Linux/DDoS-CI removal instruction

The Linux/DDoS-CI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Linux/DDoS-CI virus can do?

Injection (inter-process)
Injection with CreateRemoteThread in a remote process
Uses Windows utilities for basic functionality
Attempts to repeatedly call a single API many times in order to delay analysis time
A potential decoy document was displayed to the user
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Linux/DDoS-CI?


File Info:
crc32: C0F7E894
md5: a426682f42f1ee060bf3dc84cae06560
name: tmp85ledo2i
sha1: aea61cef4580c756831495af166022bf30c102ff
sha256: b3bf32479e3a68486b4725732726fc26ed8c680f28c00eebdcc1bb78f12b1bde
sha512: d803cf6e39a86074f5c7cd2374d8174c62983d3e40e24f3a009b7cfad8a9698af92bfd78254fdaf30f438dc178759a8f174fe9e7fc2843bd4848dcf81767d65e
ssdeep: 3072:IS//LjtN0hLbcU+BPDVppLGY5zmK4oM/9A06MmHp:IS//LjEbQBPDVpVG4mKNM/9eHp
type: ELF 32-bit LSB  executable, ARM, EABI4 version 1 (SYSV), statically linked, not stripped

Version Info:
0: [No Data]

Linux/DDoS-CI also known as:

DrWeb	Linux.Mirai.1429
MicroWorld-eScan	Gen:Variant.Linux.Mirai.1
FireEye	Gen:Variant.Linux.Mirai.1
ALYac	Gen:Variant.Linux.Mirai.1
Sangfor	Malware
BitDefenderTheta	Gen:NN.Mirai.34128
ESET-NOD32	a variant of Linux/Mirai.AT
TrendMicro-HouseCall	Possible_MIRAI.SMLBEM2
GData	Linux.Trojan.Mirai.J
Kaspersky	HEUR:Backdoor.Linux.Mirai.ba
BitDefender	Gen:Variant.Linux.Mirai.1
Rising	Backdoor.Mirai/Linux!1.BC48 (CLASSIC)
Ad-Aware	Gen:Variant.Linux.Mirai.1
Sophos	Linux/DDoS-CI
TrendMicro	Possible_MIRAI.SMLBEM2
McAfee-GW-Edition	Linux/mirai.d
Emsisoft	Gen:Variant.Linux.Mirai.1 (B)
Ikarus	Trojan.Linux.Mirai
Microsoft	Trojan:Linux/Mirai.SP!MSR
Arcabit	Trojan.Linux.Mirai.1
AhnLab-V3	Linux/Mirai.Gen3
ZoneAlarm	HEUR:Backdoor.Linux.Mirai.ba
Avast-Mobile	ELF:Mirai-ANY [Trj]
McAfee	Linux/mirai.d
Tencent	Backdoor.Linux.Mirai.wam
MAX	malware (ai score=83)
Fortinet	ELF/Mirai.IA!tr
AVG	ELF:Mirai-AHV [Trj]

How to remove Linux/DDoS-CI?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Linux/DDoS-CI removal instruction