Техническая информация
Вредоносные функции:
Отправляет СМС-сообщения:
- 9988: move
- 9988: pict
- 9988: pict ok
- 9988: move ok
- 9988: vpict
Сетевая активность:
Подключается к:
- go####.com
- googl####.####.net
- p####.####.com
- rte####.####.com
- c####.####.com
- gst####.com
- su####.####.net
- d####.####.net
- a####.####.com
- pag####.####.com
Запросы HTTP GET:
- p####.####.com/js/google_caf.js?rte=####&tm=####&dn=####&tid=####
- su####.####.net/gk/prompt?t=####&site=####&random=####&r####
- su####.####.net/async_survey?site=####
- p####.####.com/googleCallback?rid=####&isAfd=####
- su####.####.net/insights/consumersurveys/static/401536590502318150/promp...
- a####.####.com/dp-demandmedia/t1026/blue/bullet-blue-7x7.png
- googl####.####.net/aclk?sa=####&ai=####&num=####&sig=####&adurl=####&cli...
- p####.####.com/css/style.css?rte=####&tm=####&dn=####&tid=####&def=####
- d####.####.net/pagead/aclk?sa=####&ai=####&num=####&client=####&nb=####&...
- p####.####.com/js/standard.js?rte=####&tm=####&dn=####&tid=####
- gst####.com/domainads/tracking/caf.gif?ts=####&rid=####
- c####.####.com/jquery-latest.min.js
- d####.####.net/static/caf/slave.html
- p####.####.com/promo/be/
- go####.com/adsense/domains/caf.js
- pag####.####.com/pagead/images/mobile_unified_button_icon_black.png
- d####.####.net/apps/domainpark/domainpark.cgi?r=####&fexp=####&client=##...
- rte####.####.com/templates/t1026/images/bkg-sb.jpg
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/cache/webviewCacheChromium/index
- <Package Folder>/cache/webviewCacheChromium/f_000001
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/cache/webviewCacheChromium/f_000003
- <Package Folder>/cache/webviewCacheChromium/f_000002
- <Package Folder>/cache/webviewCacheChromium/f_000005
- <Package Folder>/cache/webviewCacheChromium/f_000004
- <Package Folder>/cache/webviewCacheChromium/f_000007
- <Package Folder>/cache/webviewCacheChromium/f_000006
- <Package Folder>/databases/webviewCookiesChromium.db-journal
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/cache/webviewCacheChromium/data_3
- <Package Folder>/cache/webviewCacheChromium/data_2
- <Package Folder>/cache/webviewCacheChromium/data_1
- <Package Folder>/cache/webviewCacheChromium/data_0
Другие:
Может автоматически отправлять СМС-сообщения.
