Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.DownLoader22.17165

Добавлен в вирусную базу Dr.Web: 2016-08-08

Описание добавлено:

Technical Information

To ensure autorun and distribution
Modifies the following registry keys
  • [<HKLM>\Software\Classes\cclaunch\shell\open\command] '' = '"%ProgramFiles%\CCleaner\ccleaner.exe" /%1'
  • [<HKLM>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'GrpConv' = 'grpconv -o'
Infects the following executable files
  • %ProgramFiles%\ccleaner\set6e51.tmp
Modifies file system
Creates the following files
  • %TEMP%\rarsfx0\cybermania.exe
  • %ProgramFiles%\ccleaner\lang\set734e.tmp
  • %ProgramFiles%\ccleaner\lang\set734d.tmp
  • %ProgramFiles%\ccleaner\lang\set733d.tmp
  • %ProgramFiles%\ccleaner\lang\set732c.tmp
  • %ProgramFiles%\ccleaner\lang\set731b.tmp
  • %ProgramFiles%\ccleaner\lang\set730b.tmp
  • %ProgramFiles%\ccleaner\lang\set72fa.tmp
  • %ProgramFiles%\ccleaner\lang\set72f9.tmp
  • %ProgramFiles%\ccleaner\lang\set72e9.tmp
  • %ProgramFiles%\ccleaner\lang\set72d8.tmp
  • %ProgramFiles%\ccleaner\lang\set72c7.tmp
  • %ProgramFiles%\ccleaner\lang\set72c6.tmp
  • %ProgramFiles%\ccleaner\lang\set72a5.tmp
  • %ProgramFiles%\ccleaner\lang\set736f.tmp
  • %ProgramFiles%\ccleaner\lang\set7295.tmp
  • %ProgramFiles%\ccleaner\lang\set7294.tmp
  • %ProgramFiles%\ccleaner\lang\set7273.tmp
  • %ProgramFiles%\ccleaner\lang\set7272.tmp
  • %ProgramFiles%\ccleaner\lang\set7262.tmp
  • %ProgramFiles%\ccleaner\lang\set7251.tmp
  • %ProgramFiles%\ccleaner\lang\set7241.tmp
  • %ProgramFiles%\ccleaner\lang\set7230.tmp
  • %ProgramFiles%\ccleaner\lang\set721f.tmp
  • %ProgramFiles%\ccleaner\lang\set721e.tmp
  • %ProgramFiles%\ccleaner\lang\set720e.tmp
  • %ProgramFiles%\ccleaner\lang\set72a6.tmp
  • %ProgramFiles%\ccleaner\lang\set70e3.tmp
  • %ProgramFiles%\ccleaner\lang\set7380.tmp
  • %ProgramFiles%\ccleaner\set74e3.tmp
  • %ProgramFiles%\ccleaner\set74d2.tmp
  • %ProgramFiles%\ccleaner\lang\set74c1.tmp
  • %ProgramFiles%\ccleaner\lang\set74c0.tmp
  • %ProgramFiles%\ccleaner\lang\set74a0.tmp
  • %ProgramFiles%\ccleaner\lang\set749f.tmp
  • %ProgramFiles%\ccleaner\lang\set748f.tmp
  • %ProgramFiles%\ccleaner\lang\set748e.tmp
  • %ProgramFiles%\ccleaner\lang\set746d.tmp
  • %ProgramFiles%\ccleaner\lang\set746c.tmp
  • %ProgramFiles%\ccleaner\lang\set745c.tmp
  • %ProgramFiles%\ccleaner\lang\set745b.tmp
  • %ProgramFiles%\ccleaner\lang\set71fd.tmp
  • %ProgramFiles%\ccleaner\lang\set735f.tmp
  • %ProgramFiles%\ccleaner\lang\set7429.tmp
  • %ProgramFiles%\ccleaner\lang\set7428.tmp
  • %ProgramFiles%\ccleaner\lang\set7408.tmp
  • %ProgramFiles%\ccleaner\lang\set7407.tmp
  • %ProgramFiles%\ccleaner\lang\set73e7.tmp
  • %ProgramFiles%\ccleaner\lang\set73e6.tmp
  • %ProgramFiles%\ccleaner\lang\set73d5.tmp
  • %ProgramFiles%\ccleaner\lang\set73c4.tmp
  • %ProgramFiles%\ccleaner\lang\set73b4.tmp
  • %ProgramFiles%\ccleaner\lang\set73b3.tmp
  • %ProgramFiles%\ccleaner\lang\set73a2.tmp
  • %ProgramFiles%\ccleaner\lang\set7392.tmp
  • %ProgramFiles%\ccleaner\lang\set743a.tmp
  • %ProgramFiles%\ccleaner\lang\set7381.tmp
  • %ProgramFiles%\ccleaner\lang\set71dd.tmp
  • %ProgramFiles%\ccleaner\lang\set71dc.tmp
  • %ProgramFiles%\ccleaner\lang\set71cb.tmp
  • %ProgramFiles%\ccleaner\lang\set6f3f.tmp
  • %ProgramFiles%\ccleaner\lang\set6fe7.tmp
  • %ProgramFiles%\ccleaner\lang\set6fe6.tmp
  • %ProgramFiles%\ccleaner\lang\set6fc6.tmp
  • %ProgramFiles%\ccleaner\lang\set6fb5.tmp
  • %ProgramFiles%\ccleaner\lang\set6fa5.tmp
  • %ProgramFiles%\ccleaner\lang\set6fa4.tmp
  • %ProgramFiles%\ccleaner\lang\set6f93.tmp
  • %ProgramFiles%\ccleaner\lang\set6f92.tmp
  • %ProgramFiles%\ccleaner\lang\set6f72.tmp
  • %ProgramFiles%\ccleaner\lang\set6f71.tmp
  • %ProgramFiles%\ccleaner\lang\set6f60.tmp
  • %ProgramFiles%\ccleaner\ccleaner.ini
  • %ProgramFiles%\ccleaner\lang\set7008.tmp
  • %ProgramFiles%\ccleaner\lang\set6f3e.tmp
  • %ProgramFiles%\ccleaner\lang\set6f2d.tmp
  • %ProgramFiles%\ccleaner\lang\set6f2c.tmp
  • %ProgramFiles%\ccleaner\set6e51.tmp
  • %WINDIR%\temp\old6e3c.tmp
  • %ProgramFiles%\ccleaner\set6d47.tmp
  • %ProgramFiles%\ccleaner\set6d36.tmp
  • %ProgramFiles%\ccleaner\set6d35.tmp
  • %ProgramFiles%\ccleaner\set6d15.tmp
  • %ProgramFiles%\ccleaner\set6d14.tmp
  • %TEMP%\rarsfx0\ccleaner.cab
  • %TEMP%\rarsfx0\ccleaner.inf
  • %ProgramFiles%\ccleaner\lang\set6f5f.tmp
  • %ProgramFiles%\ccleaner\lang\set744a.tmp
  • %ProgramFiles%\ccleaner\lang\set7019.tmp
  • %ProgramFiles%\ccleaner\lang\set703b.tmp
  • %ProgramFiles%\ccleaner\lang\set7029.tmp
  • %ProgramFiles%\ccleaner\lang\set71bb.tmp
  • %ProgramFiles%\ccleaner\lang\set71aa.tmp
  • %ProgramFiles%\ccleaner\lang\set71a9.tmp
  • %ProgramFiles%\ccleaner\lang\set7189.tmp
  • %ProgramFiles%\ccleaner\lang\set7188.tmp
  • %ProgramFiles%\ccleaner\lang\set7177.tmp
  • %ProgramFiles%\ccleaner\lang\set7176.tmp
  • %ProgramFiles%\ccleaner\lang\set7156.tmp
  • %ProgramFiles%\ccleaner\lang\set7146.tmp
  • %ProgramFiles%\ccleaner\lang\set7135.tmp
  • %ProgramFiles%\ccleaner\lang\set7124.tmp
  • %ProgramFiles%\ccleaner\lang\set703a.tmp
  • %ProgramFiles%\ccleaner\lang\set7104.tmp
  • %ProgramFiles%\ccleaner\lang\set7007.tmp
  • %ProgramFiles%\ccleaner\lang\set70d2.tmp
  • %ProgramFiles%\ccleaner\lang\set70c2.tmp
  • %ProgramFiles%\ccleaner\lang\set70c1.tmp
  • %ProgramFiles%\ccleaner\lang\set70b0.tmp
  • %ProgramFiles%\ccleaner\lang\set70a0.tmp
  • %ProgramFiles%\ccleaner\lang\set708f.tmp
  • %ProgramFiles%\ccleaner\lang\set707e.tmp
  • %ProgramFiles%\ccleaner\lang\set706e.tmp
  • %ProgramFiles%\ccleaner\lang\set706d.tmp
  • %ProgramFiles%\ccleaner\lang\set705c.tmp
  • %ProgramFiles%\ccleaner\lang\set704c.tmp
  • %ProgramFiles%\ccleaner\lang\set70f4.tmp
  • %TEMP%\bt0053.bat
Sets the 'hidden' attribute to the following files
  • %TEMP%\bt0053.bat
Deletes the following files
  • %ProgramFiles%\ccleaner\set6d14.tmp
  • %ProgramFiles%\ccleaner\lang\set7272.tmp
  • %ProgramFiles%\ccleaner\lang\set7294.tmp
  • %ProgramFiles%\ccleaner\lang\set72a5.tmp
  • %ProgramFiles%\ccleaner\lang\set72c6.tmp
  • %ProgramFiles%\ccleaner\lang\set72d8.tmp
  • %ProgramFiles%\ccleaner\lang\set72f9.tmp
  • %ProgramFiles%\ccleaner\lang\set730b.tmp
  • %ProgramFiles%\ccleaner\lang\set732c.tmp
  • %ProgramFiles%\ccleaner\lang\set734d.tmp
  • %ProgramFiles%\ccleaner\lang\set735f.tmp
  • %ProgramFiles%\ccleaner\lang\set7380.tmp
  • %ProgramFiles%\ccleaner\lang\set7392.tmp
  • %ProgramFiles%\ccleaner\lang\set73b3.tmp
  • %ProgramFiles%\ccleaner\lang\set73c4.tmp
  • %ProgramFiles%\ccleaner\lang\set73e6.tmp
  • %ProgramFiles%\ccleaner\lang\set7407.tmp
  • %ProgramFiles%\ccleaner\lang\set7428.tmp
  • %ProgramFiles%\ccleaner\lang\set743a.tmp
  • %ProgramFiles%\ccleaner\lang\set745b.tmp
  • %ProgramFiles%\ccleaner\lang\set746c.tmp
  • %ProgramFiles%\ccleaner\lang\set748e.tmp
  • %ProgramFiles%\ccleaner\lang\set749f.tmp
  • %ProgramFiles%\ccleaner\lang\set74c0.tmp
  • %ProgramFiles%\ccleaner\set74d2.tmp
  • %WINDIR%\temp\old6e3c.tmp
  • %TEMP%\bt0053.bat
  • %TEMP%\rarsfx0\ccleaner.cab
  • %ProgramFiles%\ccleaner\lang\set7251.tmp
  • %TEMP%\rarsfx0\ccleaner.inf
  • %ProgramFiles%\ccleaner\lang\set7230.tmp
  • %ProgramFiles%\ccleaner\lang\set71fd.tmp
  • %ProgramFiles%\ccleaner\set6d35.tmp
  • %ProgramFiles%\ccleaner\set6d47.tmp
  • %ProgramFiles%\ccleaner\lang\set6f2c.tmp
  • %ProgramFiles%\ccleaner\lang\set6f3e.tmp
  • %ProgramFiles%\ccleaner\lang\set6f5f.tmp
  • %ProgramFiles%\ccleaner\lang\set6f71.tmp
  • %ProgramFiles%\ccleaner\lang\set6f92.tmp
  • %ProgramFiles%\ccleaner\lang\set6fa4.tmp
  • %ProgramFiles%\ccleaner\lang\set6fb5.tmp
  • %ProgramFiles%\ccleaner\lang\set6fe6.tmp
  • %ProgramFiles%\ccleaner\lang\set7007.tmp
  • %ProgramFiles%\ccleaner\lang\set7019.tmp
  • %ProgramFiles%\ccleaner\lang\set703a.tmp
  • %ProgramFiles%\ccleaner\lang\set704c.tmp
  • %ProgramFiles%\ccleaner\lang\set706d.tmp
  • %ProgramFiles%\ccleaner\lang\set707e.tmp
  • %ProgramFiles%\ccleaner\lang\set70a0.tmp
  • %ProgramFiles%\ccleaner\lang\set70c1.tmp
  • %ProgramFiles%\ccleaner\lang\set70d2.tmp
  • %ProgramFiles%\ccleaner\lang\set70f4.tmp
  • %ProgramFiles%\ccleaner\lang\set7124.tmp
  • %ProgramFiles%\ccleaner\lang\set7146.tmp
  • %ProgramFiles%\ccleaner\lang\set7176.tmp
  • %ProgramFiles%\ccleaner\lang\set7188.tmp
  • %ProgramFiles%\ccleaner\lang\set71a9.tmp
  • %ProgramFiles%\ccleaner\lang\set71bb.tmp
  • %ProgramFiles%\ccleaner\lang\set71dc.tmp
  • %ProgramFiles%\ccleaner\lang\set721e.tmp
  • %TEMP%\rarsfx0\cybermania.exe
Moves the following files
  • from %ProgramFiles%\ccleaner\set6d15.tmp to %ProgramFiles%\ccleaner\branding.dll
  • from %ProgramFiles%\ccleaner\lang\set7241.tmp to %ProgramFiles%\ccleaner\lang\lang-1055.dll
  • from %ProgramFiles%\ccleaner\lang\set7262.tmp to %ProgramFiles%\ccleaner\lang\lang-1057.dll
  • from %ProgramFiles%\ccleaner\lang\set7273.tmp to %ProgramFiles%\ccleaner\lang\lang-1058.dll
  • from %ProgramFiles%\ccleaner\lang\set7295.tmp to %ProgramFiles%\ccleaner\lang\lang-1059.dll
  • from %ProgramFiles%\ccleaner\lang\set72a6.tmp to %ProgramFiles%\ccleaner\lang\lang-1060.dll
  • from %ProgramFiles%\ccleaner\lang\set72c7.tmp to %ProgramFiles%\ccleaner\lang\lang-1061.dll
  • from %ProgramFiles%\ccleaner\lang\set72e9.tmp to %ProgramFiles%\ccleaner\lang\lang-1062.dll
  • from %ProgramFiles%\ccleaner\lang\set72fa.tmp to %ProgramFiles%\ccleaner\lang\lang-1063.dll
  • from %ProgramFiles%\ccleaner\lang\set731b.tmp to %ProgramFiles%\ccleaner\lang\lang-1065.dll
  • from %ProgramFiles%\ccleaner\lang\set733d.tmp to %ProgramFiles%\ccleaner\lang\lang-1066.dll
  • from %ProgramFiles%\ccleaner\lang\set734e.tmp to %ProgramFiles%\ccleaner\lang\lang-1067.dll
  • from %ProgramFiles%\ccleaner\lang\set7381.tmp to %ProgramFiles%\ccleaner\lang\lang-1071.dll
  • from %ProgramFiles%\ccleaner\lang\set74c1.tmp to %ProgramFiles%\ccleaner\lang\lang-9999.dll
  • from %ProgramFiles%\ccleaner\lang\set73a2.tmp to %ProgramFiles%\ccleaner\lang\lang-1079.dll
  • from %ProgramFiles%\ccleaner\lang\set73b4.tmp to %ProgramFiles%\ccleaner\lang\lang-1081.dll
  • from %ProgramFiles%\ccleaner\lang\set73d5.tmp to %ProgramFiles%\ccleaner\lang\lang-1087.dll
  • from %ProgramFiles%\ccleaner\lang\set73e7.tmp to %ProgramFiles%\ccleaner\lang\lang-1102.dll
  • from %ProgramFiles%\ccleaner\lang\set7408.tmp to %ProgramFiles%\ccleaner\lang\lang-1109.dll
  • from %ProgramFiles%\ccleaner\lang\set7429.tmp to %ProgramFiles%\ccleaner\lang\lang-1110.dll
  • from %ProgramFiles%\ccleaner\lang\set744a.tmp to %ProgramFiles%\ccleaner\lang\lang-2052.dll
  • from %ProgramFiles%\ccleaner\lang\set745c.tmp to %ProgramFiles%\ccleaner\lang\lang-2070.dll
  • from %ProgramFiles%\ccleaner\lang\set746d.tmp to %ProgramFiles%\ccleaner\lang\lang-2074.dll
  • from %ProgramFiles%\ccleaner\lang\set748f.tmp to %ProgramFiles%\ccleaner\lang\lang-3098.dll
  • from %ProgramFiles%\ccleaner\lang\set74a0.tmp to %ProgramFiles%\ccleaner\lang\lang-5146.dll
  • from %ProgramFiles%\ccleaner\lang\set721f.tmp to %ProgramFiles%\ccleaner\lang\lang-1054.dll
  • from %ProgramFiles%\ccleaner\lang\set736f.tmp to %ProgramFiles%\ccleaner\lang\lang-1068.dll
  • from %ProgramFiles%\ccleaner\lang\set720e.tmp to %ProgramFiles%\ccleaner\lang\lang-1053.dll
  • from %ProgramFiles%\ccleaner\lang\set703b.tmp to %ProgramFiles%\ccleaner\lang\lang-1036.dll
  • from %ProgramFiles%\ccleaner\set6d36.tmp to %ProgramFiles%\ccleaner\ccleaner.dat
  • from %ProgramFiles%\ccleaner\lang\set6f2d.tmp to %ProgramFiles%\ccleaner\lang\lang-1025.dll
  • from %ProgramFiles%\ccleaner\lang\set6f3f.tmp to %ProgramFiles%\ccleaner\lang\lang-1026.dll
  • from %ProgramFiles%\ccleaner\lang\set6f60.tmp to %ProgramFiles%\ccleaner\lang\lang-1027.dll
  • from %ProgramFiles%\ccleaner\lang\set6f72.tmp to %ProgramFiles%\ccleaner\lang\lang-1028.dll
  • from %ProgramFiles%\ccleaner\lang\set6f93.tmp to %ProgramFiles%\ccleaner\lang\lang-1029.dll
  • from %ProgramFiles%\ccleaner\lang\set6fa5.tmp to %ProgramFiles%\ccleaner\lang\lang-1030.dll
  • from %ProgramFiles%\ccleaner\lang\set6fc6.tmp to %ProgramFiles%\ccleaner\lang\lang-1031.dll
  • from %ProgramFiles%\ccleaner\lang\set6fe7.tmp to %ProgramFiles%\ccleaner\lang\lang-1032.dll
  • from %ProgramFiles%\ccleaner\lang\set7008.tmp to %ProgramFiles%\ccleaner\lang\lang-1034.dll
  • from %ProgramFiles%\ccleaner\lang\set7029.tmp to %ProgramFiles%\ccleaner\lang\lang-1035.dll
  • from %ProgramFiles%\ccleaner\lang\set705c.tmp to %ProgramFiles%\ccleaner\lang\lang-1037.dll
  • from %ProgramFiles%\ccleaner\lang\set71cb.tmp to %ProgramFiles%\ccleaner\lang\lang-1051.dll
  • from %ProgramFiles%\ccleaner\lang\set706e.tmp to %ProgramFiles%\ccleaner\lang\lang-1038.dll
  • from %ProgramFiles%\ccleaner\lang\set708f.tmp to %ProgramFiles%\ccleaner\lang\lang-1040.dll
  • from %ProgramFiles%\ccleaner\lang\set70b0.tmp to %ProgramFiles%\ccleaner\lang\lang-1041.dll
  • from %ProgramFiles%\ccleaner\lang\set70c2.tmp to %ProgramFiles%\ccleaner\lang\lang-1042.dll
  • from %ProgramFiles%\ccleaner\lang\set70e3.tmp to %ProgramFiles%\ccleaner\lang\lang-1043.dll
  • from %ProgramFiles%\ccleaner\lang\set7104.tmp to %ProgramFiles%\ccleaner\lang\lang-1044.dll
  • from %ProgramFiles%\ccleaner\lang\set7135.tmp to %ProgramFiles%\ccleaner\lang\lang-1045.dll
  • from %ProgramFiles%\ccleaner\lang\set7156.tmp to %ProgramFiles%\ccleaner\lang\lang-1046.dll
  • from %ProgramFiles%\ccleaner\lang\set7177.tmp to %ProgramFiles%\ccleaner\lang\lang-1048.dll
  • from %ProgramFiles%\ccleaner\lang\set7189.tmp to %ProgramFiles%\ccleaner\lang\lang-1049.dll
  • from %ProgramFiles%\ccleaner\lang\set71aa.tmp to %ProgramFiles%\ccleaner\lang\lang-1050.dll
  • from %ProgramFiles%\ccleaner\lang\set71dd.tmp to %ProgramFiles%\ccleaner\lang\lang-1052.dll
  • from %ProgramFiles%\ccleaner\set74e3.tmp to %ProgramFiles%\ccleaner\uninst.exe
Modifies the following files
  • %LOCALAPPDATA%\microsoft\windows\explorer\explorerstartuplog_runonce.etl
Network activity
Connects to
  • 'cy###mania.ws':80
  • 'cy###mania.ws':443
TCP
HTTP GET requests
  • http://www.cy###mania.ws/
Other
  • 'cy###mania.ws':443
UDP
  • DNS ASK cy###mania.ws
  • DNS ASK microsoft.com
Miscellaneous
Searches for the following windows
  • ClassName: 'EDIT' WindowName: ''
  • ClassName: 'DDEMLMom' WindowName: ''
  • ClassName: 'IEFrame' WindowName: ''
  • ClassName: 'Static' WindowName: ''
  • ClassName: 'MS_AutodialMonitor' WindowName: ''
  • ClassName: 'MS_WebCheckMonitor' WindowName: ''
Creates and executes the following
  • '%TEMP%\rarsfx0\cybermania.exe'
  • '%WINDIR%\syswow64\cmd.exe' /c %TEMP%\bt0053.bat "%TEMP%\RarSFX0\CyberMania.exe"' (with hidden window)
Executes the following
  • '<SYSTEM32>\infdefaultinstall.exe' "%TEMP%\RarSFX0\CCleaner.inf"
  • '<SYSTEM32>\runonce.exe' -r
  • '<SYSTEM32>\grpconv.exe' -o
  • '%WINDIR%\syswow64\cmd.exe' /c %TEMP%\bt0053.bat "%TEMP%\RarSFX0\CyberMania.exe"

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке