ПОЛЬЗОВАТЕЛЯМ

Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Android.Packed.22318

Добавлен в вирусную базу Dr.Web: 2017-05-27

Описание добавлено:

Техническая информация

Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
  • Android.HiddenAds.79.origin
Сетевая активность:
Подключается к:
  • trac####.####.com
  • teleg####.nl
  • n####.nl
  • c13b368####.####.com
  • stat####.####.com
  • b####.####.nl
  • bi####.####.com
  • imgs####.####.nl
  • r####.####.nl
  • b####.####.com
  • s####.####.com
  • i####.####.com
  • pri####.####.nl
  • google-####.com
  • p####.####.com
  • a083145####.####.net
  • f####.####.com
  • c####.####.nl
  • c2f2208####.####.com
  • d####.####.net
  • tr####.####.com
  • st####.####.com
  • a1298f9####.####.net
  • pag####.####.com
  • t####.####.com
  • c####.####.org
  • m####.####.nl
  • gl####.####.com
  • a####.####.io
  • ce####.####.org
  • 5####.####.75
  • ap####.com
  • lo####.####.org
  • ac8f9ac####.####.net
  • s####.####.fi
  • h####.com
  • m####.####.com
  • a####.####.com
  • a897fa3####.####.net
  • con####.####.net
  • 9fba2f3####.####.com
  • cloudfr####.####.com
  • ab0b8d3####.####.net
  • c####.####.com
  • d####.####.com
  • e####.####.com
  • f89f2a5####.####.com
  • n####.####.com
  • 000464d####.####.com
Запросы HTTP GET:
  • 9fba2f3####.####.com/5928c055dbd2c04103f46656_500x367.jpg
  • b####.####.nl/m/m1nx6fwruj6b_ls.png
  • h####.com/js/bundles/partner-article.js?squizard?bust=####
  • b####.####.nl/m/m1nx6frrh926_ls.png
  • b####.####.nl/m/wqrxaq6r0cu2_ls.png
  • b####.####.nl/m/m1nx6fxr1e5w_ls.png
  • imgs####.####.nl/v1/ckpFRJ42OxWKwKR7lZ8lt8AoPwQ=/80x80/smart/filters:for...
  • c####.####.org/2017-04-06/3a2b0b996231360cb1062ab0898e4cf3.jpg!240
  • d####.####.com/r/dd/id/L2NzaWQvMS9jaWQvMjYzNTYzMzIvdC8y/dpuid/32212965116/
  • a####.####.com/api/ads/check?md5=####&secret=####&app_v=####&app=####&ch...
  • c####.####.org/v2/system/version-1-96.json
  • f89f2a5####.####.com/5927fa5fdbd2c04103ec7118_500x333.jpg
  • c####.####.com/req?v=####&upd=####&new=####&id=####&acc=####&tit=####
  • teleg####.nl/autovisie/28244885/__De_lekkerste_bergpas_per_BMW_120i__.html
  • n####.nl/m/cejxo07a7ydw_std160.jpg
  • p####.####.com/aa/y8a2thbi7v8xdodcoa82
  • ce####.####.org/v3/commentlist-46628875-4f9f9580b64974c7f372570c63b8261b...
  • h####.com/_a/insights/publications?publicationIds=####
  • b####.####.nl/m/m1nx6frre62c_ls.png
  • n####.nl/m/vrtxjtsazv6n_wd640.jpg/binnenkijken-bij-de-villa-van-lamar-od...
  • pri####.####.nl/site/nu.nl/synchronize/SR2U458VQzDTMo0Bb3hWZsYsAAZ566D2M...
  • b####.####.nl/m/y36xt4zr4lx2_ls.png
  • r####.####.nl/Get/ilsemedia/JS/GetRcmd.js?ord=####
  • b####.####.nl/m/m1nx6fxr2v5o_ls.png
  • n####.nl/static/vendor/fontawesome/fonts/fontawesome-webfont.ttf?v=####&...
  • f89f2a5####.####.com/5927b006dbd2c04103e978c1_500x333.jpg
  • h####.com/articles/5927fa5fdbd2c04103ec7118/related?limit=####&offset=####
  • imgs####.####.nl/v1/6vsAYY_r333C61BzNtR02bljJFk=/80x80/smart/filters:for...
  • c####.####.com/js/2759701342.js
  • n####.nl/static/img/atoms/images/logos/logosprite.svg?v=####
  • n####.nl/live/voetbal
  • c2f2208####.####.com/51652251bbddbd1468000a1d.ico
  • cloudfr####.####.com/x.png
  • h####.com/css/fonts/roboto-v15-latin-500.ttf
  • c####.####.org/2017-04-07/753c1913748d9757d9dc0ed576919836.jpg!240
  • b####.####.nl/m/m1nx6furmh6n_ls.png
  • n####.####.com/images/lib/basic/sport/football/competition/logo/large/17...
  • h####.com/articles/5927fa5fdbd2c04103ec7118
  • b####.####.nl/m/m1mx7vbr4rgp_ls.png
  • n####.####.com/images/lib/basic/sport/football/competition/logo/large/48...
  • 9fba2f3####.####.com/5928b912dbd2c04103f421c6_500x281.jpg
  • m####.####.nl/static/img/abonnementen.png
  • teleg####.nl/static/build/site_759acf5a9278.min.js
  • b####.####.nl/m/m1nx6fxre748_ls.png
  • p####.####.com/upi/pid/DuqQKWX7?redir=####
  • b####.####.nl/m/m1nx7terh9bo_ls.png
  • teleg####.nl/static/build/site_article_87251f30adaf.min.js
  • c2f2208####.####.com/51652254bbddbd1468000d7c.ico
  • h####.com/css/style.css?bust=####
  • t####.####.com/tm42098.js
  • c####.####.com/tracking/adClick?d=####&ru=####&advId=####&clickId=####&s...
  • n####.nl/m/my0x4kiaq2vf_wd1280.jpg/dromen-van-de-coolsingel-2-rellen-tij...
  • c2f2208####.####.com/54d9f60907830f2c0a0000a9.ico
  • 9fba2f3####.####.com/59297c7edbd2c04103fc0496_500x312.jpg
  • c####.####.org/v2/content/list-0-0-0-NL-1-0-1.json?1495016####
  • c####.####.nl/service/js/nunl/voetbal-artikel/
  • a####.####.com/api/ads/record/imp/?_s=####&oc1=####&oc2=####&provider=##...
  • h####.com/css/img/settings_banner.jpg
  • imgs####.####.nl/v1/IfGc6bhicipinNWdUtI3rPJ6frQ=/80x80/smart/filters:for...
  • b####.####.nl/m/m1nx7g5rgqbh_ls.png
  • h####.com/article/5927fa5fdbd2c04103ec7118
  • c####.####.com/cms?partner_id=####
  • b####.####.nl/m/m1nx6frrit1x_ls.png
  • c####.####.org/2017-04-07/e22bf6793c5a89c7185a93ee5d1688b6.jpg!240
  • b####.####.nl/m/m1nx6fwrp153_ls.png
  • pri####.####.nl/script/consent.js
  • b####.####.nl/m/m1nx6fwrp657_ls.png
  • n####.nl/static/CACHE/js/e11cc90777cc.js
  • stat####.####.com/connect/xd_arbiter/r/0F7S7QWJ0Ac.js?version=####
  • b####.####.nl/m/m1mxbkwre7h6_ls.png
  • t####.####.com/agentapi/click?cid=####&aid=####&postbac####
  • b####.####.nl/m/_ls.png
  • n####.####.com/images/lib/basic/sport/football/competition/logo/large/67...
  • n####.nl/static/vendor/royalslider/img/preloader-white.gif?b79d10c####
  • n####.nl/static/img/placeholders/std320-o.png
  • c####.####.com/files/79e464325fa8c8cbe099fcdd523c9968
  • 9fba2f3####.####.com/592979f8dbd2c04103fbd2f4_500x500.jpg
  • 9fba2f3####.####.com/59297c7edbd2c04103fc0495_500x312.jpg
  • b####.####.nl/m/m1nx5sqrhbgz.png
  • c2f2208####.####.com/51652251bbddbd1468000ad5.ico
  • b####.####.nl/m/m1nx6furjv6v_ls.png
  • c####.####.org/2017-05-02/a58184d0c91bbef500c711bd1d4ad0b3.jpg
  • imgs####.####.nl/v1/a9B8werAy6vltzivVvGj3mlrZ8c=/80x80/smart/filters:for...
  • f####.####.com/s/opensans/v13/MTP_ySUJH_bn48VBG8sNSpS3E-kSBmtLoNJPDtbj2P...
  • trac####.####.com/click?mb_pl=####&mb_nt=####&mb_campid=####&mb_package=...
  • t####.####.com/site/31436?dt=####&r=####&sig=####&bkca=####
  • ap####.com/baseerror/error.html
  • n####.####.com/images/lib/basic/sport/football/competition/logo/large/4....
  • b####.####.nl/m/m1nx6fsr0q1h_ls.png
  • b####.####.nl/m/m1nxcv9r1efh_ls.png
  • n####.nl/m/m1oxfnia25hh_wd320.jpg
  • n####.nl/static/CACHE/js/0dc4d6f6842e.js
  • b####.####.nl/m/m1nxdc1rlafm_ls.png
  • h####.com/search/%22al%20it%20@%22/country/nl
  • imgs####.####.nl/v1/IIJRBWE_skpfMuA2XUbTh1g0DzQ=/80x80/smart/filters:for...
  • c####.####.org/2017-04-06/a9aaf531a1ddfc24b1edd0ddb588985b.jpg!240
  • c2f2208####.####.com/54d9f92107830f2c0a0000ef.ico
  • 9fba2f3####.####.com/5928b341dbd2c04103f3d4b7_500x250.jpg
  • h####.com/_a/news/articles/home
  • h####.com/css/img/icons_sprite.png
  • b####.####.nl/m/m1nx6fxr5g3j_ls.png
  • c####.####.org/2017-04-07/fabf27abf6c51b63b710bf1963db5604.jpg!240
  • e####.####.com/quant.js
  • n####.nl/static/CACHE/js/a2c28962c5b1.js
  • t####.####.com/sync?prtid=####&aolid=####
  • pri####.####.nl/site/nu.nl/synchronize/lwTxyIDLflz8HL65h435-1jkRj0Fb2oTw...
  • n####.nl/m/swrxicnajgt2_wd640.jpg
  • s####.####.com/c2/6035634/cs.js
  • teleg####.nl/static/build/site_1489061730.min.css
  • b####.####.com/b?c1=####&c2=####&c3=####&ns__t=####&ns_c=####&cv=####&c8...
  • b####.####.nl/m/m1nx6furlj6j_ls.png
  • c2f2208####.####.com/54d9f58e07830f2c0a000091.ico
  • h####.com/_a/news/trends/articles?trends[]=####&country=####
  • b####.####.nl/m/m1nx6fwrqq4u_ls.png
  • b####.####.nl/m/m1nx89xriaeg_ls.png
  • b####.####.com/beacon.js
  • ce####.####.org/v2/content/getItemDetails-46623146.json
  • imgs####.####.nl/v1/SP5HNPS3eDc0rglqqXMJU8cJkQM=/80x80/smart/filters:for...
  • b####.####.nl/m/m1nx81jr1qcj_ls.png
  • n####.nl/m/cftxxoranvd7_wd640.jpg/rondje-monaco-met-racetalent-verschoor...
  • t####.####.com/sync?prtid=####&admid=####
  • c2f2208####.####.com/54d9f81d07830f2c0a0000df.ico
  • n####.nl/static/img/atoms/images/favicon/apple-touch-icon-57x57.png
  • a083145####.####.net/test.png
  • b####.####.nl/m/m1nx6fsr7lsz_ls.png
  • c####.####.org/v2/system/startimg-NL.json
  • b####.####.nl/m/m1mxg8irdiie_ls.png
  • c13b368####.####.com/59257482dbd2c04103d39dea_500x333.jpg
  • n####.nl/static/img/atoms/images/logos/logosprite_menu.svg?v=####
  • h####.com/_a/news/trends/articles?trends[]=####&trends[]=####&trends[]=#...
  • h####.com/js/bundles/newspage.js?bust=####
  • n####.nl/api/playlists/slug/recommended?order_by=####
  • n####.####.com/images/lib/basic/sport/football/competition/logo/large/43...
  • b####.####.nl/m/m1nx6fwrwh61_ls.png
  • b####.####.nl/m/z8fxcvmrjnev_ls.png
  • t####.####.com/utag/tmggroup/telegraaf-mobile/prod/utag.sync.js
  • pri####.####.nl/pixel/rhI8jyOQ-WCPAbQP5fBtewqxqOWQmbL3pgQulD6nF2-t8c7ZZ8...
  • b####.####.nl/m/m1nx6furmt6p_ls.png
  • h####.com/article/58e561f366f60039037405de?view=####
  • c####.####.com/dp/navegg.php?pid=####&uid=####
  • n####.####.com/images/lib/basic/sport/football/competition/logo/large/56...
  • b####.####.nl/m/dfxx082rhbkx_ls.png
  • pri####.####.nl/script/cookiebar.js
  • b####.####.nl/m/36vx9vlrziuq_ls.png
  • b####.####.com/b2?c1=####&c2=####&ns_site=####&nb_01=####&nb_02=####&nb_...
  • i####.####.com/?url=####&static=####&pos=####&h=####&w=####&static=####&...
  • c####.####.nl/service/detect/nunl/scoreboard/ttxt_adv_468_200/
  • b####.####.nl/m/m1mxb7rra2h4_ls.png
  • c####.####.org/v2/system/models-96.json
  • c2f2208####.####.com/54d9f4c107830f2c0a00006e.ico
  • n####.nl/api/comet/servers
  • n####.nl/static/vendor/royalslider/img/rs-default.png?0e40b16####
  • c####.####.org/2017-04-07/4382b60753a80f6d3fb25f14ab04de59.jpg!240
  • p####.####.com/pixel/p-aD1qr93XuF6aC.gif?labels=####
  • p####.####.com/ct/upi/pid/DuqQKWX7?redir=####&_test=####
  • b####.####.nl/m/m1nx6fxrf04c_ls.png
  • imgs####.####.nl/v1/66HkBbE78BmiovSIWPJXLMrHF2M=/80x80/smart/filters:for...
  • a####.####.com/api/s2s/goto?id=####&channel=####&provider=####&iid=####&...
  • n####.####.com/images/lib/basic/sport/football/competition/logo/large/54...
  • n####.####.com/images/lib/basic/sport/football/competition/logo/large/41...
  • n####.nl/static/img/placeholders/wd640-o.png
  • t####.####.com/usr?v=####&acc=####&upd=####&new=####&wst=####
  • b####.####.nl/m/m1nx6mdreu9j_ls.png
  • s####.####.fi/js/sat.js
  • c2f2208####.####.com/54d9f5bc07830f2c0a00009d.ico
  • h####.com/js/bundles/404.js?bust=####
  • b####.####.nl/m/m1nx6fxrdn46_ls.png
  • c2f2208####.####.com/548749392b2f98474e000000.ico
  • c####.####.com/index.php?service=####&pub=####&offer_id=####&uc_trans_1=...
  • m####.####.nl/static/img/icon-share.png
  • n####.nl/static/js/advertising.js
  • n####.nl/voetbal/4598115/van-bronckhorst-spreekt-van-topavond-monsterzeg...
  • c2f2208####.####.com/54d9f82e07830f2c0a0000e1.ico
  • b####.####.com/b?c1=####&c2=####&ns_site=####&nb_01=####&nb_02=####&nb_1...
  • b####.####.nl/m/10kxrngrpgl4_ls.png
  • s####.####.fi/sat/sat.gif?log=####&evt=####&cid=####&c_ver=####&c_events...
  • imgs####.####.nl/v1/V4XZEa1TmziwwRVZVp3ErYb_z0k=/80x80/smart/filters:for...
  • b####.####.nl/m/m1nx6fxr1v5y_ls.png
  • c####.####.org/v2/content/article1-46628875-4f9f9580b64974c7f372570c63b8...
  • c2f2208####.####.com/54d8990b07830f652e000000.ico
  • n####.####.com/images/lib/basic/sport/football/competition/logo/large/2....
  • d####.####.net/ibs:dpid=822&dpuuid=32212965116&redir=https%3A//sync.navd...
  • b####.####.nl/m/m1mxrkrrlfiu_ls.png
  • pri####.####.nl/pixel/kBE77vuYaNEdLBR7Vh_dpqYOKXGIfEXItMMgRSAECy6jIrmUjw...
  • m####.####.com/tracking/index/5928f0b9ef3a2?gaid=####&idfa=####&andid=##...
  • b####.####.nl/m/fb5x59xrbret_ls.png
  • p####.####.com/ups/19764/sync?uid=####&_origin=####&redir=####&verify=####
  • c2f2208####.####.com/54d9f5ac07830f2c0a000093.ico
  • n####.nl/m/kh3xeueakxst_std160.jpg
  • 9fba2f3####.####.com/5928bf05dbd2c04103f45650_500x277.jpg
  • m####.####.nl/autovisie/article/28244885/video-de-lekkerste-bergpas-per-...
  • b####.####.nl/m/m1nx9c9rarf0_ls.png
  • imgs####.####.nl/v1/yrnGflmbs2rmihq-0DJQyFLETe0=/80x80/smart/filters:for...
  • c2f2208####.####.com/54d9f8a407830f2c0a0000eb.ico
  • n####.nl/api/config/account_pages
  • h####.com/images/flags/NL.png
  • f89f2a5####.####.com/5927cd55dbd2c04103ead5d3_500x312.jpg
  • c2f2208####.####.com/54b6467207830f323b000000.ico
  • n####.nl/m/dgqxhxpafnep_wd640.jpg/bekende-ajax-supporters-intens-teleurg...
  • n####.nl/m/zwbxqhpav7mk_wd640.jpg/giro-update-dumoulin-raakt-roze-trui-k...
  • p####.####.com/ups/19764/sync?uid=####&_origin=####&redir=####
  • c####.####.org/2017-04-07/9f18a7ed2ea7a3ee62b4247ce5055033.jpg!240
  • b####.####.nl/m/m1nxd80rjgfj_ls.png
  • b####.####.nl/m/m1mxhubrd1ih_ls.png
  • i####.####.com/s
  • p####.####.com/ul_cb/aa/y8a2thbi7v8xdodcoa82
  • t####.####.com/38645a54-e22a-423a-ac19-3d3ab0c47678?app_id=####&cid=####
  • h####.com/js/bundles/home.js?bust=####
  • con####.####.net/nl_INF/sdk.js
  • ce####.####.org/v2/content/recommend-4f9f9580b64974c7f372570c63b8261b-NL...
  • c2f2208####.####.com/54d9f88307830f2c0a0000e7.ico
  • b####.####.nl/m/sacxxeyr8q55_ls.png
  • d####.####.net/demconf.jpg?et:ibs%7cdata:dpid=####&dpuuid=####&redir=####
  • n####.nl/m/unfxyheah3jl_wd640.jpg/van-bronckhorst-spreekt-van-topavond-m...
  • h####.com/images/get_android_app.png
  • pag####.####.com/pagead/js/r20170522/r20170110/show_ads_impl.js
  • teleg####.nl/autovisie/autovisie_foto/article28244884.ece/BINARY/q/Stuur...
  • 5####.####.75/live?message=####&jsonp=####
  • n####.nl/m/e1lxmnnaxs1n_wd640.jpg/show-update-roxeanne-hazes-ik-hou-van-...
  • n####.####.com/images/lib/basic/sport/football/competition/logo/large/10...
  • c####.####.org/2017-04-07/4e6c470b403e19e0b41cc8aa09d273e6.jpg!240
  • c####.####.org/2017-04-06/fc92bd8697c828ca6f0e9a91343c180a.jpg!240
  • b####.####.nl/m/m1nx6fwrxd67_ls.png
  • c####.####.com/build/css/rev2.min.css?v=####
  • b####.####.nl/m/vykxzbwrbdbu_ls.png
  • b####.####.nl/m/m1nx6fsr4tyz_ls.png
  • tr####.####.com/seg.php?callback=####&widgets=####&creatives=####&_=####
  • b####.####.nl/m/m1nxdc1rlufn_ls.png
  • c2f2208####.####.com/54d9f83c07830f2c0a0000e3.ico
  • f####.####.com/css?family=####
  • ce####.####.org/v3/commentlist-46623146-4f9f9580b64974c7f372570c63b8261b...
  • b####.####.nl/m/xjjxyyvrpbz9_ls.png
  • t####.####.com/site/31435?id=####&redir=####
  • c####.####.org/v2/system/languages.json
  • h####.com/images/get_firefoxos_app.png
  • st####.####.com/c/hotjar-113364.js?sv=####
  • imgs####.####.nl/v1/GzNlIgMBBMNkaMVXAsi4SeCKAzY=/80x80/smart/filters:for...
  • c####.####.com/js/4751656579.js
  • ab0b8d3####.####.net/test.png
  • c2f2208####.####.com/54d9f30007830f2c0a00003c.ico
  • google-####.com/r/collect?v=####&_v=####&a=####&t=####&_s=####&dl=####&u...
  • c####.####.org/2017-04-06/99dc1ad8e6f6c1531ba0b43126184f33.jpg!240
  • n####.nl/m/g9sx00xack56_std160.jpg
  • h####.com/article/58e57ccb66f6003903788412?view=####
  • h####.com/js/bundles/article.js?bust=####
  • 9fba2f3####.####.com/59296269dbd2c04103fac575_500x333.jpg
  • b####.####.nl/m/m1mxoowrgmis_ls.png
  • teleg####.nl/graphics/videopage/play.7589f1ea03bd084740cdd5cc00f56e05.png
  • n####.####.com/images/lib/basic/sport/football/competition/logo/large/12...
  • c####.####.org/2017-04-07/a7500f39164a6ab62bcf9ef7b667a07e.jpg!240
  • ce####.####.org/v3/system/countrys.json
  • f####.####.com/s/opensans/v13/cJZKeOuBrn4kERxqtaUH3SZ2oysoEQEeKwjgmXLRnT...
  • imgs####.####.nl/v1/ymXKATB1shoGKYbA_lMF31aza9U=/616x410/smart/filters:f...
  • 9fba2f3####.####.com/59297c7edbd2c04103fc0494_500x312.jpg
  • ac8f9ac####.####.net/test.png
  • b####.####.nl/m/upxxr33rxcpl_ls.png
  • pri####.####.nl/img/getoptin.gif?ord=####
  • c####.####.org/2017-04-07/06205956992c7c1998f3798b8f329a0e.jpg!240
  • c2f2208####.####.com/51652252bbddbd1468000b79.ico
  • t####.####.com/sync?prtid=####&yahid=####
  • b####.####.nl/m/m1nx6frriw1v_ls.png
  • b####.####.nl/m/m1nx950r6xey_ls.png
  • b####.####.nl/m/m1nx8spr3uet_ls.png
  • teleg####.nl/static/img/placeholder.png
  • google-####.com/analytics.js
  • b####.####.nl/m/m1nx81jrxjdk_ls.png
  • h####.com/js/bundles/cookies.js
  • c####.####.com/build/js/rev2.min.js?v=####&del=####&lg=####&ci=####&ab=#...
  • n####.nl/m/p1wxx5yap78e_wd640.jpg/haase-voelt-zich-goed-in-aanloop-naar-...
  • h####.com/content?url=####
  • n####.nl/m/pixxp56anw5b_wd640.jpg/40-jarige-totti-stopt-drie-fraaie-goals
  • n####.nl/m/r9exddsao08g_std320.jpg
  • b####.####.nl/m/m1nx81krgxd0_ls.png
  • h####.com/css/fonts/roboto-v15-latin-regular.ttf
  • b####.####.nl/m/a6zx7v7r0z3d_ls.png
  • c2f2208####.####.com/53f47076218708229a000000.ico
  • b####.####.nl/m/m1mx72qrwxgn_ls.png
  • b####.####.nl/m/m1nxcd0rr9fe_ls.png
  • b####.####.nl/m/m1nx6frrjd20_ls.png
  • teleg####.nl/graphics/videopage/play25.474a26e5402cfd0d6409653450650986....
  • b####.####.nl/m/bedx5k5rwkea_ls.png
  • b####.####.nl/m/m1nx81krfecx_ls.png
  • n####.nl/static/CACHE/js/e8c4579d66cc.js
  • c####.####.org/v2/content/article1-46623146-4f9f9580b64974c7f372570c63b8...
  • c2f2208####.####.com/51652252bbddbd1468000b7a.ico
  • b####.####.nl/m/m1nx89xrfuej_ls.png
  • b####.####.nl/m/m1nx9tkrpof7_ls.png
  • n####.####.com/images/lib/basic/sport/football/competition/logo/large/52...
  • m####.####.nl/static/img/whatsapp-share-button.png
  • b####.####.nl/m/r4wxbgor8gjv_ls.png
  • 9fba2f3####.####.com/5928b59edbd2c04103f40655_500x231.jpg
  • s####.####.com/app/umeng?pid=####&dp=####&af=####&sk=####&cn=####&cv=####
  • lo####.####.org/api/search/KeywordSearch?MaxHits=####&QueryString=####
  • b####.####.nl/m/m1nx6frrfu22_ls.png
  • n####.nl/static/vendor/fontcustom/fonts/nunl_1077598ee2fd6b2c595b96bce22...
  • h####.com/article/592842eedbd2c04103ef5a03
  • a1298f9####.####.net/test.png
  • h####.com/js/jquery.js
  • h####.com/rank/telegraaf.nl
  • c####.####.org/2017-04-07/191d1a00e7dd0de1eaab0bdce8773ee9.jpg!240
  • c####.####.org/2017-04-07/2829fef9a233d1f82cd9db4a8496dcbc.jpg!240
  • b####.####.nl/m/m1nx6fxr325s_ls.png
  • t####.####.com/utag/tmggroup/telegraaf-mobile/prod/utag.js
  • b####.####.nl/m/m1nx6fxr365q_ls.png
  • h####.com/js/bundles/rank.js?bust=####
  • n####.nl/static/CACHE/css/b750e9df0fc7.css
  • f89f2a5####.####.com/5927fa5fdbd2c04103ec7117_500x327.jpg
  • c####.####.org/2017-04-06/dfe80d77f63081f012ce0d4dec9f3595.jpg!240
  • p####.####.com/v1/ad/click?subsite_id=####&transaction_id=####&id=####&o...
  • f89f2a5####.####.com/5927b3a2dbd2c04103e9904c_500x375.jpg
  • ce####.####.org/v3/system/initcountrytopic.json
  • f89f2a5####.####.com/592884e9dbd2c04103f1f1ae_500x281.jpg
  • c2f2208####.####.com/5450adec484dec2c77000000.ico
  • b####.####.nl/m/q4fx0pfr32vn_ls.png
  • a####.####.io/latest?base=####
  • google-####.com/collect?v=####&_v=####&a=####&t=####&_s=####&dl=####&ul=...
  • b####.####.nl/m/m1nx9o5r3rf6_ls.png
  • b####.####.nl/m/fjbxke4recte_ls.png
  • tr####.####.com/serve.js.php?w=####&t=####&c=####&width=####&referer=####
  • d####.####.com/deploy/js_visitor_settings.php?v=####&a=####&url=####&ran...
  • c####.####.org/2017-04-07/1cb71f9632d61311e32d0e3eadb56699.jpg!240
  • c2f2208####.####.com/54d9f67b07830f2c0a0000ba.ico
  • c2f2208####.####.com/54b646a807830f6dff000000.ico
  • c####.####.nl/service/js/nunl/scoreboard/
  • 000464d####.####.com/58e561f366f60039037405de_500x281.jpg
  • teleg####.nl/static/build/app.2fc85aff6ebb99a0ac57c2bc7d8b89e5.js
  • c####.####.com/req?v=####&id=####&acc=####&tit=####
  • n####.nl/m/sw4xd1xayqmq_wd640.jpg/lifehack-zo-maak-je-een-muggenval
  • con####.####.net/en_US/sdk.js
  • gl####.####.com/trace?offer_id=####&app_id=####&type=####&aff_sub=####
  • h####.com/
  • ce####.####.org/v2/content/getItemDetails-46628875.json
  • b####.####.nl/m/m1nx6furkv70_ls.png
  • google-####.com/collect?v=####&_v=####&a=####&t=####&ni=####&_s=####&dl=...
  • b####.####.nl/m/m1nx81kr1pdi_ls.png
  • pag####.####.com/pagead/js/adsbygoogle.js
  • h####.com/css/partner-article.css?bust=####
  • n####.####.com/images/lib/basic/sport/football/competition/logo/large/57...
  • a897fa3####.####.net/test.png
  • m####.####.nl/static/img/nixel.gif
  • n####.nl/m/e8pxiuuarvgy_wd640.jpg
  • b####.####.nl/m/m1nx6fxr6836_ls.png
  • n####.####.com/images/lib/basic/sport/football/competition/logo/large/53...
  • p####.####.com/pixel;r=1918585549;labels=Publishers.Publisher-31865%2CWi...
Запросы HTTP POST:
  • a####.####.com/api/ads/fetch?_s=####
  • a####.####.com/api/ads/connect
  • ce####.####.org/auth/gather
  • tr####.####.com/serve.js.php?w=####&t=####&c=####&width=####&referer=####
  • bi####.####.com/cdb?ptv=####&profileId=####&cb=####
  • a####.####.com/app_logs
  • 5####.####.75/live
Изменения в файловой системе:
Создает следующие файлы:
  • <Package Folder>/app_tmpdex/reach-sdk.zip
  • <Package Folder>/shared_prefs/umeng_general_config.xml
  • <Package Folder>/shared_prefs/AppStore.xml.bak
  • <Package Folder>/files/.yflurryfreqcap.-3604fbe1ac7f4f1c
  • <Package Folder>/shared_prefs/io.fabric.sdk.android;fabric;io.fabric.sdk.android.Onboarding.xml
  • <Package Folder>/databases/Zuoyoo_db
  • <Package Folder>/files/.YFlurrySenderIndex.info.AnalyticsMain
  • <Package Folder>/shared_prefs/Game_recommend.xml
  • <Package Folder>/files/.yflurryreport.-3604fbe1ac7f4f1c
  • <Package Folder>/databases/reach.database.ad-journal
  • <Package Folder>/app_417b80da20024fb78c8de7fd6feddb7f515d6767-01b7-49e5-8273-c8d11b0f331d/sessions/sessionFile
  • <Package Folder>/files/.Fabric/io.fabric.sdk.android;fabric/com.crashlytics.settings.json
  • <Package Folder>/code_cache/secondary-dexes/<Package>-1.apk.classes-459794913.zip
  • <Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
  • <Package Folder>/app_dex/reach-sdk.zip.tmp
  • <Package Folder>/shared_prefs/com.crashlytics.prefs.xml
  • <Package Folder>/shared_prefs/umeng_general_config.xml.bak
  • <Package Folder>/files/.yflurrydatasenderblock.395ae82b-bb0d-47c2-815a-381206d0d422
  • <Package Folder>/files/.yflurryadlog.-3604fbe1ac7f4f1c
  • <Package Folder>/files/.umeng/exchangeIdentity.json
  • <Package Folder>/shared_prefs/com.google.android.gms.measurement.prefs.xml.bak
  • <Package Folder>/cache/webviewCacheChromium/index
  • <Package Folder>/databases/app.manager-journal
  • <Package Folder>/shared_prefs/updateVer.xml
  • <Package Folder>/shared_prefs/Reach.xml
  • <Package Folder>/shared_prefs/GATHER.xml
  • <Package Folder>/shared_prefs/417b80da20024fb78c8de7fd6feddb7f515d6767-01b7-49e5-8273-c8d11b0f331d.xml
  • <Package Folder>/shared_prefs/Prophet.xml
  • <Package Folder>/app_417b80da20024fb78c8de7fd6feddb7f515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
  • <Package Folder>/databases/webview.db-journal
  • <Package Folder>/databases/webviewCookiesChromium.db-journal
  • <Package Folder>/shared_prefs/com.facebook.sdk.appEventPreferences.xml
  • <Package Folder>/app_cache/ApplicationCache.db-journal
  • <Package Folder>/shared_prefs/com.facebook.internal.preferences.APP_SETTINGS.xml
  • <Package Folder>/files/.imprint
  • <Package Folder>/databases/Zuoyoo_db-journal
  • <Package Folder>/shared_prefs/MASTER_DATA.xml
  • <Package Folder>/shared_prefs/AppStore.xml
  • <Package Folder>/cache/webviewCacheChromium/f_00001b
  • <Package Folder>/shared_prefs/Module_Switch_DATA.xml
  • <Package Folder>/cache/webviewCacheChromium/f_00001c
  • <Package Folder>/files/AppEventsLogger.persistedevents
  • <Package Folder>/cache/webviewCacheChromium/f_000023
  • <Package Folder>/cache/webviewCacheChromium/f_000022
  • <Package Folder>/cache/webviewCacheChromium/f_000021
  • <Package Folder>/cache/webviewCacheChromium/f_000020
  • <Package Folder>/cache/webviewCacheChromium/f_000027
  • <Package Folder>/cache/webviewCacheChromium/f_000026
  • <Package Folder>/cache/webviewCacheChromium/f_000025
  • <Package Folder>/cache/webviewCacheChromium/f_000024
  • <Package Folder>/cache/webviewCacheChromium/f_000029
  • <Package Folder>/cache/webviewCacheChromium/f_000028
  • <Package Folder>/code_cache/secondary-dexes/<Package>-1.apk.classes-298564628.zip
  • <Package Folder>/shared_prefs/v2_local_login.xml
  • <Package Folder>/shared_prefs/ContextData.xml
  • <Package Folder>/shared_prefs/coolook.minisite.xml
  • <Package Folder>/files/umeng_it.cache
  • <Package Folder>/databases/UmengLocalNotificationStore.db-journal
  • <Package Folder>/shared_prefs/CurArticleInfo.xml
  • <Package Folder>/shared_prefs/Module_Switch_DATA.xml.bak
  • <Package Folder>/shared_prefs/Game_recommend.xml.bak
  • <Package Folder>/shared_prefs/com.google.android.gms.appid.xml
  • <Package Folder>/shared_prefs/Reach.xml.bak
  • <Package Folder>/shared_prefs/<Package>_preferences.xml.bak
  • <Package Folder>/cache/webviewCacheChromium/f_000018
  • <Package Folder>/cache/webviewCacheChromium/f_000019
  • <Package Folder>/cache/webviewCacheChromium/f_000016
  • <Package Folder>/cache/webviewCacheChromium/f_000017
  • <Package Folder>/cache/webviewCacheChromium/f_000014
  • <Package Folder>/cache/webviewCacheChromium/f_000015
  • <Package Folder>/cache/webviewCacheChromium/f_000012
  • <Package Folder>/cache/webviewCacheChromium/f_000013
  • <Package Folder>/cache/webviewCacheChromium/f_000010
  • <Package Folder>/cache/webviewCacheChromium/f_000011
  • <Package Folder>/shared_prefs/<Package>_preferences.xml
  • <Package Folder>/cache/webviewCacheChromium/f_00000a
  • <Package Folder>/cache/webviewCacheChromium/f_00000c
  • <Package Folder>/cache/webviewCacheChromium/f_00000b
  • <Package Folder>/app_417b80da20024fb78c8de7fd6feddb7f515d6767-01b7-49e5-8273-c8d11b0f331d/validatorFile
  • <Package Folder>/cache/webviewCacheChromium/f_00000d
  • <Package Folder>/app_dex/reach-sdk.zip
  • <Package Folder>/cache/webviewCacheChromium/f_00000f
  • <Package Folder>/shared_prefs/PhoneUtil.xml
  • <Package Folder>/cache/webviewCacheChromium/f_00000e
  • <Package Folder>/shared_prefs/com.facebook.sdk.attributionTracking.xml
  • <Package Folder>/shared_prefs/BSModelForPlaced.xml
  • <Package Folder>/shared_prefs/com.google.android.gms.measurement.prefs.xml
  • <Package Folder>/shared_prefs/test.xml
  • <Package Folder>/cache/webviewCacheChromium/f_000009
  • <Package Folder>/cache/webviewCacheChromium/f_000008
  • <Package Folder>/databases/google_app_measurement_local.db
  • <Package Folder>/cache/webviewCacheChromium/f_000001
  • <Package Folder>/cache/webviewCacheChromium/f_000003
  • <Package Folder>/cache/webviewCacheChromium/f_000002
  • <Package Folder>/cache/webviewCacheChromium/f_000005
  • <Package Folder>/cache/webviewCacheChromium/f_000004
  • <Package Folder>/cache/webviewCacheChromium/f_000007
  • <Package Folder>/cache/webviewCacheChromium/f_000006
  • <Package Folder>/shared_prefs/CountryRelevant.xml
  • <Package Folder>/no_backup/com.google.android.gms.appid-no-backup
  • <Package Folder>/cache/webviewCacheChromium/f_00001f
  • <Package Folder>/cache/webviewCacheChromium/f_00001d
  • <Package Folder>/cache/webviewCacheChromium/f_00001e
  • <Package Folder>/databases/google_app_measurement_local.db-journal
  • <Package Folder>/shared_prefs/FLURRY_SHARED_PREFERENCES.xml
  • <Package Folder>/cache/webviewCacheChromium/f_00001a
  • <Package Folder>/shared_prefs/umeng_message_state.xml
  • <Package Folder>/files/.YFlurrySenderIndex.info.AnalyticsData_XS7MGCQYH4WTKK82VNTC_216
  • <Package Folder>/shared_prefs/Alvin2.xml
  • <Package Folder>/cache/webviewCacheChromium/data_3
  • <Package Folder>/shared_prefs/multidex.version.xml
  • <Package Folder>/databases/webviewCookiesChromiumPrivate.db-journal
  • <Package Folder>/cache/webviewCacheChromium/data_2
  • <Package Folder>/cache/webviewCacheChromium/data_1
  • <Package Folder>/cache/webviewCacheChromium/data_0
Другие:
Запускает следующие shell-скрипты:
  • <dexopt>
Может автоматически отправлять СМС-сообщения.

Рекомендации по лечению


Android

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке

Российский разработчик антивирусов Dr.Web с 1992 года
Dr.Web в Реестре Отечественного ПО
Dr.Web совместим с российскими ОС и оборудованием
Dr.Web пользуются в 200+ странах мира
Техническая поддержка 24х7х365 Рус | En

Dr.Web © «Доктор Веб»
2003 — 2022

«Доктор Веб» — российский производитель антивирусных средств защиты информации под маркой Dr.Web. Продукты Dr.Web разрабатываются с 1992 года.

125124, Россия, Москва, 3-я улица Ямского поля, д.2, корп.12А