What is “Trojan.Linux.Generic.183895”?

The Trojan.Linux.Generic.183895 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Linux.Generic.183895 virus can do?

Injection (inter-process)
Injection with CreateRemoteThread in a remote process
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

How to determine Trojan.Linux.Generic.183895?


File Info:
crc32: FEE59F91
md5: b4c5a4acc507ed63162790205db20942
name: upload_file
sha1: e20046c0a4004e9a81fb1280f910bba4b7655dee
sha256: c9f9c6b08bf99896f9de272b1133c22680dfe57925546b14effab98ee3fd05b3
sha512: d15130c574257dd2065f1bfe7426b718851632a10a822719bf3cb55c34294e32bffa7cc519643d0a43b3b8383524d7c2b6b2ed782e1ab3d576a8105d9c2dd518
ssdeep: 384:g0uqjF430NurtHTiJLu/2qYpcb3bv7/ioCnWULfnjM/t2YhXRYUF09+uTYqbaM4h:gmR20QrtHTiJK/nv3CnTPMRBF0ZTpbhY
type: ELF 32-bit MSB  executable, PowerPC or cisco 4500, version 1 (GNU/Linux), statically linked, stripped

Version Info:
0: [No Data]

Trojan.Linux.Generic.183895 also known as:

DrWeb	Linux.Mirai.1439
MicroWorld-eScan	Trojan.Linux.Generic.183895
FireEye	Trojan.Linux.Generic.183895
ALYac	Trojan.Linux.Generic.183895
AegisLab	Trojan.Linux.Mirai.K!c
Arcabit	Trojan.Linux.Generic.D2CE57
TrendMicro	Backdoor.Linux.MIRAI.USELVHL20
Symantec	Trojan.Gen.NPE
Avast	ELF:Mirai-GG [Trj]
Cynet	Malicious (score: 85)
Kaspersky	HEUR:Backdoor.Linux.Mirai.b
BitDefender	Trojan.Linux.Generic.183895
NANO-Antivirus	Trojan.Mirai.hswulb
Rising	Backdoor.Mirai!8.E05B (TFE:14:01wf75574LL)
Ad-Aware	Trojan.Linux.Generic.183895
Comodo	.UnclassifiedMalware@0
F-Secure	Malware.LINUX/Mirai.rlimn
Zillya	Trojan.Mirai.Linux.75700
Sophos	Mal/Generic-S
Ikarus	Trojan.Linux.Mirai
GData	Trojan.Linux.Generic.183895
Jiangmin	Backdoor.Linux.felm
Avira	LINUX/Mirai.rlimn
Antiy-AVL	Trojan/Linux.Mirai.at
Microsoft	Trojan:Win32/Skeeyah.A!rfn
ZoneAlarm	HEUR:Backdoor.Linux.Mirai.b
McAfee	RDN/Generic BackDoor
ESET-NOD32	a variant of Linux/Mirai.A
Tencent	Backdoor.Linux.Mirai.was
MAX	malware (ai score=100)
Fortinet	ELF/Mirai.GG!tr
AVG	ELF:Mirai-GG [Trj]
Qihoo-360	Linux/Virus.IM.e76

How to remove Trojan.Linux.Generic.183895?

Trojan.Linux.Generic.183895 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X