Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Android.Triada.343

Добавлен в вирусную базу Dr.Web: 2017-12-10

Описание добавлено:

Техническая информация

Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
  • Android.Triada.309
Изменения в файловой системе:
Создает следующие файлы:
  • <Package Folder>/.jiagu/libjiagu.so
  • <Package Folder>/app_gt/####/68.png
  • <Package Folder>/app_gt/####/6822.png
  • <Package Folder>/app_gt/####/Marker Felt.ttf
  • <Package Folder>/app_gt/####/_m16.mp3
  • <Package Folder>/app_gt/####/an_huodong.png
  • <Package Folder>/app_gt/####/an_jihuo.png
  • <Package Folder>/app_gt/####/anjian.mp3
  • <Package Folder>/app_gt/####/arial.ttf
  • <Package Folder>/app_gt/####/background1.mp3
  • <Package Folder>/app_gt/####/background2.mp3
  • <Package Folder>/app_gt/####/baretter.mp3
  • <Package Folder>/app_gt/####/bg02.png
  • <Package Folder>/app_gt/####/bg03.png
  • <Package Folder>/app_gt/####/bg04.png
  • <Package Folder>/app_gt/####/bg05.png
  • <Package Folder>/app_gt/####/bg06.png
  • <Package Folder>/app_gt/####/bg_jihuo.png
  • <Package Folder>/app_gt/####/bgk_jzlb.png
  • <Package Folder>/app_gt/####/bgkuang_jineng.png
  • <Package Folder>/app_gt/####/bgm_absorbGold.webp
  • <Package Folder>/app_gt/####/bgm_bombTool.webp
  • <Package Folder>/app_gt/####/bgm_goNow.webp
  • <Package Folder>/app_gt/####/bgm_iceTool.webp
  • <Package Folder>/app_gt/####/boss01.dat
  • <Package Folder>/app_gt/####/boss01.plist
  • <Package Folder>/app_gt/####/boss01.png
  • <Package Folder>/app_gt/####/boss03.dat
  • <Package Folder>/app_gt/####/boss03.plist
  • <Package Folder>/app_gt/####/boss03.png
  • <Package Folder>/app_gt/####/boss2.dat
  • <Package Folder>/app_gt/####/boss2.plist
  • <Package Folder>/app_gt/####/boss2.png
  • <Package Folder>/app_gt/####/box.dat
  • <Package Folder>/app_gt/####/box.plist
  • <Package Folder>/app_gt/####/box.png
  • <Package Folder>/app_gt/####/boy.dat
  • <Package Folder>/app_gt/####/boy.plist
  • <Package Folder>/app_gt/####/boy.png
  • <Package Folder>/app_gt/####/boy_max.dat
  • <Package Folder>/app_gt/####/boy_max.plist
  • <Package Folder>/app_gt/####/boy_max.png
  • <Package Folder>/app_gt/####/btn_attack.png
  • <Package Folder>/app_gt/####/btn_buy_yellow.png
  • <Package Folder>/app_gt/####/btn_close_yellow.png
  • <Package Folder>/app_gt/####/btn_equip.png
  • <Package Folder>/app_gt/####/btn_get_yellow.png
  • <Package Folder>/app_gt/####/btn_go_now.png
  • <Package Folder>/app_gt/####/btn_pack.png
  • <Package Folder>/app_gt/####/btn_sign.png
  • <Package Folder>/app_gt/####/btn_supply.png
  • <Package Folder>/app_gt/####/bullet_move.plist
  • <Package Folder>/app_gt/####/chaozhi.webp
  • <Package Folder>/app_gt/####/chef.dat
  • <Package Folder>/app_gt/####/chef.plist
  • <Package Folder>/app_gt/####/chef.png
  • <Package Folder>/app_gt/####/chinese.plist
  • <Package Folder>/app_gt/####/commonPic.plist
  • <Package Folder>/app_gt/####/commonPic.png
  • <Package Folder>/app_gt/####/dama.dat
  • <Package Folder>/app_gt/####/dama.plist
  • <Package Folder>/app_gt/####/dama.png
  • <Package Folder>/app_gt/####/daodan.mp3
  • <Package Folder>/app_gt/####/dead.dat
  • <Package Folder>/app_gt/####/dead.mp3
  • <Package Folder>/app_gt/####/dead.plist
  • <Package Folder>/app_gt/####/dead.png
  • <Package Folder>/app_gt/####/denglujiangli.webp
  • <Package Folder>/app_gt/####/dialog.fnt
  • <Package Folder>/app_gt/####/dialog.plist
  • <Package Folder>/app_gt/####/dialog.png
  • <Package Folder>/app_gt/####/dog.dat
  • <Package Folder>/app_gt/####/dog.plist
  • <Package Folder>/app_gt/####/dog.png
  • <Package Folder>/app_gt/####/drop_goods.plist
  • <Package Folder>/app_gt/####/enemyInfo.plist
  • <Package Folder>/app_gt/####/fengmianbeijMainmenu.jpg
  • <Package Folder>/app_gt/####/fire1.plist
  • <Package Folder>/app_gt/####/fire_begain.plist
  • <Package Folder>/app_gt/####/frontdoor.png
  • <Package Folder>/app_gt/####/gamingdilog.fnt
  • <Package Folder>/app_gt/####/gamingdilog.png
  • <Package Folder>/app_gt/####/girl.dat
  • <Package Folder>/app_gt/####/girl.plist
  • <Package Folder>/app_gt/####/girl.png
  • <Package Folder>/app_gt/####/gunGrade.plist
  • <Package Folder>/app_gt/####/guns0.dat
  • <Package Folder>/app_gt/####/guns0.plist
  • <Package Folder>/app_gt/####/guns0.png
  • <Package Folder>/app_gt/####/guns_1.dat
  • <Package Folder>/app_gt/####/guns_1.plist
  • <Package Folder>/app_gt/####/guns_1.png
  • <Package Folder>/app_gt/####/hero0.dat
  • <Package Folder>/app_gt/####/hero0.plist
  • <Package Folder>/app_gt/####/hero0.png
  • <Package Folder>/app_gt/####/heroAddDropGoods.plist
  • <Package Folder>/app_gt/####/hero_1.dat
  • <Package Folder>/app_gt/####/hero_1.plist
  • <Package Folder>/app_gt/####/hero_1.png
  • <Package Folder>/app_gt/####/hiero_uistore_green.fnt
  • <Package Folder>/app_gt/####/hiero_uistore_green.png
  • <Package Folder>/app_gt/####/hiero_uistore_red.fnt
  • <Package Folder>/app_gt/####/hiero_uistore_red.png
  • <Package Folder>/app_gt/####/huojiantong.plist
  • <Package Folder>/app_gt/####/ice.mp3
  • <Package Folder>/app_gt/####/icon_shuzi_28x33(2).png
  • <Package Folder>/app_gt/####/jiao1.mp3
  • <Package Folder>/app_gt/####/jiao2.mp3
  • <Package Folder>/app_gt/####/jiao3.mp3
  • <Package Folder>/app_gt/####/jiazai_1.png
  • <Package Folder>/app_gt/####/jiazai_10.png
  • <Package Folder>/app_gt/####/jiazai_11.png
  • <Package Folder>/app_gt/####/jiazai_12.png
  • <Package Folder>/app_gt/####/jiazai_13.png
  • <Package Folder>/app_gt/####/jiazai_2.png
  • <Package Folder>/app_gt/####/jiazai_3.png
  • <Package Folder>/app_gt/####/jiazai_4.png
  • <Package Folder>/app_gt/####/jiazai_5.png
  • <Package Folder>/app_gt/####/jiazai_6.png
  • <Package Folder>/app_gt/####/jiazai_7.png
  • <Package Folder>/app_gt/####/jiazai_8.png
  • <Package Folder>/app_gt/####/jiazai_9.png
  • <Package Folder>/app_gt/####/jiequ.mp3
  • <Package Folder>/app_gt/####/jifei_wenzi_d_12x19.png
  • <Package Folder>/app_gt/####/jinbi.mp3
  • <Package Folder>/app_gt/####/level11.tmx
  • <Package Folder>/app_gt/####/level12.tmx
  • <Package Folder>/app_gt/####/level13.tmx
  • <Package Folder>/app_gt/####/level14.tmx
  • <Package Folder>/app_gt/####/level15.tmx
  • <Package Folder>/app_gt/####/level16.tmx
  • <Package Folder>/app_gt/####/level17.tmx
  • <Package Folder>/app_gt/####/level18.tmx
  • <Package Folder>/app_gt/####/level21.tmx
  • <Package Folder>/app_gt/####/level22.tmx
  • <Package Folder>/app_gt/####/level23.tmx
  • <Package Folder>/app_gt/####/level24.tmx
  • <Package Folder>/app_gt/####/level25.tmx
  • <Package Folder>/app_gt/####/level26.tmx
