbcf9cfesha512: 84798177a24d4a31701d4c837225a4f9c2d8c0be5d21a22769c2de4dfbb2e248552381b5fb3fc74ef0c4494d53bdc88c7645e6d56c742dca6fbec382779c74d5ssdeep: 1536:5pb7zgQKIQei0B9b7MJyuPlKQ1t/PLgphCvjB4FT:XzFKNeiWb7MQuPsQLLgphk49type: ELF 32-bit LSB  executable, Renesas SH, version 1 (SYSV), statically linked, stripped
Version Info:
0: [No Data]

ELF:Mirai-GW [Trj] also known as:

DrWeb	Linux.Mirai.4300
MicroWorld-eScan	Trojan.GenericKD.43569490
FireEye	Trojan.GenericKD.43569490
ALYac	Trojan.GenericKD.43569490
AegisLab	Trojan.Linux.Mirai.K!c
BitDefenderTheta	Gen:NN.Mirai.34144
Symantec	Linux.Satori
ESET-NOD32	a variant of Linux/Mirai.AXR
TrendMicro-HouseCall	Backdoor.Linux.MIRAI.USELVGU20
Avast	ELF:Mirai-GW [Trj]
ClamAV	Unix.Dropper.Mirai-7136288-0
GData	Linux.Trojan.Gafgyt.B
Kaspersky	HEUR:Backdoor.Linux.Mirai.cv
BitDefender	Trojan.GenericKD.43569490
Ad-Aware	Trojan.GenericKD.43569490
Sophos	Mal/Generic-S
F-Secure	Malware.LINUX/Mirai.osrdb
TrendMicro	Backdoor.Linux.MIRAI.USELVGU20
Emsisoft	Trojan.GenericKD.43569490 (B)
Avira	LINUX/Mirai.osrdb
Arcabit	Trojan.Generic.D298D152
ZoneAlarm	HEUR:Backdoor.Linux.Mirai.cv
Avast-Mobile	ELF:Mirai-LE [Trj]
McAfee	RDN/Generic BackDoor
MAX	malware (ai score=87)
Ikarus	Trojan.Linux.Gafgyt
Fortinet	ELF/Mirai.A!tr
AVG	ELF:Mirai-GW [Trj]