Підтримка
Цілодобова підтримка | Правила звернення

Зателефонуйте

Глобальна підтримка:
+7 (495) 789-45-86

Поширені запитання |  Форум |  Бот самопідтримки Telegram

Ваші запити

  • Всі: -
  • Незакриті: -
  • Останій: -

Зателефонуйте

Глобальна підтримка:
+7 (495) 789-45-86

Зв'яжіться з нами Незакриті запити: 

Профіль

Профіль

Android.SmsSend.20973

Добавлен в вирусную базу Dr.Web: 2017-07-24

Описание добавлено:

Technical information

Malicious functions:
Sends SMS messages:
  • +61481071145: 9bd05b42-7878-453f-b591-76dbac116f09
Executes code of the following detected threats:
  • Android.BankBot.155.origin
Downloads the following detected threats from the Web:
  • Android.BankBot.155.origin
Removes its shortcut from the home screen.
Network activity:
Connecting to:
  • 7####.####.157
  • 8####.####.31
HTTP POST requests:
  • 7####.####.157/333/set_result.php
  • 8####.####.31/333/get.php
Modified file system:
Creates the following files:
  • <Package Folder>/app_orertibqd/ilbdahxezb.jar
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BBeginSession.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionApp.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionDevice.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000000.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000001.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000002.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000003.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000004.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000005.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000006.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000007.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000008.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000009.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000010.cls
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000011.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000012.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000013.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000014.cls
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000015.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000016.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000017.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000018.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000019.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000020.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000021.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000022.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000023.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000024.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000025.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000026.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000027.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000028.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000029.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000030.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000031.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000032.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000033.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000034.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000035.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000036.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000037.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000038.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000039.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000040.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000041.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000042.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000043.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000044.cls
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000045.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000046.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000047.cls
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000048.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000049.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000050.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000051.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000052.cls
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000053.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000054.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000055.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000056.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000057.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000058.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000059.cls
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000060.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000061.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000062.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000063.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000064.cls
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000065.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000066.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000067.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000068.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000069.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000070.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000071.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000072.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000073.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000074.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000075.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000076.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000077.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000078.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000079.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000080.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000081.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000082.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000083.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000084.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000085.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000086.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000087.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000088.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000089.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000090.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000091.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000092.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000093.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000094.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000095.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000096.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000097.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000098.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000099.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000100.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000101.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000102.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000103.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000104.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000105.cls
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000106.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000107.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000108.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000109.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000110.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000111.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000112.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000113.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000114.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000115.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000116.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000117.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000118.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000119.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000120.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000121.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000122.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000123.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000124.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000125.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000126.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000127.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000128.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000129.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000130.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000131.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000132.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000133.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000134.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000135.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000136.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000137.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000138.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000139.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000140.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000141.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000142.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000143.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000144.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000145.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000146.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000147.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000148.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000149.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000150.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000151.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000152.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000153.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000154.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000155.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000156.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000157.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000158.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000159.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000160.cls
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000161.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000162.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000163.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000164.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000165.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000166.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000167.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000168.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000169.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000170.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000171.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000172.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000173.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000174.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000175.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000176.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000177.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000178.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionEvent0000000179.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0BSessionOS.cls_temp
  • <Package Folder>/files/####/592E656E02D8-0001-0838-00AB6C1EAD0Bkeys.meta
  • <Package Folder>/files/####/com.crashlytics.settings.json
  • <Package Folder>/files/####/sa_f387fece-f2ae-4119-ba6b-03bb0f233abd_1496212847836.tap
  • <Package Folder>/files/####/session_analytics.tap
  • <Package Folder>/files/####/session_analytics.tap.tmp
  • <Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
  • <Package Folder>/shared_prefs/com.crashlytics.prefs.xml
  • <Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
  • <Package Folder>/shared_prefs/io.fabric.sdk.android;fabric;a.a.a.a.m.xml
  • <Package Folder>/shared_prefs/main_prefs.xml
  • <Package Folder>/shared_prefs/main_prefs.xml.bak
  • <Package Folder>/shared_prefs/x.xml
Miscellaneous:
Executes next shell scripts:
  • <dexopt>
Uses administrator priveleges.

Рекомендации по лечению


Android

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке