Malware

How to remove “Linux/Xorddos.C”?

Malware Removal

The Linux/Xorddos.C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Linux/Xorddos.C virus can do?

  • Injection (inter-process)
  • Injection with CreateRemoteThread in a remote process
  • Uses Windows utilities for basic functionality
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Linux/Xorddos.C?


File Info:

crc32: 2B2775A4
md5: 9a79419a06f1a4ea22891b2a2ee24026
name: tmpjwuwdp9m
sha1: 2d71b0b40aa1af713ff502031106910765d453ac
sha256: 4c4722835148242c701d93479eca3f45ccdf45bfc5445bd57ff3ee7c49e64672
sha512: f8909963fb4ae0a585fda330271d9b5a309824eb41d1871f657ec6feee9f29754d26a47d26fecd42d083afe3249bdfbc8db08c28cd17f20417dddf1037d3e996
ssdeep: 12288:FBXOvdwV1/n/dQFhWlH/c1dHo4h9L+zNZrr/T6yF8EEP4UlUuTh1AG:FBXmkN/+Fhu/Qo4h9L+zNN/BVEBl/91h
type: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, for GNU/Linux 2.6.9, not stripped

Version Info:

0: [No Data]

Linux/Xorddos.C also known as:

MicroWorld-eScanTrojan.Linux.Generic.29375
McAfeeLinux/DDoS-Xor.A
SangforMalware
ArcabitTrojan.Linux.Generic.D72BF
SymantecLinux.Xorddos
ESET-NOD32a variant of Linux/Xorddos.C
TrendMicro-HouseCallELF_XORDDOS.SM
AvastELF:Xorddos-E [Trj]
ClamAVUnix.Trojan.DDoS_XOR-1
KasperskyHEUR:Trojan-DDoS.Linux.Xarcen.a
BitDefenderTrojan.Linux.Generic.29375
NANO-AntivirusTrojan.Elf32.Xarcen.eftmox
ViRobotTrojan.Linux.XorDDoS.B
TencentTrojan.Linux.XorDdos.a
Ad-AwareTrojan.Linux.Generic.29375
EmsisoftTrojan.Linux.Generic.29375 (B)
ComodoMalware@#xhqmk23dl4wg
F-SecureMalware.LINUX/Xorddos.cona
DrWebLinux.DDoS.Xor.4
ZillyaTrojan.Xorddos.Linux.34
TrendMicroELF_XORDDOS.SM
McAfee-GW-EditionLinux/DDoS-Xor.A
FortinetELF/DDoS.BH!tr
FireEyeTrojan.Linux.Generic.29375
SophosLinux/DDoS-BH
SentinelOneDFI – Malicious ELF
JiangminTrojanDDoS.Linux.ff
AviraLINUX/Xorddos.cona
MAXmalware (ai score=100)
Antiy-AVLTrojan[DDoS]/Linux.Xarcen.a
MicrosoftBackdoor:Win32/Berbew
AegisLabTrojan.Linux.Xarcen.9!e
ZoneAlarmHEUR:Trojan-DDoS.Linux.Xarcen.a
Avast-MobileELF:Xorddos-I [Trj]
CynetMalicious (score: 85)
AhnLab-V3Linux/Xorddos.625867
ALYacTrojan.Linux.Generic.29375
RisingTrojan.DDoS-Xor/Linux!1.A3E4 (CLASSIC)
IkarusTrojan.Linux.DDoS
MaxSecureTrojan.Malware.9592281.susgen
GDataTrojan.Linux.Generic.29375
AVGELF:Xorddos-E [Trj]
PandaELF/XorDDos.A
Qihoo-360Linux/Trojan.DDoS.991

How to remove Linux/Xorddos.C?

Linux/Xorddos.C removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment