Adware.Dowgin.1915

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Adware.Dowgin.14.origin

Сетевая активность:

Подключается к:

UDP(DNS) <Google DNS>
TCP(HTTP/1.1) d2.ireader####.com:80
TCP(HTTP/1.1) t####.qin####.com:80
TCP(HTTP/1.1) d1.ireader####.com:80
TCP(HTTP/1.1) c.ireader####.com:80
TCP(HTTP/1.1) a####.you####.com:80
TCP(TLS/1.0) www.ireader####.com:443

Запросы DNS:

a####.you####.com
c.ireader####.com
d1.ireader####.com
d2.ireader####.com
fb.u####.com
t####.qin####.com
www.ireader####.com

Запросы HTTP GET:

a####.you####.com/sx/GetConfigInfo.aspx?ver=####&passID=####&ver=####&cl...
c.ireader####.com/Books/books/2012-06-26/1e52d586-6597-47dc-b23e-ecb7cba...
d1.ireader####.com/GoodBooks/Books/cover/2011-07-21/51338e3e-e79c-4966-a...
d1.ireader####.com/GoodBooks/Books/cover/2012-06-21/9908c2cb-e0f8-4d58-b...
d1.ireader####.com/GoodBooks/Books/cover/2012-06-25/24f837de-cb1e-4eac-a...
d1.ireader####.com/GoodBooks/Books/cover/2012-06-25/6d574a6e-d72a-4960-9...
d1.ireader####.com/GoodBooks/Books/cover/2012-06-25/c3183adc-af6b-48ae-9...
d1.ireader####.com/GoodBooks/Books/cover/2012-06-25/d3a1b42a-e503-4125-b...
d1.ireader####.com/GoodBooks/Books/cover/2012-06-25/dc117232-0df1-45e6-9...
d1.ireader####.com/GoodBooks/Books/cover/2012-06-26/63c4c31d-6f62-4116-b...
d1.ireader####.com/GoodBooks/Books/cover/2012-06-26/71c3118d-6e77-4c6c-8...
d1.ireader####.com/GoodBooks/Books/cover/2012-06-26/9da24d0e-39e2-4030-8...
d1.ireader####.com/GoodBooks/Books/cover/2012-06-26/fab77385-b8a6-4bdd-b...
d1.ireader####.com/GoodBooks/Books/cover/2012-08-06/5897ac0f-f588-4553-b...
d1.ireader####.com/GoodBooks/Books/cover/2012-10-23/ee78b85f-6623-491a-9...
d1.ireader####.com/GoodBooks/Books/cover/2014-10-17/0cacc48b-72d6-4907-9...
d1.ireader####.com/GoodBooks/Books/cover/2014-10-20/48609087-6088-4730-8...
d1.ireader####.com/GoodBooks/Books/cover/2015-01-26/c96e50eb-498f-4cbc-9...
d1.ireader####.com/GoodBooks/Books/cover/2015-01-28/20ddefb7-2166-4d43-b...
d1.ireader####.com/GoodBooks/Books/cover/2015-01-28/3d93c67b-38e7-4b95-9...
d1.ireader####.com/GoodBooks/Books/cover/2015-03-10/a2f711ff-aae6-455e-b...
d1.ireader####.com/GoodBooks/Books/cover/2015-03-19/11fd1166-b02f-4f9d-b...
d1.ireader####.com/GoodBooks/Books/cover/2015-03-19/1937d9e3-8a29-4d79-b...
d1.ireader####.com/GoodBooks/Books/cover/2015-03-19/6829f602-7b26-44f5-9...
d1.ireader####.com/GoodBooks/Books/cover/2015-03-19/9ceb3ab4-2617-4cb6-9...
d1.ireader####.com/GoodBooks/Books/cover/2015-03-19/a740aff6-29aa-4db4-8...
d1.ireader####.com/GoodBooks/Books/cover/2015-03-25/46ada586-e5d4-461e-9...
d1.ireader####.com/GoodBooks/Books/cover/2015-04-02/52a2d0c9-7ce8-4811-b...
d1.ireader####.com/GoodBooks/Books/cover/2015-04-08/e57d5b91-0b62-4876-9...
d1.ireader####.com/GoodBooks/Books/cover/2015-05-13/f4c26c55-213b-4866-9...
d1.ireader####.com/GoodBooks/Books/cover/2015-06-18/8c9ece61-ba4f-405e-8...
d1.ireader####.com/GoodBooks/Books/cover/2015-06-18/bc5667b5-df8d-4153-a...
d1.ireader####.com/GoodBooks/Books/cover/2015-06-18/ef532b8f-a1fc-46b6-8...
d1.ireader####.com/GoodBooks/Books/cover/2015-06-29/e0785c89-ad40-46b3-9...
d1.ireader####.com/GoodBooks/Books/cover/2015-07-10/6db5a926-3c36-465e-a...
d1.ireader####.com/GoodBooks/Books/cover/2015-08-31/e3bfbbf9-5029-4280-8...
d1.ireader####.com/GoodBooks/Books/cover/2015-09-15/04b8905d-8224-4302-a...
d1.ireader####.com/GoodBooks/Books/cover/2015-09-15/b9d41b9a-bb2e-402e-b...
d1.ireader####.com/GoodBooks/Books/cover/2015-09-16/322f2a95-dc7e-4700-8...
d1.ireader####.com/GoodBooks/Books/cover/2015-10-19/9289f3b2-3472-485d-8...
d1.ireader####.com/GoodBooks/Books/cover/2015-11-03/ff8545ea-e91c-461e-a...
d1.ireader####.com/GoodBooks/Books/cover/2015-12-03/3bf728d6-6e75-45bd-8...
d1.ireader####.com/GoodBooks/Books/cover/2015-12-30/2e0899b0-18bf-4046-b...
d1.ireader####.com/GoodBooks/Books/cover/2015-12-31/9e6e9d9d-6e70-43d1-a...
d1.ireader####.com/GoodBooks/Books/cover/2016-03-01/0fb96329-5ee7-4353-8...
d1.ireader####.com/GoodBooks/Books/cover/2016-03-30/d3e490ea-25a3-4cab-b...
d1.ireader####.com/GoodBooks/Books/cover/2016-05-23/51097195-f060-4900-9...
d1.ireader####.com/GoodBooks/Books/cover/2016-05-30/9bf7568b-45fa-46cb-8...
d1.ireader####.com/GoodBooks/Books/cover/2016-06-02/5670705e-902e-4211-8...
d1.ireader####.com/GoodBooks/Books/cover/2016-06-08/f87131be-321d-4123-9...
d1.ireader####.com/GoodBooks/Books/cover/2016-06-30/b78ba9c3-51e2-4a1a-b...
d1.ireader####.com/GoodBooks/Books/cover/2016-07-25/e0d6d171-f6c7-4daa-8...
d1.ireader####.com/GoodBooks/Books/cover/2016-08-09/d09967e9-8c42-4b9a-b...
d1.ireader####.com/GoodBooks/Books/cover/2016-08-11/8119ce88-0fa4-4e1d-a...
d1.ireader####.com/GoodBooks/Books/cover/2016-10-12/97385ed6-ce93-4407-9...
d1.ireader####.com/GoodBooks/Books/cover/2016-11-05/f4127627-5227-4e6b-8...
d1.ireader####.com/GoodBooks/Books/cover/2017-01-23/be638507-ef2d-4bc6-b...
d1.ireader####.com/GoodBooks/Books/cover/2017-05-26/689c3f29-5d7e-4d51-8...
d1.ireader####.com/GoodBooks/Books/cover/2017-06-12/6e75b679-baf6-4247-9...
d1.ireader####.com/GoodBooks/Books/cover/2017-06-26/e53df12a-45b9-43cc-9...
d1.ireader####.com/GoodBooks/Books/cover/2017-06-27/ab78a382-924e-4286-b...
d1.ireader####.com/GoodBooks/Books/cover/2017-07-17/894bb53b-27d6-4d79-8...
d1.ireader####.com/GoodBooks/Books/cover/2017-09-08/9137dc12-ccbf-43d6-b...
d1.ireader####.com/GoodBooks/Books/cover/2017-11-03/721569ce-c10a-4cd8-9...
d1.ireader####.com/GoodBooks/Books/cover/2017-11-04/1e809148-672a-4592-a...
d1.ireader####.com/GoodBooks/Books/cover/2017-11-04/c4ce4bb3-9e64-4b61-9...
d1.ireader####.com/GoodBooks/Books/cover/2017-11-14/5d0fa7ba-6a0e-4b98-8...
d1.ireader####.com/GoodBooks/Books/cover/2017-11-29/beb264e7-f08f-4ef0-a...
d1.ireader####.com/GoodBooks/Books/cover/2018-03-02/0984fba5-7bf1-498e-b...
d1.ireader####.com/GoodBooks/Books/cover/2018-03-02/46597726-f84f-4eed-8...
d2.ireader####.com/GoodBooks/Books/cover/2011-07-21/51338e3e-e79c-4966-a...
d2.ireader####.com/GoodBooks/Books/cover/2012-06-25/6d574a6e-d72a-4960-9...
d2.ireader####.com/GoodBooks/Books/cover/2012-06-25/d3a1b42a-e503-4125-b...
d2.ireader####.com/GoodBooks/Books/cover/2012-06-26/63c4c31d-6f62-4116-b...
d2.ireader####.com/GoodBooks/Books/cover/2012-06-26/71c3118d-6e77-4c6c-8...
d2.ireader####.com/GoodBooks/Books/cover/2013-12-05/8a38ac20-d57b-4ae8-9...
d2.ireader####.com/GoodBooks/Books/cover/2013-12-05/ad07192b-4b62-4c83-8...
d2.ireader####.com/GoodBooks/Books/cover/2014-10-20/48609087-6088-4730-8...
d2.ireader####.com/GoodBooks/Books/cover/2015-01-26/c96e50eb-498f-4cbc-9...
d2.ireader####.com/GoodBooks/Books/cover/2015-03-10/dbb08a62-7e94-4bf4-a...
d2.ireader####.com/GoodBooks/Books/cover/2015-03-19/11fd1166-b02f-4f9d-b...
d2.ireader####.com/GoodBooks/Books/cover/2015-03-19/1937d9e3-8a29-4d79-b...
d2.ireader####.com/GoodBooks/Books/cover/2015-03-19/6829f602-7b26-44f5-9...
d2.ireader####.com/GoodBooks/Books/cover/2015-03-19/a740aff6-29aa-4db4-8...
d2.ireader####.com/GoodBooks/Books/cover/2015-03-23/d2f5227b-20ec-4b6e-8...
d2.ireader####.com/GoodBooks/Books/cover/2015-03-25/6c3dbb81-041a-455d-b...
d2.ireader####.com/GoodBooks/Books/cover/2015-03-25/7a6ee782-85c0-49a5-a...
d2.ireader####.com/GoodBooks/Books/cover/2015-03-25/c9de3b5a-8f9c-45a4-a...
d2.ireader####.com/GoodBooks/Books/cover/2015-04-03/771af8b2-1713-4d95-a...
d2.ireader####.com/GoodBooks/Books/cover/2015-04-08/e57d5b91-0b62-4876-9...
d2.ireader####.com/GoodBooks/Books/cover/2015-04-30/44d02974-7cfe-4bad-b...
d2.ireader####.com/GoodBooks/Books/cover/2015-06-18/8c9ece61-ba4f-405e-8...
d2.ireader####.com/GoodBooks/Books/cover/2015-06-18/ef532b8f-a1fc-46b6-8...
d2.ireader####.com/GoodBooks/Books/cover/2015-06-24/d9fa828c-60cf-4713-8...
d2.ireader####.com/GoodBooks/Books/cover/2015-06-29/e0785c89-ad40-46b3-9...
d2.ireader####.com/GoodBooks/Books/cover/2015-07-02/377c966e-f07c-48d2-a...
d2.ireader####.com/GoodBooks/Books/cover/2015-07-28/490db34b-f65b-467e-b...
d2.ireader####.com/GoodBooks/Books/cover/2015-08-05/f53843a9-4e97-4e4a-a...
d2.ireader####.com/GoodBooks/Books/cover/2015-08-12/7eb9f0c4-22c5-487c-9...
d2.ireader####.com/GoodBooks/Books/cover/2015-08-31/58a5cf60-5b82-457f-b...
d2.ireader####.com/GoodBooks/Books/cover/2015-08-31/e6435969-8683-4eb7-b...
d2.ireader####.com/GoodBooks/Books/cover/2015-09-15/25ca3961-e070-4485-a...
d2.ireader####.com/GoodBooks/Books/cover/2015-12-30/2e0899b0-18bf-4046-b...
d2.ireader####.com/GoodBooks/Books/cover/2016-02-01/6562e91c-acbb-481c-8...
d2.ireader####.com/GoodBooks/Books/cover/2016-02-24/c6bba5ca-aaae-4c55-9...
d2.ireader####.com/GoodBooks/Books/cover/2016-05-23/51097195-f060-4900-9...
d2.ireader####.com/GoodBooks/Books/cover/2016-06-02/15519595-aa49-497f-b...
d2.ireader####.com/GoodBooks/Books/cover/2016-06-15/a1a920a3-53fd-48c1-b...
d2.ireader####.com/GoodBooks/Books/cover/2016-06-30/b78ba9c3-51e2-4a1a-b...
d2.ireader####.com/GoodBooks/Books/cover/2016-07-01/9e79be7d-68a9-4685-b...
d2.ireader####.com/GoodBooks/Books/cover/2016-09-07/3dde8bac-4742-41b4-a...
d2.ireader####.com/GoodBooks/Books/cover/2016-12-02/2cecfa33-9b38-46bb-b...
d2.ireader####.com/GoodBooks/Books/cover/2017-06-01/2eec536a-5116-4c14-a...
d2.ireader####.com/GoodBooks/Books/cover/2017-06-08/c0c3ddac-4af9-45b5-b...
d2.ireader####.com/GoodBooks/Books/cover/2017-06-12/6e75b679-baf6-4247-9...
d2.ireader####.com/GoodBooks/Books/cover/2017-06-26/a8962f1f-1a9e-479c-9...
d2.ireader####.com/GoodBooks/Books/cover/2017-06-26/e53df12a-45b9-43cc-9...
d2.ireader####.com/GoodBooks/Books/cover/2017-06-29/dbddc94f-ba1b-43e7-9...
d2.ireader####.com/GoodBooks/Books/cover/2017-09-08/9137dc12-ccbf-43d6-b...
d2.ireader####.com/GoodBooks/Books/cover/2017-10-12/01548f83-4367-41a0-8...
d2.ireader####.com/GoodBooks/Books/cover/2017-11-07/b54a07a3-4c8f-4dc9-b...
d2.ireader####.com/GoodBooks/Books/cover/2017-11-10/bc105632-b091-4493-8...
d2.ireader####.com/GoodBooks/Books/cover/2017-11-14/fa58936b-dc7a-4d05-9...
d2.ireader####.com/GoodBooks/Books/cover/2017-11-15/11504c90-8a13-401a-b...
d2.ireader####.com/GoodBooks/Books/cover/2018-02-08/e659e7b7-38a3-420e-9...
d2.ireader####.com/GoodBooks/Books/cover/2018-03-02/fe10a9d0-ed17-41d3-a...
d2.ireader####.com/GoodBooks/Books/cover/2018-05-22/8648bbd0-74e5-4101-9...
t####.qin####.com/sxsplash20160727_579817d469bca.jpg
t####.qin####.com/sxsplash20160727_579817da499fb.jpg
t####.qin####.com/sxsplash20160727_579817de0f457.jpg
t####.qin####.com/sxsplash20160727_579817e1da72a.jpg
t####.qin####.com/sxsplash20160727_57981808344f4.jpg

Изменения в файловой системе:

Создает следующие файлы:

/data/data/####/.jg.ic
/data/data/####/Alvin2.xml
/data/data/####/ContextData.xml
/data/data/####/aireader_v2-journal
/data/data/####/com_ireader_city_you_qi.xml
/data/data/####/ireader.db-journal
/data/data/####/libjiagu286644011.so
/data/data/####/multidex.version.xml
/data/data/####/qz.jar
/data/data/####/umeng_feedback_conversations.xml
/data/data/####/umeng_feedback_user_info.xml
/data/data/####/umeng_general_config.xml
/data/data/####/umeng_message_state.xml
/data/data/####/webview.db-journal
/data/data/####/www.ireadercity.com.443
/data/data/####/zfbfb7567.xml
/data/media/####/.did
/data/media/####/000b5639286447b0ad89a4f11f3e2ad6jpgx.tmp
/data/media/####/0013d02a8eca4f4f9d9cc343f33f5fc5jpgx.tmp
/data/media/####/001df85f91094d5b9e78b06713053f19jpgx.tmp
/data/media/####/00249cece04941e1a34762a45af4468cjpgx.tmp
/data/media/####/003d3cda90444ac189acbb6555991cd6jpgx.tmp
/data/media/####/00432e6b9b564d589825a7ff7563c933jpgx
/data/media/####/00432e6b9b564d589825a7ff7563c933jpgx.tmp
/data/media/####/00675d7042604eee8fa36599b8fa25bfjpgx.tmp
/data/media/####/0083cf6782714392aba4044afa5eb893jpgx.tmp
/data/media/####/008f39854dbc436c95188799e80dc83cjpgx.tmp
/data/media/####/00a7959ec2b24185b46602cc9c47f205jpgx.tmp
/data/media/####/00aa259815fd4b5981f9963b5aeffca6jpgx.tmp
/data/media/####/00b221c3d5bf47718958bb054f21023bjpgx.tmp
/data/media/####/00ba0af9f7b94592b0f509d9625cdea8jpgx.tmp
/data/media/####/00be25ba2e8c46608ea5af93ee259885jpgx.tmp
/data/media/####/00c081f01d2e47afb80985e9bdd460b7jpgx.tmp
/data/media/####/00d2d8835c6f4dc08e6c01cc618d637cjpgx.tmp
/data/media/####/00d5347edd734a49b9ec942149c0d878jpgx.tmp
/data/media/####/00de716ea2b04277b48e0cbed346dbbbjpgx.tmp
/data/media/####/00e9450a65d14a0ab0223ef79b2ed0b0jpgx.tmp
/data/media/####/00fb1bdd86e74377915cb0f9735c1917jpgx.tmp
/data/media/####/00fe06ade213402cbb41002b012119eejpgx.tmp
/data/media/####/01044ea7022441f3ac04613f9f53040fjpgx.tmp
/data/media/####/012905ab33414b039469b86bb800d269jpgx.tmp
/data/media/####/01383e235a6041e4903d6ae6a33b53d6jpgx.tmp
/data/media/####/01558687d1554599a1e6c7c20024181cjpgx.tmp
/data/media/####/01731b3c978248e797d0e61114cf16e4jpgx.tmp
/data/media/####/017f841bd85b473591e390c565ca19b4jpgx.tmp
/data/media/####/01851f3697bc4ad0830bf239a8b32139jpgx.tmp
/data/media/####/01b783d8b7fb4454831d53c8fbbefa95jpgx.tmp
/data/media/####/01c472759f754560892fa3ce03fafba3jpgx.tmp
/data/media/####/01f1fd70f3e446f38e8ee3f1469bb8fejpgx.tmp
/data/media/####/03147777831247fcbac7985ca19ff3b7jpgx.tmp
/data/media/####/040e1237e7344675bc5e3c2ea0c69f4djpgx.tmp
/data/media/####/04f8ae502c90419f8c40a5ac5d724318jpgx.tmp
/data/media/####/05dfcf29930c4ce2a9540c14d8a09486jpgx.tmp
/data/media/####/060d2d41f05042ab96e2a4b4b186b82cjpgx.tmp
/data/media/####/063fb8ddef244ad789cd1b986cfe156djpgx.tmp
/data/media/####/06880c40643d4ebe967156963368982fjpgx.tmp
/data/media/####/06c99003c87f4e358b956ff456c74f57jpgx.tmp
/data/media/####/06ced98ad5d142f2a568557aa9379f5ajpgx.tmp
/data/media/####/0902054760264585a2394d5246553849jpgx.tmp
/data/media/####/09f0dd77844b4660b7faf1998aae5d4djpgx.tmp
/data/media/####/0a49ebf5cb82479b974bf1ccf165549djpgx.tmp
/data/media/####/0b6af9c4f2f14426bb575026d6b36250jpgx.tmp
/data/media/####/0be529fac4a546e6bc07acc077b3243cjpgx.tmp
/data/media/####/0c9acbc7f2ae4bcfa997386c8b77f5f4jpgx.tmp
/data/media/####/0cdbf0f176d2456da0a4599d87882a05jpgx.tmp
/data/media/####/0d79346280494f289c5cf71d3a97000cjpgx.tmp
/data/media/####/0db2208d77ac41f69d524ef891a3107cjpgx.tmp
/data/media/####/15a1c51feb874a82b1b556573d675aa0jpgx.tmp
/data/media/####/18a775d2a6a744b0b5e48a17cbc6e591jpgx_bak
/data/media/####/1b2220e446ff4d5da756fbc861f8e837jpgx.tmp
/data/media/####/1cde8e016beb4ecbb068e0faf533e6ebjpgx.tmp
/data/media/####/1e52d586-6597-47dc-b23e-ecb7cbafa900.ylepub.kinfo2
/data/media/####/1e52d586-6597-47dc-b23e-ecb7cbafa900.ylepub.ktxt
/data/media/####/1e52d586-6597-47dc-b23e-ecb7cbafa900.ylepub_bak
/data/media/####/227e8d0c3db843f083d15e267c95ad38jpgx.tmp
/data/media/####/23a26629cf1847629134ae0a097d9f1ajpgx.tmp
/data/media/####/2542a1226f874e12acda362d56491e2djpgx.tmp
/data/media/####/2542a1226f874e12acda362d56491e2djpgx_bak
/data/media/####/26f1e781262a471aa4bd793e6edfe5b2jpgx.tmp
/data/media/####/29feb78bc3a144caa3a7adae6b45effajpgx.tmp
/data/media/####/2b2bc73ad2ce41e89a51d158f3d734f9jpgx.tmp
/data/media/####/2bafbc940e4a4bdca65b7fffe5c38b96jpgx.tmp
/data/media/####/2ebf5d49510f46b4aebc05c00e1d9eeajpgx.tmp
/data/media/####/322263268e234295a12f99a6d513baffjpgx.tmp
/data/media/####/3454efa088ce4c48ace9bdbb2be07020jpgx.tmp
/data/media/####/34725d3cd83d434faecc87122157139ejpgx.tmp
/data/media/####/3b2f99da5e5344738cbaba38b14f1d95jpgx.tmp
/data/media/####/3e19db2dca6440759a36d3d0f5e7c680jpgx.tmp
/data/media/####/3ed49846544a4f2aadc64ff773a23224jpgx.tmp
/data/media/####/4a288aac6ce647e7a95b0b63d353dfe6jpgx.tmp
/data/media/####/4c75f6213b804441b934ebbedd4e6c74jpgx.tmp
/data/media/####/521f78f2cdac4899a81aebaa7aade602jpgx.tmp
/data/media/####/55ef15469189432584aa8bbad9ee32f8jpgx.tmp
/data/media/####/66b7ce4aca7942e897bc74cd75f82f42jpgx.tmp
/data/media/####/6bdc21a9c880440db681b4c04a45c12fjpgx.tmp
/data/media/####/6dd4ba19eb6244bb98fdacb593de4198jpgx.tmp
/data/media/####/7fe1a95fd725482dad4d49f135c0b561jpgx.tmp
/data/media/####/7fe1a95fd725482dad4d49f135c0b561jpgx.tmp (deleted)
/data/media/####/7fe1a95fd725482dad4d49f135c0b561jpgx_bak
/data/media/####/808f82b13c874e01a67d35aea88f6cc1jpgx.tmp
/data/media/####/81afa8789543424cbb564cdc157767b4jpgx.tmp
/data/media/####/86b6e9bff20f4b9cb397cb4f806d1c37jpgx.tmp
/data/media/####/87be0e10b8e44495ba4d530ce8f67aa0jpgx.tmp
/data/media/####/87be0e10b8e44495ba4d530ce8f67aa0jpgx_bak
/data/media/####/8a11f14cdc874d0a8ec780d493798d90jpgx.tmp
/data/media/####/8d3e402f42c64d2fb900db85e701290ejpgx.tmp
/data/media/####/8ef689ac2acd41dcaa014131fd8b694bjpgx.tmp
/data/media/####/9dcb73b3532040d3a5e73705be4745e9jpgx.tmp
/data/media/####/Alvin2.xml
/data/media/####/ContextData.xml
/data/media/####/a0b600f6929b4bdf95512fd429e75fe3jpgx.tmp
/data/media/####/a91f30508a35451f8646e82f1dca0578jpgx.tmp
/data/media/####/a9ce45f100bf4f2cbcf66267e3a3d1f3jpgx.tmp
/data/media/####/adv_self_config.dat
/data/media/####/b52846a409bd4158bbcecc7cac455d0fjpgx.tmp
/data/media/####/bf263976d7324759acdc18807eeeca41jpgx.tmp
/data/media/####/c65a5490ce364977abeeddb7a35bdb91jpgx.tmp
/data/media/####/c95319de5aac49f1ba7874cfee9a5dbcjpgx.tmp
/data/media/####/config.data
/data/media/####/d2d995edddff44449cdd746671d511d6jpgx.tmp
/data/media/####/d302d9b746504e9a80f7ed205e6a0de4jpgx.tmp
/data/media/####/d4df77c8161942899bd11597f4e5b29fjpgx.tmp
/data/media/####/d729d80c438749e1b730f2d874c404adjpgx.tmp
/data/media/####/d946316bb18a4633aaee13b6e5ede110jpgx.tmp
/data/media/####/dbaa84d7fa154569816370589d9309ccjpgx.tmp
/data/media/####/dca625b191444dca8b7034eabc342088jpgx.tmp
/data/media/####/e8e48300a20c48899515ad192dd1f793jpgx.tmp
/data/media/####/ea25e76e256842db9bd79551187c1234jpgx.tmp
/data/media/####/eb4a4a0355e04ff2a03e1c52c91f6850jpgx.tmp
/data/media/####/ebc8d8d13c174feb8f541996903afa08jpgx.tmp
/data/media/####/ef81048659d44479a5c06d55452dcf00jpgx.tmp
/data/media/####/f46f983b2e9244cf952213f4fa21afa9jpgx.tmp
/data/media/####/fd065c1ba03d417da1290928657327cfjpgx.tmp
/data/media/####/home_infos_2.dat
/data/media/####/home_infos_22.dat
/data/media/####/import.dat
/data/media/####/releated_list_00432e6b9b564d589825a7ff7563c933.dat
/data/media/####/releated_list_01383e235a6041e4903d6ae6a33b53d6.dat
/data/media/####/releated_list_01f1fd70f3e446f38e8ee3f1469bb8fe.dat
/data/media/####/releated_list_06ced98ad5d142f2a568557aa9379f5a.dat
/data/media/####/releated_list_18a775d2a6a744b0b5e48a17cbc6e591.dat
/data/media/####/releated_list_2542a1226f874e12acda362d56491e2d.dat
/data/media/####/releated_list_7fe1a95fd725482dad4d49f135c0b561.dat
/data/media/####/releated_list_808f82b13c874e01a67d35aea88f6cc1.dat
/data/media/####/releated_list_87be0e10b8e44495ba4d530ce8f67aa0.dat
/data/media/####/releated_list_bf263976d7324759acdc18807eeeca41.dat
/data/media/####/sxsplash20160727_579817d469bca.jpgx_bak
/data/media/####/sxsplash20160727_579817da499fb.jpgx_bak
/data/media/####/sxsplash20160727_579817de0f457.jpgx_bak
/data/media/####/sxsplash20160727_579817e1da72a.jpgx_bak
/data/media/####/sxsplash20160727_57981808344f4.jpgx_bak

Другие:

Запускает следующие shell-скрипты:

chmod 755 <Package Folder>/.jiagu/libjiagu286644011.so

Загружает динамические библиотеки:

jniunzip
libjiagu286644011
smssdk

Использует следующие алгоритмы для шифрования данных:

AES-CBC-PKCS5Padding
DES

Использует следующие алгоритмы для расшифровки данных:

AES-CBC-NoPadding

Использует специальную библиотеку для скрытия исполняемого байткода.

Осуществляет доступ к информации о сети.

Осуществляет доступ к информации о телефоне (номер, imei и тд.).

Осуществляет доступ к информации о зарегистрированных на устройстве аккаунтах (Google, Facebook и тд.).

Отрисовывает собственные окна поверх других приложений.

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней