JavaScript support is required for our site to be fully operational in your browser.
Android.Packed.19186
Added to the Dr.Web virus database:
2017-03-05
Virus description added:
2017-03-05
Technical information
Malicious functions:
Executes code of the following detected threats:
Network activity:
Connecting to:
h####.####.com
r####.####.com
w####.####.com
z####.####.com
a####.####.com:8081
isds####.####.com
s####.####.com
c####.####.com
v####.####.com
i####.####.com
ub####.####.com
p####.####.com
f####.####.com
m####.####.com
st####.####.com
1####.####.com
ec####.####.com
we####.####.com
a####.####.com
2####.####.15:8030
c####.####.net
nati####.####.com:8080
bt####.####.com
image####.####.com
e####.####.com
nati####.####.com
HTTP GET requests:
image####.####.com/ui?dri=4&formId=21&src=1000&k=&iurl[]=http:%2F%2Fpics.niurenqushi.com%2Fcopy%2Fmmbiz.qpic.cn%2Fmmbiz_jpg%2FSBicTmrH247W3bfcRX5WQdDt...
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/OsOjJJlzzCNcwoDwwnkMeWV6P3T0hvoYMw11tLoRa5ibHjPeJdhJtugUCsltNibBG8jysSdD0xUxRic4nbro51WKA/0?wx_fmt=####
we####.####.com/article/2017-03-05/4784314.html
image####.####.com/ui?dri=5&formId=22&src=1000&k=&iurl[]=http:%2F%2Fpics.niurenqushi.com%2Fcopy%2Fmmbiz.qpic.cn%2Fmmbiz_jpg%2FSBicTmrH247W3bfcRX5WQdDt...
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/RIQJDM7oiajeCqIBujuEkfxP8FEC4PTDmZJELrTbiabibycyEICn7tTYGgm1jOMRLkoQCQba58Liau4H06zXJMNAFg/0?wx_fmt=####
f####.####.com/it/u=1642725051,4137092260&fm=72
f####.####.com/it/u=2682937999,1342903421&fm=72
h####.####.com/hm.js?5bd91f1####
1####.####.com/id3a1ec790f1cef530db4c3e85a8eb25ea5bf3c81733eb7fe1103c.js
c####.####.com/cm.gif?dspid=####
f####.####.com/it/u=4139712021,1947734414&fm=76
f####.####.com/it/u=3256367984,2708580756&fm=76
e####.####.com/holmes/t-video.svg
p####.####.com/gcdm?sz=####&pdbid=####&orderid=####&odid=####&rtbid=####&rdid=####&dc=####&di=####&dri=####&dis=####&dai=####&ps=####&dcb=####&dtm=###...
we####.####.com/api/add_viewcount/?action=####&id=####
h####.####.com/hm.js?8a158d7####
p####.####.com/copy/
z####.####.com/ztd/w%3D350%3Bq%3D70/sign=2dde2d84464a20a4311e3ac2a069e91f/4034970a304e251ffb02916eae86c9177e3e53aa.jpg
c####.####.com/cpro/ui/noexpire/js/rs/template/50002_1.min.js
e####.####.com/public03/imageplus/m/title_img_only/pa_btn_movewd.app.js?cacheTime=####
i####.####.com/search/error.html
s####.####.com/s.htm?cproid=####&t=####
c####.####.com/gpixel?google_gid=####&google_cver=####
r####.####.com/web_report?cmd=####&url=####&ver=####&ua=####&int1=####&int2=####&int3=####&int4=####&str1=####&str2=####&val=####&str4=####&vid=####&s...
f####.####.com/it/u=231833055,506850798&fm=72
f####.####.com/it/u=1558096429,2217214094&fm=76
p####.####.com/copy/cms-bucket.nosdn.127.net/catchpic/5/56/5634f88959a6d4a243c773906726177d.png?image####&thumbnail=####
c####.####.com/cpro/ui/noexpire/js/rs/template/10002_1.min.js
c####.####.com/cpro/ui/noexpire/img/mob_adicon.png
p####.####.com/bcwm?pdbid=####&orderid=####&odid=####&rtbid=####&rdid=####&dc=####&di=####&dri=####&dis=####&dai=####&ps=####&coa=####&dcb=####&dtm=##...
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/YlOaibzYNtBFKIWYzCOW7xibaFRIv7HZbGy482pafs7qIVXbY5z2PyeibrSAcOBRibDk9asHhoNTG9x59sDOfOz7dg/0?wx_fmt=####
f####.####.com/it/u=1081630677,3771702784&fm=72
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_png/1Y2W9EAMHFagIChHFmtzzhqbGqVtjFIZiaCK636Aic4icqKteQqdZqjLMeRJ5RqRmArteNI5QLcfDrWiaicOMAf8FFA/0?wx_fmt=####
nati####.####.com/log/zc/wapInsert?log.exc####&ist=####&message=####
image####.####.com/cookie_iframe.html?CPROID=####
p####.####.com/gcdm?pdbid=####&orderid=####&odid=####&rtbid=####&rdid=####&dc=####&di=####&dri=####&dis=####&dai=####&ps=####&coa=####&dcb=####&dtm=##...
f####.####.com/it/u=285461321,1195308040&fm=72
p####.####.com/copy/mmbiz.qpic.cn/mmbiz/ptWFaO3xDVGibjWeM0ticiapvgibD9IXWfkR7grSrplkK6jDHWm0mCCfWM49TD1OcFqfenK66R3iaLeHylF2oJ6HlicQ/640?wx_fmt=####
p####.####.com/bcwm?sz=####&pdbid=####&orderid=####&odid=####&rtbid=####&rdid=####&dc=####&di=####&dri=####&dis=####&dai=####&ps=####&dcb=####&dtm=###...
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/uggPXkDSoor4A84IwhaJQjVQSJyyoicSuoibaZqiaIs09nYn6300vqUib8ib0cHanvhXCeMhQBOicjnJQVib3z568LZdQ/0?wx_fmt=###...
we####.####.com/article/list-4.html
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/SBicTmrH247W3bfcRX5WQdDtQOmLR3UCYmPvnAjiaL2fRezSoxktmWzDESl8sJGCeicbg5Vd8dJ0UMKgRC46XeRSA/640?wx_fmt=####
p####.####.com/gckm?sz=####&pdbid=####&orderid=####&odid=####&rtbid=####&rdid=####&dc=####&di=####&dri=####&dis=####&dai=####&ps=####&dcb=####&dtm=###...
f####.####.com/it/u=2827841167,1560815438&fm=72
z####.####.com/ztd/w%3D350%3Bq%3D70/sign=7bb0607faeefce1bea2bcecf9f6a82e3/a8773912b31bb051134690a13f7adab44bede0dd.jpg
isds####.####.com/cgi-bin/v.cgi?flag1=####&flag2=####&1=####&2=####
p####.####.com/bcwm?sz=####&pdbid=####&orderid=####&odid=####&rtbid=####&rdid=####&dc=####&exps=####&di=####&dri=####&dis=####&dai=####&ps=####&dcb=##...
f####.####.com/it/u=3946572452,4091640842&fm=76
f####.####.com/it/u=1493946359,1972040935&fm=76
p####.####.com/copy/cms-bucket.nosdn.127.net/catchpic/d/d7/d79f68d8103f3940a0b44db49ac0474e.jpg?image####&thumbnail=####
f####.####.com/it/u=565992755,3430726461&fm=76
bt####.####.com/kvcollect?BossId=####&Pwd=####&_dc=####&version=####&vid=####&rid=####&pid=####&url=####&platform=####&ptag=####&pfversion=####&vt=###...
f####.####.com/it/u=477798467,3858181438&fm=76
image####.####.com/ui?dri=2&formId=22&src=1000&k=&iurl[]=http:%2F%2Fpics.niurenqushi.com%2Fcopy%2Fmmbiz.qpic.cn%2Fmmbiz_jpg%2FyW8r83BWtvGgVyuVBPBEtZM4...
f####.####.com/it/u=1937121367,2654524142&fm=76
nati####.####.com:8080/log/zc/wapInsert?log.exc####&ist=####&message=####
p####.####.com/gcdm?di=####&dri=####&dis=####&dai=####&ps=####&coa=####&dcb=####&dtm=####&dvi=####&dci=####&dpt=####&tsr=####&tpr=####&ti=####&ari=###...
f####.####.com/it/u=993108256,1294193381&fm=76
p####.####.com/gckm?sz=####&pdbid=####&orderid=####&odid=####&rtbid=####&rdid=####&dc=####&exps=####&di=####&dri=####&dis=####&dai=####&ps=####&dcb=##...
a####.####.com/tpl/ctm3.js
st####.####.com/theme/mobile/css/main.css
h####.####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&et=####&ja=####&ln=####&lo=####<=####&nv=####&rnd=####&si=####&st=####&su=####&v=####&lv=####&...
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/zo4xCSWW0z2no925eHM1H6RRmhuwHvJvDXqz8mOY0ojFw3Fh3ZzP53ufPwB8KSMo0xAN9Jj97IeEsPTyb5X3gg/0?wx_fmt=####
f####.####.com/it/u=724542271,1898791615&fm=76
h####.####.com/getcookie/getcookie.html.html?t=####
f####.####.com/it/u=17636343,117910312&fm=76
m####.####.com/
c####.####.com/sync.htm?cproid=####
f####.####.com/it/u=2066392774,2957171783&fm=76
f####.####.com/it/u=707846342,3698315228&fm=76
c####.####.com/youku?mzid=####
z####.####.com/ztd/w%3D350%3Bq%3D70/sign=4fcd3c9105d79123e0e092719d0f28bf/7a899e510fb30f24c7ea809ac195d143ad4b0332.jpg
r####.####.com/web_report?cmd=####&url=####&ver=####&ua=####&int1=####&int2=####&int3=####&int4=####&str1=####&str2=####&vid=####
image####.####.com/ui?dri=3&is_small_pic=1&src=1000&k=&iurl[]=http:%2F%2Fpics.niurenqushi.com%2Fcopy%2Fmmbiz.qpic.cn%2Fmmbiz%2FptWFaO3xDVGibjWeM0ticia...
z####.####.com/ztd/w%3D350%3Bq%3D70/sign=3223df0827dda3cc0be4be2531d2483c/4afbfbedab64034f01e58491a6c379310a551d78.jpg
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/jW7WibGZLkkG7emhwu3NwbHDzOybTbUGIjfibmiaJ9bsQ2qQF4n9PpJEaZN3PasmAc88DDoFbVZmRiahUkM2DjkeJA/640?wx_fmt=####...
f####.####.com/it/u=3118428872,3071454351&fm=76
c####.####.com/cpro/exp/closead/img/bg_rb.png
c####.####.com/cpro/ui/noexpire/js/3.1.6/cpro.js
c####.####.com/cpro/ui/noexpire/js/rs/business/1.0.0/anticheate_mob.min.js
z####.####.com/ztd/w%3D350%3Bq%3D70/sign=3b5716e329a446237ecaa367a8190333/960a304e251f95ca87bdfe2fc0177f3e660952da.jpg
a####.####.com:8081/urlqushi.php
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/farU1EDDst1xnlxjnSaOpvk4lbRMRA6qKUYYmtfqu72xUQrgX7FuTdL6cTKel2NWXzicd7Vhj1W907fibhRty8hQ/640?wx_fmt=####
z####.####.com/ztd/w%3D350%3Bq%3D70/sign=a3a7e67cb53eb13544c7b1be9625d9ee/10dfa9ec8a136327417d08a7988fa0ec09fac796.jpg
1####.####.com/rl3a1ec790f1cef639db4c3e85a8eb25ea5bf3c81733eb7fe1103c.js
p####.####.com/copy/mmbiz.qpic.cn/mmbiz/ptWFaO3xDVEhPoCMHiblP1qyflS2wibMQLjn8Xj2Jlz6dyBeLm45bXFS2zvGF7fJYLeKfyP8Cecib0FvjHYUkJAJQ/0?wx_fmt=####
p####.####.com/vctm?sz=####&pdbid=####&orderid=####&odid=####&rtbid=####&rdid=####&dc=####&di=####&dri=####&dis=####&dai=####&ps=####&dcb=####&dtm=###...
f####.####.com/it/u=295922121,455174866&fm=72
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_png/iakyudASh0icA6vRC7OUqHC8Te6myAeUvuV5JlTDFTFfX9617oC7gBeibwCOFZj1P1DJtocqGRbW21SmURhwulHAw/0?wx_fmt=####
f####.####.com/it/u=1839415139,2727339510&fm=76
we####.####.com/article/list-5.html
f####.####.com/it/u=530125853,181981072&fm=76
p####.####.com/fcbm?sz=####&pdbid=####&orderid=####&odid=####&rtbid=####&rdid=####&dc=####&di=####&dri=####&dis=####&dai=####&ps=####&dcb=####&dtm=###...
z####.####.com/ztd/w%3D350%3Bq%3D70/sign=afc0b465fe03918fd7d13bcf610657aa/d058ccbf6c81800ad53f6a8bb83533fa838b4759.jpg
p####.####.com/gckm?pdbid=####&orderid=####&odid=####&rtbid=####&rdid=####&dc=####&di=####&dri=####&dis=####&dai=####&ps=####&dcb=####&dtm=####&dvi=##...
we####.####.com/theme/mobile/js/client_article_show.js?v=####
r####.####.com/web_report?cmd=####&url=####&ver=####&ua=####&int1=####&int2=####&int3=####&int4=####&str1=####&str2=####&vid=####&itype=####&val=####&...
f####.####.com/it/u=568443042,3682785536&fm=76
a####.####.com/libs/jquery/2.1.1/jquery.min.js
r####.####.com/cooperation/attach.9b450b330bcdadbf41a02db07c9af1cf.css
st####.####.com/theme/mobile/images/navbg.png
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/aUOwZlJyLkp1dwlOl2BvWbMfKVRTr1So1svYonRfMXodicEdSHMZqqvgBdIVOpLUTib2vmibLGlxFHhH3pibhiaqoyQ/0?wx_fmt=####
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/BqyvoSw5fq8IqCLtoSGDMztLicRiaPPmiaNiaopaHtDDPhibt7uj9iaLTvpicdLOUJfCGvaeDHnELggfZJ7unf1NdFibPw/0?wx_fmt=##...
f####.####.com/it/u=977779419,4283350909&fm=76
bt####.####.com/kvcollect?BossId=####&Pwd=####&_dc=####&version=####&vid=####&rid=####&pid=####&url=####&platform=####&ptag=####&pfversion=####&val2=#...
m####.####.com/js/common.js
p####.####.com/gcdm?di=####&dri=####&dis=####&dai=####&ps=####&dcb=####&dtm=####&dvi=####&dci=####&dpt=####&tsr=####&tpr=####&ti=####&ari=####&dbv=###...
st####.####.com/js/common.js
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/Q1xUykt06WPbmYRV6w7wzWpPhxicWRsRibwvtPmUaicfQTic5NrTFLDrI3T2ZGibjMYnlAN1CvW1wjRu9KzUsjcmC2g/0?wx_fmt=####
image####.####.com/ui?dri=1&formId=21&src=1000&k=&iurl[]=http:%2F%2Fpics.niurenqushi.com%2Fcopy%2Fmmbiz.qpic.cn%2Fmmbiz_jpg%2FyW8r83BWtvGgVyuVBPBEtZM4...
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_png/1yLp0DPNIhHZbtljKIQiaOPhqsItic0o8kWpxZvaDzzRdUqrnFS2N7BsbtypB8qPM2icPuFkjuBia7X8CHjLOpY6qg/0?wx_fmt=####
f####.####.com/it/u=2832440708,55103186&fm=72
f####.####.com/it/u=1207181461,3805754476&fm=76
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_png/icdHpHMYRdfoRVQCxlhAASM93DnRxnhTCicuH10SBB82EKeiaokkP3dQUicPTYb2ZGJZRpohiafgxVvGynrkvyM8MZg/0?wx_fmt=####
p####.####.com/gckm?pdbid=####&orderid=####&odid=####&rtbid=####&rdid=####&dc=####&di=####&dri=####&dis=####&dai=####&ps=####&coa=####&dcb=####&dtm=##...
a####.####.com/timg?pacomp####&imgtype=####&sec=####&di=####&quality=####&size=####&src=####
z####.####.com/ztd/w%3D350%3Bq%3D70/sign=aac6cc8bb83533faf5b6952b98e88c22/a8ec8a13632762d0441de13aa9ec08fa513dc610.jpg
c####.####.com/cpro/ui/noexpire/js/rs/template/logoIsShowEvents_1.min.js
f####.####.com/it/u=1452018629,1881253633&fm=76
f####.####.com/it/u=1148683420,1421724730&fm=76
f####.####.com/it/u=3593248742,1654771676&fm=76
c####.####.com/cpro/ui/noexpire/js/4.0.0/adClosefeedbackUpgrade.min.js
f####.####.com/it/u=149753914,881423514&fm=72
f####.####.com/it/u=163050990,889310308&fm=76
bt####.####.com/kvcollect?BossId=####&Pwd=####&_dc=####&version=####&vid=####&rid=####&pid=####&url=####&platform=####&ptag=####&pfversion=####&val1=#...
p####.####.com/copy/p1.ifengimg.com/fck/2017_09/45ea84efdb82d9e_w250_h323.jpg
2####.####.15:8030/m.js?tn=####&react=####&iframe=####&render_time=####
p####.####.com/sync_pos.htm?cproid=####&t=####
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_png/xrFYciaHL08CUHyu2zKCuI4EXZ1iccwicC1kqQLNpEkUqL2rSd0rLmrRjwbYK1zUAosfCgibTVicW1lHw7K4LCDdAbQ/0?wx_fmt=####
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/29M28caKSZ0x1EYbkliabTZ8F21P7Eq2ricaYAB76unzvBzQBf1ZKEZ0J7uxIxf1p9gFrsibUetRCbx3uEkwtJg2Q/0?wx_fmt=####
f####.####.com/it/u=3481253296,3371143799&fm=76
f####.####.com/it/u=451881653,485843278&fm=72
h####.####.com/getinfo?callback=####&platform=####&charge=####&otype=####&ehost=####&sphls=####&sb=####&nocache=####&_rnd=####&guid=####&appVer=####&v...
f####.####.com/it/u=1463661074,2135840825&fm=76
z####.####.com/ztd/w%3D350%3Bq%3D70/sign=8b00a0786bd9f2d3201122ea99d7fb2e/48540923dd54564e62ac7ba0bade9c82d0584f5a.jpg
c####.####.com/cpro/ui/mi.js
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/yW8r83BWtvGgVyuVBPBEtZM4Pu05ica04Xe23CRSHs7xIW126VbWvkaXlwycXPLR4ZPGP0YctRHAgdcvdWR7mrA/640?wx_fmt=####
image####.####.com/ui?api=####&prot=####&tu=####&pic=####&vn=####&callback=####
f####.####.com/it/u=1970235052,2777946289&fm=76
e####.####.com/public03/imageplus/m/common_loader.js?cache=####
c####.####.net/pixel?google_nid=####&googl####
f####.####.com/it/u=504881749,2188778889&fm=76
z####.####.com/ztd/w%3D350%3Bq%3D70/sign=89730456bb119313c743f9b555037dea/aa18972bd40735fa3cfd842d97510fb30f240811.jpg
v####.####.com/iframe/preview.html?vid=####&width=####&height=####&auto=####
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/kiaOxjjm2uOqJicHat1NwpwcQ7zSTJ3cCWRLx791AhDyaFMb5LCWTibGWaAnAyDL7MmjVticB1fQPPbUJSgj7kskxw/0?wx_fmt=####
c####.####.com/pixel?dspid=####
image####.####.com/imgs/showcase-1.jpg
p####.####.com/gcdm?sz=####&pdbid=####&orderid=####&odid=####&rtbid=####&rdid=####&dc=####&exps=####&di=####&dri=####&dis=####&dai=####&ps=####&dcb=##...
f####.####.com/it/u=188024389,160764631&fm=76
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/qdWB7wH8tTqOZHv6XuibIeQR2WvibvCqC32m1j0oA2MMkQ0WfOqoy3vTESVlmJDMY9hfmOR2nmicIfCG0EWAib8sWQ/640?wx_fmt=####...
p####.####.com/copy/cms-bucket.nosdn.127.net/catchpic/e/e1/e19a20f48f5a5cfd6f8b783a90663a18.png?image####&thumbnail=####
we####.####.com/
c####.####.net/pixel?google_nid=####&google_cm=####&google_tc=####
z####.####.com/ztd/w%3D350%3Bq%3D70/sign=9fea0b7e0346f21fc9345856c61f1a5d/c83d70cf3bc79f3db0fca1b5b3a1cd11728b2911.jpg
r####.####.com/tj.gif?si=####&st=####&nv=####&et=####&ep=####&at=####&rnd=####
ub####.####.com/media/v1/0f000rbhLaqH5_dVxbNB00.jpg
1####.####.com/ar7e50c7dcf6ceff30944826dff4aa67bf05.js
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/N4eh3vhgRgygibfssY607ZAEZOGIOVJTCpxap4y6WzVoTX9gNUSL1mXdxuqn2VvLOqFnQWQ3NFf3dc0VGQtIsKw/0?wx_fmt=####
ec####.####.com/time.jpg?stamp=####&s1=####&s2=####&s3=####&s4=####&s5=####&templateid=####&feid=####&s=####
f####.####.com/it/u=4013553060,3919071717&fm=76
v####.####.com/iframe/tvp.config.js
p####.####.com/pcgm?sz=####&pdbid=####&orderid=####&odid=####&rtbid=####&rdid=####&dc=####&di=####&dri=####&dis=####&dai=####&ps=####&dcb=####&dtm=###...
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/LoyT0npAgkmKmlmibSPXxOfNaRZL07ABREKRFiclurdsDeLuoZRrseLcTwJMiaziaOhc4ibV5cIfcIt091k5Y3XbKbg/0?wx_fmt=####
p####.####.com/vctm?di=####&dri=####&dis=####&dai=####&ps=####&dcb=####&dtm=####&dvi=####&dci=####&dpt=####&tsr=####&tpr=####&ti=####&ari=####&dbv=###...
f####.####.com/it/u=104896158,473876411&fm=72
c####.####.com/cpro/ui/noexpire/img/4.0.0/pc_ads_bear.1x.png
c####.####.com/cpro/ui/noexpire/img/4.0.0/pc_ads.1x.png
p####.####.com/sync_pos.htm?cproid=####
z####.####.com/ztd/w%3D350%3Bq%3D70/sign=f54dd0e5193853438ccf8124a328c143/5366d0160924ab18574cc2be3cfae6cd7a890be4.jpg
h####.####.com/hm.gif?si=####&st=####&nv=####&et=####&ep=####&rnd=####
f####.####.com/it/u=3977759114,3573193565&fm=76
p####.####.com/gckm?di=####&dri=####&dis=####&dai=####&ps=####&dcb=####&dtm=####&dvi=####&dci=####&dpt=####&tsr=####&tpr=####&ti=####&ari=####&dbv=###...
p####.####.com/s?ti=####&ps=####&drs=####&pcs=####&pss=####&cfv=####&cpl=####&chi=####&cce=####&cec=####&tlm=####&uc=####&pis=####&sr=####&ccd=####&cj...
p####.####.com/copy/cms-bucket.nosdn.127.net/catchpic/3/32/3266017b5c44a5ea3e0b267b6f480bed.jpg?image####&thumbnail=####
p####.####.com/icum?sz=####&pdbid=####&orderid=####&odid=####&rtbid=####&rdid=####&dc=####&exps=####&di=####&dri=####&dis=####&dai=####&ps=####&dcb=##...
c####.####.com/cpro/ui/noexpire/img/2.0.1/bd-logo4.png
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_png/1yLp0DPNIhHZbtljKIQiaOPhqsItic0o8kWicMibibZ8hma6wia8BuvZiaSrWlWAoQvPt1YVo6ldSFaEupTVuxk62Ocxw/0?wx_fmt=###...
z####.####.com/ztd/w%3D350%3Bq%3D70/sign=b478be6af41f4134e037037b1524e4f7/908fa0ec08fa513d34f14f57346d55fbb3fbd9db.jpg
f####.####.com/it/u=1088840888,1513437919&fm=76
w####.####.com/adx.php?c=####
f####.####.com/it/u=1117183945,4281872501&fm=76
z####.####.com/ztd/w%3D350%3Bq%3D70/sign=6018566ebffd5266a72b3a119b23e616/5ab5c9ea15ce36d334ead9b533f33a87e850b14d.jpg
z####.####.com/ztd/w%3D350%3Bq%3D70/sign=33a306bd8f18367aad8979d81e48fae9/8435e5dde71190eff534594bc71b9d16fcfa6053.jpg
f####.####.com/it/u=1187629584,1756741772&fm=76
c####.####.com/cpro/exp/closead/img/bd_logo.png
f####.####.com/it/u=265350669,3351291075&fm=76
r####.####.com/web_report?cmd=####&url=####&ver=####&ua=####&int1=####&int2=####&int3=####&int4=####&str1=####&str2=####&val=####&str4=####
m####.####.com/theme/mobile/css/main.css
f####.####.com/it/u=139971591,2361646727&fm=76
c####.####.com/du?&baidu_user_id=####&cookie_version=####×tamp=####&ext_data=####
c####.####.com/t.js?siteId=####&planId=####&async=####&referer=####&title=####&rnd=####
f####.####.com/it/u=714961855,787381951&fm=76
f####.####.com/it/u=2016301112,2295463438&fm=76
c####.####.com/cpro/ui/cm.js
p####.####.com/pcgm?pdbid=####&orderid=####&odid=####&rtbid=####&rdid=####&dc=####&di=####&dri=####&dis=####&dai=####&ps=####&coa=####&dcb=####&dtm=##...
f####.####.com/it/u=1458851412,1086652518&fm=76
1####.####.com/fa3a1ec790f1cef53ddb4c3e85a8eb25ea5bf3c81733eb7fe1103c.js
p####.####.com/icum?pdbid=####&orderid=####&odid=####&rtbid=####&rdid=####&dc=####&di=####&dri=####&dis=####&dai=####&ps=####&coa=####&dcb=####&dtm=##...
f####.####.com/it/u=1506963309,2159609230&fm=76
p####.####.com/icum?sz=####&pdbid=####&orderid=####&odid=####&rtbid=####&rdid=####&dc=####&di=####&dri=####&dis=####&dai=####&ps=####&dcb=####&dtm=###...
h####.####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&et=####&ja=####&ln=####&lo=####&nv=####&rnd=####&si=####&st=####&v=####&lv=####&tt=####
p####.####.com/pcgm?sz=####&pdbid=####&orderid=####&odid=####&rtbid=####&rdid=####&dc=####&exps=####&di=####&dri=####&dis=####&dai=####&ps=####&dcb=##...
e####.####.com/crs.gif?type=####&src=####
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/rCDMDSIyc0dL3VUrsXpvT2nB8ia06TCnc1iaXmbJZxsO4fA96ghpE88JpA3Ek8SgDErcibEZPwib1OscYlUkP9Xeyw/640?wx_fmt=####...
f####.####.com/it/u=1079990915,2526109083&fm=72
z####.####.com/ztd/w%3D350%3Bq%3D70/sign=bc6a909479cf3bc7e800cbe9e13bcb9c/21a4462309f7905243412ba705f3d7ca7acbd5c9.jpg
p####.####.com/copy/mmbiz.qpic.cn/mmbiz_jpg/LbGNn3xQbIKH1u21y1jiaxQrQTsQeFaXlPaqm4yQVsG98ILstDibC1hOSuiagVaobeUibL86JQpwcpgXxVzSLmE7FA/0?wx_fmt=####
Modified file system:
Creates the following files:
/data/data/####/cache/webviewCacheChromium/data_0
/data/data/####/cache/webviewCacheChromium/f_00002f
/data/data/####/cache/webviewCacheChromium/f_00002e
/data/data/####/cache/webviewCacheChromium/f_00002d
/data/data/####/cache/webviewCacheChromium/f_00002c
/data/data/####/cache/webviewCacheChromium/f_000032
/data/data/####/cache/webviewCacheChromium/f_00002a
/data/data/####/cache/webviewCacheChromium/f_00000a
/data/data/####/cache/webviewCacheChromium/f_00000c
/data/data/####/cache/webviewCacheChromium/f_00000b
/data/data/####/cache/webviewCacheChromium/f_00000e
/data/data/####/cache/webviewCacheChromium/f_00000d
/data/data/####/cache/webviewCacheChromium/f_00000f
/data/data/####/cache/webviewCacheChromium/f_000034
/data/data/####/cache/webviewCacheChromium/f_000035
/data/data/####/cache/webviewCacheChromium/f_000036
/data/data/####/cache/webviewCacheChromium/f_000037
/data/data/####/cache/webviewCacheChromium/f_000030
/data/data/####/cache/webviewCacheChromium/f_000031
/data/data/####/cache/webviewCacheChromium/f_000018
/data/data/####/cache/webviewCacheChromium/f_000019
/data/data/####/cache/webviewCacheChromium/f_000016
/data/data/####/cache/webviewCacheChromium/f_000017
/data/data/####/cache/webviewCacheChromium/f_000014
/data/data/####/cache/webviewCacheChromium/f_000015
/data/data/####/cache/webviewCacheChromium/f_000012
/data/data/####/cache/webviewCacheChromium/f_000013
/data/data/####/cache/webviewCacheChromium/f_000010
/data/data/####/cache/webviewCacheChromium/f_000011
/data/data/####/databases/webviewCookiesChromium.db-journal
/data/data/####/cache/webviewCacheChromium/f_000002
/data/data/####/cache/webviewCacheChromium/f_00003b
/data/data/####/cache/webviewCacheChromium/data_3
/data/data/####/cache/webviewCacheChromium/f_000038
/data/data/####/shared_prefs/WebViewSettings.xml
/data/data/####/cache/webviewCacheChromium/f_000027
/data/data/####/cache/webviewCacheChromium/f_000039
/data/data/####/files/dex/pks.jar
/data/data/####/cache/webviewCacheChromium/f_000033
/data/data/####/cache/webviewCacheChromium/f_000029
/data/data/####/cache/webviewCacheChromium/f_000028
/data/data/####/cache/webviewCacheChromium/f_00002b
/data/data/####/cache/webviewCacheChromium/f_00003d
/data/data/####/cache/webviewCacheChromium/f_00003e
/data/data/####/cache/webviewCacheChromium/f_00003f
/data/data/####/cache/webviewCacheChromium/data_2
/data/data/####/cache/webviewCacheChromium/f_00003a
/data/data/####/cache/webviewCacheChromium/f_000042
/data/data/####/cache/webviewCacheChromium/f_00003c
/data/data/####/cache/webviewCacheChromium/f_00001f
/data/data/####/cache/webviewCacheChromium/f_000044
/data/data/####/cache/webviewCacheChromium/f_00001d
/data/data/####/cache/webviewCacheChromium/f_00001e
/data/data/####/cache/webviewCacheChromium/f_00001b
/data/data/####/cache/webviewCacheChromium/f_000040
/data/data/####/cache/webviewCacheChromium/f_000043
/data/data/####/cache/webviewCacheChromium/f_00001c
/data/data/####/databases/webview.db-journal
/data/data/####/cache/webviewCacheChromium/f_000008
/data/data/####/cache/webviewCacheChromium/f_000025
/data/data/####/cache/webviewCacheChromium/f_000024
/data/data/####/cache/webviewCacheChromium/f_000023
/data/data/####/cache/webviewCacheChromium/f_000022
/data/data/####/cache/webviewCacheChromium/f_000021
/data/data/####/cache/webviewCacheChromium/f_000020
/data/data/####/cache/webviewCacheChromium/f_000001
/data/data/####/cache/webviewCacheChromium/f_000003
/data/data/####/cache/webviewCacheChromium/f_00001a
/data/data/####/cache/webviewCacheChromium/f_000005
/data/data/####/cache/webviewCacheChromium/f_000004
/data/data/####/cache/webviewCacheChromium/f_000007
/data/data/####/cache/webviewCacheChromium/f_000006
/data/data/####/cache/webviewCacheChromium/f_000009
/data/data/####/cache/webviewCacheChromium/data_1
/data/data/####/cache/webviewCacheChromium/f_000026
/data/data/####/cache/webviewCacheChromium/f_000041
/data/data/####/cache/webviewCacheChromium/index
Miscellaneous:
Contains functionality to send SMS messages automatically.
Curing recommendations
Android
If the mobile device is operating normally, download and install Dr.Web for Android Light . Run a full system scan and follow recommendations to neutralize the detected threats.
If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
Switch off your device and turn it on as normal.
Find out more about Dr.Web for Android
Download Dr.Web for Android
Free three-month trial
All protection features available
Renew your trial license in AppGallery/on Google Pay
By continuing to use this website, you are consenting to Doctor Web’s use of cookies and other technologies related to the collection of visitor statistics. Learn more
OK