Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Xiny.1196

Added to the Dr.Web virus database: 2018-03-19

Virus description added:

Technical information

Malicious functions:
Sends SMS messages:
  • \4226zd303153: -
Executes code of the following detected threats:
  • Android.Xiny.20
Gains access to the ITelephony private interface.
Intercepts incoming SMS messages and terminates the process of their transmission to handlers of other applications.
Network activity:
Connecting to:
  • UDP(DNS) <Google DNS>
  • TCP(HTTP/1.1) yes.yuchan####.com.cn:80
  • TCP(HTTP/1.1) 2####.243.193.48:80
  • TCP(HTTP/1.1) d.weixu####.com.####.com:80
  • TCP(HTTP/1.1) h####.b####.com:80
  • TCP(HTTP/1.1) gdv.a.s####.com:80
DNS requests:
  • d.weixu####.com.cn
  • h####.b####.com
  • pv.s####.com
  • r.eli####.cn
  • www.bbmm####.com
  • yes.yuchan####.com.cn
HTTP GET requests:
  • d.weixu####.com.####.com/2011/gou.jar
  • gdv.a.s####.com/cityjson?ie=####
  • yes.yuchan####.com.cn/k2?protocol=####&version=####&cid=####
HTTP POST requests:
  • h####.b####.com/app.gif
Modified file system:
Creates the following files:
  • <Package Folder>/.jiagu/libjiagu.so
  • <Package Folder>/app_jgls/.log.lock
  • <Package Folder>/app_jgls/.log.ls
  • <Package Folder>/databases/downloadswc
  • <Package Folder>/databases/downloadswc-journal
  • <Package Folder>/databases/webview.db-journal
  • <Package Folder>/files/####/.jg.ic
  • <Package Folder>/files/__local_last_session.json
  • <Package Folder>/files/__local_stat_cache.json
  • <Package Folder>/shared_prefs/<Package>_preferences.xml
  • <Package Folder>/shared_prefs/<Package>_preferences.xml.bak
  • <Package Folder>/shared_prefs/W_Key.xml
  • <Package Folder>/shared_prefs/__Baidu_Stat_SDK_SendRem.xml
  • <Package Folder>/shared_prefs/a.xml
  • <Package Folder>/shared_prefs/st.xml
  • <SD-Card>/Download/####/4.8_gou.jar.tmp
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833476198.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833476565.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833476746.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833477054.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833477197.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833477354.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833477505.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833477702.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833477860.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833478078.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833478268.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833478428.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833478585.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833478725.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833478877.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833479023.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833479222.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833479364.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833479525.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833479673.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833479841.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833480067.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833480292.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833480584.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833482161.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833482494.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833482637.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833482807.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833482976.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833483152.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833483322.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833483621.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833483991.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833484358.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833484549.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833484733.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833484959.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833485150.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833485375.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833485703.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833487041.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833487521.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833487864.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833488020.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833488223.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833488384.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833488528.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833488692.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833488835.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833488992.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833489158.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833489302.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833489460.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833489618.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833489778.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833489942.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833490132.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833490308.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833490444.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833490620.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833490772.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833490920.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833491088.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833491245.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833491553.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833491770.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833491926.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833492082.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833492269.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833492598.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833493041.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833493470.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833493879.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833494123.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833494522.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833494941.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833495178.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833495418.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833495710.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833495864.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833496081.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833496240.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833496394.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833496670.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833496838.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833497049.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833497299.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833497472.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833497761.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833497907.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833498210.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833498381.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833498580.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833498736.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833498904.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833499171.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833499473.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833499607.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833499840.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833500050.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833500273.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833500444.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833500782.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833501194.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833501519.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833501697.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833501879.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833502067.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833502217.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833502370.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833502543.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833502738.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833502895.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833503069.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833503255.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833503396.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833503583.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833503713.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833503875.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833504028.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833504192.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833504350.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833504495.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833504671.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833504813.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833504956.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833505113.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833505295.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833505471.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833505629.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833505767.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833505924.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833506072.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833506213.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833506379.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833506528.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833506759.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833506978.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833507133.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833507287.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833507440.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833507599.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833507777.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833507915.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833508073.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833508281.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833508556.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833508740.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833508908.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833509081.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833509273.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833509466.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833509644.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833509820.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833509983.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833510184.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833510325.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833510496.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833510673.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833510970.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833511142.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833511411.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833511583.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833511746.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833511949.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833512116.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833512291.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833512465.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833512627.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833512813.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833512992.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833513153.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833513317.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833513497.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833513645.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833513849.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833514023.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833514186.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833514380.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833514532.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833514690.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833514863.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833515055.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833515212.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833515366.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833515524.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833515663.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833515844.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833516004.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833516152.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833516338.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833516490.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833516647.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833516829.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833516974.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833517147.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833517329.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833517469.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833517624.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833517822.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833518008.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833518196.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833518345.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833518600.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833518731.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833518906.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833519070.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833519209.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833519386.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833519606.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833519774.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833519946.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833520098.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833520251.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833520441.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833520583.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833520733.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833520907.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833521240.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833521695.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833521932.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833522101.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833522272.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833522533.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833522919.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833523070.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833523239.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833523415.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833523565.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833523724.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833524059.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833524238.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833524405.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833524776.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833525058.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833525245.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833525383.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833525585.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833525750.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833525910.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833526113.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833526253.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833526416.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833526602.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833526753.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833526912.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833527084.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833527241.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833527403.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833527583.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833527757.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833527944.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833528141.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833528306.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833528491.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833528800.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833528977.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833529273.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833529479.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833529834.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833530116.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833530284.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833530468.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833530747.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833530966.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833531145.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833531333.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833531511.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833531802.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833531955.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833532097.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833532275.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833532443.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833532638.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833532775.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833532949.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833533109.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833533286.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833533455.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833533609.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833533772.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833533951.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833534113.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833534276.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833534446.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833534615.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833534776.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833534948.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833535105.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833535377.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833535569.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833535817.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833536007.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833536358.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833536570.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833536859.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833537148.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833537332.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833537525.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833537677.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833537838.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833538027.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833538201.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833538370.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833538541.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833538721.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833538908.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833539074.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833539258.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833539433.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833539878.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833540171.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833540360.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833540537.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833540723.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833540903.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833541096.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833541282.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833541459.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833541648.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833541816.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833542001.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833542193.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833542368.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833542548.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833542747.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833542939.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833543129.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833543294.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833543617.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833543790.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833543973.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833544137.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833544348.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833544551.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833544728.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833544949.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833545142.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833545340.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833545531.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833545736.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833545918.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833546097.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833546302.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833546477.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833546662.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833546877.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833547080.txt
  • <SD-Card>/biggerLauncher/####/mySessionList_file_1510833547270.txt
  • <SD-Card>/dt/restime.dat
Miscellaneous:
Executes next shell scripts:
  • chmod 755 <Package Folder>/.jiagu/libjiagu.so
Loads the following dynamic libraries:
  • jdqoflw
  • libjiagu
Uses special library to hide executable bytecode.
Gains access to geolocation.
Gains access to network information.
Gains access to telephone information (number, imei, etc.).
Displays its own windows over windows of other applications.
Parses information from SMS messages.
Gains access to information about sent/received SMS messages.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android