Техническая информация
Вредоносные функции:
Перекрывает экран собственным окном, блокируя доступ к графическому интерфейсу.
Сетевая активность:
Подключается к:
- s####.####.com
- h####.####.com
- j####.####.la
- w####.####.la:82
- sh####.####.com
- c####.####.com
- i####.####.la
- 9####.com
Запросы HTTP GET:
- i####.####.la/icon_0.gif
- sh####.####.com/shouji1/js/play.js
- sh####.####.com/shouji1/images/bg_png.png
- sh####.####.com/shouji1/images/z10.jpg
- sh####.####.com/shouji1/images/s4.jpg
- sh####.####.com/shouji1/css/ccs_kb.css
- sh####.####.com/shouji1/css/lb_line_../images/bg.gif
- sh####.####.com/shouji1/images/s2.jpg
- sh####.####.com/shouji1/images/z7.jpg
- sh####.####.com/shouji1/images/top_line.gif
- sh####.####.com/shouji1/images/z1.jpg
- s####.####.com/stat.php?id=####
- sh####.####.com/shouji1/index.asp?s_959qq####
- w####.####.la:82/go.asp?svid=####&id=####&tpages=####&ttimes=####&tzone=####&tcolor=####&sSize=####&referrer=####&vpage=####&vvtime=####
- sh####.####.com/shouji1/images/logo.gif
- sh####.####.com/shouji1/images/jt_pc.gif
- sh####.####.com/shouji1/images/load2.gif
- sh####.####.com/shouji1/images/10.jpg
- sh####.####.com/shouji1/images/s3.jpg
- sh####.####.com/shouji1/css/jt_../images/bg.gif
- c####.####.com/9.gif?abc=####&rnd=####
- sh####.####.com/shouji1/css/top_../images/bg.gif
- sh####.####.com/shouji1/images/bg.gif
- sh####.####.com/shouji1/images/s1.jpg
- h####.####.com/stat.htm?id=####&r=####&lg=####&ntime=####&cnzz_eid=####&showp=####&t=####&h=####&rnd=####
- s####.####.com/core.php?web_id=####&t=####
- j####.####.la/16508372.js
- 9####.com/
- sh####.####.com/shouji1/css/jquery.mobile.structure-1.1.1.css
Изменения в файловой системе:
Создает следующие файлы:
- /sdcard/test.txt
- /data/data/####/shared_prefs/TimeSave.xml
Другие:
Может автоматически отправлять СМС-сообщения.