  • <Package Folder>/app_gt/####/level27.tmx
  • <Package Folder>/app_gt/####/level28.tmx
  • <Package Folder>/app_gt/####/level31.tmx
  • <Package Folder>/app_gt/####/level32.tmx
  • <Package Folder>/app_gt/####/level33.tmx
  • <Package Folder>/app_gt/####/level34.tmx
  • <Package Folder>/app_gt/####/level35.tmx
  • <Package Folder>/app_gt/####/level36.tmx
  • <Package Folder>/app_gt/####/level37.tmx
  • <Package Folder>/app_gt/####/level38.tmx
  • <Package Folder>/app_gt/####/level41.tmx
  • <Package Folder>/app_gt/####/level42.tmx
  • <Package Folder>/app_gt/####/level43.tmx
  • <Package Folder>/app_gt/####/level44.tmx
  • <Package Folder>/app_gt/####/level45.tmx
  • <Package Folder>/app_gt/####/level46.tmx
  • <Package Folder>/app_gt/####/level47.tmx
  • <Package Folder>/app_gt/####/level48.tmx
  • <Package Folder>/app_gt/####/level51.tmx
  • <Package Folder>/app_gt/####/level52.tmx
  • <Package Folder>/app_gt/####/level53.tmx
  • <Package Folder>/app_gt/####/level54.tmx
  • <Package Folder>/app_gt/####/level55.tmx
  • <Package Folder>/app_gt/####/level56.tmx
  • <Package Folder>/app_gt/####/level57.tmx
  • <Package Folder>/app_gt/####/level58.tmx
  • <Package Folder>/app_gt/####/level61.tmx
  • <Package Folder>/app_gt/####/level62.tmx
  • <Package Folder>/app_gt/####/level63.tmx
  • <Package Folder>/app_gt/####/level64.tmx
  • <Package Folder>/app_gt/####/level65.tmx
  • <Package Folder>/app_gt/####/level66.tmx
  • <Package Folder>/app_gt/####/level67.tmx
  • <Package Folder>/app_gt/####/level68.tmx
  • <Package Folder>/app_gt/####/levelup.mp3
  • <Package Folder>/app_gt/####/lianxudenglu.webp
  • <Package Folder>/app_gt/####/lianye.dat
  • <Package Folder>/app_gt/####/lianye.plist
  • <Package Folder>/app_gt/####/lianye.png
  • <Package Folder>/app_gt/####/lodingbg.png
  • <Package Folder>/app_gt/####/login_pack_bgm.jpg
  • <Package Folder>/app_gt/####/longding.png
  • <Package Folder>/app_gt/####/lose.mp3
  • <Package Folder>/app_gt/####/m16.mp3
  • <Package Folder>/app_gt/####/mapPic1.plist
  • <Package Folder>/app_gt/####/mapPic1.png
  • <Package Folder>/app_gt/####/menu.mp3
  • <Package Folder>/app_gt/####/mf_p.plist
  • <Package Folder>/app_gt/####/mf_p.png
  • <Package Folder>/app_gt/####/mflt.plist
  • <Package Folder>/app_gt/####/out11.plist
  • <Package Folder>/app_gt/####/out12.plist
  • <Package Folder>/app_gt/####/out13.plist
  • <Package Folder>/app_gt/####/out14.plist
  • <Package Folder>/app_gt/####/out15.plist
  • <Package Folder>/app_gt/####/out16.plist
  • <Package Folder>/app_gt/####/out17.plist
  • <Package Folder>/app_gt/####/out18.plist
  • <Package Folder>/app_gt/####/out21.plist
  • <Package Folder>/app_gt/####/out22.plist
  • <Package Folder>/app_gt/####/out23.plist
  • <Package Folder>/app_gt/####/out24.plist
  • <Package Folder>/app_gt/####/out25.plist
  • <Package Folder>/app_gt/####/out26.plist
  • <Package Folder>/app_gt/####/out27.plist
  • <Package Folder>/app_gt/####/out28.plist
  • <Package Folder>/app_gt/####/out31.plist
  • <Package Folder>/app_gt/####/out32.plist
  • <Package Folder>/app_gt/####/out33.plist
  • <Package Folder>/app_gt/####/out34.plist
  • <Package Folder>/app_gt/####/out35.plist
  • <Package Folder>/app_gt/####/out36.plist
  • <Package Folder>/app_gt/####/out37.plist
  • <Package Folder>/app_gt/####/out38.plist
  • <Package Folder>/app_gt/####/out41.plist
  • <Package Folder>/app_gt/####/out42.plist
  • <Package Folder>/app_gt/####/out43.plist
  • <Package Folder>/app_gt/####/out44.plist
  • <Package Folder>/app_gt/####/out45.plist
  • <Package Folder>/app_gt/####/out46.plist
  • <Package Folder>/app_gt/####/out47.plist
  • <Package Folder>/app_gt/####/out48.plist
  • <Package Folder>/app_gt/####/out51.plist
  • <Package Folder>/app_gt/####/out52.plist
  • <Package Folder>/app_gt/####/out53.plist
  • <Package Folder>/app_gt/####/out54.plist
  • <Package Folder>/app_gt/####/out55.plist
  • <Package Folder>/app_gt/####/out56.plist
  • <Package Folder>/app_gt/####/out57.plist
  • <Package Folder>/app_gt/####/out58.plist
  • <Package Folder>/app_gt/####/out61.plist
  • <Package Folder>/app_gt/####/out62.plist
  • <Package Folder>/app_gt/####/out63.plist
  • <Package Folder>/app_gt/####/out64.plist
  • <Package Folder>/app_gt/####/out65.plist
  • <Package Folder>/app_gt/####/out66.plist
  • <Package Folder>/app_gt/####/out67.plist
  • <Package Folder>/app_gt/####/out68.plist
  • <Package Folder>/app_gt/####/pai_jbbsdafz02.png
  • <Package Folder>/app_gt/####/pai_jbbz01.png
  • <Package Folder>/app_gt/####/pai_jinsdfbi2.png
  • <Package Folder>/app_gt/####/pai_zssdfabz02.png
  • <Package Folder>/app_gt/####/pai_zuanssdfhi02.png
  • <Package Folder>/app_gt/####/picInGameBlood.plist
  • <Package Folder>/app_gt/####/picInGameBlood.png
  • <Package Folder>/app_gt/####/picInGameJinBi.plist
  • <Package Folder>/app_gt/####/picInGameJinBi.png
  • <Package Folder>/app_gt/####/picInGameSun.plist
  • <Package Folder>/app_gt/####/picInGame_fullScreen.plist
  • <Package Folder>/app_gt/####/picInGame_fullScreen.png
  • <Package Folder>/app_gt/####/pic_In_gameUI.plist
  • <Package Folder>/app_gt/####/pic_In_gameUI.png
  • <Package Folder>/app_gt/####/police.dat
  • <Package Folder>/app_gt/####/police.plist
  • <Package Folder>/app_gt/####/police.png
  • <Package Folder>/app_gt/####/police_max.dat
  • <Package Folder>/app_gt/####/police_max.plist
  • <Package Folder>/app_gt/####/police_max.png
  • <Package Folder>/app_gt/####/reload.mp3
  • <Package Folder>/app_gt/####/shibaijs_zi.png
  • <Package Folder>/app_gt/####/shotgun.mp3
  • <Package Folder>/app_gt/####/shouqiang.mp3
  • <Package Folder>/app_gt/####/shoushang.mp3
  • <Package Folder>/app_gt/####/shuzi_14x20.png
  • <Package Folder>/app_gt/####/shuzi_14x23_bai.png
  • <Package Folder>/app_gt/####/shuzi_14x23_huang.png
  • <Package Folder>/app_gt/####/shuzi_17x25_huang.png
  • <Package Folder>/app_gt/####/shuzi_17x32_lv.png
  • <Package Folder>/app_gt/####/shuzi_20x30.png
  • <Package Folder>/app_gt/####/shuzi_22x28_bai.png
  • <Package Folder>/app_gt/####/shuzi_33x43.png
  • <Package Folder>/app_gt/####/shuzi_boshutishi_52x56.png
  • <Package Folder>/app_gt/####/shuzi_diaoxie_11x19.png
  • <Package Folder>/app_gt/####/shuzi_jinqian_11x19.png
  • <Package Folder>/app_gt/####/skillUpdate.plist
  • <Package Folder>/app_gt/####/slotlayerget.plist
  • <Package Folder>/app_gt/####/stone1.png
  • <Package Folder>/app_gt/####/store_lock.fnt
  • <Package Folder>/app_gt/####/store_lock.png
  • <Package Folder>/app_gt/####/suzi_9x13.png
  • <Package Folder>/app_gt/####/suzi_9x13_hong.png
  • <Package Folder>/app_gt/####/task.fnt
  • <Package Folder>/app_gt/####/task.plist
  • <Package Folder>/app_gt/####/task.png
  • <Package Folder>/app_gt/####/text_common.plist
  • <Package Folder>/app_gt/####/text_common.png
  • <Package Folder>/app_gt/####/text_game.plist
  • <Package Folder>/app_gt/####/text_game.png
  • <Package Folder>/app_gt/####/text_ui1.plist
  • <Package Folder>/app_gt/####/text_ui1.png
  • <Package Folder>/app_gt/####/text_ui2.plist
  • <Package Folder>/app_gt/####/text_ui2.png
  • <Package Folder>/app_gt/####/tuichulibao.webp
  • <Package Folder>/app_gt/####/ui_store1.plist
  • <Package Folder>/app_gt/####/ui_store1.png
  • <Package Folder>/app_gt/####/uimainmanu_unearth.plist
  • <Package Folder>/app_gt/####/uimainmanu_unearth2.plist
  • <Package Folder>/app_gt/####/uimainmanu_weather.plist
  • <Package Folder>/app_gt/####/weaponSystem.plist
  • <Package Folder>/app_gt/####/win.mp3
  • <Package Folder>/app_gt/####/worker.dat
  • <Package Folder>/app_gt/####/worker.plist
  • <Package Folder>/app_gt/####/worker.png
  • <Package Folder>/app_gt/####/worker_max.dat
  • <Package Folder>/app_gt/####/worker_max.plist
  • <Package Folder>/app_gt/####/worker_max.png
  • <Package Folder>/app_gt/####/wuqiUpdate.fnt
  • <Package Folder>/app_gt/####/wuqiUpdate.png
  • <Package Folder>/app_gt/####/xlording.png
  • <Package Folder>/app_gt/####/xshui.png
  • <Package Folder>/app_gt/####/zadan.mp3
  • <Package Folder>/app_gt/####/zhizhu.dat
  • <Package Folder>/app_gt/####/zhizhu.plist
  • <Package Folder>/app_gt/####/zhizhu.png
  • <Package Folder>/app_gt/####/zi_11x16.png
  • <Package Folder>/app_gt/####/zi_11x16_hong.png
  • <Package Folder>/app_gt/####/zi_11x16_lan.png
  • <Package Folder>/app_gt/####/zi_LV_11x19.png
  • <Package Folder>/app_gt/####/zi_libao_16x27.png
  • <Package Folder>/app_gt/####/zi_tishi04_17x24.png
  • <Package Folder>/app_gt/####/zi_yuan_20x33.png
  • <Package Folder>/app_gt/####/zombie.dat
  • <Package Folder>/app_gt/####/zombie.plist
  • <Package Folder>/app_gt/####/zombie.png
  • <Package Folder>/app_gt/####/zombie_max.dat
  • <Package Folder>/app_gt/####/zombie_max.plist
  • <Package Folder>/app_gt/####/zombie_max.png
  • <Package Folder>/app_gt/####/zuanshi.mp3
  • <Package Folder>/app_gt/Charge.xml
  • <Package Folder>/app_gt/Config.xml
  • <Package Folder>/app_gt/ConsumeCodeInfo.xml
  • <Package Folder>/app_gt/d_data_store.dat
  • <Package Folder>/app_gt/feeInfo.dat
  • <Package Folder>/app_gt/light.png
  • <Package Folder>/app_gt/luck.plist
  • <Package Folder>/app_gt/mofun_logo.png
  • <Package Folder>/app_gt/s_data_store.dat
  • <Package Folder>/app_gt/zhiqu_logo.png
  • <Package Folder>/app_gt/zhishi.png
  • <Package Folder>/databases/sdk_DB-journal
  • <Package Folder>/files/####/.jg.ic
  • <Package Folder>/shared_prefs/csdksession.xml
  • <Package Folder>/shared_prefs/kes.xml
  • <Package Folder>/shared_prefs/qihoo_jiagu_crash_report.xml
  • <SD-Card>/Android/####/KSE.DAT
  • <SD-Card>/Android/####/NDID.DAT
Другие:
Запускает следующие shell-скрипты:
  • chmod 755 <Package Folder>/.jiagu/libjiagu.so
Загружает динамические библиотеки:
  • cocos2dcpp
  • libjiagu
Использует специальную библиотеку для скрытия исполняемого байткода.
Осуществляет доступ к информации о телефоне (номер, imei и тд.).
Отрисовывает собственные окна поверх других приложений.

Рекомендации по лечению


Android

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке