Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Packed.18166

Added to the Dr.Web virus database: 2017-01-28

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Triada.43.origin
  • Android.Triada.109.origin
Network activity:
Connecting to:
  • c####.####.com
  • s####.####.com
  • 1####.####.147:8080
  • a####.####.com
  • 1####.####.7:8080
HTTP GET requests:
  • a####.####.com/ReportAD356507059351895/?&secretKey=####&seed=####&md5=####&appChannel=####&IMEI=####&ad_id=####&action=####&ad_type=####&image=####&ti...
  • a####.####.com/ReportAction/?&secretKey=####&seed=####&md5=####&type=####&tag=####&str_tag=####&IMEI=####
  • c####.####.com/u/img/20160412/img$20160412$b00e25628ab35d7baa4a56df34b01a4b.png
  • a####.####.com/GetAD20170126/?&secretKey=####&seed=####&md5=####&appChannel=####&action=####&time=####&IMEI=####&type=####
  • s####.####.com/libsnoum/spaycoredex_so_1950.jar
  • a####.####.com/ReportInfo/?&secretKey=####&seed=####&md5=####&appChannel=####&OStype=####&machineID=####&sysVersion=####&phoneType=####&hardwareAddr=#...
  • c####.####.com/u/img/20160323/img$20160323$1bbde2b04e689eed9eb11b52ab97e3b9.jpg
  • a####.####.com/GetAD20170126/?&secretKey=####&seed=####&md5=####&appChannel=####&action=####&time=####&IMEI=####
  • c####.####.com/u/img/20160112/img$20160112$4dbbff95eea41c063a66c7d7a1200459.jpg
  • 1####.####.7:8080/company/servletService!service?appKey=####&channelNo=####
HTTP POST requests:
  • 1####.####.147:8080/xmld/HttpService
Modified file system:
Creates the following files:
  • /data/data/####/app_payload_res/nickname_input/menu_botton_03.png
  • /data/data/####/app_payload_res/pet/pet_NinjaCat.ExportJson
  • /data/data/####/app_payload_res/publish/open/open_07.png
  • /data/data/####/app_payload_res/nickname_input/Daily_01.png
  • /data/data/####/app_payload_res/pet/Inukami.plist
  • /data/data/####/app_payload_res/effect/Animation_effect_AI.ExportJson
  • /data/data/####/app_payload_res/data/map/Windmap021_05_3.tmx
  • /data/data/####/app_payload_res/sound/magnet.ogg
  • /data/data/####/app_payload_res/effect/fevertime.ExportJson
  • /data/data/####/app_payload_res/ui/help_16.json
  • /data/data/####/app_payload_res/ui/activity_di/activity_di_01.png
  • /data/data/####/app_payload_res/effect/revive_down.ExportJson
  • /data/data/####/app_payload_res/ui/effect_diamond.plist
  • /data/data/####/app_payload_res/hero/dragon_claw_front.ExportJson
  • /data/data/####/app_payload_res/data/map/map103_06_3.tmx
  • /data/data/####/app_payload_res/effect/fly.ExportJson
  • /data/data/####/app_payload_res/background/background_02_00.png
  • /data/data/####/app_payload_res/effect/rank_piao.plist
  • /data/data/####/app_payload_res/ui/quest_q.png
  • /data/data/####/app_payload_res/effect/speed_up.ExportJson
  • /data/data/####/app_payload_res/ui/Daily.json
  • /data/data/####/app_payload_res/data/map/map101_07.tmx
  • /data/data/####/app_payload_res/sound/bgm_game_02.ogg
  • /data/data/####/app_payload_res/data/map/map_00.png
  • /data/data/####/app_payload_res/ui/activity_di/activity_di_06.png
  • /data/data/####/app_payload_res/hero/dragon_body.ExportJson
  • /data/data/####/app_payload_res/ui/mode.png
  • /data/data/####/app_payload_res/ui/background_1.jpg
  • /data/data/####/app_payload_res/ui/chip.png
  • /data/data/####/app_payload_res/ui/chip.plist
  • /data/data/####/app_payload_res/ui/loading.json
  • /data/data/####/app_payload_res/effect/sprint_up0.plist
  • /data/data/####/app_payload_res/data/map/map999_07.tmx
  • /data/data/####/app_payload_res/effect/magnet_up0.png
  • /data/data/####/app_payload_res/ui/zhuanshu.json
  • /sdcard/updateApkDemo/FrameCore.jar
  • /data/data/####/app_payload_res/data/map/Windmap021_09_1.tmx
  • /data/data/####/app_payload_res/data/map/map001_01.tmx
  • /data/data/####/app_payload_res/ui/shop-pet.json
  • /data/data/####/app_payload_res/effect/fevertime0.png
  • /data/data/####/app_payload_res/background/background_02_04.png
  • /data/data/####/app_payload_res/data/map/map101_01_3.tmx
  • /data/data/####/app_payload_res/data/map/map103_02.tmx
  • /data/data/####/app_payload_res/ui_old/GUI/button.png
  • /data/data/####/app_payload_res/pet/effect_pet.plist
  • /data/data/####/shared_prefs/ADdata.xml
  • /data/data/####/app_payload_res/data/map/map999_02_3.tmx
  • /data/data/####/app_payload_res/effect/effect_AI.plist
  • /data/data/####/app_payload_res/effect/effect_timeout.png
  • /data/data/####/app_payload_res/effect/sprint_up0.png
  • /data/data/####/app_payload_res/data/map/map999_03_3.tmx
  • /data/data/####/app_payload_res/data/map/jiangli002_01.tmx
  • /data/data/####/app_payload_res/ui/Game_UI_3.json
  • /data/data/####/app_payload_res/data/map/Windmap011_01.tmx
  • /data/data/####/app_payload_res/pet/fireworks_1.plist
  • /data/data/####/app_payload_res/effect/smoke2.plist
  • /data/data/####/app_payload_res/effect/effect_14.png
  • /data/data/####/app_payload_res/sound/yinyueOff.ogg
  • /data/data/####/app_payload_res/background/background_04_01.png
  • /data/data/####/app_payload_res/effect/Animation_KuangRe0.plist
  • /data/data/####/app_payload_res/effect/fireworks.plist
  • /data/data/####/app_payload_res/number/shownumber_4.json
  • /data/data/####/app_payload_res/data/map/Windmap021_02_3.tmx
  • /data/data/####/app_payload_res/ui/effect_pet.png
  • /data/data/####/app_payload_res/ui/activity_di/activity_di_04.png
  • /data/data/####/app_payload_res/publish/CtT.plist
  • /data/data/####/app_payload_res/hero/dragon_claw_behind0.plist
  • /data/data/####/app_payload_res/publish/Animation_open0.png
  • /data/data/####/app_payload_res/sound/diamond.ogg
  • /data/data/####/app_payload_res/ui/num/num_04.png
  • /data/data/####/app_payload_res/effect/Animation_speedlight.ExportJson
  • /data/data/####/app_payload_res/data/map/map999_04.tmx
  • /data/data/####/app_payload_res/hero/ninja.png
  • /data/data/####/app_payload_res/ui/help_17.json
  • /data/data/####/app_payload_res/ui/effect_heart.png
  • /data/data/####/app_payload_res/sound/yinyueOn.ogg
  • /data/data/####/app_payload_res/data/map/effect_00.plist
  • /data/data/####/app_payload_res/data/map/map102_06.tmx
  • /data/data/####/app_payload_res/data/map/traps_04.ExportJson
  • /data/data/####/app_payload_res/ui/shop-diamond.json
  • /data/data/####/app_payload_res/pet/pet_dragonet0.plist
  • /data/data/####/app_payload_res/effect/revive_up.ExportJson
  • /data/data/####/app_payload_res/data/map/map_teaching.tmx
  • /data/data/####/app_payload_res/data/data_hero.json
  • /data/data/####/databases/cc/cc.db-journal
  • /data/data/####/app_payload_res/ui/Animation_activity.ExportJson
  • /data/data/####/app_payload_res/ui/help_03.json
  • /data/data/####/app_payload_res/ui/draw.json
  • /data/data/####/app_payload_res/background/background_03_01.png
  • /data/data/####/app_payload_res/hero/ninja_03.plist
  • /data/data/####/app_payload_res/data/map/items.plist
  • /data/data/####/app_payload_res/data/map/jiangli003_02.tmx
  • /data/data/####/app_payload_res/background/background_02_01.png
  • /data/data/####/app_payload_res/ui/Animation_help.ExportJson
  • /data/data/####/app_payload_res/pet/EndureBird.png
  • /data/data/####/app_payload_res/number/money_09.png
  • /data/data/####/app_payload_res/ui/levelup.plist
  • /data/data/####/app_payload_res/ui/xinshou.plist
  • /data/data/####/app_payload_res/data/map/Windmap021_11_1.tmx
  • /data/data/####/app_payload_res/effect/haste_up0.plist
  • /data/data/####/app_payload_res/ui/help_07.json
  • /data/data/####/app_payload_res/effect/revive_down0.plist
  • /data/data/####/app_payload_res/ui/jfhelp.jpg
  • /data/data/####/app_payload_res/ui/Animation_gold.ExportJson
  • /data/data/####/app_payload_res/ui/help_08.json
  • /data/data/####/app_payload_res/ui/activity_di/activity_di_02.png
  • /data/data/####/app_payload_res/publish/Animation_open0.plist
  • /data/data/####/app_payload_res/ui/Animation_quest.ExportJson
  • /data/data/####/app_payload_res/data/map/map001_03.tmx
  • /data/data/####/app_payload_res/ui/menu_Reward.png
  • /data/data/####/app_payload_res/sound/r_speedup.ogg
  • /data/data/####/app_payload_res/ui/skill.plist
  • /data/data/####/app_payload_res/ui/success.json
  • /data/data/####/app_payload_res/effect/smoke.png
  • /data/data/####/app_payload_res/background/background_02_03.png
  • /data/data/####/app_payload_res/nickname_input/nickname_input.json
  • /data/data/####/app_payload_res/pet/MDragonling.png
  • /data/data/####/app_payload_res/effect/effect_start.png
  • /data/data/####/app_payload_res/ui/menu_Challenge.png
  • /data/data/####/app_payload_res/ui/num/num_28.png
  • /data/data/####/app_payload_res/data/map/map102_03_3.tmx
  • /data/data/####/app_payload_res/data/map/map103_01.tmx
  • /data/data/####/shared_prefs/lll.xml.bak
  • /data/data/####/app_payload_res/data/map/map102_02.tmx
  • /data/data/####/app_payload_res/ui/game_ui_2.json
  • /data/data/####/app_payload_res/menu_bj.jpg
  • /data/data/####/app_payload_res/ui/setting.json
  • /data/data/####/app_payload_res/effect/change0.png
  • /data/data/####/app_payload_res/ui/activity.plist
  • /data/data/####/app_payload_res/sound/fevertime.ogg
  • /data/data/####/app_payload_res/ui/effect_skill.png
  • /data/data/####/app_payload_res/man_skill.plist
  • /data/data/####/app_payload_res/effect/speed_down0.png
  • /data/data/####/app_payload_res/effect/magnet_down0.plist
  • /data/data/####/app_payload_res/data/map/map999_05.tmx
  • /data/data/####/app_payload_res/data/map/Windmap021_14_1.tmx
  • /data/data/####/app_payload_res/data/map/map_ironchain.png
  • /data/data/####/app_payload_res/effect/eff_superlight.png
  • /data/data/####/app_payload_res/data/map/map003_01.tmx
  • /data/data/####/app_payload_res/data/map/map_01_01.png
  • /data/data/####/app_payload_res/effect/haste_down.ExportJson
  • /data/data/####/app_payload_res/data/map/jiangli002_02.tmx
  • /data/data/####/app_payload_res/effect/effect_13.ExportJson
  • /data/data/####/app_payload_res/ui/help_09.json
  • /data/data/####/app_payload_res/effect/effect_start.plist
  • /data/data/####/app_payload_res/pet/Kubi.plist
  • /data/data/####/app_payload_res/data/map/jiangli001_01.tmx
  • /data/data/####/app_payload_res/effect/haste_down0.plist
  • /data/data/####/app_payload_res/ui/Animation_diamond.ExportJson
  • /data/data/####/app_payload_res/effect/haste_down0.png
  • /data/data/####/app_payload_res/pet/Raccoon.png
  • /data/data/####/app_payload_res/data/data_coin.json
  • /data/data/####/app_payload_res/ui/over.png
  • /data/data/####/app_payload_res/number/num_58.png
  • /data/data/####/app_payload_res/data/map/Windmap011_02.tmx
  • /data/data/####/app_payload_res/ui/help_21.json
  • /data/data/####/app_payload_res/data/map/Windmap021_05_1.tmx
  • /data/data/####/app_payload_res/ui/Ninja/ninja_02.png
  • /data/data/####/app_payload_res/effect/Animation_levelup.ExportJson
  • /data/data/####/app_payload_res/data/map/Windmap021_03.tmx
  • /data/data/####/app_payload_res/ui/fuhuo.png
  • /data/data/####/app_payload_res/data/map/traps_010.plist
  • /data/data/####/app_payload_res/hero/ninja_03.png
  • /data/data/####/app_payload_res/pet/Kubi.png
  • /data/data/####/app_payload_res/data/map/Windmap011_03.tmx
  • /data/data/####/app_payload_res/data/map/map102_05.tmx
  • /data/data/####/app_payload_res/effect/effect_09.plist
  • /data/data/####/app_payload_res/ui/pp_00.plist
  • /data/data/####/app_payload_res/ui/game.png
  • /data/data/####/app_payload_res/ui/num/num_02.png
  • /data/data/####/app_payload_res/effect/magnet_down.ExportJson
  • /data/data/####/app_payload_res/background/background_04_02.png
  • /data/data/####/app_payload_res/data/map/map102_04.tmx
  • /data/data/####/app_payload_res/hero/dragon_body0.png
  • /data/data/####/app_payload_res/background/background_03_04.png
  • /data/data/####/app_payload_res/sound/get_item.ogg
  • /data/data/####/app_payload_res/ui/num/num_55.png
  • /data/data/####/app_payload_res/data/map/map101_06_3.tmx
  • /data/data/####/app_payload_res/effect/speed_down0.plist
  • /data/data/####/app_payload_res/effect/effect_levelup.png
  • /data/data/####/app_payload_res/hero/effect_10.plist
  • /data/data/####/app_payload_res/ui/ui_menu.png
  • /data/data/####/app_payload_res/background/background_00.plist
  • /data/data/####/app_payload_res/sound/shoot_rope.ogg
  • /data/data/####/app_payload_res/ui/draw_get.json
  • /data/data/####/app_payload_res/sound/jiesuan.ogg
  • /data/data/####/app_payload_res/effect/Animation_effect_14.ExportJson
  • /data/data/####/app_payload_res/effect/effect_levelup.plist
  • /data/data/####/app_payload_res/ui/help_13.json
  • /data/data/####/app_payload_res/ui/stop.json
  • /data/data/####/app_payload_res/effect/change.ExportJson
  • /data/data/####/app_payload_res/effect/eff_superlight.plist
  • /data/data/####/files/d6bf7bd1e02/ededa2ae-b54c-4761-b1cb-3518fba6da79.zip
  • /data/data/####/app_payload_res/data/map/Animation_feibiao0.plist
  • /data/data/####/app_payload_res/ui/num/num_63.png
  • /data/data/####/app_payload_res/ui/Animation_Stamina0.png
  • /data/data/####/app_payload_res/ui/help_11.json
  • /data/data/####/app_payload_res/ui/num/num_19.png
  • /data/data/####/app_payload_res/data/map/map999_01.tmx
  • /data/data/####/app_payload_res/data/map/traps_03.ExportJson
  • /data/data/####/app_payload_res/sound/change.ogg
  • /data/data/####/app_payload_res/ui/draw_success.plist
  • /data/data/####/app_payload_res/data/map/Windmap021_04.tmx
  • /data/data/####/app_payload_res/effect/Animation_3210.png
  • /data/data/####/app_payload_res/hero/dragon_head.ExportJson
  • /sdcard/.acterr
  • /data/data/####/app_payload_res/ui/Ninja/ninja_05.png
  • /data/data/####/app_payload_res/data/map/map999_02_1.tmx
  • /data/data/####/app_payload_res/sound/nvshoushang.ogg
  • /data/data/####/app_payload_res/data/map/map_gou.png
  • /data/data/####/app_payload_res/ui/ui_iteams.png
  • /data/data/####/app_payload_res/hero/ninja_04.plist
  • /data/data/####/app_payload_res/effect/Animation_3210.plist
  • /data/data/####/app_payload_res/data/map/effect_00.png
  • /data/data/####/app_payload_res/number/num_23.png
  • /data/data/####/app_payload_res/hero/ninjia_01.ExportJson
  • /data/data/####/app_payload_res/effect/Animation_KuangRe0.png
  • /data/data/####/app_payload_res/ui/num/num_26.png
  • /data/data/####/app_payload_res/pet/pet_TTK.ExportJson
  • /data/data/####/app_payload_res/data/map/Windmap012_02.tmx
  • /data/data/####/app_payload_res/publish/CtT.png
  • /data/data/####/app_payload_res/ui/game.plist
  • /data/data/####/app_payload_res/cleek_00.plist
  • /data/data/####/app_payload_res/effect/Animation_timewarning.ExportJson
  • /data/data/####/app_payload_res/data/map/traps_01.ExportJson
  • /data/data/####/app_payload_res/background/background_03_02.png
  • /data/data/####/app_payload_res/effect/unmatched_up.ExportJson
  • /data/data/####/app_payload_res/ui/Sudoku.png
  • /data/data/####/app_payload_res/ui/effect_start.png
  • /data/data/####/app_payload_res/ui/fanhui.png
  • /data/data/####/app_payload_res/ui/tx.png
  • /data/data/####/app_payload_res/effect/fevertime0.plist
  • /data/data/####/app_payload_res/effect/fast_down.ExportJson
  • /data/data/####/app_payload_res/number/num_60.png
  • /data/data/####/app_payload_res/effect/Animation_JiaSu0.png
  • /data/data/####/app_payload_res/effect/smoke.plist
  • /data/data/####/app_payload_res/data/map/Windmap021_01.tmx
  • /data/data/####/app_payload_res/publish/open/open_02.plist
  • /data/data/####/app_payload_res/background/background_03_00.png
  • /data/data/####/app_payload_res/effect/revive_up0.plist
  • /data/data/####/app_payload_res/publish/Scene_open.json
  • /data/data/####/app_payload_res/hero/dragon_claw_front0.plist
  • /data/data/####/app_payload_res/data/map/Windmap021_06_1.tmx
  • /data/data/####/app_payload_res/effect/fly0.png
  • /data/data/####/app_payload_res/data/map/jiangli001_02.tmx
  • /data/data/####/app_payload_res/pet/EndureBird.plist
  • /data/data/####/app_payload_res/nickname_input/menu_botton_04.png
  • /data/data/####/app_payload_res/pet/pet_Inukami.ExportJson
  • /data/data/####/app_payload_res/ui/pp_00.png
  • /data/data/####/app_payload_res/pet/pet_EndureBird.ExportJson
  • /data/data/####/app_payload_res/ui/discount.plist
  • /data/data/####/app_payload_res/effect/fast_up0.plist
  • /data/data/####/databases/cc/cc.db
  • /data/data/####/app_payload_res/ui_old/jf_00.png
  • /data/data/####/app_payload_res/ui/activity.png
  • /data/data/####/app_payload_res/effect/flake_1.plist
  • /data/data/####/app_payload_res/ui/num/num_16.png
  • /data/data/####/app_payload_res/data/map/Animation_feibiao.ExportJson
  • /data/data/####/app_payload_res/effect/unmatched_down0.plist
  • /data/data/####/app_payload_res/ui/pet.plist
  • /data/data/####/app_payload_res/ui/over.json
  • /data/data/####/app_payload_res/hero/dragon_claw_front0.png
  • /data/data/####/app_payload_res/hero/dragon_head0.plist
  • /data/data/####/app_payload_res/ui/num/num_53.png
  • /data/data/####/app_payload_res/ui/num/num_18.png
  • /data/data/####/app_payload_res/pet/NinjaCat.png
  • /data/data/####/app_payload_res/ui/xinshou_font.plist
  • /data/data/####/app_payload_res/data/map/items.png
  • /data/data/####/app_payload_res/ui_old/jf_02.png
  • /data/data/####/app_payload_res/ui/shop.plist
  • /data/data/####/app_payload_res/data/data_game.json
  • /data/data/####/app_payload_res/number/shownumber_1.json
  • /data/data/####/app_payload_res/effect/holy_light/holy_light0.png
  • /data/data/####/app_payload_res/ui/Animation_Stamina0.plist
  • /data/data/####/app_payload_res/ui/tx.plist
  • /data/data/####/app_payload_res/ui/quest_q.plist
  • /data/data/####/app_payload_res/data/map/map003_03.tmx
  • /data/data/####/app_payload_res/ui/num/num_l_00.png
  • /data/data/####/app_payload_res/effect/speed_up0.png
  • /data/data/####/app_payload_res/yingzi.png
  • /data/data/####/app_payload_res/ui/num/num_29.png
  • /data/data/####/app_payload_res/ui/effect_shenmi.plist
  • /data/data/####/app_payload_res/ui/game_ui_1.json
  • /data/data/####/app_payload_res/ui/shop-gold.json
  • /data/data/####/app_payload_res/data/map/Windmap041_05.tmx
  • /data/data/####/app_payload_res/data/map/fevertime04.tmx
  • /data/data/####/app_payload_res/data/map/map003_02.tmx
  • /data/data/####/app_payload_res/number/num_04.png
  • /data/data/####/app_payload_res/data/map/fevertime03.tmx
  • /data/data/####/app_payload_res/pet/Raccoon.plist
  • /data/data/####/app_payload_res/equip.plist
  • /data/data/####/app_payload_res/data/map/effect_05_02.plist
  • /data/data/####/app_payload_res/number/num_55.png
  • /data/data/####/app_payload_res/publish/Animation_Start0.plist
  • /data/data/####/app_payload_res/sound/u_level_up.ogg
  • /data/data/####/app_payload_res/ui/Ninja/ninja_01.png
  • /data/data/####/app_payload_res/effect/fast_down0.png
  • /data/data/####/app_payload_res/ui/About_Ui_1.json
  • /data/data/####/app_payload_res/data/map/map002_02.tmx
  • /data/data/####/app_payload_res/effect/speed_down.ExportJson
  • /data/data/####/app_payload_res/hero/dragon_body0.plist
  • /data/data/####/app_payload_res/ui/ui_menu.plist
  • /data/data/####/shared_prefs/umeng_general_config.xml
  • /data/data/####/files/d6bf7bd1e02/ae574d73-9da4-4741-8cfd-9e906537a9fc.zip
  • /data/data/####/app_payload_res/data/map/Windmap041_06_3.tmx
  • /data/data/####/app_payload_res/ui/help_06.json
  • /sdcard/zzz/301356507059351895cjicon/img$20160412$b00e25628ab35d7baa4a56df34b01a4b.png
  • /data/data/####/app_payload_res/ui/draw_kuang.json
  • /data/data/####/app_payload_res/effect/sprint_down.ExportJson
  • /data/data/####/app_payload_res/ui/num/num_01.png
  • /data/data/####/app_payload_res/ui/draw_success.png
  • /data/data/####/app_payload_res/data/map/map999_09_3.tmx
  • /data/data/####/app_payload_res/effect/sprint_down0.png
  • /data/data/####/shared_prefs/lll.xml
  • /data/data/####/app_payload_res/ui/num/num_12.png
  • /data/data/####/app_payload_res/data/map/Windmap021_11_3.tmx
  • /data/data/####/app_payload_res/data/map/map101_03_3.tmx
  • /data/data/####/app_payload_res/ui/Ui_jfms.json
  • /sdcard/zzz/appKey
  • /data/data/####/app_payload_res/ui/Ninja/ninja_03.png
  • /data/data/####/databases/MF_CFG-journal
  • /data/data/####/app_payload_res/data/map/map102_03_1.tmx
  • /data/data/####/app_payload_res/data/map/test_feibiao.png
  • /data/data/####/app_payload_res/number/num_61.png
  • /data/data/####/app_payload_res/data/map/Windmap041_08.tmx
  • /data/data/####/app_payload_res/data/map/fevertime09.tmx
  • /data/data/####/app_payload_res/hero/ninja_01.plist
  • /data/data/####/app_payload_res/data/map/Windmap021_07.tmx
  • /data/data/####/app_payload_res/ui/mission.json
  • /data/data/####/shared_prefs/initdata.xml
  • /data/data/####/app_payload_res/ui/discount.png
  • /data/data/####/app_payload_res/effect/magnet_up0.plist
  • /data/data/####/app_payload_res/effect/speedLine.plist
  • /data/data/####/app_payload_res/ui/mode.plist
  • /data/data/####/app_payload_res/data/map/map002_03.tmx
  • /data/data/####/app_payload_res/ui/help_04.json
  • /data/data/####/app_payload_res/ui/menu_Normal.png
  • /data/data/####/app_payload_res/effect/Animation_321.ExportJson
  • /data/data/####/app_payload_res/ui/levelup.png
  • /data/data/####/app_payload_res/ui/GUI/image.png
  • /data/data/####/app_payload_res/data/map/jiangli003_01.tmx
  • /data/data/####/app_payload_res/ui/Animation_shenmi.ExportJson
  • /data/data/####/app_payload_res/data/map/Windmap041_01.tmx
  • /data/data/####/shared_prefs/secretKeyFile.xml
  • /data/data/####/app_payload_res/data/map/LINE.plist
  • /data/data/####/app_payload_res/effect/change0.plist
  • /data/data/####/app_payload_res/publish/Animation_Start.ExportJson
  • /data/data/####/app_payload_res/sound/moshi2jiesuo.ogg
  • /data/data/####/app_payload_res/ui/zhuangbeixinxi.json
  • /data/data/####/app_payload_res/publish/open/open_06.png
  • /data/data/####/app_payload_res/data/map/Windmap041_09.tmx
  • /data/data/####/app_payload_res/data/map/fevertime08.tmx
  • /data/data/####/app_payload_res/data/map/Windmap021_06_3.tmx
  • /data/data/####/app_payload_res/publish/GUI/button.png
  • /data/data/####/app_payload_res/publish/Animation_open.ExportJson
  • /data/data/####/app_payload_res/data/map/traps_030.plist
  • /data/data/####/app_payload_res/effect/Animation_Timeout.ExportJson
  • /data/data/####/app_payload_res/ui/zhuangbeikuang.json
  • /data/data/####/app_payload_res/sound/nanshoushang.ogg
  • /data/data/####/app_payload_res/ui/activity_di/activity_di_05.png
  • /data/data/####/app_payload_res/effect/sprint_down0.plist
  • /data/data/####/app_payload_res/data/map/map103_07.tmx
  • /data/data/####/app_payload_res/hero/ninja_04.png
  • /data/data/####/app_payload_res/sound/zanting_readygo.ogg
  • /data/data/####/app_payload_res/ui/help_12.json
  • /data/data/####/app_payload_res/data/map/fevertime06.tmx
  • /data/data/####/app_payload_res/publish/white.png
  • /data/data/####/app_payload_res/data/map/Windmap041_07.tmx
  • /data/data/####/app_payload_res/data/map/map103_03_3.tmx
  • /data/data/####/app_payload_res/effect/fast_up0.png
  • /data/data/####/app_payload_res/number/shownumber_3.json
  • /data/data/####/app_payload_res/ui/xinshou_font.png
  • /data/data/####/app_payload_res/effect/button_effect.plist
  • /data/data/####/app_payload_res/ui/activity_di/activity_di_07.png
  • /data/data/####/app_payload_res/effect/button_effect.png
  • /data/data/####/app_payload_res/ui/Animation_recordup.ExportJson
  • /data/data/####/app_payload_res/data/map/fevertime02.tmx
  • /data/data/####/app_payload_res/ui/Animation_itemup.ExportJson
  • /data/data/####/app_payload_res/hero/dragon_head0.png
  • /data/data/####/app_payload_res/number/num_20.png
  • /data/data/####/app_payload_res/effect/Animation_KuangRe.ExportJson
  • /data/data/####/app_payload_res/publish/Animation_open1.png
  • /data/data/####/app_payload_res/ui/shop-iteams.json
  • /data/data/####/app_payload_res/effect/effect_13.png
  • /data/data/####/app_payload_res/man_skill.png
  • /data/data/####/app_payload_res/ui/font.png
  • /data/data/####/app_payload_res/data/map/map999_03_1.tmx
  • /data/data/####/app_payload_res/nickname_input/Daily_00.png
  • /data/data/####/app_payload_res/ui/ui_iteams.json
  • /data/data/####/app_payload_res/data/map/Windmap021_08.tmx
  • /data/data/####/app_payload_res/data/map/fevertime07.tmx
  • /data/data/####/app_payload_res/data/map/fevertime01.tmx
  • /data/data/####/app_payload_res/effect/effect_AI.png
  • /data/data/####/app_payload_res/data/map/map999_06.tmx
  • /data/data/####/app_payload_res/effect/holy_light/holy_light.ExportJson
  • /data/data/####/app_payload_res/effect/fast_down0.plist
  • /data/data/####/files/myfvu.jar
  • /data/data/####/app_payload_res/data/map/map103_06_1.tmx
  • /data/data/####/app_payload_res/sound/break.ogg
  • /data/data/####/app_payload_res/ui/effect_diamond.png
  • /data/data/####/app_payload_res/background/background_01.plist
  • /data/data/####/app_payload_res/effect/effect_13.plist
  • /data/data/####/app_payload_res/ui/num/num_06.png
  • /data/data/####/app_payload_res/ui/num/num_62.png
  • /data/data/####/app_payload_res/ui/effect_help.plist
  • /data/data/####/app_payload_res/data/map/Windmap021_14_3.tmx
  • /data/data/####/app_payload_res/sound/button.ogg
  • /sdcard/zzz/301356507059351895cjimg/img$20160112$4dbbff95eea41c063a66c7d7a1200459.jpg
  • /data/data/####/app_payload_res/pet/effect_pet.png
  • /data/data/####/app_payload_res/ui/effect_start.plist
  • /data/data/####/app_payload_res/ui/skill.png
  • /data/data/####/app_payload_res/data/map/Windmap041_10_3.tmx
  • /data/data/####/app_payload_res/publish/ui_open_1.json
  • /data/data/####/app_payload_res/data/map/Windmap041_02_3.tmx
  • /data/data/####/app_payload_res/data/data_rope.json
  • /data/data/####/app_payload_res/ui/xinshou.png
  • /data/data/####/app_payload_res/ui/pp_01.plist
  • /data/data/####/app_payload_res/portrait.png
  • /data/data/####/app_payload_res/effect/magnet_down0.png
  • /data/data/####/app_payload_res/data/map/Windmap041_06_1.tmx
  • /data/data/####/app_payload_res/effect/sprint_up.ExportJson
  • /data/data/####/app_payload_res/background/background_02_02.png
  • /data/data/####/app_payload_res/ui/effect_item.plist
  • /data/data/####/app_payload_res/ui/menu_notOpen.png
  • /data/data/####/app_payload_res/effect/Animation_JiaSu0.plist
  • /data/data/####/app_payload_res/ui/help_02.json
  • /data/data/####/app_payload_res/background/effect_wather_sakura.plist
  • /data/data/####/app_payload_res/ui_old/guanbianniu_0.png
  • /data/data/####/app_payload_res/ui/effect_item.png
  • /data/data/####/app_payload_res/sound/alert.ogg
  • /data/data/####/app_payload_res/effect/LINE.plist
  • /data/data/####/app_payload_res/pet/pet_dragonet0.png
  • /data/data/####/app_payload_res/ui/num/num_56.png
  • /data/data/####/app_payload_res/effect/Animation_start.ExportJson
  • /data/data/####/app_payload_res/ui/help_05.json
  • /data/data/####/app_payload_res/background/background_04_00.png
  • /data/data/####/app_payload_res/background/background_00.png
  • /data/data/####/app_payload_res/pet/TTK.plist
  • /data/data/####/app_payload_res/ui/ui_main_menu.json
  • /data/data/####/app_payload_res/number/num_59.png
  • /data/data/####/app_payload_res/sound/bgm_menu.ogg
  • /data/data/####/app_payload_res/ui/font.plist
  • /data/data/####/app_payload_res/ui_old/jf_01.png
  • /data/data/####/app_payload_res/ui/effect_help.png
  • /data/data/####/app_payload_res/sound/zuanshixiaohao.ogg
  • /data/data/####/app_payload_res/data/map/Windmap021_10.tmx
  • /data/data/####/app_payload_res/sound/shenmizhufu.ogg
  • /data/data/####/app_payload_res/ui/effect_heart_00.png
  • /data/data/####/app_payload_res/effect/unmatched_up0.png
  • /data/data/####/app_payload_res/publish/open/open_06.plist
  • /data/data/####/app_payload_res/effect/haste_up.ExportJson
  • /data/data/####/app_payload_res/sound/jump.ogg
  • /data/data/####/app_payload_res/data/map/map103_03_1.tmx
  • /data/data/####/app_payload_res/effect/Animation_JiaSu.ExportJson
  • /data/data/####/app_payload_res/ui/effect_activity.plist
  • /data/data/####/app_payload_res/ui/tuichuyouxi.png
  • /data/data/####/app_payload_res/ui/effect_shenmi.png
  • /data/data/####/app_payload_res/ui/num/num_05.png
  • /data/data/####/app_payload_res/effect/effect_timeout.plist
  • /data/data/####/app_payload_res/effect/unmatched_down0.png
  • /data/data/####/app_payload_res/ui/num/num_52.png
  • /data/data/####/app_payload_res/sound/gold.ogg
  • /data/data/####/app_payload_res/ui/num/num_09.png
  • /data/data/####/app_payload_res/background/effect_wather_maple.plist
  • /data/data/####/app_payload_res/effect/holy_light/holy_light0.plist
  • /data/data/####/app_payload_res/data/map/map101_03_1.tmx
  • /data/data/####/app_payload_res/publish/Animation_Start0.png
  • /data/data/####/app_payload_res/data/map/map002_01.tmx
  • /data/data/####/app_payload_res/data/map/traps_010.png
  • /data/data/####/app_payload_res/hero/dragon_claw_behind.ExportJson
  • /data/data/####/app_payload_res/ui/Animation_Stamina.ExportJson
  • /data/data/####/app_payload_res/pet/TTK.png
  • /data/data/####/app_payload_res/pet/pet_MD.ExportJson
  • /data/data/####/app_payload_res/ui/help_15.json
  • /data/data/####/app_payload_res/data/map/map999_09_1.tmx
  • /data/data/####/app_payload_res/ui/GUI/button.png
  • /data/data/####/app_payload_res/ui/Sudoku.plist
  • /data/data/####/app_payload_res/ui/background_0.jpg
  • /data/data/####/app_payload_res/data/map/map103_05.tmx
  • /data/data/####/app_payload_res/ui/num/num_54.png
  • /data/data/####/app_payload_res/effect/unmatched_down.ExportJson
  • /data/data/####/app_payload_res/pet/pet_dragonet.ExportJson
  • /data/data/####/app_payload_res/ui/effect_pet.plist
  • /data/data/####/app_payload_res/ui/Ninja/ninja_04.png
  • /data/data/####/app_payload_res/effect/speed_up0.plist
  • /data/data/####/app_payload_res/pet/pet_Kubi.ExportJson
  • /data/data/####/app_payload_res/effect/effect_14.plist
  • /data/data/####/app_payload_res/ui/help_14.json
  • /data/data/####/app_payload_res/cleek_00.png
  • /data/data/####/app_payload_res/data/map/Windmap021_13.tmx
  • /data/data/####/app_payload_res/effect/unmatched_up0.plist
  • /data/data/####/app_payload_res/mmpay.xml
  • /data/data/####/app_payload_res/effect/haste_up0.png
  • /sdcard/zzz/301356507059351895cjimg/img$20160323$1bbde2b04e689eed9eb11b52ab97e3b9.jpg
  • /data/data/####/app_payload_res/data/map/map101_05.tmx
  • /data/data/####/app_payload_res/publish/Animation_open1.plist
  • /data/data/####/app_payload_res/data/map/Windmap041_04.tmx
  • /data/data/####/app_payload_res/data/map/fevertime05.tmx
  • /data/data/####/app_payload_res/effect/revive_up0.png
  • /data/data/####/app_payload_res/data/map/Windmap012_03.tmx
  • /data/data/####/app_payload_res/hero/ninjia_03.ExportJson
  • /data/data/####/app_payload_res/data/map/backColor.png
  • /data/data/####/app_payload_res/ui/tuisong.json
  • /data/data/####/app_payload_res/ui/effect_activity.png
  • /data/data/####/app_payload_res/pet/Inukami.png
  • /data/data/####/app_payload_res/ui/fuhuo.plist
  • /data/data/####/app_payload_res/data/map/springboard.ExportJson
  • /data/data/####/app_payload_res/equip.png
  • /data/data/####/app_payload_res/data/map/Windmap012_01.tmx
  • /data/data/####/app_payload_res/ui/paihangbang.json
  • /data/data/####/app_payload_res/data/map/map101_04_3.tmx
  • /data/data/####/app_payload_res/ui/effect_heart.plist
  • /data/data/####/app_payload_res/ui/help_22.json
  • /data/data/####/app_payload_res/ui/activity_di/activity_di_03.png
  • /data/data/####/app_payload_res/data/map/map101_01_1.tmx
  • /data/data/####/app_payload_res/ui/s_kuang.json
  • /data/data/####/app_payload_res/effect/Animation_timewarning0.plist
  • /data/data/####/app_payload_res/hero/dragon_claw_behind0.png
  • /data/data/####/app_payload_res/data/map/Windmap021_12.tmx
  • /data/data/####/app_payload_res/effect/Animation_timewarning0.png
  • /data/data/####/app_payload_res/data/map/map102_01_3.tmx
  • /data/data/####/app_payload_res/ui/pp_01.png
  • /data/data/####/app_payload_res/data/map/Windmap041_03.tmx
  • /data/data/####/app_payload_res/ui/help_20.json
  • /data/data/####/app_payload_res/ui/m_kuang.json
  • /data/data/####/app_payload_res/ui/paihangjiangli.json
  • /data/data/####/app_payload_res/ui/over.plist
  • /data/data/####/app_payload_res/data/map/map102_01_1.tmx
  • /data/data/####/app_payload_res/ui/num/num_31.png
  • /data/data/####/app_payload_res/pet/MDragonling.plist
  • /data/data/####/app_payload_res/portrait.plist
  • /data/data/####/app_payload_res/background/effect_wather_snow.plist
  • /data/data/####/app_payload_res/data/map/map103_04.tmx
  • /data/data/####/app_payload_res/ui/ui_iteams.plist
  • /data/data/####/app_payload_res/data/map/Windmap041_02_1.tmx
  • /data/data/####/app_payload_res/data/map/map101_02.tmx
  • /data/data/####/app_payload_res/ui/shop-man.json
  • /data/data/####/app_payload_res/ui/num/num_11.png
  • /data/data/####/app_payload_res/background/effect_wather_rain.plist
  • /data/data/####/app_payload_res/publish/open/open_07.plist
  • /data/data/####/app_payload_res/effect/revive_down0.png
  • /data/data/####/app_payload_res/data/map/Animation_feibiao0.png
  • /data/data/####/app_payload_res/hero/ninjia_04.ExportJson
  • /data/data/####/app_payload_res/ui/num/num_08.png
  • /data/data/####/app_payload_res/ui/help_10.json
  • /data/data/####/app_payload_res/pet/NinjaCat.plist
  • /data/data/####/app_payload_res/number/num_21.png
  • /data/data/####/app_payload_res/sound/bgm_game_01.ogg
  • /data/data/####/app_payload_res/ui/shop.png
  • /data/data/####/app_payload_res/data/map/Windmap021_09_3.tmx
  • /data/data/####/app_payload_res/sound/fast.ogg
  • /data/data/####/app_payload_res/effect/fly0.plist
  • /data/data/####/app_payload_res/data/map/Windmap021_02_1.tmx
  • /data/data/####/app_payload_res/data/map/map101_04_1.tmx
  • /data/data/####/app_payload_res/ui/pet.png
  • /data/data/####/app_payload_res/ui/effect_skill.plist
  • /data/data/####/app_payload_res/ui/nickname.json
  • /data/data/####/app_payload_res/ui/menu_effect.png
  • /data/data/####/app_payload_res/nickname_input/shop_back_04.png
  • /data/data/####/app_payload_res/data/map/map999_08.tmx
  • /data/data/####/app_payload_res/pet/pet_Raccoon.ExportJson
  • /data/data/####/app_payload_res/data/map/Windmap041_10_1.tmx
  • /data/data/####/app_payload_res/ui/num/num_30.png
  • /data/data/####/app_payload_res/hero/ninja_01.png
  • /data/data/####/app_payload_res/ui/help_01.json
  • /data/data/####/app_payload_res/data/map/map001_02.tmx
  • /data/data/####/app_payload_res/publish/open/open_02.png
  • /data/data/####/app_payload_res/ui/num/num_25.png
  • /data/data/####/app_payload_res/ui/num/num_13.png
  • /data/data/####/app_payload_res/data/map/map101_06_1.tmx
  • /data/data/####/app_payload_res/effect/fast_up.ExportJson
  • /data/data/####/shared_prefs/umeng_general_config.xml.bak
  • /data/data/####/app_payload_res/effect/magnet_up.ExportJson
  • /data/data/####/app_payload_res/ui/activity.json
  • /data/data/####/app_payload_res/ui/help_19.json
  • /data/data/####/app_payload_res/background/background_04_03.png
  • /data/data/####/app_payload_res/ui_old/jifei_Ui_1.json
  • /data/data/####/shared_prefs/InitInfo.xml
  • /data/data/####/app_payload_res/ui/num/num_27.png
  • /data/data/####/app_payload_res/ui/help_18.json
  • /data/data/####/files/mobclick_agent_cached_####7761
  • /data/data/####/app_payload_res/ui/num/num_22.png
Miscellaneous:
Executes next shell scripts:
  • sh
Contains functionality to send SMS messages automatically.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android