Bibliothèque
Ma bibliothèque

+ Ajouter à la bibliothèque

Contacter-nous !
Support 24/24 | Rules regarding submitting

Nous téléphoner

0 825 300 230

Forum

Vos requêtes

  • Toutes : -
  • Non clôturées : -
  • Dernière : le -

Nous téléphoner

0 825 300 230

Profil

Android.MobiDash.974

Added to the Dr.Web virus database: 2018-04-16

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.MobiDash.2.origin
Network activity:
Connecting to:
  • UDP(DNS) <Google DNS>
  • TCP(HTTP/1.1) api.the####.com:80
  • TCP(HTTP/1.1) m####.space:80
  • TCP(HTTP/1.1) www.i####.com:80
  • TCP(HTTP/1.1) ip####.com:80
  • TCP(HTTP/1.1) ads.m####.com:80
  • TCP(HTTP/1.1) www.omd####.com:80
  • TCP(HTTP/1.1) www.the####.com:80
  • TCP(TLS/1.0) api.the####.com:443
  • TCP(TLS/1.0) www.the####.com:443
  • TCP(TLS/1.0) api.themov####.org:443
  • TCP(TLS/1.0) api.t####.tv:443
  • TCP(TLS/1.0) mobilep####.pass####.ya####.net:443
  • TCP(TLS/1.0) sta####.mo####.ya####.net:443
  • TCP(TLS/1.0) e.crashly####.com:443
  • TCP(TLS/1.0) am.appserv####.com:443
  • TCP(TLS/1.0) i####.t####.org:443
  • TCP(TLS/1.0) re####.appmet####.ya####.net:443
  • TCP(TLS/1.0) ssl.google-####.com:443
  • TCP(TLS/1.0) d####.aer####.com:443
  • TCP(TLS/1.0) b####.nitrox####.com:443
  • TCP(TLS/1.0) api.oneaudi####.com:443
  • TCP(TLS/1.0) raw.githubu####.com:443
  • TCP(TLS/1.0) sett####.crashly####.com:443
  • TCP(TLS/1.0) 1####.194.69.113:443
  • TCP(TLS/1.0) ads.aer####.com:443
DNS requests:
  • ads.aer####.com
  • ads.m####.com
  • am.appserv####.com
  • api.oneaudi####.com
  • api.t####.tv
  • api.the####.com
  • api.themov####.org
  • b####.nitrox####.com
  • certifi####.mo####.ya####.net
  • d####.aer####.com
  • e.crashly####.com
  • i####.t####.org
  • in.appserv####.com
  • ip####.com
  • m####.space
  • raw.githubu####.com
  • re####.appmet####.ya####.net
  • sett####.crashly####.com
  • ssl.google-####.com
  • sta####.mo####.ya####.net
  • the####.com
  • www.i####.com
  • www.omd####.com
  • www.the####.com
HTTP GET requests:
  • ads.m####.com/m/ad?android_perms_ext_storage=####&av=####&bundle=####&cn...
  • ads.m####.com/m/ad?assets=####&av=####&bundle=####&cn=####&cppck=####&ct...
  • ads.m####.com/m/ad?id=####&nsv=####&dn=####&bundle=####&z=####&o=####&w=...
  • ads.m####.com/m/ad?v=####&id=####&nv=####&dn=####&bundle=####&z=####&o=#...
  • api.the####.com/banners/posters/247897-15.jpg
  • api.the####.com/banners/posters/279536-2.jpg
  • api.the####.com/banners/posters/290853-8.jpg
  • ip####.com/json
  • www.i####.com/title/tt5232792/episodes
  • www.omd####.com/?i=####&type=####&tomatoes=####&apikey=####
  • www.the####.com/banners/posters/257655-8.jpg
  • www.the####.com/banners/posters/263365-3.jpg
  • www.the####.com/banners/posters/274431-26.jpg
  • www.the####.com/banners/posters/281622-1.jpg
  • www.the####.com/banners/posters/295685-2.jpg
  • www.the####.com/banners/posters/71663-10.jpg
  • www.the####.com/banners/posters/78901-35.jpg
  • www.the####.com/banners/posters/80379-18.jpg
HTTP POST requests:
  • m####.space/
Modified file system:
Creates the following files:
  • /data/anr/traces.txt
  • /data/data/####/001c03533624295266bfaf72d5b5ed2a.0.tmp
  • /data/data/####/001c03533624295266bfaf72d5b5ed2a.1.tmp
  • /data/data/####/0196f2e4928ab7fcda98f498172d794c.0.tmp
  • /data/data/####/0196f2e4928ab7fcda98f498172d794c.1.tmp
  • /data/data/####/041119330f128315884aec41fe5bc180f80a052e21d3c69....0.tmp
  • /data/data/####/041de33778571f82c8dcbca4b80c03e9.0.tmp
  • /data/data/####/041de33778571f82c8dcbca4b80c03e9.1.tmp
  • /data/data/####/048711cdd004d75a179d3d011aa81202.0.tmp
  • /data/data/####/048711cdd004d75a179d3d011aa81202.1.tmp
  • /data/data/####/04f1ffebb8fc045628b3d1af1e12ab61.0.tmp
  • /data/data/####/04f1ffebb8fc045628b3d1af1e12ab61.1.tmp
  • /data/data/####/064a6c22de2b5177e31d18c85e6d296d.0.tmp
  • /data/data/####/064a6c22de2b5177e31d18c85e6d296d.1
  • /data/data/####/085df7ae416dc9a9fb1bbe525dc5d46a.0.tmp
  • /data/data/####/085df7ae416dc9a9fb1bbe525dc5d46a.1.tmp
  • /data/data/####/0941401996bd0f39beb1518ab511908c.0.tmp
  • /data/data/####/0941401996bd0f39beb1518ab511908c.1.tmp
  • /data/data/####/0b9e514e170b3f4a946db0a530da6ab4.0.tmp
  • /data/data/####/0b9e514e170b3f4a946db0a530da6ab4.1.tmp
  • /data/data/####/0eb5aa63a2e056fb5c0f7811f52cd53d.0.tmp
  • /data/data/####/0eb5aa63a2e056fb5c0f7811f52cd53d.1.tmp
  • /data/data/####/0f87075b83e0e1b8e98f8a3ba56014dd46ab9fa3d3efff2....0.tmp
  • /data/data/####/12d0fa7043b5c9e4d2ade77cfcb7eaa7.0.tmp
  • /data/data/####/12d0fa7043b5c9e4d2ade77cfcb7eaa7.1.tmp
  • /data/data/####/13372305d509ecb3f6679bb4bc170190baa6739e2fdb776....0.tmp
  • /data/data/####/15ffb9eeabef738f84fdecdc4dbf75aa.0.tmp
  • /data/data/####/15ffb9eeabef738f84fdecdc4dbf75aa.1.tmp
  • /data/data/####/162da7efa17b35bb465cbf5986ccd7b5.0.tmp
  • /data/data/####/162da7efa17b35bb465cbf5986ccd7b5.1.tmp
  • /data/data/####/19a517de776d9dc342f58e9893fa6aa8bfe914a1f83b868....0.tmp
  • /data/data/####/19b80acb5aed413c4bd621e1fc1150ea.0.tmp
  • /data/data/####/19b80acb5aed413c4bd621e1fc1150ea.1.tmp
  • /data/data/####/1bc5309254dfd1f92d1aac6923bde076.0.tmp
  • /data/data/####/1bc5309254dfd1f92d1aac6923bde076.1.tmp
  • /data/data/####/1cc328336b3dc522018bf77c1945d9c8.0.tmp
  • /data/data/####/1cc328336b3dc522018bf77c1945d9c8.1.tmp
  • /data/data/####/1ee80c7ae51bf7d660af9f89b212adc2.0.tmp
  • /data/data/####/1ee80c7ae51bf7d660af9f89b212adc2.1.tmp
  • /data/data/####/20b3b978215100127f17adb21fd2e1cc227fae64c85b28b....0.tmp
  • /data/data/####/227bfad69dd6568b9f0053c65b93adf6091b6e411fb5680....0.tmp
  • /data/data/####/230201f0a1c976234883b05f69fe2b68.0.tmp
  • /data/data/####/230201f0a1c976234883b05f69fe2b68.1.tmp
  • /data/data/####/254dfcb70cf1eb3dc383bb905691ba9a.0.tmp
  • /data/data/####/254dfcb70cf1eb3dc383bb905691ba9a.1.tmp
  • /data/data/####/2578fc53db16dddac0b384ac9be86535.0.tmp
  • /data/data/####/2578fc53db16dddac0b384ac9be86535.1.tmp
  • /data/data/####/29289439432d6c7cad3d1eb36f3ea49a.0.tmp
  • /data/data/####/29289439432d6c7cad3d1eb36f3ea49a.1.tmp
  • /data/data/####/2ab393cc2ed1a03f8f737a77197dec6d.0.tmp
  • /data/data/####/2ab393cc2ed1a03f8f737a77197dec6d.1.tmp
  • /data/data/####/35df18302553cb61eb24205f221e20ac.0.tmp
  • /data/data/####/35df18302553cb61eb24205f221e20ac.1.tmp
  • /data/data/####/3c062f24f85e557972588df836833451.0.tmp
  • /data/data/####/3c062f24f85e557972588df836833451.1.tmp
  • /data/data/####/3f668863c9011a9329154af7db9c5b3a.0.tmp
  • /data/data/####/3f668863c9011a9329154af7db9c5b3a.1.tmp
  • /data/data/####/40a6131714a14432bcf9e0e6c6f6bae0.0.tmp
  • /data/data/####/40a6131714a14432bcf9e0e6c6f6bae0.1.tmp
  • /data/data/####/416b3b126d7224c2885bd48f51660066.0.tmp
  • /data/data/####/416b3b126d7224c2885bd48f51660066.1.tmp
  • /data/data/####/449f32331e6bf414a55156c3d398d043.0.tmp
  • /data/data/####/449f32331e6bf414a55156c3d398d043.1.tmp
  • /data/data/####/45c3d435bfaa6db6669bfceda0f64256.0.tmp
  • /data/data/####/45c3d435bfaa6db6669bfceda0f64256.1.tmp
  • /data/data/####/472722af26208d2bda57f6d261f946e1.0.tmp
  • /data/data/####/472722af26208d2bda57f6d261f946e1.1.tmp
  • /data/data/####/47eb85bafebec57cec9ad1a795c087ee6d50798959cda69....0.tmp
  • /data/data/####/4aa3de241db9b8c392b9fa4fff5aba3116b00f7287ea75c....0.tmp
  • /data/data/####/508878907eded7899a1cf54fcc362535.0.tmp
  • /data/data/####/508878907eded7899a1cf54fcc362535.1.tmp
  • /data/data/####/560c70732595bf4bdec3c5f6cf2bad93.0.tmp
  • /data/data/####/560c70732595bf4bdec3c5f6cf2bad93.1.tmp
  • /data/data/####/5618dab9d4ef972b1ef36818d5af9d73.0.tmp
  • /data/data/####/5618dab9d4ef972b1ef36818d5af9d73.1.tmp
  • /data/data/####/578056a98c511be52fe00bf9974400d8.0.tmp
  • /data/data/####/578056a98c511be52fe00bf9974400d8.1.tmp
  • /data/data/####/580175d31b8b773fa8b1aa65446fdb1a31a02cfdc279f3c....0.tmp
  • /data/data/####/596bf691fcec51d2ea973d7a8c70470999b91c033e12bf0....0.tmp
  • /data/data/####/5AD4F23F0288-0001-0815-DD01D19F507ABeginSession.cls_temp
  • /data/data/####/5AD4F23F0288-0001-0815-DD01D19F507ABeginSession.json
  • /data/data/####/5AD4F23F0288-0001-0815-DD01D19F507ASessionApp.cls_temp
  • /data/data/####/5AD4F23F0288-0001-0815-DD01D19F507ASessionApp.json
  • /data/data/####/5AD4F23F0288-0001-0815-DD01D19F507ASessionDevice.cls_temp
  • /data/data/####/5AD4F23F0288-0001-0815-DD01D19F507ASessionDevice.json
  • /data/data/####/5AD4F23F0288-0001-0815-DD01D19F507ASessionOS.cls_temp
  • /data/data/####/5AD4F23F0288-0001-0815-DD01D19F507ASessionOS.json
  • /data/data/####/5AD4F23F0288-0001-0815-DD01D19F507ASessionUser.cls_temp
  • /data/data/####/5AD4F243003B-0001-0896-DD01D19F507ABeginSession.cls_temp
  • /data/data/####/5AD4F243003B-0001-0896-DD01D19F507ABeginSession.json
  • /data/data/####/5AD4F243003B-0001-0896-DD01D19F507ASessionApp.cls_temp
  • /data/data/####/5AD4F243003B-0001-0896-DD01D19F507ASessionApp.json
  • /data/data/####/5AD4F243003B-0001-0896-DD01D19F507ASessionDevice.cls_temp
  • /data/data/####/5AD4F243003B-0001-0896-DD01D19F507ASessionDevice.json
  • /data/data/####/5AD4F243003B-0001-0896-DD01D19F507ASessionOS.cls_temp
  • /data/data/####/5AD4F243003B-0001-0896-DD01D19F507ASessionOS.json
  • /data/data/####/5AD4F243003B-0001-0896-DD01D19F507ASessionUser.cls_temp
  • /data/data/####/5AD4F2460284-0001-08D8-DD01D19F507ABeginSession.cls_temp
  • /data/data/####/5AD4F2460284-0001-08D8-DD01D19F507ABeginSession.json
  • /data/data/####/5AD4F2460284-0001-08D8-DD01D19F507ASessionApp.cls_temp
  • /data/data/####/5AD4F2460284-0001-08D8-DD01D19F507ASessionApp.json
  • /data/data/####/5AD4F2460284-0001-08D8-DD01D19F507ASessionDevice.cls_temp
  • /data/data/####/5AD4F2460284-0001-08D8-DD01D19F507ASessionDevice.json
  • /data/data/####/5AD4F2460284-0001-08D8-DD01D19F507ASessionOS.cls_temp
  • /data/data/####/5AD4F2460284-0001-08D8-DD01D19F507ASessionOS.json
  • /data/data/####/5d0dd7e9a8db2894b74bd2843f86bf66.0.tmp
  • /data/data/####/5d0dd7e9a8db2894b74bd2843f86bf66.1.tmp
  • /data/data/####/5e1c3c0f11c67676710a4985416a42ad2a077d163ea364b....0.tmp
  • /data/data/####/5fdbcaa88e46c359c6f63656c6ec1e48.0.tmp
  • /data/data/####/5fdbcaa88e46c359c6f63656c6ec1e48.1.tmp
  • /data/data/####/635cce4af1baf894647e4dbdcea5505c.0.tmp
  • /data/data/####/635cce4af1baf894647e4dbdcea5505c.1.tmp
  • /data/data/####/64e3d0a1ebfead443f863871f99662c3.0.tmp
  • /data/data/####/64e3d0a1ebfead443f863871f99662c3.1.tmp
  • /data/data/####/66a4cbea82cf49f9b47bd4c5b20f6320.0.tmp
  • /data/data/####/66a4cbea82cf49f9b47bd4c5b20f6320.1.tmp
  • /data/data/####/689d5f0551aaaef386ca83586ec75ac1.0.tmp
  • /data/data/####/689d5f0551aaaef386ca83586ec75ac1.1.tmp
  • /data/data/####/68f299ebc30384cb107762dd99bce6aa.0.tmp
  • /data/data/####/68f299ebc30384cb107762dd99bce6aa.1.tmp
  • /data/data/####/6c0951a1726f40ded52f2413e1d601ee3f8b5ef9e21d0f7....0.tmp
  • /data/data/####/6fd25334cd48cc124ecdf6d818b2a0d541fecb9a8c92935....0.tmp
  • /data/data/####/777ab77096ea36399257c17ffe3c42ef.0.tmp
  • /data/data/####/777ab77096ea36399257c17ffe3c42ef.1.tmp
  • /data/data/####/77f625fd09896801fff86bef09af4488.0.tmp
  • /data/data/####/77f625fd09896801fff86bef09af4488.1.tmp
  • /data/data/####/78ac8b311cf9c0d4557e52b453f0b454.0.tmp
  • /data/data/####/78ac8b311cf9c0d4557e52b453f0b454.1.tmp
  • /data/data/####/83a1ecd99f95b250608955d0308a12eb634e6ce4cc777d3....0.tmp
  • /data/data/####/83fcbf68addbc7860fb185e6e629c797.0.tmp
  • /data/data/####/83fcbf68addbc7860fb185e6e629c797.1.tmp
  • /data/data/####/862fac1ce18fce55c80afa5cac7ada13.0.tmp
  • /data/data/####/862fac1ce18fce55c80afa5cac7ada13.1.tmp
  • /data/data/####/8a7df0b8fa5637d8cd3497374393d522.0.tmp
  • /data/data/####/8a7df0b8fa5637d8cd3497374393d522.1.tmp
  • /data/data/####/8d0f45641632f7f61dea005b44895ba6.0.tmp
  • /data/data/####/8d0f45641632f7f61dea005b44895ba6.1.tmp
  • /data/data/####/9089b461f28613e9a9b76bf7631b02ce.0.tmp
  • /data/data/####/9089b461f28613e9a9b76bf7631b02ce.1.tmp
  • /data/data/####/95585722da5884489af72b8ef688e911.0.tmp
  • /data/data/####/95585722da5884489af72b8ef688e911.1.tmp
  • /data/data/####/961256293cc520950cb90c84a72063ea.0.tmp
  • /data/data/####/961256293cc520950cb90c84a72063ea.1.tmp
  • /data/data/####/97955a851c8b18b5b58257bd13fd90e8.0.tmp
  • /data/data/####/97955a851c8b18b5b58257bd13fd90e8.1.tmp
  • /data/data/####/97eedb090393800b96ca63d97f52de7d.0.tmp
  • /data/data/####/97eedb090393800b96ca63d97f52de7d.1.tmp
  • /data/data/####/9812f4ba54b3a8fbdec874080b6eeac7.0.tmp
  • /data/data/####/9812f4ba54b3a8fbdec874080b6eeac7.1.tmp
  • /data/data/####/99e6ac69b3a065b634537d2243e4b60e.0.tmp
  • /data/data/####/99e6ac69b3a065b634537d2243e4b60e.1.tmp
  • /data/data/####/9dde69cc11b7393cbdda2b70bbb69f3a2be8c19a050dfe9....0.tmp
  • /data/data/####/AIC-prefs.xml
  • /data/data/####/APPFIREWORKS.xml
  • /data/data/####/CookiePersistence.xml
  • /data/data/####/Terrarium-Sugar.db-journal
  • /data/data/####/TwitterAdvertisingInfoPreferences.xml
  • /data/data/####/WCkrbZuCQ
  • /data/data/####/a1ae1e8c9f84d1ad05199d0b46c472ed54ec73a8df06006....0.tmp
  • /data/data/####/a47869f1b71d9ee5d7c5023aa6b19537d051ba036acb956....0.tmp
  • /data/data/####/a8386f758e46cd515d52ecb60971a2dc.0.tmp
  • /data/data/####/a8386f758e46cd515d52ecb60971a2dc.1.tmp
  • /data/data/####/ae5646154e7b7caa30edd3e9e8b8380c.0.tmp
  • /data/data/####/ae5646154e7b7caa30edd3e9e8b8380c.1.tmp
  • /data/data/####/ae77008c2910e7708edb47326c152d54.0.tmp
  • /data/data/####/ae77008c2910e7708edb47326c152d54.1.tmp
  • /data/data/####/b126e81ddc450d3991a130df3831481f178a035922cf179....0.tmp
  • /data/data/####/b18dac183a72beabbf0daf47e12e93b0.0.tmp
  • /data/data/####/b18dac183a72beabbf0daf47e12e93b0.1.tmp
  • /data/data/####/b328f18d42fc2f9cdc511e88296c7c70.0.tmp
  • /data/data/####/b328f18d42fc2f9cdc511e88296c7c70.1.tmp
  • /data/data/####/b62ebd3e746d78b9b56394a22fc7b6c2.0.tmp
  • /data/data/####/b62ebd3e746d78b9b56394a22fc7b6c2.1.tmp
  • /data/data/####/b956706e2954c0946efc9b29f7dff214.0.tmp
  • /data/data/####/b956706e2954c0946efc9b29f7dff214.1.tmp
  • /data/data/####/bab86ad2db919b3173f38212bd599e3c.0.tmp
  • /data/data/####/bab86ad2db919b3173f38212bd599e3c.1.tmp
  • /data/data/####/bc0c07785194359a448d9573d5ed134d.0.tmp
  • /data/data/####/bc0c07785194359a448d9573d5ed134d.1.tmp
  • /data/data/####/bc438e229cf39b76161f5aa443a2d3a4.0.tmp
  • /data/data/####/bc438e229cf39b76161f5aa443a2d3a4.1.tmp
  • /data/data/####/bdc52e023300849105a35a782aeafe76569ebf3372d5b03....0.tmp
  • /data/data/####/be428db921e27229785031cb419191326e2e62abbee0c32....0.tmp
  • /data/data/####/c27051f6f0bb964c7ec5def2f7fa1db7f68f6fc1cdbba29....0.tmp
  • /data/data/####/c4658bffa6ee6acc82b1d3a973d093ac.0.tmp
  • /data/data/####/c4658bffa6ee6acc82b1d3a973d093ac.1.tmp
  • /data/data/####/c6f273cc0c6cea3addab4033fd8580c9438f146fec53830....0.tmp
  • /data/data/####/c9dad0f67dffe116e8e1a50036f6ebff.0.tmp
  • /data/data/####/c9dad0f67dffe116e8e1a50036f6ebff.1.tmp
  • /data/data/####/cbd0dd073d0de483ca8f24f1c8d2833dbb7b68a1b6a62a4....0.tmp
  • /data/data/####/cf22db3a102bb03e42c1c36edb968e9b.0.tmp
  • /data/data/####/cf22db3a102bb03e42c1c36edb968e9b.1.tmp
  • /data/data/####/cfa91c46aa9be233888398412cb450b7.0.tmp
  • /data/data/####/cfa91c46aa9be233888398412cb450b7.1.tmp
  • /data/data/####/com.crashlytics.prefs.xml
  • /data/data/####/com.crashlytics.sdk.android;answers;settings.xml
  • /data/data/####/com.crashlytics.settings.json
  • /data/data/####/com.google.android.gms.analytics.prefs.xml
  • /data/data/####/com.google.android.gms.appid-no-backup
  • /data/data/####/com.google.android.gms.appid.xml
  • /data/data/####/com.google.android.gms.measurement.prefs.xml
  • /data/data/####/com.livefront.bridge.BridgeDelegate.xml
  • /data/data/####/com.nitroxenon.terrarium-1.apk.classes-1295317714.zip
  • /data/data/####/com.nitroxenon.terrarium-1.apk.classes-690988051.zip
  • /data/data/####/com.nitroxenon.terrarium-1.apk.classes-778072518.zip
  • /data/data/####/com.nitroxenon.terrarium_boundentrypreferences.xml
  • /data/data/####/com.nitroxenon.terrarium_migrationpreferences.xml
  • /data/data/####/com.nitroxenon.terrarium_preferences.xml
  • /data/data/####/com.nitroxenon.terrarium_servertimeoffset.xml
  • /data/data/####/com.nitroxenon.terrarium_startupserviceinfopreferences.xml
  • /data/data/####/com.yandex.metrica.configuration.xml
  • /data/data/####/credentials.dat
  • /data/data/####/d0bcd6abbaeea8b610cf4baf4dc506cf.0.tmp
  • /data/data/####/d0bcd6abbaeea8b610cf4baf4dc506cf.1.tmp
  • /data/data/####/d14c6f6b787f9bef5547417b22791d99.0.tmp
  • /data/data/####/d14c6f6b787f9bef5547417b22791d99.1.tmp
  • /data/data/####/d220011ed88f565698cf988282664539.0.tmp
  • /data/data/####/d220011ed88f565698cf988282664539.1.tmp
  • /data/data/####/d47d89e666e509ac569614701375fc0d.0.tmp
  • /data/data/####/d47d89e666e509ac569614701375fc0d.1.tmp
  • /data/data/####/d492bf52a76767906baf0e464c9ca86083352ec229b5b13....0.tmp
  • /data/data/####/d8b32f6b341c69fa95b16df110962687.0.tmp
  • /data/data/####/d8b32f6b341c69fa95b16df110962687.1.tmp
  • /data/data/####/db_metrica_com.nitroxenon.terrarium_13-journal
  • /data/data/####/db_metrica_com.nitroxenon.terrarium_20799a27-fa...ournal
  • /data/data/####/db_metrica_com.nitroxenon.terrarium_f6fa2bbf-d8...ournal
  • /data/data/####/dcbe21d37012d282437157b439575e22.0.tmp
  • /data/data/####/dcbe21d37012d282437157b439575e22.1.tmp
  • /data/data/####/ddca9bf2bf42f8d753af2315e5a9b9bfab077cd88111e02....0.tmp
  • /data/data/####/dfaeb3014b10aa6f812f4e9f5112d815.0.tmp
  • /data/data/####/dfaeb3014b10aa6f812f4e9f5112d815.1.tmp
  • /data/data/####/e5cbdf9c42589bb5f707088a7ae88e83.0.tmp
  • /data/data/####/e5cbdf9c42589bb5f707088a7ae88e83.1.tmp
  • /data/data/####/e74c35a7d9be65fb942f042cc927382f.0.tmp
  • /data/data/####/e74c35a7d9be65fb942f042cc927382f.1.tmp
  • /data/data/####/e9f252d6c4d675d813b24c56035145a5.0.tmp
  • /data/data/####/e9f252d6c4d675d813b24c56035145a5.1.tmp
  • /data/data/####/e9f5be794606a6eff6efc68414616ab9.0.tmp
  • /data/data/####/e9f5be794606a6eff6efc68414616ab9.1.tmp
  • /data/data/####/eb4fd0b4508fc769996f513fe41a36b5b60516558d1265d....0.tmp
  • /data/data/####/ed4de360696e1a13036f5478e6747587.0.tmp
  • /data/data/####/ed4de360696e1a13036f5478e6747587.1.tmp
  • /data/data/####/evernote_jobs.db-journal
  • /data/data/####/evernote_jobs.xml
  • /data/data/####/f081fcbb0ced6acc4d3bc5835a4f741b.0.tmp
  • /data/data/####/f081fcbb0ced6acc4d3bc5835a4f741b.1.tmp
  • /data/data/####/f17cf969fd114f3f85cbeef8bdc57563.0.tmp
  • /data/data/####/f17cf969fd114f3f85cbeef8bdc57563.1.tmp
  • /data/data/####/fc45e41b77dd50515197f6429954e1f3b774c6699987066....0.tmp
  • /data/data/####/fd6ba3a1ee0efb111d315b02c1c6e263.0.tmp
  • /data/data/####/fd6ba3a1ee0efb111d315b02c1c6e263.1.tmp
  • /data/data/####/gaClientId
  • /data/data/####/google_analytics_v4.db-journal
  • /data/data/####/google_app_measurement_local.db
  • /data/data/####/google_app_measurement_local.db-journal
  • /data/data/####/initialization_marker
  • /data/data/####/io.fabric.sdk.android;fabric;io.fabric.sdk.andr...ng.xml
  • /data/data/####/journal.tmp
  • /data/data/####/metrica_client_data.db
  • /data/data/####/metrica_client_data.db-journal
  • /data/data/####/metrica_client_data.db.lock
  • /data/data/####/metrica_data.db-journal
  • /data/data/####/multidex.version.xml
  • /data/data/####/oneaudience.xml
  • /data/data/####/persisted_config
  • /data/data/####/registry
  • /data/data/####/sa_80ebf28f-3293-4c61-a08f-6466df79d801_1523905089661.tap
  • /data/data/####/sa_943adbf3-13ee-4364-b0db-64f7cc2114d8_1523905087925.tap
  • /data/data/####/sa_c88fdeba-e535-4671-90b2-5997b53b0879_1523905093178.tap
  • /data/data/####/session_analytics.tap
  • /data/data/####/session_analytics.tap.tmp
  • /data/data/####/terrarium.dat.jar
  • /data/data/####/tmdb-1402.0.tmp
  • /data/data/####/tmdb-1403.0.tmp
  • /data/data/####/tmdb-1407.0.tmp
  • /data/data/####/tmdb-1412.0.tmp
  • /data/data/####/tmdb-1416.0.tmp
  • /data/data/####/tmdb-1418.0.tmp
  • /data/data/####/tmdb-1622.0.tmp
  • /data/data/####/tmdb-456.0.tmp
  • /data/data/####/tmdb-48891.0.tmp
  • /data/data/####/tmdb-60573.0.tmp
  • /data/data/####/tmdb-60585.0.tmp
  • /data/data/####/tmdb-60694.0.tmp
  • /data/data/####/tmdb-60708.0.tmp
  • /data/data/####/tmdb-61888.0.tmp
  • /data/data/####/tmdb-62286.0.tmp
  • /data/data/####/tmdb-62852.0.tmp
  • /data/data/####/tmdb-63174.0.tmp
  • /data/data/####/tmdb-66786.0.tmp
  • /data/data/####/tmdb-75191.0.tmp
  • /data/data/####/tmdb-75758.0.tmp
  • /data/data/####/webview.db-journal
  • /data/media/####/.nomedia
Miscellaneous:
Loads the following dynamic libraries:
  • WCkrbZuCQ
  • duktape
Uses the following algorithms to encrypt data:
  • AES-ECB-PKCS5Padding
  • RSA-ECB-OAEPWithSHA1AndMGF1Padding
Uses the following algorithms to decrypt data:
  • AES-ECB-PKCS5Padding
Uses administrator priveleges.
Gains access to geolocation.
Gains access to network information.
Gains access to telephone information (number, imei, etc.).
Gains access to information about installed applications.
Gains access to information about accounts (Google, Facebook, etc.) registered on the device.
Adds tasks to the system scheduler.
Displays its own windows over windows of other applications.

Recommandations pour le traitement


Android

  1. Si votre appareil mobile fonctionne correctement, veuillez télécharger et installer sur votre appareil mobile le produit antivirus gratuit Dr.Web для Android Light. Lancez un scan complet et suivez les recommandations sur la neutralisation des menaces détectées.
  2. Si l'appareil mobile est bloqué par le Trojan de la famille Android.Locker (un message sur une violation grave de la loi ou une demande de rançon s’affichent sur l'écran de l'appareil mobile), procédez comme suit :
    • démarrez votre Smartphone ou votre tablette en mode sans échec (si vous ne savez pas comment faire, consultez la documentation de l'appareil mobile ou contactez le fabricant) ;
    • puis téléchargez et installez sur votre appareil contaminé le produit antivirus gratuit Dr.Web для Android Light et lancez un scan complet puis suivez les recommandations sur la neutralisation des menaces détectées ;
    • Débranchez votre appareil et rebranchez-le.

En savoir plus sur Dr.Web pour Android