Wednesday, May 14, 2014

Harmful software:android: post 2

Software name:
Gooboot
QQAssistant
GoogleKernel

Package names:

com.android.googlekernel
com.android.googledalvik
com.qq.assistant

Threat type: Trojan

This program will send text messages to premium numbers. Because of this you will be charged for the message sent

When installing this software it will ask for the following permissions

Change network connectivity state.
Allows applications to write the apn settings.
clear user data.
Create new SMS messages.
Open network connections.
Create new contact data.
Send SMS messages.
Allow access to low-level power management.
Access information about networks.
Get information about the currently or recently
running tasks.
Delete packages.
Read or write the secure system settings.
Write to external storage devices.
Start once the device has finished booting.
Install packages.
Initiate a phone call without using the Phone UI or
requiring confirmation from the user.
Read or write to the system settings.
Check the phone's current state.
Read SMS messages on the device.
Access information about the WiFi state.
Prevent processor from sleeping or screen from
dimming.
Change Wi-Fi connectivity state.
Monitor incoming SMS messages.
Read user's contacts data.
Clear the caches of all installed applications on
the device.
Mount and unmount file systems for removable
storage.

To remove this Trojan do the following steps

Open the Google Android Menu.
Go to the Settings icon and select Applications .
Next, select Manage .
Select the application and select Uninstall .

No comments:

Post a Comment