Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Packed.19851

Added to the Dr.Web virus database: 2017-03-21

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.MobiDash.1.origin
Network activity:
Connecting to:
  • s####.####.com
  • t####.####.com
  • plat####.####.com
  • c####.####.net
  • statcou####.com
  • google-####.com
  • 2####.####.com
  • c####.####.com
  • e####.####.com
  • mc####.com
  • w####.####.com
  • count-s####.####.com
  • l####.####.com
  • b####.####.com
  • pag####.####.com
HTTP GET requests:
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-4.jpg
  • 2####.####.com/avatar/ed680c4ab1f97c22b0b208603ddae2b4?s=####&d=####&r=####
  • 2####.####.com/avatar/865331f1e3fabad93febd0d744ce7a7d?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2016/07/armor-stand-2-1-520x245.jpg
  • b####.####.com/b2?c1=####&c2=####&rn=####&c7=####&c3=####&c8=####&c9=####&cv=####&cs=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-15.jpg
  • mc####.com/wp-content/uploads/2017/01/mine-bikes-4-520x245.jpg
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-8.jpg
  • 2####.####.com/avatar/66bb3e0bfcf4e509248b74077f2a4302?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/03/super-craft-1-0-520x245.jpg
  • 2####.####.com/avatar/0851303c22d029d71f885aaf589b898c?s=####&d=####&r=####
  • 2####.####.com/avatar/a1b356b076143fc180569a8bfb1ec10d?s=####&d=####&r=####
  • c####.####.net/pixel?google_nid=####&google_ula=####&google_ula=####&google_tc=####
  • 2####.####.com/avatar/b537ea5163611e166d888537fdbe43c4?s=####&d=####&r=####
  • c####.####.net/pixel?google_nid=####&google_ula=####&google_ula=####
  • 2####.####.com/avatar/5caf95bd1d9bec455a041760db333820?s=####&d=####&r=####
  • mc####.com/wp-content/plugins/wp-skins/modules/inc/fa/css/font-awesome.min.css?ver=####
  • 2####.####.com/avatar/af534450b035c763566f458bb4bff53f?s=####&d=####&r=####
  • s####.####.com/adxmapping.php?google_ula=####&google_ula=####
  • mc####.com/wp-content/themes/hueman/js/scripts.js?ver=####
  • 2####.####.com/avatar/56141f776d3f705013ae0fba2b6a8e1b?s=####&d=####&r=####
  • mc####.com/wp-includes/js/wp-emoji-release.min.js?ver=####
  • w####.####.com/button/async-buttons.js
  • 2####.####.com/avatar/e6b5e9a0be0e56fde7cf811eb3c21a1b?s=####&d=####&r=####
  • s####.####.com/getSegment.php?purl=####&jsref=####&rnd=####
  • 2####.####.com/avatar/18298e97d4acdb1783e19d9dc4f01192?s=####&d=####&r=####
  • mc####.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=####
  • mc####.com/wp-content/plugins/cj-membership-modules/cjfm-custom.css?ver=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-3.jpg
  • google-####.com/analytics.js
  • 2####.####.com/avatar/c6408c06fc178b4fdd758482efddec1a?s=####&d=####&r=####
  • mc####.com/wp-content/themes/hueman/style.css?ver=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-9.jpg
  • mc####.com/wp-content/uploads/2016/12/nethercaster-aether-update-3-520x245.jpg
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-19.jpg
  • mc####.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=####
  • mc####.com/?s=####
  • mc####.com/wp-content/themes/hueman/fonts/titillium-regularitalic-webfont.ttf
  • 2####.####.com/avatar/c3b57dd7386778b5bec4eea51754663f?s=####&d=####&r=####
  • 2####.####.com/avatar/8a1d081757a06f2480e2590901591cbf?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-12.jpg
  • 2####.####.com/avatar/dfcb261a7bcabe77e5e19361527f72b4?s=####&d=####&r=####
  • google-####.com/r/collect?v=####&_v=####&a=####&t=####&_s=####&dl=####&ul=####&de=####&dt=####&sd=####&sr=####&vp=####&je=####&_u=####&jid=####&gjid=#...
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-26.jpg
  • mc####.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=####
  • mc####.com/wp-content/themes/hueman/js/jquery.flexslider.min.js?ver=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-21.jpg
  • 2####.####.com/avatar/6d5478391953fd392f4ff29ae908fe4a?s=####&d=####&r=####
  • 2####.####.com/avatar/4e735ee80e47af6287fd120350c518ab?s=####&d=####&r=####
  • c####.####.com/t.php?sc_project=####&java=####&security=####&u1=####&sc_random=####&jg=####&rr=####&resolution=####&h=####&camefrom=####&u=####&t=####...
  • 2####.####.com/avatar/14bf39802f330d68fabc66f825895b8f?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-23.jpg
  • 2####.####.com/avatar/cbb4938303047247868f4a6b6c2051a5?s=####&d=####&r=####
  • 2####.####.com/avatar/8803056530ccc9ca4d63d824ba4d5ff3?s=####&d=####&r=####
  • 2####.####.com/avatar/c13dc29684c1338b74e9574fae695fcb?s=####&d=####&r=####
  • 2####.####.com/avatar/3361848636361c2d8c6437cb3e0a62ca?s=####&d=####&r=####
  • w####.####.com/images/2017/googleplus_16.png
  • mc####.com/wp-content/themes/hueman/fonts/titillium-lightitalic-webfont.svg
  • mc####.com/wp-content/uploads/2017/02/jurassic-world-map-3.jpg
  • 2####.####.com/avatar/ed40c300aaafbfeacfcca4ce51c8ab0a?s=####&d=####&r=####
  • mc####.com/wp-content/plugins/cj-membership-modules/assets/js/cjfm.js?ver=####
  • mc####.com/wp-content/uploads/2017/01/dominus-rex-2.jpg
  • 2####.####.com/avatar/2122cd9000f87bb91aa8fa470aa3e724?s=####&d=####&r=####
  • mc####.com/wp-content/themes/hueman/fonts/titillium-light-webfont.ttf
  • 2####.####.com/avatar/f14cc41523c41fe99b7c1df7a66506d4?s=####&d=####&r=####
  • 2####.####.com/avatar/f8055b1f9b5414d3f745d60627803361?s=####&d=####&r=####
  • w####.####.com/share4x/images/bubble_arrow.png
  • 2####.####.com/avatar/caa5d23d2f617100f7703fb095b1a0d7?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2016/11/t-rex-10-1.jpg
  • w####.####.com/button/css/buttons.e80452d5e7cc382dad89d10f50bde247.css
  • mc####.com/wp-includes/js/wp-embed.min.js?ver=####
  • mc####.com/wp-content/uploads/2017/02/jurassic-world-map-2.jpg
  • 2####.####.com/avatar/c8f91d0d8dc94f26cbc79bc94a072bac?s=####&d=####&r=####
  • l####.####.com/pview?event=####&version=####&lang=####&fpc=####&sessionID=####&hostname=####&location=####&product=####&stid=####&publisher=####&st_op...
  • 2####.####.com/avatar/654a2c0cf631afa3a0fa759f3f1230de?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2015/03/screenshot-2015-03-19-10-09_3-520x245.png
  • w####.####.com/images/2017/sharethis_counter.png
  • 2####.####.com/avatar/d50e13a6909c15ee9cc02577435560e1?s=####&d=####&r=####
  • mc####.com/privacy-policy/
  • mc####.com/category/mods/
  • 2####.####.com/avatar/4fd6e8649931ac8efc94477abe1cc43c?s=####&d=####&r=####
  • 2####.####.com/avatar/e7c65e51d9a9446effe6f8adaca2bddb?s=####&d=####&r=####
  • mc####.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=####
  • 2####.####.com/avatar/71cdbf0bceaf791757d6f45559210c8b?s=####&d=####&r=####
  • 2####.####.com/avatar/33f4744ecc5ab44e6fe48d60a9c3f915?s=####&d=####&r=####
  • 2####.####.com/avatar/a1174ebb3daccd0d75ab5505a0fb70f8?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-jeep-2.jpg
  • 2####.####.com/avatar/abe1a721aa1f2f6a2705998895cc7016?s=####&d=####&r=####
  • 2####.####.com/avatar/52b827d84386cf67ccd2fd901927345a?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/01/sspe-8-1-4-520x245.jpg
  • mc####.com/wp-content/themes/hueman/fonts/titillium-lightitalic-webfont.ttf
  • 2####.####.com/avatar/702b0e9eace1c2fbe78e7ad7b102dc5f?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-7.jpg
  • mc####.com/jurassic-craft/
  • 2####.####.com/avatar/ec4b501dcdc0dbc2ace0d3fc5390d6f4?s=####&d=####&r=####
  • 2####.####.com/avatar/367c0e85afbce2ff48ef220b1513450d?s=####&d=####&r=####
  • 2####.####.com/avatar/931f859c95fe0b471cda8fa08103d7a1?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2016/12/hurtful-arrows-520x245.jpg
  • t####.####.com/1/d/t.dhj?rnd=####&cid=####&dmn=####
  • 2####.####.com/avatar/b88c92f2b509f74640889c6f5ef18b9f?s=####&d=####&r=####
  • mc####.com/wp-includes/js/comment-reply.min.js?ver=####
  • 2####.####.com/avatar/0fc4046813fc28f496f9f90acb34a872?s=####&d=####&r=####
  • 2####.####.com/avatar/c9105575e973ead0037070d04e2558c5?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-2.jpg
  • 2####.####.com/avatar/0ef61a269250ce94819bea01bf1fca81?s=####&d=####&r=####
  • c####.####.com/ajax/libs/cookieconsent2/1.0.9/dark-bottom.css
  • 2####.####.com/avatar/7980406d981bf0531daf7137355a5304?s=####&d=####&r=####
  • 2####.####.com/avatar/2101b76818faf53b5ab65fb7e161c40d?s=####&d=####&r=####
  • mc####.com/wp-content/plugins/cj-membership-modules/assets/css/cjfm.css?ver=####
  • 2####.####.com/avatar/80613894258d5aa6e1e9a4ccb834fb0e?s=####&d=####&r=####
  • mc####.com/wp-content/themes/hueman/img/sidebar/s-right-s1.png
  • w####.####.com/images/2017/twitter_counter.png
  • 2####.####.com/avatar/4daa400d17eef5d4698a2d8de24d4152?s=####&d=####&r=####
  • 2####.####.com/avatar/5f7e71402ebe740d8dc12e2b88ad9286?s=####&d=####&r=####
  • 2####.####.com/avatar/95078391c0e112196d205fd7cf780a36?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-5.jpg
  • mc####.com/wp-content/uploads/2017/03/the-evil-z-cientist-520x245.jpg
  • 2####.####.com/avatar/464146c441953d9bf859ae8684bca819?s=####&d=####&r=####
  • 2####.####.com/avatar/71050f2e4c9b5b5380fbff522149ea84?s=####&d=####&r=####
  • mc####.com/wp-includes/js/jquery/jquery.js?ver=####
  • mc####.com/wp-content/plugins/wp-skins/modules/inc/assets/css/boot-cont.css?ver=####
  • mc####.com/wp-content/uploads/2017/02/jurassic-world-map-6.jpg
  • 2####.####.com/avatar/8471259a000b0b5d772772d3573cd247?s=####&d=####&r=####
  • w####.####.com/share5x/js/stcommon.abaae5e95825c1fb680e1c6259855261.js
  • 2####.####.com/avatar/55f68ea652d2dffa0eb427e53ed8d2e0?s=####&d=####&r=####
  • 2####.####.com/avatar/ad96c9b51a59389ef6b45007c5f7d34a?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-25.jpg
  • 2####.####.com/avatar/78787953a0116cbe18381f7928815d23?s=####&d=####&r=####
  • 2####.####.com/avatar/41b2087679eabf657501b68b276e3bb8?s=####&d=####&r=####
  • mc####.com/wp-content/plugins/cj-membership-modules/assets/cjfm-icons/style.css?ver=####
  • 2####.####.com/avatar/2a94bc64ddde603432f2dd3b5ebedb4c?s=####&d=####&r=####
  • 2####.####.com/avatar/7cbd02767ea545b84fe4ccd5a50aa4ce?s=####&d=####&r=####
  • 2####.####.com/avatar/43f01ab58e84539ad4599bf979bcc46e?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/03/dragon-block-1-520x245.jpg
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-18.jpg
  • 2####.####.com/avatar/88ae6de4ffea129c0148d0b6e55e7a0e?s=####&d=####&r=####
  • c####.####.com/ajax/libs/cookieconsent2/1.0.9/cookieconsent.min.js?ver=####
  • 2####.####.com/avatar/dcd3efbb3013d8fe41fdca54deff7c68?s=####&d=####&r=####
  • 2####.####.com/avatar/1400ffff58f7cdd607d2fc671389b3ce?s=####&d=####&r=####
  • mc####.com/submission/
  • b####.####.com/b?c1=####&c2=####&rn=####&c7=####&c3=####&c8=####&c9=####&cv=####&cs=####
  • mc####.com/wp-content/themes/hueman/responsive.css?ver=####
  • 2####.####.com/avatar/2de94e87b8b50c1255cd861229ab0844?s=####&d=####&r=####
  • e####.####.com/share5x/index.a5f42b80ce45265edb51446893bb3c19.html
  • mc####.com/wp-content/themes/hueman/fonts/titillium-regularitalic-webfont.svg
  • mc####.com/wp-content/uploads/2017/03/bows-and-arrows-1-520x245.jpg
  • 2####.####.com/avatar/14a90d2bcc0f2186b402bef021703ea8?s=####&d=####&r=####
  • 2####.####.com/avatar/78c362808b5e9c3afec288f4914e50cd?s=####&d=####&r=####
  • 2####.####.com/avatar/9186664126e16fc2216382afbffc1fb8?s=####&d=####&r=####
  • 2####.####.com/avatar/f67f5dec917c8f5e2b64b7ef0fbad74e?s=####&d=####&r=####
  • mc####.com/wp-content/themes/hueman-child/style.css?ver=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-11.jpg
  • 2####.####.com/avatar/eeb9ec44d1418d3817e3e3f293fe3e2b?s=####&d=####&r=####
  • mc####.com/wp-content/themes/hueman/fonts/titillium-regular-webfont.svg
  • count-s####.####.com/increment_clicks?url=####&refDomain=####&refQuery=####
  • 2####.####.com/avatar/581b59c820622929dba25d558e507d13?s=####&d=####&r=####
  • mc####.com/wp-content/themes/hueman/fonts/titillium-semibold-webfont.svg
  • mc####.com/wp-content/plugins/wp-skins/modules/inc/fa/fonts/fontawesome-webfont.ttf?v=####
  • 2####.####.com/avatar/bfd7f2470b0cebe687dcdcbe6921cf8b?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-20.jpg
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-triceratops-1.jpg
  • mc####.com/wp-content/uploads/2017/03/reversal-dropper-pe-520x245.jpg
  • 2####.####.com/avatar/1919bfc4fa95c7f6b231e583da677a17?s=####&d=####&r=####
  • 2####.####.com/avatar/0d506ffe994f0484f009613745ac1982?s=####&d=####&r=####
  • google-####.com/collect?v=####&_v=####&a=####&t=####&_s=####&dl=####&ul=####&de=####&dt=####&sd=####&sr=####&vp=####&je=####&_u=####&jid=####&gjid=###...
  • 2####.####.com/avatar/446769f1f496d3ad022701f9c5f9e216?s=####&d=####&r=####
  • plat####.####.com/widgets.js
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-1-1.jpg
  • 2####.####.com/avatar/40bc9c070c066a24ec0cc52696a037a8?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2014/04/dllogo1.png
  • pag####.####.com/pagead/js/adsbygoogle.js
  • mc####.com/wp-content/plugins/wp-skins/modules/css/front.css?ver=####
  • 2####.####.com/avatar/6f9900005b3eda0373888f961942ec7a?s=####&d=####&r=####
  • 2####.####.com/avatar/c99a0c01e920357aeee96584e42d740f?s=####&d=####&r=####
  • 2####.####.com/avatar/7719c522ac6370deffd5863f19a0716c?s=####&d=####&r=####
  • w####.####.com/images/2017/facebook_counter.png
  • 2####.####.com/avatar/ad9eb2375c6bf1b98c430abcb0a46216?s=####&d=####&r=####
  • mc####.com/wp-content/plugins/wp-skins/modules/js/front.js?ver=####
  • mc####.com/wp-content/themes/hueman/fonts/titillium-semibold-webfont.ttf
  • 2####.####.com/avatar/8f9386ffbf54f639ec877e0503cfcb88?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-520x245.jpg
  • 2####.####.com/avatar/9a436a1cb42a3d51fe4131e824a6e39f?s=####&d=####&r=####
  • 2####.####.com/avatar/9e97b4b61e31918bafca9e21aed19cb1?s=####&d=####&r=####
  • 2####.####.com/avatar/d522f192763270d27722aa39df3989af?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/03/dyeable-beds-1-520x245.jpg
  • 2####.####.com/avatar/bccc039873139ef5386af01afefd3f68?s=####&d=####&r=####
  • 2####.####.com/avatar/2869a24f7cf25c278076cdaa9b9eda64?s=####&d=####&r=####
  • 2####.####.com/avatar/?s=####&d=####&r=####
  • 2####.####.com/avatar/2b41ba1c2bf9c585309cb6b77910b195?s=####&d=####&r=####
  • 2####.####.com/avatar/b741fdaabac2ced2165be7996026f49b?s=####&d=####&r=####
  • 2####.####.com/avatar/cbbccc525b96d7c5bce0169c285c31b5?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-jeep-1.jpg
  • 2####.####.com/avatar/ed51b7f0e2d4bb2d819c632cf617a97c?s=####&d=####&r=####
  • 2####.####.com/avatar/456497a35e38ae8f2e3b60b8f117b653?s=####&d=####&r=####
  • mc####.com/wp-content/themes/hueman/img/opacity-10.png
  • mc####.com/wp-content/themes/hueman/fonts/fontawesome-webfont.ttf?v=####
  • 2####.####.com/avatar/f34200de19c2789cc72236ae6af71733?s=####&d=####&r=####
  • 2####.####.com/avatar/264a6d77e0a65fd010df3be2b967314a?s=####&d=####&r=####
  • 2####.####.com/avatar/259b76ac8e1f8ceddd47fc806aa18dd2?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-13.jpg
  • mc####.com/wp-content/themes/hueman/fonts/titillium-light-webfont.svg
  • 2####.####.com/avatar/90abf247a733c622afe2d4c551b1c3c0?s=####&d=####&r=####
  • statcou####.com/counter/counter.js
  • 2####.####.com/avatar/cd2020a714db8701038b1fd171783f5f?s=####&d=####&r=####
  • mc####.com/wp-content/themes/hueman/fonts/font-awesome.min.css?ver=####
  • mc####.com/wp-content/uploads/2016/11/dev-edition-3-3-520x245.jpg
  • mc####.com/wp-content/uploads/2017/03/epic-cliffs-520x245.jpg
  • 2####.####.com/avatar/e05e2c848a92643ae8b81305f8cd11ac?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/03/arabic-translation-520x245.jpg
  • 2####.####.com/avatar/750c8f0d84c216aabe9ee2acf7863fbd?s=####&d=####&r=####
  • 2####.####.com/avatar/4d07fa9c3e329659d9fd01a269aef61c?s=####&d=####&r=####
  • 2####.####.com/avatar/48fa0b0c3c83b8e08cdb5c1eba53d281?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-14.jpg
  • 2####.####.com/avatar/3c311045a41b4774c99243d1ca96252d?s=####&d=####&r=####
  • mc####.com/wp-content/themes/hueman/fonts/titillium-regular-webfont.ttf
  • 2####.####.com/avatar/0d582c2ace9b8022fb721ccc9e8a9727?s=####&d=####&r=####
  • 2####.####.com/avatar/191719d2a7fc639e6ac11f714eedea25?s=####&d=####&r=####
  • mc####.com/wp-content/plugins/mc-cookie-consent/js/mc-cookie-consent.js?ver=####
  • mc####.com/wp-content/plugins/cj-membership-modules/cjfm-custom.js?ver=####
  • mc####.com/
  • 2####.####.com/avatar/062e729bd80edf70d55fd37fe9ec7c4a?s=####&d=####&r=####
  • 2####.####.com/avatar/01efc78250dce0f5412c2e467db45baa?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon.jpg
  • mc####.com/login
  • mc####.com/wp-content/uploads/2017/03/star-wars-addon-1-520x245.jpg
  • 2####.####.com/avatar/53b0d0818ec6b5dff460f704298243c3?s=####&d=####&r=####
  • mc####.com/wp-content/plugins/front-end-registration-login-forms/js/feralf-scripts.js?ver=####
  • 2####.####.com/avatar/81fa27c9873a18afc95116d9e8ad59ce?s=####&d=####&r=####
  • pag####.####.com/pagead/js/r20170315/r20170110/show_ads_impl.js
  • w####.####.com/button/buttons.js
  • 2####.####.com/avatar/3d57701a82ff601232c35aa413449dbf?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-16.jpg
  • 2####.####.com/avatar/cec416c1c467031b23aeeb162f5edeac?s=####&d=####&r=####
  • 2####.####.com/avatar/21ff41184c46837007283296f30954bd?s=####&d=####&r=####
  • 2####.####.com/avatar/db897efc4a4a8acf01a4020b6992622b?s=####&d=####&r=####
  • 2####.####.com/avatar/519eeb42a33b4846067f586996c43fe5?s=####&d=####&r=####
  • count-s####.####.com/v2.0/get_counts?url=####&cb=####&wd=####
  • 2####.####.com/avatar/0e4f97008df5dda47736e71f5862e447?s=####&d=####&r=####
  • 2####.####.com/avatar/d1896123a099b18a727c12500c2ea27a?s=####&d=####&r=####
  • 2####.####.com/avatar/e1867c20604009043535caa5f254ad69?s=####&d=####&r=####
  • 2####.####.com/avatar/64933de9ea7da217c41cd2f42545ea0a?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/03/mine-machines-2-520x245.jpg
  • plat####.####.com/css/timeline.3a5bba37d8a97ff1a6185653efe28c38.light.ltr.css
  • 2####.####.com/avatar/e1e5c493a4ee59a3509b22119b9e18eb?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2015/01/elevators6-520x245.png
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-6.jpg
  • 2####.####.com/avatar/0fd48a8275d3cd41e550e6cf6ac6da61?s=####&d=####&r=####
  • 2####.####.com/avatar/0258078ce9ac756441ae9036287857cf?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-17.jpg
  • 2####.####.com/avatar/5c05402564ed4575b284429578048193?s=####&d=####&r=####
  • mc####.com/wp-includes/css/dashicons.min.css?ver=####
  • 2####.####.com/avatar/9675bbe50b0d93fa8f377fff9f6c94bf?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2016/11/t-rex-10-3.jpg
  • mc####.com/wp-content/uploads/2017/01/dodo-1.jpg
  • 2####.####.com/avatar/cae3bbe03cc7759c3de29ddbbbc1f58a?s=####&d=####&r=####
  • mc####.com/wp-content/uploads/2017/01/jurassic-craft-addon-10.jpg
  • mc####.com/wp-content/uploads/2016/11/t-rex-10-4.jpg
  • 2####.####.com/avatar/8c777864a272b03693ee5411f1222602?s=####&d=####&r=####
  • w####.####.com/share5x/js/st.5f1b49044d2b541a8e690f9c2f551d2c.js
  • mc####.com/login/
Modified file system:
Creates the following files:
  • /data/data/####/cache/webviewCacheChromium/f_00002f
  • /data/data/####/cache/webviewCacheChromium/f_00002e
  • /data/data/####/cache/webviewCacheChromium/f_00002d
  • /data/data/####/cache/webviewCacheChromium/f_00002c
  • /data/data/####/cache/webviewCacheChromium/f_00002b
  • /data/data/####/cache/webviewCacheChromium/f_00002a
  • /data/data/####/cache/webviewCacheChromium/f_000052
  • /data/data/####/cache/webviewCacheChromium/f_000053
  • /data/data/####/cache/webviewCacheChromium/f_000050
  • /data/data/####/cache/webviewCacheChromium/f_000051
  • /data/data/####/cache/webviewCacheChromium/f_000056
  • /data/data/####/cache/webviewCacheChromium/f_000057
  • /data/data/####/cache/webviewCacheChromium/f_000054
  • /data/data/####/databases/metrica_client_data.db-journal
  • /data/data/####/cache/webviewCacheChromium/data_3
  • /data/data/####/cache/webviewCacheChromium/data_2
  • /data/data/####/cache/webviewCacheChromium/data_1
  • /data/data/####/cache/webviewCacheChromium/data_0
  • /data/data/####/databases/webviewCookiesChromium.db-journal
  • /data/data/####/shared_prefs/####_servertimeoffset.xml
  • /data/data/####/shared_prefs/multidex.version.xml
  • /data/data/####/databases/metrica_data.db-journal
  • /data/data/####/databases/webview.db-journal
  • /data/data/####/cache/webviewCacheChromium/f_000026
  • /data/data/####/cache/webviewCacheChromium/f_000025
  • /data/data/####/cache/webviewCacheChromium/f_000024
  • /data/data/####/cache/webviewCacheChromium/f_000023
  • /data/data/####/cache/webviewCacheChromium/f_000022
  • /data/data/####/cache/webviewCacheChromium/f_000021
  • /data/data/####/cache/webviewCacheChromium/f_000020
  • /data/data/####/cache/webviewCacheChromium/f_000029
  • /data/data/####/cache/webviewCacheChromium/f_000028
  • /data/data/####/cache/webviewCacheChromium/index
  • /data/data/####/files/file
  • /data/data/####/cache/webviewCacheChromium/f_00000c
  • /data/data/####/cache/webviewCacheChromium/f_000055
  • /data/data/####/cache/webviewCacheChromium/f_00000e
  • /data/data/####/cache/webviewCacheChromium/f_00000d
  • /data/data/####/shared_prefs/####_startupserviceinfopreferences.xml
  • /data/data/####/cache/webviewCacheChromium/f_00000f
  • /data/data/####/cache/webviewCacheChromium/f_000034
  • /data/data/####/cache/webviewCacheChromium/f_000035
  • /data/data/####/cache/webviewCacheChromium/f_000036
  • /data/data/####/cache/webviewCacheChromium/f_000037
  • /data/data/####/cache/webviewCacheChromium/f_000030
  • /data/data/####/cache/webviewCacheChromium/f_000031
  • /data/data/####/cache/webviewCacheChromium/f_000032
  • /data/data/####/cache/webviewCacheChromium/f_000033
  • /data/data/####/cache/webviewCacheChromium/f_000038
  • /data/data/####/databases/db_metrica_####_20799a27-fa80-4b36-b2db-0f8141f24180-journal
  • /data/data/####/shared_prefs/####_preferences.xml.bak
  • /data/data/####/shared_prefs/####_boundentrypreferences.xml
  • /data/data/####/databases/db_metrica_####-journal
  • /data/data/####/cache/webviewCacheChromium/f_00003d
  • /data/data/####/cache/webviewCacheChromium/f_00003e
  • /data/data/####/cache/webviewCacheChromium/f_00003f
  • /data/data/####/cache/webviewCacheChromium/f_00003a
  • /data/data/####/cache/webviewCacheChromium/f_00003b
  • /data/data/####/cache/webviewCacheChromium/f_00003c
  • /data/data/####/cache/webviewCacheChromium/f_000009
  • /data/data/####/cache/webviewCacheChromium/f_000008
  • /data/data/####/cache/webviewCacheChromium/f_000001
  • /data/data/####/cache/webviewCacheChromium/f_000003
  • /data/data/####/cache/webviewCacheChromium/f_000002
  • /data/data/####/cache/webviewCacheChromium/f_000005
  • /data/data/####/cache/webviewCacheChromium/f_000004
  • /data/data/####/cache/webviewCacheChromium/f_000007
  • /data/data/####/cache/webviewCacheChromium/f_000006
  • /data/data/####/code_cache/secondary-dexes/MultiDex.lock
  • /data/data/####/cache/webviewCacheChromium/f_000018
  • /data/data/####/cache/webviewCacheChromium/f_000019
  • /data/data/####/cache/webviewCacheChromium/f_000016
  • /data/data/####/cache/webviewCacheChromium/f_000017
  • /data/data/####/cache/webviewCacheChromium/f_000014
  • /data/data/####/cache/webviewCacheChromium/f_000015
  • /data/data/####/cache/webviewCacheChromium/f_000012
  • /data/data/####/cache/webviewCacheChromium/f_000013
  • /data/data/####/cache/webviewCacheChromium/f_000010
  • /data/data/####/cache/webviewCacheChromium/f_000011
  • /data/data/####/cache/webviewCacheChromium/f_00000a
  • /data/data/####/cache/webviewCacheChromium/f_00000b
  • /data/data/####/cache/webviewCacheChromium/f_00001f
  • /data/data/####/cache/webviewCacheChromium/f_00001d
  • /data/data/####/cache/webviewCacheChromium/f_00001e
  • /data/data/####/cache/webviewCacheChromium/f_00001b
  • /data/data/####/cache/webviewCacheChromium/f_00001c
  • /data/data/####/cache/webviewCacheChromium/f_00001a
  • /data/data/####/files/credentials.dat
  • /data/data/####/databases/db_metrica_####_13-journal
  • /data/data/####/shared_prefs/####_migrationpreferences.xml
  • /data/data/####/shared_prefs/####_preferences.xml
  • /data/data/####/cache/webviewCacheChromium/f_00004e
  • /data/data/####/cache/webviewCacheChromium/f_00004d
  • /data/data/####/app_app_apk/sinstaller.dat.jar
  • /data/data/####/cache/webviewCacheChromium/f_00004f
  • /data/data/####/cache/webviewCacheChromium/f_00004a
  • /data/data/####/cache/webviewCacheChromium/f_00004c
  • /data/data/####/cache/webviewCacheChromium/f_00004b
  • /data/data/####/cache/webviewCacheChromium/f_000039
  • /data/data/####/cache/webviewCacheChromium/f_000049
  • /data/data/####/cache/webviewCacheChromium/f_000048
  • /data/data/####/cache/webviewCacheChromium/f_000045
  • /data/data/####/cache/webviewCacheChromium/f_000044
  • /data/data/####/cache/webviewCacheChromium/f_000047
  • /data/data/####/cache/webviewCacheChromium/f_000046
  • /data/data/####/cache/webviewCacheChromium/f_000041
  • /data/data/####/cache/webviewCacheChromium/f_000040
  • /data/data/####/cache/webviewCacheChromium/f_000043
  • /data/data/####/cache/webviewCacheChromium/f_000042
  • /data/data/####/cache/webviewCacheChromium/f_000027
Miscellaneous:
Uses administrator priveleges.
Contains functionality to send SMS messages automatically.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android