JavaScript support is required for our site to be fully operational in your browser.
Android.SmsSend.23877
Added to the Dr.Web virus database:
2018-03-16
Virus description added:
2018-03-16
Technical information
Malicious functions:
Sends SMS messages:
1251585713: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Tall Sally
1323181870: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Santa's Little Helper
1436183411: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Tall Sally
1476391634: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Atlantic Rim
1521209005: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Zero Corn
1531591307: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --New York Mood
1712982472: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Santa's Little Helper
1724291314: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --New York Mood
2122033593: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Doz
2405372255: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --King Bass
2613395877: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Sly Bible
2735049009: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Doz
3041114402: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Predator
3074427237: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --High Deck
3262857709: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Sly Bible
3272666014: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Frosty Squid
3363699296: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Y0dler
3411001298: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Dora the Destroyer
3525703604: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Storm Master
3527273868: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Skull Crusher
3632183884: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Slow Trot
3776219368: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Skull Crusher
4126487261: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Stone Boomstick
4355297433: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Wildcat Talent
4563538542: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Wildcat Talent
4656421243: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Atlantic Rim
5041873052: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Doz
5041989318: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --CosPlatoon
5064835616: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Baby Brown
5104115842: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Po1son
5275588106: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --9Lives
5343784459: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --CosPlatoon
5454157987: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Despair
5632375827: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --9Lives
6102052386: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Dora the Destroyer
6164813864: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --King Bass
6221106747: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Despair
6253265678: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Sly Bible
6524906108: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Danqqqqq
6605741143: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Y0dler
6716495360: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Storm Master
6772827426: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Baby Brown
7176949682: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Santa's Little Helper
7646342930: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Atlantic Rim
7714758132: 忙吗 帮个忙转五十块钱急用明天还你,我的支付宝gka002886@163.com --Skull Crusher
Gains access to the ITelephony private interface.
Miscellaneous:
Displays its own windows over windows of other applications.
Curing recommendations
Android
If the mobile device is operating normally, download and install Dr.Web for Android Light . Run a full system scan and follow recommendations to neutralize the detected threats.
If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
Switch off your device and turn it on as normal.
Find out more about Dr.Web for Android
このウェブサイトを継続して訪問する場合、訪問者に関する統計データを収集するためのCookieファイルおよび他のテクノロジーを弊社が利用することに同意したものとします。詳細
OK