マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Adware.Panda.325

Added to the Dr.Web virus database: 2019-05-11

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Adware.Panda.1.origin
Network activity:
Connects to:
  • UDP(DNS) <Google DNS>
  • TCP(HTTP/1.1) api.golinks####.com:80
  • TCP(HTTP/1.1) qin####.com.www.####.com:80
  • TCP(HTTP/1.1) a####.u####.com:80
  • TCP(HTTP/1.1) t####.c####.q####.####.com:80
  • TCP(HTTP/1.1) www.pan####.net:8080
  • TCP(HTTP/1.1) c-h####.g####.com:80
  • TCP(HTTP/1.1) sdk.o####.p####.####.com:80
  • TCP(TLS/1.0) 1####.217.168.206:443
  • TCP sdk.o####.t####.####.com:5224
  • TCP c####.g####.ig####.com:5226
DNS requests:
  • 7j####.c####.z0.####.com
  • a####.u####.co
  • a####.u####.com
  • api.golinks####.com
  • c####.g####.ig####.com
  • c-h####.g####.com
  • mt####.go####.com
  • pub-####.qin####.com
  • sdk-ope####.g####.com
  • sdk.c####.ig####.com
  • sdk.o####.i####.####.com
  • sdk.o####.p####.####.com
  • sdk.o####.t####.####.com
  • www.pan####.net
HTTP GET requests:
  • api.golinks####.com/356/v1/News/GetCatAll
  • api.golinks####.com/356/v1/News/GetNewsList?cc=####&pdt=####&pt=####
  • api.golinks####.com/update_pro.json?t=####
  • qin####.com.www.####.com/tdata_EDT369
  • t####.c####.q####.####.com/config/hz-hzv6.conf
  • t####.c####.q####.####.com/tdata_FVZ795
  • t####.c####.q####.####.com/tdata_eoG063
  • t####.c####.q####.####.com/tdata_kAC784
HTTP POST requests:
  • a####.u####.com/app_logs
  • api.golinks####.com/356/v1/News/GetHomeNewsList_copy
  • api.golinks####.com/356/v1/User/CommitDevice
  • api.golinks####.com/356/v1/User/getMessageCount
  • c-h####.g####.com/api.php?format=####&t=####
  • sdk.o####.p####.####.com/api.php?format=####&t=####
  • sdk.o####.p####.####.com/api.php?format=####&t=####&d=####&k=####
  • www.pan####.net:8080/Mini/req.action?
  • www.pan####.net:8080/banner/req.action?
  • www.pan####.net:8080/fview/req.action?
  • www.pan####.net:8080/lscr/reqmore?
File system changes:
Creates the following files:
  • /data/data/####/0fa8c0a170ca
  • /data/data/####/H52203BEA.xml
  • /data/data/####/H52203BEA_storages.xml
  • /data/data/####/WORLD_SHARED.xml
  • /data/data/####/clientid_igexin.xml
  • /data/data/####/com.indeed.golinksnbn;GSID.xml
  • /data/data/####/data_0
  • /data/data/####/data_1
  • /data/data/####/data_2
  • /data/data/####/data_3
  • /data/data/####/exchangeIdentity.json
  • /data/data/####/gdaemon_20161017
  • /data/data/####/gkt-journal
  • /data/data/####/gx_sp.xml
  • /data/data/####/increment.db-journal
  • /data/data/####/index
  • /data/data/####/init.pid
  • /data/data/####/pdr.xml
  • /data/data/####/push.pid
  • /data/data/####/pushext.db-journal
  • /data/data/####/pushg.db-journal
  • /data/data/####/pushsdk.db-journal
  • /data/data/####/run.pid
  • /data/data/####/tdata_FVZ795.jar
  • /data/data/####/tdata_FVZ795.tmp
  • /data/data/####/tdata_eoG063.jar
  • /data/data/####/tdata_eoG063.tmp
  • /data/data/####/tdata_kAC784.jar
  • /data/data/####/tdata_kAC784.tmp
  • /data/data/####/um_cache_1557539925217.env
  • /data/data/####/umeng_general_config.xml
  • /data/data/####/umeng_it.cache
  • /data/data/####/webview.db-journal
  • /data/data/####/webviewCookiesChromium.db-journal
  • /data/data/####/webviewCookiesChromiumPrivate.db-journal
  • /data/media/####/$scrollable.js
  • /data/media/####/0000000000000001.db-journal
  • /data/media/####/BadgeEvent.js
  • /data/media/####/Cmatch-header.html
  • /data/media/####/Cmatch-header.js
  • /data/media/####/Cmatch-page1.html
  • /data/media/####/Cmatch-page2.html
  • /data/media/####/Cmatch-page2.js
  • /data/media/####/Cmatch-page3.html
  • /data/media/####/Cmatch-page3.js
  • /data/media/####/Cmatch-page4.html
  • /data/media/####/Cmatch-page4.js
  • /data/media/####/Cmatch-page5.html
  • /data/media/####/Cmatch-page5.js
  • /data/media/####/Cmatch-page6.html
  • /data/media/####/Cmatch-page6.js
  • /data/media/####/Databases.db-journal
  • /data/media/####/JumpPage.js
  • /data/media/####/Location.html
  • /data/media/####/MtArrange.html
  • /data/media/####/MtArrange.js
  • /data/media/####/UpdateMatch.html
  • /data/media/####/UpdateMatch.js
  • /data/media/####/accountAndBind.html
  • /data/media/####/accountAndBind.js
  • /data/media/####/addImgBtn.png
  • /data/media/####/address.js
  • /data/media/####/addresslist.html
  • /data/media/####/addresslist.js
  • /data/media/####/addroundman.html
  • /data/media/####/addroundman.js
  • /data/media/####/admin-chessinfo.html
  • /data/media/####/admin-chessinfo.js
  • /data/media/####/admin-chessinfosgf.html
  • /data/media/####/admin-chessinfosgf.js
  • /data/media/####/admin-onlinechess.html
  • /data/media/####/admin-onlinechess.js
  • /data/media/####/admin-resultchesslist-child.html
  • /data/media/####/admin-resultchesslist-child.js
  • /data/media/####/admin-resultchesslist-head.html
  • /data/media/####/admin.html
  • /data/media/####/admin.js
  • /data/media/####/agreement.html
  • /data/media/####/album.png
  • /data/media/####/albumCollect.html
  • /data/media/####/albumCollect.js
  • /data/media/####/albumCreate.png
  • /data/media/####/albumDetail-header.html
  • /data/media/####/albumDetail.html
  • /data/media/####/albumDetail.js
  • /data/media/####/albumList-header.html
  • /data/media/####/albumList.html
  • /data/media/####/albumList.js
  • /data/media/####/amazeui.js
  • /data/media/####/amazeui.min.css
  • /data/media/####/app.css
  • /data/media/####/app.db
  • /data/media/####/app4dapu.png
  • /data/media/####/app4study.png
  • /data/media/####/app6toupiao1.png
  • /data/media/####/app6toupiao2.png
  • /data/media/####/app6toupiao3.png
  • /data/media/####/app6toupiao4.png
  • /data/media/####/applyclub-header.html
  • /data/media/####/applyclub.html
  • /data/media/####/applyclub.js
  • /data/media/####/applymanlist-child.html
  • /data/media/####/applymanlist-child.js
  • /data/media/####/applymanlist.html
  • /data/media/####/applymanlist.js
  • /data/media/####/appstorage.js
  • /data/media/####/article.html
  • /data/media/####/article.js
  • /data/media/####/authenImg.png
  • /data/media/####/authentication-parent.html
  • /data/media/####/authentication.css
  • /data/media/####/authentication.html
  • /data/media/####/authentication.js
  • /data/media/####/autoArrange.html
  • /data/media/####/autoArrange.js
  • /data/media/####/b-arrange.html
  • /data/media/####/b-arrange.js
  • /data/media/####/basicplayer.commentbox.js
  • /data/media/####/basicplayer.component.js
  • /data/media/####/basicplayer.control.js
  • /data/media/####/basicplayer.infobox.js
  • /data/media/####/basicplayer.js
  • /data/media/####/basicplayer.movetrim.js
  • /data/media/####/bind-phone.html
  • /data/media/####/bind-tel.html
  • /data/media/####/bind-tel.js
  • /data/media/####/bisai1.png
  • /data/media/####/bisai2.png
  • /data/media/####/bisai3.jpg
  • /data/media/####/bisaitishi.png
  • /data/media/####/black.png
  • /data/media/####/black00_128.png
  • /data/media/####/black01_128.png
  • /data/media/####/black02_128.png
  • /data/media/####/black03_128.png
  • /data/media/####/board.jpg
  • /data/media/####/board.png
  • /data/media/####/browser.html
  • /data/media/####/change-age.html
  • /data/media/####/change-age.js
  • /data/media/####/change-email.html
  • /data/media/####/change-email.js
  • /data/media/####/change-password.html
  • /data/media/####/change-pwd.js
  • /data/media/####/channelComment-parent.html
  • /data/media/####/channelComment.html
  • /data/media/####/channelComment.js
  • /data/media/####/channelDescribe.css
  • /data/media/####/channelDescribe.html
  • /data/media/####/channelDescribe.js
  • /data/media/####/channelDetail-parent.html
  • /data/media/####/channelDetail.css
  • /data/media/####/channelDetail.html
  • /data/media/####/channelDetail.js
  • /data/media/####/channelList-parent.html
  • /data/media/####/channelList.css
  • /data/media/####/channelList.html
  • /data/media/####/channelList.js
  • /data/media/####/chat.html
  • /data/media/####/chat.js
  • /data/media/####/chathistory.html
  • /data/media/####/chathistory.js
  • /data/media/####/chess-manual.html
  • /data/media/####/chessManual.html
  • /data/media/####/chessManual.js
  • /data/media/####/choiceGrade.css
  • /data/media/####/choiceGrade.html
  • /data/media/####/choiceGrade.js
  • /data/media/####/club-add.html
  • /data/media/####/club-add.js
  • /data/media/####/club-content.html
  • /data/media/####/club-content.js
  • /data/media/####/club-tourmanage.js
  • /data/media/####/club-tournament-head.html
  • /data/media/####/club-tournament.html
  • /data/media/####/club.css
  • /data/media/####/clubhead.png
  • /data/media/####/clubmember.html
  • /data/media/####/clubmember.js
  • /data/media/####/clubnotice-parent.html
  • /data/media/####/clubnotice.html
  • /data/media/####/clubnotice.js
  • /data/media/####/clubs-parent.html
  • /data/media/####/clubs-parent.js
  • /data/media/####/clubs.html
  • /data/media/####/clubs.js
  • /data/media/####/coin-center.png
  • /data/media/####/coin-one.gif
  • /data/media/####/coin-third.gif
  • /data/media/####/coin-top.png
  • /data/media/####/com.getui.sdk.deviceId.db
  • /data/media/####/com.igexin.sdk.deviceId.db
  • /data/media/####/com.indeed.golinksnbn.db
  • /data/media/####/comment-header.html
  • /data/media/####/comment-list.html
  • /data/media/####/comment-list.js
  • /data/media/####/comment.css
  • /data/media/####/comment.html
  • /data/media/####/comment.js
  • /data/media/####/comment_child.html
  • /data/media/####/comment_child.js
  • /data/media/####/commentary.png
  • /data/media/####/common.js
  • /data/media/####/compare.css
  • /data/media/####/compare.html
  • /data/media/####/compare.js
  • /data/media/####/const.js
  • /data/media/####/contact-bind-parent.html
  • /data/media/####/contact-bind.html
  • /data/media/####/contact-bind.js
  • /data/media/####/copy_ggo.min.js
  • /data/media/####/create-double.html
  • /data/media/####/create-double.js
  • /data/media/####/create-general.html
  • /data/media/####/create-general.js
  • /data/media/####/create-integral.html
  • /data/media/####/create-integral.js
  • /data/media/####/create-tianyi.html
  • /data/media/####/create-tianyi.js
  • /data/media/####/create_match_head.html
  • /data/media/####/create_match_head.js
  • /data/media/####/create_page1.html
  • /data/media/####/create_page1.js
  • /data/media/####/create_page2.html
  • /data/media/####/create_page2.js
  • /data/media/####/create_page3.html
  • /data/media/####/create_page3.js
  • /data/media/####/creategame.html
  • /data/media/####/creategame.js
  • /data/media/####/cropper-img.js
  • /data/media/####/cropper.css
  • /data/media/####/cropper.min.js
  • /data/media/####/custom.css
  • /data/media/####/custom_onlinechess.css
  • /data/media/####/danju-manlist.html
  • /data/media/####/danju-manlist.js
  • /data/media/####/danju-manlist_head.html
  • /data/media/####/dayingame.html
  • /data/media/####/dayingame.js
  • /data/media/####/dayingame_head.html
  • /data/media/####/disebai.png
  • /data/media/####/disehei.png
  • /data/media/####/doublechess-friends.html
  • /data/media/####/doublechess-friends.js
  • /data/media/####/download.html
  • /data/media/####/eaccd0adc887d6b3b51549aca43e9aba.zip
  • /data/media/####/echarts-all.js
  • /data/media/####/emoji.js
  • /data/media/####/evenness.js
  • /data/media/####/event.js
  • /data/media/####/everydaygame.html
  • /data/media/####/everydaygame_child.html
  • /data/media/####/everydaygame_child.js
  • /data/media/####/everydaygame_manage.html
  • /data/media/####/everydaymanage.js
  • /data/media/####/examine-people.html
  • /data/media/####/examine-people.js
  • /data/media/####/exif.js
  • /data/media/####/fastclick.js
  • /data/media/####/feedback-sub.html
  • /data/media/####/feedback.html
  • /data/media/####/feedback.js
  • /data/media/####/filter.css
  • /data/media/####/find-friends.html
  • /data/media/####/find-friends.js
  • /data/media/####/find-password-parent.html
  • /data/media/####/find-password.html
  • /data/media/####/find-psw.js
  • /data/media/####/first.png
  • /data/media/####/flexible.js
  • /data/media/####/friend-content.css
  • /data/media/####/friend-content.html
  • /data/media/####/friend-content.js
  • /data/media/####/friend-content.png
  • /data/media/####/friend-createChess.html
  • /data/media/####/friend-createChess.js
  • /data/media/####/friend-onlinechess-child.html
  • /data/media/####/friend-onlinechess-head.html
  • /data/media/####/friend-onlinechess-list.js
  • /data/media/####/friend.css
  • /data/media/####/friendsmatch.html
  • /data/media/####/friendsmatch.js
  • /data/media/####/funinput.js
  • /data/media/####/game1.png
  • /data/media/####/game2.png
  • /data/media/####/gameinfo-child-update.html
  • /data/media/####/gameinfo-child-update.js
  • /data/media/####/gameinfo-child.html
  • /data/media/####/gameinfo-child.js
  • /data/media/####/gameinfo-content.html
  • /data/media/####/gameinfo-content.js
  • /data/media/####/gameinfo-jisgf-head.html
  • /data/media/####/gameinfo-jisgf-head.js
  • /data/media/####/gameinfo-jisgf.html
  • /data/media/####/gameinfo-jisgf.js
  • /data/media/####/gameinfo-nomatch-head.html
  • /data/media/####/gameinfo-nomatch-head.js
  • /data/media/####/gameinfo-nomatch.html
  • /data/media/####/gameinfo-nomatch.js
  • /data/media/####/gameinfo.html
  • /data/media/####/gameinfo.js
  • /data/media/####/gamewithfriend-child.html
  • /data/media/####/gamewithfriend-child.js
  • /data/media/####/gamewithfriend-head.html
  • /data/media/####/ggo.min.js
  • /data/media/####/ggo.player.css
  • /data/media/####/gkt-journal
  • /data/media/####/gktper
  • /data/media/####/gmu.js
  • /data/media/####/go-news-artcle.js
  • /data/media/####/go-news-article.html
  • /data/media/####/golinks_mingxi.css
  • /data/media/####/goplace.png
  • /data/media/####/grade-backgroundImg.jpg
  • /data/media/####/grade-hollowstar.png
  • /data/media/####/grade-solidstar.png
  • /data/media/####/grade.data.js
  • /data/media/####/grade.initdata.js
  • /data/media/####/grow1.png
  • /data/media/####/grow2.png
  • /data/media/####/guaduiju-child.html
  • /data/media/####/guaduiju-child.js
  • /data/media/####/guaduiju.html
  • /data/media/####/guide.html
  • /data/media/####/handband2.png
  • /data/media/####/handband3.png
  • /data/media/####/head-img.html
  • /data/media/####/head-img.jpg
  • /data/media/####/head.jpg
  • /data/media/####/header.html
  • /data/media/####/highlight.js
  • /data/media/####/home-gonews.css
  • /data/media/####/home-gonews.html
  • /data/media/####/home-gonews.js
  • /data/media/####/icon-2x.png
  • /data/media/####/iconfont.css
  • /data/media/####/iconfont.ttf
  • /data/media/####/index.html
  • /data/media/####/index.js
  • /data/media/####/inputSgfInfo.html
  • /data/media/####/inputSgfInfo.js
  • /data/media/####/inputgameresult.html
  • /data/media/####/inputgameresult.js
  • /data/media/####/invitemember-parent.html
  • /data/media/####/invitemember.html
  • /data/media/####/invitenmember.js
  • /data/media/####/iscroll.js
  • /data/media/####/isguess.png
  • /data/media/####/issgf.png
  • /data/media/####/ji-sgf.html
  • /data/media/####/ji-sgf.js
  • /data/media/####/jiantou.png
  • /data/media/####/jipubeijing.gif
  • /data/media/####/jipubeijing.jpg
  • /data/media/####/jipusgf.png
  • /data/media/####/joinmaninfo.html
  • /data/media/####/joinmaninfo.js
  • /data/media/####/joinmanlist.html
  • /data/media/####/joinmanlist.js
  • /data/media/####/jquery-1.11.2.min.js
  • /data/media/####/jquery.js
  • /data/media/####/jquery.lazyload.js
  • /data/media/####/kaka.png
  • /data/media/####/katong2.png
  • /data/media/####/kifu.js
  • /data/media/####/latestAlbum-header.html
  • /data/media/####/latestAlbum.css
  • /data/media/####/latestAlbum.html
  • /data/media/####/latestAlbum.js
  • /data/media/####/layer.css
  • /data/media/####/layer.js
  • /data/media/####/line.png
  • /data/media/####/live-room-comment-list.html
  • /data/media/####/live-room-comment-list.js
  • /data/media/####/live-room-sgf.html
  • /data/media/####/live-room-sgf.js
  • /data/media/####/live-room-sgfchild.html
  • /data/media/####/live-room-sgfchild.js
  • /data/media/####/live-sgf.css
  • /data/media/####/loader.gif
  • /data/media/####/login-parent.html
  • /data/media/####/login.css
  • /data/media/####/login.html
  • /data/media/####/login.js
  • /data/media/####/logo.png
  • /data/media/####/logoShaw.png
  • /data/media/####/loser10-46.png
  • /data/media/####/man.png
  • /data/media/####/manifest.json
  • /data/media/####/maps.html
  • /data/media/####/maps.js
  • /data/media/####/match-banner.jpg
  • /data/media/####/match-header.html
  • /data/media/####/match.html
  • /data/media/####/match.js
  • /data/media/####/match.png
  • /data/media/####/matchDetail.css
  • /data/media/####/matchDetail.html
  • /data/media/####/matchDetail.js
  • /data/media/####/matchIndex.html
  • /data/media/####/matchIndex.js
  • /data/media/####/matchMtResult.html
  • /data/media/####/matchMtResult.js
  • /data/media/####/matchResult.html
  • /data/media/####/matchResult.js
  • /data/media/####/matchStart.css
  • /data/media/####/matchStart.html
  • /data/media/####/matchStart.js
  • /data/media/####/matchUnfinished-header.html
  • /data/media/####/matchUnfinished.css
  • /data/media/####/matchUnfinished.html
  • /data/media/####/matchUnfinished.js
  • /data/media/####/md5.js
  • /data/media/####/me.css
  • /data/media/####/me.html
  • /data/media/####/messageSetting.html
  • /data/media/####/messageSetting.js
  • /data/media/####/message_new_sub.js
  • /data/media/####/messages_new.html
  • /data/media/####/messages_new.js
  • /data/media/####/messages_new_sub.html
  • /data/media/####/mobiscroll.core.js
  • /data/media/####/mobiscroll.scroller.css
  • /data/media/####/mobiscroll.scroller.js
  • /data/media/####/mobiscroll.select.js
  • /data/media/####/mod-name.js
  • /data/media/####/modify-name.html
  • /data/media/####/money1.png
  • /data/media/####/money2.png
  • /data/media/####/mui.imageViewer.js
  • /data/media/####/mui.imageviewer.css
  • /data/media/####/mui.indexedlist.css
  • /data/media/####/mui.indexedlist.js
  • /data/media/####/mui.js
  • /data/media/####/mui.lazyload.img.js
  • /data/media/####/mui.lazyload.js
  • /data/media/####/mui.listpicker.css
  • /data/media/####/mui.min.css
  • /data/media/####/mui.min.js
  • /data/media/####/mui.numbox.css
  • /data/media/####/mui.picker.css
  • /data/media/####/mui.picker.js
  • /data/media/####/mui.picker.min.css
  • /data/media/####/mui.picker.min.js
  • /data/media/####/mui.poppicker.css
  • /data/media/####/mui.poppicker.js
  • /data/media/####/mui.previewimage.js
  • /data/media/####/mui.ttf
  • /data/media/####/mui.view.js
  • /data/media/####/mui.zoom.js
  • /data/media/####/my-achievement-child.html
  • /data/media/####/my-achievement.html
  • /data/media/####/my-achievement.js
  • /data/media/####/my-chess.html
  • /data/media/####/my-chess.js
  • /data/media/####/myCollection.png
  • /data/media/####/myalbum.html
  • /data/media/####/myalbum.js
  • /data/media/####/myalbumDetail-header.html
  • /data/media/####/myalbumDetail.html
  • /data/media/####/myalbumDetail.js
  • /data/media/####/mycoin-header.html
  • /data/media/####/mycoin.css
  • /data/media/####/mycoin.html
  • /data/media/####/mycoin.js
  • /data/media/####/mycollect-child.html
  • /data/media/####/mycollect.html
  • /data/media/####/mycollect_child.js
  • /data/media/####/myfirendImg.png
  • /data/media/####/myfriend-parent-chart.html
  • /data/media/####/myfriend-parent-chart.js
  • /data/media/####/myfriends.html
  • /data/media/####/myfriends.js
  • /data/media/####/myfriends_Chart.css
  • /data/media/####/myfriends_Chart.html
  • /data/media/####/mysgf-getsgf.html
  • /data/media/####/mysgf-getsgf.js
  • /data/media/####/mysgf-getsgf1.html
  • /data/media/####/mysgf-getsgf1.js
  • /data/media/####/mysgf-gosgf.html
  • /data/media/####/mysgf-gosgf.js
  • /data/media/####/mysgf-webview.html
  • /data/media/####/mysgf-webview.js
  • /data/media/####/mysgf.html
  • /data/media/####/mysgf.png
  • /data/media/####/navigator.css
  • /data/media/####/navigator.default.css
  • /data/media/####/navigator.js
  • /data/media/####/new-sgf.html
  • /data/media/####/new-sgf.js
  • /data/media/####/newcomer-content.html
  • /data/media/####/newcomer-content.js
  • /data/media/####/newcomer-header.html
  • /data/media/####/noOnlineGameInfo.html
  • /data/media/####/noOnlineGameInfo.js
  • /data/media/####/notice.json
  • /data/media/####/online-chess-info.html
  • /data/media/####/online-chess-info.js
  • /data/media/####/online-doubleTeamInfo.html
  • /data/media/####/online-doubleTeamInfo.js
  • /data/media/####/online-doublechess-info.html
  • /data/media/####/online-doublechess-info.js
  • /data/media/####/online-doublechess-sgfchild.html
  • /data/media/####/online-doublechess-sgfchild.js
  • /data/media/####/online-playchess-double.html
  • /data/media/####/online-playchess-double.js
  • /data/media/####/online-playchess-general.html
  • /data/media/####/online-playchess-general.js
  • /data/media/####/online-playchess-head.html
  • /data/media/####/online-playchess-head.js
  • /data/media/####/online-playchess-info.html
  • /data/media/####/online-playchess-info.js
  • /data/media/####/online-playchess-integral.html
  • /data/media/####/online-playchess-integral.js
  • /data/media/####/online-playchess-sgfchild.html
  • /data/media/####/online-playchess-sgfchild.js
  • /data/media/####/online-readyinvite.html
  • /data/media/####/online-readyinvite.js
  • /data/media/####/onlinechess_regular.html
  • /data/media/####/onlinechessload.png
  • /data/media/####/onlinenoload.png
  • /data/media/####/orderCommentAutoText.js
  • /data/media/####/otheraddgame.html
  • /data/media/####/otheraddgame.js
  • /data/media/####/our-information.html
  • /data/media/####/our-information.js
  • /data/media/####/parseTpl.js
  • /data/media/####/paymoney.html
  • /data/media/####/paymoney.js
  • /data/media/####/place.png
  • /data/media/####/play.mp3
  • /data/media/####/playchess-friends-head.html
  • /data/media/####/playchess-friends.html
  • /data/media/####/playchess-friends.js
  • /data/media/####/player.editable.js
  • /data/media/####/player.editable.min.js
  • /data/media/####/player.js
  • /data/media/####/player.permalink.js
  • /data/media/####/player1-board.png
  • /data/media/####/player2-board.png
  • /data/media/####/position-child.html
  • /data/media/####/position-child.js
  • /data/media/####/position.html
  • /data/media/####/pull_arrow.png
  • /data/media/####/pull_fresh.png
  • /data/media/####/push.js
  • /data/media/####/qiandao.png
  • /data/media/####/qipu2.png
  • /data/media/####/qipu3.png
  • /data/media/####/random.html
  • /data/media/####/random.js
  • /data/media/####/rating.html
  • /data/media/####/register-parent.html
  • /data/media/####/register.css
  • /data/media/####/register.html
  • /data/media/####/register.js
  • /data/media/####/registrationDetail.html
  • /data/media/####/registrationDetail.js
  • /data/media/####/registrationList.html
  • /data/media/####/registrationList.js
  • /data/media/####/reject-people.html
  • /data/media/####/reject-people.js
  • /data/media/####/rememberSgf.html
  • /data/media/####/rememberSgf.js
  • /data/media/####/renwu.jpg
  • /data/media/####/reset.css
  • /data/media/####/result.png
  • /data/media/####/round-update.html
  • /data/media/####/round-update.js
  • /data/media/####/round-update_head.html
  • /data/media/####/round-vstable-confirm.html
  • /data/media/####/round-vstable-confirm.js
  • /data/media/####/round-vstable.html
  • /data/media/####/round-vstable.js
  • /data/media/####/roundConfirm.html
  • /data/media/####/roundConfirm.js
  • /data/media/####/roundList.html
  • /data/media/####/roundList.js
  • /data/media/####/roundUpdate.html
  • /data/media/####/roundUpdate.js
  • /data/media/####/roundinfo.html
  • /data/media/####/roundinfo.js
  • /data/media/####/roundlist.html
  • /data/media/####/roundlist.js
  • /data/media/####/rule-form.html
  • /data/media/####/rule-form.js
  • /data/media/####/scorehistory.html
  • /data/media/####/scorehistory.js
  • /data/media/####/scoremode.js
  • /data/media/####/scoremode_remote.js
  • /data/media/####/scrolltonext.js
  • /data/media/####/search-friend.html
  • /data/media/####/search-friendch.html
  • /data/media/####/search-friendch.js
  • /data/media/####/search-playchess-head.html
  • /data/media/####/search-playchess.html
  • /data/media/####/search-playchess.js
  • /data/media/####/searchAlbum-header.html
  • /data/media/####/searchAlbum.css
  • /data/media/####/searchAlbum.html
  • /data/media/####/searchAlbum.js
  • /data/media/####/searchReault.js
  • /data/media/####/searchResult-header.html
  • /data/media/####/searchResult.html
  • /data/media/####/searchclubs-header.html
  • /data/media/####/searchclubs.html
  • /data/media/####/searchclubs.js
  • /data/media/####/searfriend.html
  • /data/media/####/searfriend.js
  • /data/media/####/second.png
  • /data/media/####/select-area.html
  • /data/media/####/select-area.js
  • /data/media/####/serialize-gonews-parent.html
  • /data/media/####/serialize-gonews.html
  • /data/media/####/serialize-gonews.js
  • /data/media/####/sgf-comment-bg.png
  • /data/media/####/sgf.html
  • /data/media/####/sgf.js
  • /data/media/####/sgfinfo.css
  • /data/media/####/sgfku.html
  • /data/media/####/sgfku.js
  • /data/media/####/sgfku_hide.html
  • /data/media/####/sgfparser.js
  • /data/media/####/share.config.js
  • /data/media/####/share.html
  • /data/media/####/share.png
  • /data/media/####/shareAlr.png
  • /data/media/####/share_area.html
  • /data/media/####/signAlr.png
  • /data/media/####/signBtn.png
  • /data/media/####/sqlite.js
  • /data/media/####/stone.initalldata.js
  • /data/media/####/stone.initdata.js
  • /data/media/####/string.js
  • /data/media/####/style.css
  • /data/media/####/subclub-parent.html
  • /data/media/####/subclub.html
  • /data/media/####/subclub.js
  • /data/media/####/systemMessage.html
  • /data/media/####/systemMessage.js
  • /data/media/####/tainyi-chess.html
  • /data/media/####/tdata_FVZ795
  • /data/media/####/tdata_eoG063
  • /data/media/####/tdata_kAC784
  • /data/media/####/template-native.js
  • /data/media/####/test.log
  • /data/media/####/third.png
  • /data/media/####/thumbnailm.png
  • /data/media/####/thumbnails.png
  • /data/media/####/tianyi-chess.js
  • /data/media/####/tie.png
  • /data/media/####/tip.png
  • /data/media/####/to-examine.html
  • /data/media/####/to-examine.js
  • /data/media/####/toplist.png
  • /data/media/####/touch.js
  • /data/media/####/tour_Club.html
  • /data/media/####/tour_Club.js
  • /data/media/####/tour_info.html
  • /data/media/####/tour_info.js
  • /data/media/####/tour_info_going.html
  • /data/media/####/tour_info_going.js
  • /data/media/####/tour_manlist.html
  • /data/media/####/tour_manlist.js
  • /data/media/####/tour_result.html
  • /data/media/####/tour_result.js
  • /data/media/####/tour_select.html
  • /data/media/####/tour_select.js
  • /data/media/####/tour_select_head.html
  • /data/media/####/tour_select_head.js
  • /data/media/####/tour_style.css
  • /data/media/####/tourlist.css
  • /data/media/####/tourlocation.js
  • /data/media/####/tournament-all-head.html
  • /data/media/####/tournament-all-list.js
  • /data/media/####/tournament-allbystatus.html
  • /data/media/####/tournament-my-list.js
  • /data/media/####/tournament-my.html
  • /data/media/####/update-profile-parent.html
  • /data/media/####/update-profile.html
  • /data/media/####/update-profile.js
  • /data/media/####/update.js
  • /data/media/####/updateSgf.html
  • /data/media/####/updateSgf.js
  • /data/media/####/update_pro.json
  • /data/media/####/update_test.json
  • /data/media/####/upload-img.jpg
  • /data/media/####/user-background.html
  • /data/media/####/user-background.js
  • /data/media/####/user-backgroundImg.jpg
  • /data/media/####/user-information.css
  • /data/media/####/user-information.html
  • /data/media/####/user-install.html
  • /data/media/####/user-install.js
  • /data/media/####/user-login.jpg
  • /data/media/####/user.css
  • /data/media/####/user.js
  • /data/media/####/userinfo.js
  • /data/media/####/userlist.png
  • /data/media/####/uservsfriend.html
  • /data/media/####/uservsfriend.js
  • /data/media/####/voteBorder.png
  • /data/media/####/voteDetail.html
  • /data/media/####/voteDetail.js
  • /data/media/####/wgo.js
  • /data/media/####/wgo.player.css
  • /data/media/####/wgo_redefine.css
  • /data/media/####/wgo_redefine_new.css
  • /data/media/####/white.png
  • /data/media/####/white00_128.png
  • /data/media/####/white01_128.png
  • /data/media/####/white02_128.png
  • /data/media/####/white03_128.png
  • /data/media/####/white04_128.png
  • /data/media/####/white05_128.png
  • /data/media/####/white06_128.png
  • /data/media/####/white07_128.png
  • /data/media/####/white08_128.png
  • /data/media/####/white09_128.png
  • /data/media/####/white10_128.png
  • /data/media/####/widget.js
  • /data/media/####/winner.png
  • /data/media/####/winner10-46.png
  • /data/media/####/woman.png
  • /data/media/####/write-comment.html
  • /data/media/####/write-comment.js
  • /data/media/####/write-livecomment.html
  • /data/media/####/write-livecomment.js
  • /data/media/####/write_comment.html
  • /data/media/####/write_comment.js
  • /data/media/####/writenotice.html
  • /data/media/####/writenotice.js
  • /data/media/####/yi-chess-manual.html
  • /data/media/####/yi-chess-manual.js
  • /data/media/####/yi-data-centre.html
  • /data/media/####/yi-data-centre.js
  • /data/media/####/yi-found.html
  • /data/media/####/yi-found.js
  • /data/media/####/yi-found.png
  • /data/media/####/yi-instant-competition.html
  • /data/media/####/yi-instant-competition.js
  • /data/media/####/yi-live-room.html
  • /data/media/####/yi-live-room.js
  • /data/media/####/yi-place-city.html
  • /data/media/####/yi-place-city.js
  • /data/media/####/yi-place-content.html
  • /data/media/####/yi-place-content.js
  • /data/media/####/yi-place-header.html
  • /data/media/####/yi-place-header.js
  • /data/media/####/yi-place-seaheader.html
  • /data/media/####/yi-place-search.html
  • /data/media/####/yi-place-search.js
  • /data/media/####/yi-place.css
  • /data/media/####/yi-place.html
  • /data/media/####/yi-place.js
  • /data/media/####/yi-public.html
  • /data/media/####/yi-things.html
  • /data/media/####/yi-things_new.js
  • /data/media/####/yi-tournament-child.html
  • /data/media/####/yi-tournament-child.js
  • /data/media/####/yi-tournament.js
  • /data/media/####/yi_find_sgf.html
  • /data/media/####/yi_find_sgf.js
  • /data/media/####/yi_find_sgfinfo.html
  • /data/media/####/yi_find_sgfinfo.js
  • /data/media/####/yike-official-content.html
  • /data/media/####/yike-official-content.js
  • /data/media/####/yike-official-parent.html
  • /data/media/####/yike-official.html
  • /data/media/####/yike-official.js
  • /data/media/####/yikeAPP4.png
  • /data/media/####/yikeAPP5.png
  • /data/media/####/yikeAPP6.png
  • /data/media/####/yipalceDefault.jpg
  • /data/media/####/yisuo-content.html
  • /data/media/####/yisuo-content.js
  • /data/media/####/zepto.js
Miscellaneous:
Executes the following shell scripts:
  • /system/bin/cat /proc/cpuinfo
  • <Package Folder>/files/gdaemon_20161017 0 <Package>/com.igexin.sdk.PushService 25105 300 0
  • cat /sys/class/net/wlan0/address
  • chmod 700 <Package Folder>/files/gdaemon_20161017
  • mount
  • sh
Uses the following algorithms to encrypt data:
  • AES-CFB-NoPadding
  • AES-ECB-PKCS5Padding
  • RSA-NONE-OAEPWithSHA1AndMGF1Padding
Uses the following algorithms to decrypt data:
  • AES-CBC-PKCS5Padding
  • AES-CFB-NoPadding
  • AES-ECB-PKCS5Padding
  • DES
Accesses the ITelephony private interface.
Gets information about location.
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Gets information about installed apps.
Gets information about running apps.
Adds tasks to the system scheduler.
Displays its own windows over windows of other apps.

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android