Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Android.Packed.35633

Добавлен в вирусную базу Dr.Web: 2018-01-25

Описание добавлено:

Техническая информация

Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
  • Android.DownLoader.2083
Сетевая активность:
Подключается к:
  • UDP(DNS) <Google DNS>
  • TCP(HTTP/1.1) a.appj####.com:80
  • TCP(TLS/1.0) de####.mixp####.com:443
Запросы DNS:
  • a.appj####.com
  • de####.mixp####.com
  • mt####.go####.com
Запросы HTTP POST:
  • a.appj####.com/ad-service/ad/mark
  • a.appj####.com/jiagu/check/upgrade
Изменения в файловой системе:
Создает следующие файлы:
  • /data/anr/traces.txt
  • <Package Folder>/.jiagu/libjiagu.so
  • <Package Folder>/app_ajpdal/<Package>.odex
  • <Package Folder>/app_ajpdal/<Package>.zip
  • <Package Folder>/app_animations/####/._180CC29A-C958-4188-86CF-...72.ikb
  • <Package Folder>/app_animations/####/._180CC29A-C958-4188-86CF-...72.jpg
  • <Package Folder>/app_animations/####/._18975690-F517-4747-9F36-...A3.ikb
  • <Package Folder>/app_animations/####/._18975690-F517-4747-9F36-...A3.jpg
  • <Package Folder>/app_animations/####/._18CF634A-F5F7-454C-85EA-...10.ikb
  • <Package Folder>/app_animations/####/._18CF634A-F5F7-454C-85EA-...10.jpg
  • <Package Folder>/app_animations/####/._1AA44376-67F6-4CE0-9CEC-...40.ikb
  • <Package Folder>/app_animations/####/._1AA44376-67F6-4CE0-9CEC-...40.jpg
  • <Package Folder>/app_animations/####/._1C0364A8-E9A1-4621-89C1-...89.ikb
  • <Package Folder>/app_animations/####/._1C0364A8-E9A1-4621-89C1-...89.jpg
  • <Package Folder>/app_animations/####/._1_ball.animatic
  • <Package Folder>/app_animations/####/._2CA92D5D-221F-47A6-A02B-...FA.ikb
  • <Package Folder>/app_animations/####/._2CA92D5D-221F-47A6-A02B-...FA.jpg
  • <Package Folder>/app_animations/####/._2E0BE7DE-B9DA-4709-A69E-...39.ikb
  • <Package Folder>/app_animations/####/._2E0BE7DE-B9DA-4709-A69E-...39.jpg
  • <Package Folder>/app_animations/####/._2_rabbit.animatic
  • <Package Folder>/app_animations/####/._33626C26-2FB8-4620-B807-...43.ikb
  • <Package Folder>/app_animations/####/._33626C26-2FB8-4620-B807-...43.jpg
  • <Package Folder>/app_animations/####/._3732A473-706E-434D-871D-...48.ikb
  • <Package Folder>/app_animations/####/._3732A473-706E-434D-871D-...48.jpg
  • <Package Folder>/app_animations/####/._387B1CF8-850F-49DB-B7FD-...B0.ikb
  • <Package Folder>/app_animations/####/._387B1CF8-850F-49DB-B7FD-...B0.jpg
  • <Package Folder>/app_animations/####/._3975DAF0-57D5-4308-BD78-...21.ikb
  • <Package Folder>/app_animations/####/._3975DAF0-57D5-4308-BD78-...21.jpg
  • <Package Folder>/app_animations/####/._3_bird.animatic
  • <Package Folder>/app_animations/####/._44C573CC-D136-475F-BFBC-...44.ikb
  • <Package Folder>/app_animations/####/._44C573CC-D136-475F-BFBC-...44.jpg
  • <Package Folder>/app_animations/####/._45B2A259-97FA-4A6E-8A43-...0A.ikb
  • <Package Folder>/app_animations/####/._45B2A259-97FA-4A6E-8A43-...0A.jpg
  • <Package Folder>/app_animations/####/._498EA363-8835-4D1B-B559-...43.ikb
  • <Package Folder>/app_animations/####/._498EA363-8835-4D1B-B559-...43.jpg
  • <Package Folder>/app_animations/####/._4ED54400-4C4B-4368-AFA8-...E6.ikb
  • <Package Folder>/app_animations/####/._4ED54400-4C4B-4368-AFA8-...E6.jpg
  • <Package Folder>/app_animations/####/._4_dolphin.animatic
  • <Package Folder>/app_animations/####/._50D3AFB1-9D9E-40A3-B7D6-...68.ikb
  • <Package Folder>/app_animations/####/._50D3AFB1-9D9E-40A3-B7D6-...68.jpg
  • <Package Folder>/app_animations/####/._558ED4C3-FA4A-471E-9D21-...EF.ikb
  • <Package Folder>/app_animations/####/._558ED4C3-FA4A-471E-9D21-...EF.jpg
  • <Package Folder>/app_animations/####/._5D378E1C-CCE2-46CF-83C4-...A6.ikb
  • <Package Folder>/app_animations/####/._5D378E1C-CCE2-46CF-83C4-...A6.jpg
  • <Package Folder>/app_animations/####/._5_wise-monkey.animatic
  • <Package Folder>/app_animations/####/._673F5897-91F7-4208-A286-...CA.ikb
  • <Package Folder>/app_animations/####/._673F5897-91F7-4208-A286-...CA.jpg
  • <Package Folder>/app_animations/####/._68D488CF-02F0-45C8-930E-...07.ikb
  • <Package Folder>/app_animations/####/._68D488CF-02F0-45C8-930E-...07.jpg
  • <Package Folder>/app_animations/####/._6D94A4B8-7EE2-4F7C-89C2-...5F.ikb
  • <Package Folder>/app_animations/####/._6D94A4B8-7EE2-4F7C-89C2-...5F.jpg
  • <Package Folder>/app_animations/####/._6EC647CA-3F2A-491A-9D43-...3C.ikb
  • <Package Folder>/app_animations/####/._6EC647CA-3F2A-491A-9D43-...3C.jpg
  • <Package Folder>/app_animations/####/._6_dog.animatic
  • <Package Folder>/app_animations/####/._78ABD9FA-AD10-4E05-B183-...AB.ikb
  • <Package Folder>/app_animations/####/._78ABD9FA-AD10-4E05-B183-...AB.jpg
  • <Package Folder>/app_animations/####/._78D072D9-E6C6-4566-9069-...F6.ikb
  • <Package Folder>/app_animations/####/._78D072D9-E6C6-4566-9069-...F6.jpg
  • <Package Folder>/app_animations/####/._7908AAF4-668B-4148-819B-...CC.ikb
  • <Package Folder>/app_animations/####/._7908AAF4-668B-4148-819B-...CC.jpg
  • <Package Folder>/app_animations/####/._7D56912C-4FF7-4A2F-8538-...6B.ikb
  • <Package Folder>/app_animations/####/._7D56912C-4FF7-4A2F-8538-...6B.jpg
  • <Package Folder>/app_animations/####/._7DFA6F41-C623-4114-A490-...B1.ikb
  • <Package Folder>/app_animations/####/._7DFA6F41-C623-4114-A490-...B1.jpg
  • <Package Folder>/app_animations/####/._8E035A23-03CD-4EC8-84CF-...D9.ikb
  • <Package Folder>/app_animations/####/._8E035A23-03CD-4EC8-84CF-...D9.jpg
  • <Package Folder>/app_animations/####/._8F0DA200-5B83-46DB-BD93-...79.ikb
  • <Package Folder>/app_animations/####/._8F0DA200-5B83-46DB-BD93-...79.jpg
  • <Package Folder>/app_animations/####/._919E0151-19C3-43E7-B3B8-...56.ikb
  • <Package Folder>/app_animations/####/._919E0151-19C3-43E7-B3B8-...56.jpg
  • <Package Folder>/app_animations/####/._94FF39CA-7622-42D6-9AFA-...1A.ikb
  • <Package Folder>/app_animations/####/._94FF39CA-7622-42D6-9AFA-...1A.jpg
  • <Package Folder>/app_animations/####/._954BC774-AFA3-4BD7-B79B-...26.ikb
  • <Package Folder>/app_animations/####/._954BC774-AFA3-4BD7-B79B-...26.jpg
  • <Package Folder>/app_animations/####/._99FBC928-1692-49CA-9532-...4B.ikb
  • <Package Folder>/app_animations/####/._99FBC928-1692-49CA-9532-...4B.jpg
  • <Package Folder>/app_animations/####/._9D78C47B-BD86-448C-9376-...42.ikb
  • <Package Folder>/app_animations/####/._9D78C47B-BD86-448C-9376-...42.jpg
  • <Package Folder>/app_animations/####/._A29D3935-B392-444F-A3B5-...B8.ikb
  • <Package Folder>/app_animations/####/._A29D3935-B392-444F-A3B5-...B8.jpg
  • <Package Folder>/app_animations/####/._A2BAC03D-C104-42AE-A598-...86.ikb
  • <Package Folder>/app_animations/####/._A2BAC03D-C104-42AE-A598-...86.jpg
  • <Package Folder>/app_animations/####/._A4E5FD28-8644-4658-9C4C-...6E.ikb
  • <Package Folder>/app_animations/####/._A4E5FD28-8644-4658-9C4C-...6E.jpg
  • <Package Folder>/app_animations/####/._A541FE36-0F38-4001-851F-...DE.ikb
  • <Package Folder>/app_animations/####/._A541FE36-0F38-4001-851F-...DE.jpg
  • <Package Folder>/app_animations/####/._A6EFAA47-D115-430F-8F82-...01.ikb
  • <Package Folder>/app_animations/####/._A6EFAA47-D115-430F-8F82-...01.jpg
  • <Package Folder>/app_animations/####/._AAD02ABF-D7AE-467A-B4EA-...C0.ikb
  • <Package Folder>/app_animations/####/._AAD02ABF-D7AE-467A-B4EA-...C0.jpg
  • <Package Folder>/app_animations/####/._AE1E2530-EDC3-4BF0-9CBC-...DF.ikb
  • <Package Folder>/app_animations/####/._AE1E2530-EDC3-4BF0-9CBC-...DF.jpg
  • <Package Folder>/app_animations/####/._B1DF03CC-034E-4FC2-8693-...93.ikb
  • <Package Folder>/app_animations/####/._B1DF03CC-034E-4FC2-8693-...93.jpg
  • <Package Folder>/app_animations/####/._B21C5477-9C78-4C8C-BF79-...47.ikb
  • <Package Folder>/app_animations/####/._B21C5477-9C78-4C8C-BF79-...47.jpg
  • <Package Folder>/app_animations/####/._B3A67D32-84E4-428B-BBEC-...15.ikb
  • <Package Folder>/app_animations/####/._B3A67D32-84E4-428B-BBEC-...15.jpg
  • <Package Folder>/app_animations/####/._B3B73E14-2CF3-48A7-B7CD-...0F.ikb
  • <Package Folder>/app_animations/####/._B3B73E14-2CF3-48A7-B7CD-...0F.jpg
  • <Package Folder>/app_animations/####/._B83B0D75-2BF9-4481-BC79-...2A.ikb
  • <Package Folder>/app_animations/####/._B83B0D75-2BF9-4481-BC79-...2A.jpg
  • <Package Folder>/app_animations/####/._BE133540-62C2-4A2F-99DA-...DB.ikb
  • <Package Folder>/app_animations/####/._BE133540-62C2-4A2F-99DA-...DB.jpg
  • <Package Folder>/app_animations/####/._D17D9B09-AA86-41CB-8F19-...CC.ikb
  • <Package Folder>/app_animations/####/._D17D9B09-AA86-41CB-8F19-...CC.jpg
  • <Package Folder>/app_animations/####/._D17E1FE5-05D0-425E-BA25-...0F.ikb
  • <Package Folder>/app_animations/####/._D17E1FE5-05D0-425E-BA25-...0F.jpg
  • <Package Folder>/app_animations/####/._D3D1D0F4-5782-4070-B4D1-...0A.ikb
  • <Package Folder>/app_animations/####/._D3D1D0F4-5782-4070-B4D1-...0A.jpg
  • <Package Folder>/app_animations/####/._D4FD3176-B4D5-4B80-B5F5-...A2.ikb
  • <Package Folder>/app_animations/####/._D4FD3176-B4D5-4B80-B5F5-...A2.jpg
  • <Package Folder>/app_animations/####/._D857B1B5-89B9-48A2-99A2-...7C.ikb
  • <Package Folder>/app_animations/####/._D857B1B5-89B9-48A2-99A2-...7C.jpg
  • <Package Folder>/app_animations/####/._F07613A7-D082-4256-A195-...38.ikb
  • <Package Folder>/app_animations/####/._F07613A7-D082-4256-A195-...38.jpg
  • <Package Folder>/app_animations/####/._F3EFCFFC-9F23-472B-BDD4-...00.ikb
  • <Package Folder>/app_animations/####/._F3EFCFFC-9F23-472B-BDD4-...00.jpg
  • <Package Folder>/app_animations/####/._FC8976E3-8904-472A-BA54-...1B.ikb
  • <Package Folder>/app_animations/####/._FC8976E3-8904-472A-BA54-...1B.jpg
  • <Package Folder>/app_animations/####/._FF010BB1-4FFF-4000-961A-...49.ikb
  • <Package Folder>/app_animations/####/._FF010BB1-4FFF-4000-961A-...49.jpg
  • <Package Folder>/app_animations/####/._Frames
  • <Package Folder>/app_animations/####/._Meta.json
  • <Package Folder>/app_animations/####/._Source
  • <Package Folder>/app_animations/####/._Thumbnails
  • <Package Folder>/app_animations/####/180CC29A-C958-4188-86CF-B2...72.ikb
  • <Package Folder>/app_animations/####/180CC29A-C958-4188-86CF-B2...72.jpg
  • <Package Folder>/app_animations/####/18975690-F517-4747-9F36-FC...A3.ikb
  • <Package Folder>/app_animations/####/18975690-F517-4747-9F36-FC...A3.jpg
  • <Package Folder>/app_animations/####/18CF634A-F5F7-454C-85EA-7A...10.ikb
  • <Package Folder>/app_animations/####/18CF634A-F5F7-454C-85EA-7A...10.jpg
  • <Package Folder>/app_animations/####/1AA44376-67F6-4CE0-9CEC-F4...40.ikb
  • <Package Folder>/app_animations/####/1AA44376-67F6-4CE0-9CEC-F4...40.jpg
  • <Package Folder>/app_animations/####/1C0364A8-E9A1-4621-89C1-A2...89.ikb
  • <Package Folder>/app_animations/####/1C0364A8-E9A1-4621-89C1-A2...89.jpg
  • <Package Folder>/app_animations/####/2CA92D5D-221F-47A6-A02B-22...FA.ikb
  • <Package Folder>/app_animations/####/2CA92D5D-221F-47A6-A02B-22...FA.jpg
  • <Package Folder>/app_animations/####/2E0BE7DE-B9DA-4709-A69E-D2...39.ikb
  • <Package Folder>/app_animations/####/2E0BE7DE-B9DA-4709-A69E-D2...39.jpg
  • <Package Folder>/app_animations/####/33626C26-2FB8-4620-B807-16...43.ikb
  • <Package Folder>/app_animations/####/33626C26-2FB8-4620-B807-16...43.jpg
  • <Package Folder>/app_animations/####/3732A473-706E-434D-871D-22...48.ikb
  • <Package Folder>/app_animations/####/3732A473-706E-434D-871D-22...48.jpg
  • <Package Folder>/app_animations/####/387B1CF8-850F-49DB-B7FD-43...B0.ikb
  • <Package Folder>/app_animations/####/387B1CF8-850F-49DB-B7FD-43...B0.jpg
  • <Package Folder>/app_animations/####/3975DAF0-57D5-4308-BD78-13...21.ikb
  • <Package Folder>/app_animations/####/3975DAF0-57D5-4308-BD78-13...21.jpg
  • <Package Folder>/app_animations/####/44C573CC-D136-475F-BFBC-3F...44.ikb
  • <Package Folder>/app_animations/####/44C573CC-D136-475F-BFBC-3F...44.jpg
  • <Package Folder>/app_animations/####/45B2A259-97FA-4A6E-8A43-B8...0A.ikb
  • <Package Folder>/app_animations/####/45B2A259-97FA-4A6E-8A43-B8...0A.jpg
  • <Package Folder>/app_animations/####/498EA363-8835-4D1B-B559-3F...43.ikb
  • <Package Folder>/app_animations/####/498EA363-8835-4D1B-B559-3F...43.jpg
  • <Package Folder>/app_animations/####/4ED54400-4C4B-4368-AFA8-6E...E6.ikb
  • <Package Folder>/app_animations/####/4ED54400-4C4B-4368-AFA8-6E...E6.jpg
  • <Package Folder>/app_animations/####/50D3AFB1-9D9E-40A3-B7D6-44...68.ikb
  • <Package Folder>/app_animations/####/50D3AFB1-9D9E-40A3-B7D6-44...68.jpg
  • <Package Folder>/app_animations/####/558ED4C3-FA4A-471E-9D21-89...EF.ikb
  • <Package Folder>/app_animations/####/558ED4C3-FA4A-471E-9D21-89...EF.jpg
  • <Package Folder>/app_animations/####/5D378E1C-CCE2-46CF-83C4-84...A6.ikb
  • <Package Folder>/app_animations/####/5D378E1C-CCE2-46CF-83C4-84...A6.jpg
  • <Package Folder>/app_animations/####/673F5897-91F7-4208-A286-3C...CA.ikb
  • <Package Folder>/app_animations/####/673F5897-91F7-4208-A286-3C...CA.jpg
  • <Package Folder>/app_animations/####/68D488CF-02F0-45C8-930E-DA...07.ikb
  • <Package Folder>/app_animations/####/68D488CF-02F0-45C8-930E-DA...07.jpg
  • <Package Folder>/app_animations/####/6D94A4B8-7EE2-4F7C-89C2-4C...5F.ikb
  • <Package Folder>/app_animations/####/6D94A4B8-7EE2-4F7C-89C2-4C...5F.jpg
  • <Package Folder>/app_animations/####/6EC647CA-3F2A-491A-9D43-F1...3C.ikb
  • <Package Folder>/app_animations/####/6EC647CA-3F2A-491A-9D43-F1...3C.jpg
  • <Package Folder>/app_animations/####/78ABD9FA-AD10-4E05-B183-8D...AB.ikb
  • <Package Folder>/app_animations/####/78ABD9FA-AD10-4E05-B183-8D...AB.jpg
  • <Package Folder>/app_animations/####/78D072D9-E6C6-4566-9069-36...F6.ikb
  • <Package Folder>/app_animations/####/78D072D9-E6C6-4566-9069-36...F6.jpg
  • <Package Folder>/app_animations/####/7908AAF4-668B-4148-819B-68...CC.ikb
  • <Package Folder>/app_animations/####/7908AAF4-668B-4148-819B-68...CC.jpg
  • <Package Folder>/app_animations/####/7D56912C-4FF7-4A2F-8538-21...6B.ikb
  • <Package Folder>/app_animations/####/7D56912C-4FF7-4A2F-8538-21...6B.jpg
  • <Package Folder>/app_animations/####/7DFA6F41-C623-4114-A490-E7...B1.ikb
  • <Package Folder>/app_animations/####/7DFA6F41-C623-4114-A490-E7...B1.jpg
  • <Package Folder>/app_animations/####/8E035A23-03CD-4EC8-84CF-00...D9.ikb
  • <Package Folder>/app_animations/####/8E035A23-03CD-4EC8-84CF-00...D9.jpg
  • <Package Folder>/app_animations/####/8F0DA200-5B83-46DB-BD93-4C...79.ikb
  • <Package Folder>/app_animations/####/8F0DA200-5B83-46DB-BD93-4C...79.jpg
  • <Package Folder>/app_animations/####/919E0151-19C3-43E7-B3B8-51...56.ikb
  • <Package Folder>/app_animations/####/919E0151-19C3-43E7-B3B8-51...56.jpg
  • <Package Folder>/app_animations/####/94FF39CA-7622-42D6-9AFA-BC...1A.ikb
  • <Package Folder>/app_animations/####/94FF39CA-7622-42D6-9AFA-BC...1A.jpg
  • <Package Folder>/app_animations/####/954BC774-AFA3-4BD7-B79B-98...26.ikb
  • <Package Folder>/app_animations/####/954BC774-AFA3-4BD7-B79B-98...26.jpg
  • <Package Folder>/app_animations/####/99FBC928-1692-49CA-9532-62...4B.ikb
  • <Package Folder>/app_animations/####/99FBC928-1692-49CA-9532-62...4B.jpg
  • <Package Folder>/app_animations/####/9D78C47B-BD86-448C-9376-22...42.ikb
  • <Package Folder>/app_animations/####/9D78C47B-BD86-448C-9376-22...42.jpg
  • <Package Folder>/app_animations/####/A29D3935-B392-444F-A3B5-E2...B8.ikb
  • <Package Folder>/app_animations/####/A29D3935-B392-444F-A3B5-E2...B8.jpg
  • <Package Folder>/app_animations/####/A2BAC03D-C104-42AE-A598-E6...86.ikb
  • <Package Folder>/app_animations/####/A2BAC03D-C104-42AE-A598-E6...86.jpg
  • <Package Folder>/app_animations/####/A4E5FD28-8644-4658-9C4C-6A...6E.ikb
  • <Package Folder>/app_animations/####/A4E5FD28-8644-4658-9C4C-6A...6E.jpg
  • <Package Folder>/app_animations/####/A541FE36-0F38-4001-851F-5F...DE.ikb
  • <Package Folder>/app_animations/####/A541FE36-0F38-4001-851F-5F...DE.jpg
  • <Package Folder>/app_animations/####/A6EFAA47-D115-430F-8F82-93...01.ikb
  • <Package Folder>/app_animations/####/A6EFAA47-D115-430F-8F82-93...01.jpg
  • <Package Folder>/app_animations/####/AAD02ABF-D7AE-467A-B4EA-02...C0.ikb
  • <Package Folder>/app_animations/####/AAD02ABF-D7AE-467A-B4EA-02...C0.jpg
  • <Package Folder>/app_animations/####/AE1E2530-EDC3-4BF0-9CBC-D3...DF.ikb
  • <Package Folder>/app_animations/####/AE1E2530-EDC3-4BF0-9CBC-D3...DF.jpg
  • <Package Folder>/app_animations/####/B1DF03CC-034E-4FC2-8693-E1...93.ikb
  • <Package Folder>/app_animations/####/B1DF03CC-034E-4FC2-8693-E1...93.jpg
  • <Package Folder>/app_animations/####/B21C5477-9C78-4C8C-BF79-6E...47.ikb
  • <Package Folder>/app_animations/####/B21C5477-9C78-4C8C-BF79-6E...47.jpg
  • <Package Folder>/app_animations/####/B3A67D32-84E4-428B-BBEC-E0...15.ikb
  • <Package Folder>/app_animations/####/B3A67D32-84E4-428B-BBEC-E0...15.jpg
  • <Package Folder>/app_animations/####/B3B73E14-2CF3-48A7-B7CD-BE...0F.ikb
  • <Package Folder>/app_animations/####/B3B73E14-2CF3-48A7-B7CD-BE...0F.jpg
  • <Package Folder>/app_animations/####/B83B0D75-2BF9-4481-BC79-36...2A.ikb
  • <Package Folder>/app_animations/####/B83B0D75-2BF9-4481-BC79-36...2A.jpg
  • <Package Folder>/app_animations/####/BE133540-62C2-4A2F-99DA-47...DB.ikb
  • <Package Folder>/app_animations/####/BE133540-62C2-4A2F-99DA-47...DB.jpg
  • <Package Folder>/app_animations/####/D17D9B09-AA86-41CB-8F19-0C...CC.ikb
  • <Package Folder>/app_animations/####/D17D9B09-AA86-41CB-8F19-0C...CC.jpg
  • <Package Folder>/app_animations/####/D17E1FE5-05D0-425E-BA25-7C...0F.ikb
  • <Package Folder>/app_animations/####/D17E1FE5-05D0-425E-BA25-7C...0F.jpg
  • <Package Folder>/app_animations/####/D3D1D0F4-5782-4070-B4D1-A0...0A.ikb
  • <Package Folder>/app_animations/####/D3D1D0F4-5782-4070-B4D1-A0...0A.jpg
  • <Package Folder>/app_animations/####/D4FD3176-B4D5-4B80-B5F5-45...A2.ikb
  • <Package Folder>/app_animations/####/D4FD3176-B4D5-4B80-B5F5-45...A2.jpg
  • <Package Folder>/app_animations/####/D857B1B5-89B9-48A2-99A2-6E...7C.ikb
  • <Package Folder>/app_animations/####/D857B1B5-89B9-48A2-99A2-6E...7C.jpg
  • <Package Folder>/app_animations/####/F07613A7-D082-4256-A195-D0...38.ikb
  • <Package Folder>/app_animations/####/F07613A7-D082-4256-A195-D0...38.jpg
  • <Package Folder>/app_animations/####/F3EFCFFC-9F23-472B-BDD4-FF...00.ikb
  • <Package Folder>/app_animations/####/F3EFCFFC-9F23-472B-BDD4-FF...00.jpg
  • <Package Folder>/app_animations/####/FC8976E3-8904-472A-BA54-CE...1B.ikb
  • <Package Folder>/app_animations/####/FC8976E3-8904-472A-BA54-CE...1B.jpg
  • <Package Folder>/app_animations/####/FF010BB1-4FFF-4000-961A-E8...49.ikb
  • <Package Folder>/app_animations/####/FF010BB1-4FFF-4000-961A-E8...49.jpg
  • <Package Folder>/app_animations/####/Meta.json
  • <Package Folder>/app_jgls/.log.lock
  • <Package Folder>/app_jgls/.log.ls
  • <Package Folder>/cache/156x156_18CF634A-F5F7-454C-85EA-7AA343F18910.jpg
  • <Package Folder>/cache/156x156_3732A473-706E-434D-871D-22A71D340048.jpg
  • <Package Folder>/cache/156x156_3975DAF0-57D5-4308-BD78-139B64813421.jpg
  • <Package Folder>/cache/156x156_45B2A259-97FA-4A6E-8A43-B8F6C63AFE0A.jpg
  • <Package Folder>/cache/156x156_498EA363-8835-4D1B-B559-3FD619B1F843.jpg
  • <Package Folder>/cache/156x156_4ED54400-4C4B-4368-AFA8-6ED76C38D4E6.jpg
  • <Package Folder>/cache/156x156_558ED4C3-FA4A-471E-9D21-89BDFA5498EF.jpg
  • <Package Folder>/cache/156x156_68D488CF-02F0-45C8-930E-DAC6CEC14107.jpg
  • <Package Folder>/cache/156x156_6D94A4B8-7EE2-4F7C-89C2-4C9357029F5F.jpg
  • <Package Folder>/cache/156x156_78ABD9FA-AD10-4E05-B183-8DB327CBF0AB.jpg
  • <Package Folder>/cache/156x156_7D56912C-4FF7-4A2F-8538-217CDF5C4B6B.jpg
  • <Package Folder>/cache/156x156_7DFA6F41-C623-4114-A490-E7D5DAB989B1.jpg
  • <Package Folder>/cache/156x156_94FF39CA-7622-42D6-9AFA-BC4C1AB6E31A.jpg
  • <Package Folder>/cache/156x156_954BC774-AFA3-4BD7-B79B-9897932A2E26.jpg
  • <Package Folder>/cache/156x156_D17D9B09-AA86-41CB-8F19-0CB635452FCC.jpg
  • <Package Folder>/cache/156x156_D17E1FE5-05D0-425E-BA25-7C3D9FD8F70F.jpg
  • <Package Folder>/cache/156x156_D4FD3176-B4D5-4B80-B5F5-45B8E43EBCA2.jpg
  • <Package Folder>/cache/156x156_FC8976E3-8904-472A-BA54-CE2CC718161B.jpg
  • <Package Folder>/cache/156x156_FF010BB1-4FFF-4000-961A-E898CF9DC049.jpg
  • <Package Folder>/cache/158x158_180CC29A-C958-4188-86CF-B2E3B5883372.jpg
  • <Package Folder>/cache/158x158_18975690-F517-4747-9F36-FC8329113AA3.jpg
  • <Package Folder>/cache/158x158_1AA44376-67F6-4CE0-9CEC-F46B06F64440.jpg
  • <Package Folder>/cache/158x158_1C0364A8-E9A1-4621-89C1-A2E38FCC7F89.jpg
  • <Package Folder>/cache/158x158_2CA92D5D-221F-47A6-A02B-2236F676E4FA.jpg
  • <Package Folder>/cache/158x158_2E0BE7DE-B9DA-4709-A69E-D2FA2F5E3939.jpg
  • <Package Folder>/cache/158x158_33626C26-2FB8-4620-B807-1612A306C943.jpg
  • <Package Folder>/cache/158x158_387B1CF8-850F-49DB-B7FD-43417AC6E4B0.jpg
  • <Package Folder>/cache/158x158_44C573CC-D136-475F-BFBC-3F8BAF29EC44.jpg
  • <Package Folder>/cache/158x158_50D3AFB1-9D9E-40A3-B7D6-4407AAD9FC68.jpg
  • <Package Folder>/cache/158x158_5D378E1C-CCE2-46CF-83C4-843137CD1DA6.jpg
  • <Package Folder>/cache/158x158_673F5897-91F7-4208-A286-3CA465BB81CA.jpg
  • <Package Folder>/cache/158x158_6EC647CA-3F2A-491A-9D43-F1CFA0D9AD3C.jpg
  • <Package Folder>/cache/158x158_78D072D9-E6C6-4566-9069-360651BEA6F6.jpg
  • <Package Folder>/cache/158x158_7908AAF4-668B-4148-819B-68E163433ACC.jpg
  • <Package Folder>/cache/158x158_8E035A23-03CD-4EC8-84CF-00E3D86C8DD9.jpg
  • <Package Folder>/cache/158x158_8F0DA200-5B83-46DB-BD93-4CB8A0084479.jpg
  • <Package Folder>/cache/158x158_919E0151-19C3-43E7-B3B8-51B00E80AE56.jpg
  • <Package Folder>/cache/158x158_99FBC928-1692-49CA-9532-62E00C54144B.jpg
  • <Package Folder>/cache/158x158_9D78C47B-BD86-448C-9376-224ABB714442.jpg
  • <Package Folder>/cache/158x158_A29D3935-B392-444F-A3B5-E283738D12B8.jpg
  • <Package Folder>/cache/158x158_A2BAC03D-C104-42AE-A598-E6B5E6AAB486.jpg
  • <Package Folder>/cache/158x158_A4E5FD28-8644-4658-9C4C-6A0FBA35766E.jpg
  • <Package Folder>/cache/158x158_A541FE36-0F38-4001-851F-5F456C61D3DE.jpg
  • <Package Folder>/cache/158x158_A6EFAA47-D115-430F-8F82-935BE8C49801.jpg
  • <Package Folder>/cache/158x158_AAD02ABF-D7AE-467A-B4EA-026B65ACB1C0.jpg
  • <Package Folder>/cache/158x158_AE1E2530-EDC3-4BF0-9CBC-D38E456B79DF.jpg
  • <Package Folder>/cache/158x158_B1DF03CC-034E-4FC2-8693-E1BC9FB9B493.jpg
  • <Package Folder>/cache/158x158_B21C5477-9C78-4C8C-BF79-6E123731BA47.jpg
  • <Package Folder>/cache/158x158_B3A67D32-84E4-428B-BBEC-E0C414B71015.jpg
  • <Package Folder>/cache/158x158_B3B73E14-2CF3-48A7-B7CD-BE1F20104D0F.jpg
  • <Package Folder>/cache/158x158_B83B0D75-2BF9-4481-BC79-365B77B4542A.jpg
  • <Package Folder>/cache/158x158_BE133540-62C2-4A2F-99DA-47EBE698DADB.jpg
  • <Package Folder>/cache/158x158_D3D1D0F4-5782-4070-B4D1-A0A5E0482F0A.jpg
  • <Package Folder>/cache/158x158_D857B1B5-89B9-48A2-99A2-6E91E9D8D17C.jpg
  • <Package Folder>/cache/158x158_F07613A7-D082-4256-A195-D091EE346238.jpg
  • <Package Folder>/cache/158x158_F3EFCFFC-9F23-472B-BDD4-FFB5CF75E700.jpg
  • <Package Folder>/cache/786x250_45B2A259-97FA-4A6E-8A43-B8F6C63AFE0A.jpg
  • <Package Folder>/databases/mixpanel
  • <Package Folder>/databases/mixpanel-journal
  • <Package Folder>/files/####/.jg.ic
  • <Package Folder>/shared_prefs/com.google.android.gms.measurement.prefs.xml
  • <Package Folder>/shared_prefs/com.mixpanel.android.mpmetrics.Mi...45.xml
  • <Package Folder>/shared_prefs/jg_app_update_settings_random.xml
  • <Package Folder>/shared_prefs/mixpanel.viewcrawler.changesfb84f...45.xml
  • <Package Folder>/shared_prefs/multidex.version.xml
  • <Package Folder>/shared_prefs/prefs.xml
Другие:
Запускает следующие shell-скрипты:
  • chmod 755 <Package Folder>/.jiagu/libjiagu.so
Загружает динамические библиотеки:
  • inkboard
  • libjiagu
Использует следующие алгоритмы для расшифровки данных:
  • DES
Использует специальную библиотеку для скрытия исполняемого байткода.
Осуществляет доступ к информации о телефоне (номер, imei и тд.).
Отрисовывает собственные окна поверх других приложений.

Рекомендации по лечению


Android

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке