Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Adware.Dowgin.4215

Added to the Dr.Web virus database: 2019-03-29

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Adware.Dowgin.14.origin
Accesses the ITelephony private interface.
Network activity:
Connects to:
  • UDP(DNS) <Google DNS>
  • TCP(HTTP/1.1) www.chuangk####.com:80
  • TCP(TLS/1.0) ssl.gst####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) 1####.194.69.113:443
  • TCP(TLS/1.0) www.gst####.com:443
DNS requests:
  • hi.fi.ah####.com
  • ssl.gst####.com
  • www.chuangk####.com
  • www.go####.com
  • www.gst####.com
HTTP POST requests:
  • www.chuangk####.com/cms/mutual.ws
  • www.chuangk####.com/mcd3/checkfilesupdate.jsp
File system changes:
Creates the following files:
  • /data/data/####/0334919c.jar
  • /data/data/####/client_ini.xml
  • /data/data/####/d302b.xml
  • /data/data/####/webview.db-journal
  • /data/media/####/29_1345003856255_287674.png
  • /data/media/####/29_1345003981295_910994.png
  • /data/media/####/29_1345011633508_10308.png
  • /data/media/####/29_1345011799033_612191.png
  • /data/media/####/29_1345013226612_174855.gif
  • /data/media/####/29_1345013227272_448610.gif
  • /data/media/####/29_1345013227352_953627.gif
  • /data/media/####/29_1345013227402_111643.gif
  • /data/media/####/29_1345013227482_959534.png
  • /data/media/####/29_1345013975520_652083.gif
  • /data/media/####/29_1345013976426_361722.gif
  • /data/media/####/29_1345013981028_500529.gif
  • /data/media/####/29_1345013981091_928718.gif
  • /data/media/####/29_1345013982246_358643.png
  • /data/media/####/29_1345014553640_838935.png
  • /data/media/####/29_1345015093882_143134.gif
  • /data/media/####/29_1345015094002_549514.gif
  • /data/media/####/29_1345015094092_791102.gif
  • /data/media/####/29_1345016255694_741748.png
  • /data/media/####/29_1345016256444_869465.gif
  • /data/media/####/29_1345016260613_645374.gif
  • /data/media/####/29_1345016261954_781306.gif
  • /data/media/####/29_1345016831802_530886.png
  • /data/media/####/29_1345020804185_944977.png
  • /data/media/####/29_1345021680586_500283.png
  • /data/media/####/29_1345023858135_286923.png
  • /data/media/####/29_1345025429809_507810.png
  • /data/media/####/29_1345025604731_448828.png
  • /data/media/####/29_1345025604851_579837.png
  • /data/media/####/29_1345025604941_25367.png
  • /data/media/####/29_1345025605311_468940.png
  • /data/media/####/29_1345026317923_253612.png
  • /data/media/####/29_1345078716322_177131.png
  • /data/media/####/29_1345078828047_110673.png
  • /data/media/####/29_1345078828167_839689.png
  • /data/media/####/29_1345078828247_378976.png
  • /data/media/####/29_1345078828327_610356.png
  • /data/media/####/29_1345078828417_231413.png
  • /data/media/####/29_1345081700050_920613.png
  • /data/media/####/29_1345083785296_930600.png
  • /data/media/####/29_1345085116031_293774.png
  • /data/media/####/29_1345085498763_947785.png
  • /data/media/####/29_1345086378644_574255.png
  • /data/media/####/29_1345086894011_294171.png
  • /data/media/####/29_1345090982524_973787.png
  • /data/media/####/29_1345094116898_48869.png
  • /data/media/####/29_1345097747816_409866.png
  • /data/media/####/29_1345097747966_434817.png
  • /data/media/####/29_1345097749016_64904.png
  • /data/media/####/29_1345098361085_611343.png
  • /data/media/####/29_1345099576016_511708.png
  • /data/media/####/29_1345099638384_350998.png
  • /data/media/####/29_1345100932000_550900.png
  • /data/media/####/29_1345101991137_618121.png
  • /data/media/####/29_1345102307019_409010.png
  • /data/media/####/29_1345105232940_550034.png
  • /data/media/####/29_1345105299810_865415.png
  • /data/media/####/29_1345105299870_947728.png
  • /data/media/####/29_1345105299930_654893.png
  • /data/media/####/29_1345105299960_196051.png
  • /data/media/####/29_1345105300520_937497.png
  • /data/media/####/29_1345107923842_57256.png
  • /data/media/####/29_1345108553347_695970.png
  • /data/media/####/29_1345108939830_743527.png
  • /data/media/####/29_1345110072349_506361.png
  • /data/media/####/29_1345110801664_2127.png
  • /data/media/####/29_1345110801714_113941.png
  • /data/media/####/29_1345110802184_674937.png
  • /data/media/####/29_1345110802264_537961.png
  • /data/media/####/29_1345110802344_208650.png
  • /data/media/####/29_1345112211679_918273.png
  • /data/media/####/29_1345113668348_876227.png
  • /data/media/####/29_1345113757589_513437.png
  • /data/media/####/29_1345166970929_439913.png
  • /data/media/####/29_1345166971069_522112.png
  • /data/media/####/29_1345166971149_145862.png
  • /data/media/####/29_1345166971199_622994.png
  • /data/media/####/29_1345166971289_479704.png
  • /data/media/####/29_1345166971369_217290.png
  • /data/media/####/29_1345167582160_888150.png
  • /data/media/####/29_1345167583010_880599.png
  • /data/media/####/29_1345167583600_650950.png
  • /data/media/####/29_1345169824295_803922.png
  • /data/media/####/29_1345169825305_352969.png
  • /data/media/####/29_1345169825385_590441.png
  • /data/media/####/29_1345170196915_219672.png
  • /data/media/####/29_1345170197055_966939.png
  • /data/media/####/29_1345171393641_47165.png
  • /data/media/####/29_1345171394001_789557.png
  • /data/media/####/29_1345171394501_689778.png
  • /data/media/####/29_1345171399409_825434.png
  • /data/media/####/29_1345172143178_291033.png
  • /data/media/####/29_1345172143248_653192.png
  • /data/media/####/29_1345172143458_350571.png
  • /data/media/####/29_1345173023198_230237.png
  • /data/media/####/29_1345173023278_933931.png
  • /data/media/####/29_1345173023808_368762.png
  • /data/media/####/29_1345173024398_983307.png
  • /data/media/####/29_1345173390751_38451.png
  • /data/media/####/29_1345173602058_932926.png
  • /data/media/####/29_1345174631004_165179.png
  • /data/media/####/29_1345174631554_705675.png
  • /data/media/####/29_1345174937772_99633.png
  • /data/media/####/29_1345175790161_927233.png
  • /data/media/####/29_1345175790691_858524.png
  • /data/media/####/29_1345176194026_20350.png
  • /data/media/####/29_1345176957491_790736.png
  • /data/media/####/29_1345176958181_70646.png
  • /data/media/####/29_1345177172440_689632.png
  • /data/media/####/29_1345177844266_74039.png
  • /data/media/####/29_1345177844866_681300.png
  • /data/media/####/29_1345181156558_964191.png
  • /data/media/####/29_1345181756929_750190.png
  • /data/media/####/29_1345181757519_362162.png
  • /data/media/####/29_1345181757599_73700.png
  • /data/media/####/29_1345183709428_327627.png
  • /data/media/####/29_1345183709548_125583.png
  • /data/media/####/29_1345183709578_112364.png
  • /data/media/####/29_1345186555079_95504.png
  • /data/media/####/29_1345186555269_343814.png
  • /data/media/####/29_1345186555389_453145.png
  • /data/media/####/29_1345186555469_733732.png
  • /data/media/####/29_1345186555969_177317.png
  • /data/media/####/29_1345186556269_140210.png
  • /data/media/####/29_1345190599048_604312.png
  • /data/media/####/29_1345192049342_381834.png
  • /data/media/####/29_1345192469869_149534.png
  • /data/media/####/29_1345192818561_743107.png
  • /data/media/####/29_1345193991633_21317.png
  • /data/media/####/29_1345194000573_65861.png
  • /data/media/####/29_1345196233164_667819.png
  • /data/media/####/29_1345198367956_422556.png
  • /data/media/####/29_1345198384967_252607.png
  • /data/media/####/29_1345199315839_198579.png
  • /data/media/####/29_1345199316479_647131.png
  • /data/media/####/29_1345199728460_917997.png
  • /data/media/####/29_1345424923466_647027.png
  • /data/media/####/29_1345426373888_626850.png
  • /data/media/####/29_1345426374038_305908.png
  • /data/media/####/29_1345426374168_401487.png
  • /data/media/####/29_1345426374258_251013.png
  • /data/media/####/29_1345427262489_142834.png
  • /data/media/####/29_1345428000660_221214.png
  • /data/media/####/29_1345430468314_116356.png
  • /data/media/####/29_1345431253840_526931.png
  • /data/media/####/29_1345432363532_419442.png
  • /data/media/####/29_1345436126592_80103.png
  • /data/media/####/29_1345436126695_558276.png
  • /data/media/####/29_1345436126735_452253.png
  • /data/media/####/29_1345436126775_607595.png
  • /data/media/####/29_1345436126825_399995.png
  • /data/media/####/29_1345440418876_696828.png
  • /data/media/####/29_1345440420024_545621.png
  • /data/media/####/29_1345440954731_284889.png
  • /data/media/####/29_1345440987346_93748.png
  • /data/media/####/29_1345442597017_756294.png
  • /data/media/####/29_1345442598467_274260.png
  • /data/media/####/29_1345443213242_806243.png
  • /data/media/####/29_1345443213896_128107.png
  • /data/media/####/29_1345443759031_329153.png
  • /data/media/####/29_1345443759271_16148.png
  • /data/media/####/29_1345448566932_481480.png
  • /data/media/####/29_1345449123546_994107.png
  • /data/media/####/29_1345449847323_20737.png
  • /data/media/####/29_1345450248781_183704.png
  • /data/media/####/29_1345451067499_349700.png
  • /data/media/####/29_1345451641734_56726.png
  • /data/media/####/29_1345451853956_408811.png
  • /data/media/####/29_1345452244150_486533.png
  • /data/media/####/29_1345452484070_376051.png
  • /data/media/####/29_1345452746937_616933.png
  • /data/media/####/29_1345453234562_221931.png
  • /data/media/####/29_1345453957895_477030.png
  • /data/media/####/29_1345453958207_883217.png
  • /data/media/####/29_1345453958337_225411.png
  • /data/media/####/29_1345453958427_113954.png
  • /data/media/####/29_1345453958507_970685.png
  • /data/media/####/29_1345455804316_785.png
  • /data/media/####/29_1345455805316_125074.png
  • /data/media/####/29_1345455805976_12464.png
  • /data/media/####/29_1345455806776_314411.png
  • /data/media/####/29_1345456657133_764327.png
  • /data/media/####/29_1345456860962_466443.png
  • /data/media/####/29_1345457827914_796047.png
  • /data/media/####/29_1345458465982_639977.png
  • /data/media/####/29_1345458878427_327679.png
  • /data/media/####/29_1345459743117_972654.png
  • /data/media/####/29_1345460143939_716275.png
  • /data/media/####/29_1345460572072_711344.png
  • /data/media/####/29_1345511611021_64486.png
  • /data/media/####/29_1345512487182_211932.png
  • /data/media/####/29_1345514558510_164887.png
  • /data/media/####/29_1345515325241_147095.png
  • /data/media/####/29_1345516995892_823189.png
  • /data/media/####/29_1345516996017_54070.png
  • /data/media/####/29_1345516996095_925278.png
  • /data/media/####/29_1345516996189_82957.png
  • /data/media/####/29_1345518889360_42599.png
  • /data/media/####/29_1345518889510_820575.png
  • /data/media/####/29_1345518889600_274697.png
  • /data/media/####/29_1345518889650_610024.png
  • /data/media/####/29_1345522649641_290227.png
  • /data/media/####/29_1345522649801_751633.png
  • /data/media/####/29_1345522649881_674776.png
  • /data/media/####/29_1345522649961_378377.png
  • /data/media/####/29_1345522650001_587212.png
  • /data/media/####/29_1345522650041_199167.png
  • /data/media/####/29_1345529230202_217068.png
  • /data/media/####/29_1345530069032_744976.png
  • /data/media/####/29_1345530884930_721235.png
  • /data/media/####/29_1345531589245_294893.png
  • /data/media/####/29_1345531936555_25622.png
  • /data/media/####/29_1345532495452_976139.png
  • /data/media/####/29_1345532845589_293535.png
  • /data/media/####/29_1345533912073_947308.png
  • /data/media/####/29_1345533912593_960208.png
  • /data/media/####/29_1345533913759_168388.png
  • /data/media/####/29_1345533913794_13836.png
  • /data/media/####/29_1345534445918_778423.png
  • /data/media/####/29_1345534875699_428359.png
  • /data/media/####/29_1345535400615_412462.png
  • /data/media/####/29_1345535721014_348495.png
  • /data/media/####/29_1345537528537_25812.png
  • /data/media/####/29_1345537529990_521517.png
  • /data/media/####/29_1345537531189_122416.png
  • /data/media/####/29_1345537535023_745697.png
  • /data/media/####/29_1345537536774_386061.png
  • /data/media/####/29_1345538137103_841178.png
  • /data/media/####/29_1345538672791_79647.png
  • /data/media/####/29_1345539501299_73599.png
  • /data/media/####/29_1345541803650_140755.png
  • /data/media/####/29_1345542161920_327450.png
  • /data/media/####/29_1345543447558_777541.png
  • /data/media/####/29_1345543449095_912493.png
  • /data/media/####/29_1345543449595_694625.png
  • /data/media/####/29_1345543454295_251032.png
  • /data/media/####/29_1345543882604_641777.png
  • /data/media/####/29_1345544676951_879517.png
  • /data/media/####/29_1345545145356_258592.png
  • /data/media/####/29_1345545206475_777467.png
  • /data/media/####/29_1345599004546_331161.png
  • /data/media/####/29_1345601128418_764384.png
  • /data/media/####/29_1345601128558_685835.png
  • /data/media/####/29_1345601128638_315900.png
  • /data/media/####/29_1345601128718_818922.png
  • /data/media/####/29_1345601129088_960921.png
  • /data/media/####/29_1345601129338_47227.png
  • /data/media/####/29_1345601737042_660318.png
  • /data/media/####/29_1345605267890_240563.png
  • /data/media/####/29_1345605853981_828248.png
  • /data/media/####/29_1345606049350_628150.png
  • /data/media/####/29_1345606972134_729226.png
  • /data/media/####/29_1345607492442_959797.png
  • /data/media/####/29_1345608621489_82436.png
  • /data/media/####/29_1345615594367_819168.png
  • /data/media/####/29_1345700579811_580950.png
  • /data/media/####/30_1345103264480_194340.png
  • /data/media/####/30_1345109483462_5931.png
  • /data/media/####/30_1345429463647_384447.png
  • /data/media/####/359651042080793.txt
  • /data/media/####/8_1333173242452_306401.png
  • /data/media/####/8_1333173281199_423617.png
  • /data/media/####/btn_pic_s_sel.png
  • /data/media/####/clientBase.json
  • /data/media/####/nav_4000_5caf9ee6-0f92-4a0b-b60f-5981473036c8.json
  • /data/media/####/nav_4000_a3f6bb82-b84a-413b-a8ae-29dcd93962f8.json
  • /data/media/####/nav_4000_cf4ae6da-ab83-4915-bc17-5585e03fd4c3.json
  • /data/media/####/nav_5000_ba1074d8-abb4-41eb-9049-3625e26c469d.json
  • /data/media/####/navitem_5000_ba1074d8-abb4-41eb-9049-3625e26c469d.json
  • /data/media/####/ow.png
  • /data/media/####/page_1004_00188be0-40b0-4e43-82bd-5e0adda7295b.json
  • /data/media/####/page_1004_00ed202f-5f57-43c7-bb1a-7bb5b7fb5a80.json
  • /data/media/####/page_1004_107047fe-5f3c-48d5-b29d-b61645b53c68.json
  • /data/media/####/page_1004_1391a59d-8d31-4451-b7ce-3f2e78773e2d.json
  • /data/media/####/page_1004_13f04ac7-4dd9-40e8-b3f5-bd0817b09103.json
  • /data/media/####/page_1004_14281ff0-f3d1-4532-b349-53aa2d6c90db.json
  • /data/media/####/page_1004_14d44699-d128-4c39-ba30-02498b942eb7.json
  • /data/media/####/page_1004_17777a92-07b7-444e-99f3-6ed8a21badc8.json
  • /data/media/####/page_1004_178a25fc-5893-48b5-ad52-15bee354d1ca.json
  • /data/media/####/page_1004_1a5200bc-933e-40f5-8520-f56f688b2d4a.json
  • /data/media/####/page_1004_1a90fa2a-0ec4-4c2f-b535-47346ae013ca.json
  • /data/media/####/page_1004_236b4915-5233-429f-8433-a162e133b559.json
  • /data/media/####/page_1004_26cee4d2-738f-49d0-b706-72c8ce41984e.json
  • /data/media/####/page_1004_285a6170-3e73-4e7d-a257-96a23f16a438.json
  • /data/media/####/page_1004_2c934c99-ecde-4dc2-ada1-a757364f3a15.json
  • /data/media/####/page_1004_2eabd6d4-0253-4e9e-9561-c48b697f113c.json
  • /data/media/####/page_1004_2fcf341f-a4e5-445b-bf97-85707833fe0d.json
  • /data/media/####/page_1004_304a88b6-5a26-4a6d-8b73-ac26a76fd0fd.json
  • /data/media/####/page_1004_33748964-4036-4d49-ade8-fea288b93fba.json
  • /data/media/####/page_1004_36a29c05-6007-4eb6-add4-6f00778a22a9.json
  • /data/media/####/page_1004_3a4f27e6-aa0c-4277-9c16-5f994dcef146.json
  • /data/media/####/page_1004_3a7310ed-253d-4ce1-8b5e-a9d266dce442.json
  • /data/media/####/page_1004_3aad85c5-b77e-4644-bb18-6920b58d019f.json
  • /data/media/####/page_1004_3ac8e174-7e64-4190-a8ac-a4b03abb93a6.json
  • /data/media/####/page_1004_3c7ced68-7a2e-4b9a-8bfa-008aafbf763c.json
  • /data/media/####/page_1004_3e46a4fb-fa4c-4fbf-b5dd-7f1c497b642f.json
  • /data/media/####/page_1004_4937e73c-208f-4219-9574-61eebb1b656a.json
  • /data/media/####/page_1004_4e992fa8-2232-4aca-97db-8491251dab15.json
  • /data/media/####/page_1004_4fbcce60-1564-410e-bce0-50cbca743911.json
  • /data/media/####/page_1004_54660e8e-40d6-4252-9813-3e5fd171a543.json
  • /data/media/####/page_1004_571007fa-6f55-4dfb-8092-4a52a90e09e7.json
  • /data/media/####/page_1004_5aba3a58-5b02-4dd3-a664-3c1f9e7473cf.json
  • /data/media/####/page_1004_5ea788e9-f5f4-431d-8aca-9aee5c683ad7.json
  • /data/media/####/page_1004_6353a522-7da2-482f-91cb-537d4e8859c2.json
  • /data/media/####/page_1004_684cdbc1-6fa2-469f-b569-64b421ca46ed.json
  • /data/media/####/page_1004_69381c7e-0909-420b-b644-c8bfdf428ecb.json
  • /data/media/####/page_1004_69c47b4a-6152-4f8d-a1bb-0af7052d5014.json
  • /data/media/####/page_1004_71ab4612-1752-4009-9152-68372f9b71a2.json
  • /data/media/####/page_1004_735e353b-3288-4279-8201-0d2317376f02.json
  • /data/media/####/page_1004_7da27b4d-ff0a-47a7-9df9-f2f4ae49a019.json
  • /data/media/####/page_1004_7e1cdcba-3d50-48d8-b4a1-81cc621d5afd.json
  • /data/media/####/page_1004_83a0c456-77b1-4994-92f4-7ccf2f98ef3e.json
  • /data/media/####/page_1004_8466cf6b-9c46-4904-8d3d-af7d5a513301.json
  • /data/media/####/page_1004_86ec8766-9349-40cc-8b96-5b97237fe038.json
  • /data/media/####/page_1004_877209d4-9b01-4153-953f-5f06f68895b7.json
  • /data/media/####/page_1004_8c8bcc82-bf3e-4afa-bf3c-118c084fd5e1.json
  • /data/media/####/page_1004_8d61386f-d053-4ab3-88f1-7c64b0ca5b57.json
  • /data/media/####/page_1004_8dbdec18-fdf9-4473-b89f-53cead373e40.json
  • /data/media/####/page_1004_8ea9e27d-13fe-4257-b33d-afeee96119e2.json
  • /data/media/####/page_1004_8fb007b2-7e96-4e5d-8d57-a314d003edb8.json
  • /data/media/####/page_1004_932a86fd-fa2a-485f-8b52-7b656cf6e499.json
  • /data/media/####/page_1004_98e99988-d376-4956-9196-85fdc996fe5c.json
  • /data/media/####/page_1004_a058d969-ca51-4a49-a583-1180b9ed197c.json
  • /data/media/####/page_1004_a18e791d-bb89-4e24-890e-95f11b789613.json
  • /data/media/####/page_1004_ae48935a-a626-4d3d-ba71-e8e731f1fbcf.json
  • /data/media/####/page_1004_af7bb50b-e83a-4b8b-8aa1-9d1e9d050e5e.json
  • /data/media/####/page_1004_b48c6757-ec05-432d-a8af-f9e5c0a33eae.json
  • /data/media/####/page_1004_b5234d28-954a-48e7-961f-63c8b35d26e5.json
  • /data/media/####/page_1004_b62f26e5-2a9b-4ec9-a7da-540a8f84a0fb.json
  • /data/media/####/page_1004_b980bdf8-1d8d-4ff7-b036-6e36911b4cfa.json
  • /data/media/####/page_1004_be182886-36fd-4daa-b383-5ef7ef981ea3.json
  • /data/media/####/page_1004_c20605d2-56ad-4247-b56a-26675aff3d44.json
  • /data/media/####/page_1004_c23e6fbf-4c48-46a9-9e5b-a4977b2cc520.json
  • /data/media/####/page_1004_c4fb594d-91bd-4a70-80d2-1a7f20ebab92.json
  • /data/media/####/page_1004_c5f32fe2-8731-4aee-b03f-1a8a74564e0d.json
  • /data/media/####/page_1004_c682aea5-34f0-44ab-a2c9-1ef13fc7cd9a.json
  • /data/media/####/page_1004_c6ba7981-dfbf-4ac5-9d54-92d77ff42180.json
  • /data/media/####/page_1004_d548d9d6-352b-4733-a573-8d09af550217.json
  • /data/media/####/page_1004_d618ecfc-5260-4281-8225-878fd1bbb4ef.json
  • /data/media/####/page_1004_d61ddf97-3ecf-40c5-99d5-8c0935b261a7.json
  • /data/media/####/page_1004_d82b5f5b-767e-45d2-b631-309b568d5ec5.json
  • /data/media/####/page_1004_decebd78-7ec1-4787-8ccc-1851ad936739.json
  • /data/media/####/page_1004_e0733f86-abc3-4377-a8fe-668233bbf78b.json
  • /data/media/####/page_1004_e20793aa-6e74-446b-a0c1-ce6acd824c10.json
  • /data/media/####/page_1004_e2ef366d-8079-431f-a710-ee801c78aac4.json
  • /data/media/####/page_1004_e38a8185-2974-4815-bdee-7f34bc3b20d6.json
  • /data/media/####/page_1004_e413a5b3-97bf-46dd-bff6-6d72f5c3b0cb.json
  • /data/media/####/page_1004_e418920e-ce62-4811-a865-1be15c531c98.json
  • /data/media/####/page_1004_f01bbbc8-16fb-4a74-94e1-502f5c68a4a9.json
  • /data/media/####/page_1004_f3e735d1-5ae6-4e42-a65d-ced38920cd0f.json
  • /data/media/####/page_1004_f4962f4d-2f13-494d-9e74-eef122160539.json
  • /data/media/####/page_1004_f80c1242-7ea1-41b3-99c8-75132d04fa88.json
  • /data/media/####/page_1004_faab75f6-07ae-4bdd-b9ea-7df1cb093e74.json
  • /data/media/####/page_1004_fb77626f-391f-40f0-a780-a3f75871955a.json
  • /data/media/####/page_1005_18d480ae-9dc2-41d1-ba45-1b12030928a2.json
  • /data/media/####/page_1_d5c74c25-2202-48b6-aec2-767b1073bfca.json
  • /data/media/####/page_2003_1.json
  • /data/media/####/page_3_41855297-8fe4-429d-8d98-1ffe80ce9c77.json
  • /data/media/####/page_4_0312e1e4-c2d2-41e8-bff5-b023b52ac2a3.json
  • /data/media/####/page_4_0ce3b405-c3da-4253-ab00-f297cf786e52.json
  • /data/media/####/page_4_14ff663f-ded8-4259-a0c4-8911c13eba75.json
  • /data/media/####/page_4_304efce3-2d65-454e-bf89-1dc8625b7828.json
  • /data/media/####/page_4_34ed9862-a2e3-45d4-96d6-f5e08d386b14.json
  • /data/media/####/page_4_3f2ce71e-ff6c-4c57-9ce8-f302df2c71da.json
  • /data/media/####/page_4_4032e8a4-a208-4901-b587-0b2b7e53252c.json
  • /data/media/####/page_4_75b5218b-5d90-4b30-accb-62d83378cb9a.json
  • /data/media/####/page_4_9265bfa3-665c-49b4-99ef-fddf5b4bba79.json
  • /data/media/####/page_4_9a78bdc3-8b7d-47bf-8c74-79e7d1d63645.json
  • /data/media/####/page_4_9b7cd113-073f-4e22-8115-53070c1d4e1c.json
  • /data/media/####/page_4_aa526568-c07a-44d2-85cb-452bcf2ee9e1.json
  • /data/media/####/page_4_aa581207-68dd-4462-a98e-0d1ec9fb4939.json
  • /data/media/####/page_4_dd146349-2ff9-4252-ad15-f2657dc6babb.json
  • /data/media/####/page_4_e7aa11cb-c29e-424a-aca5-7c00ebb5753e.json
  • /data/media/####/page_4_f202b574-a5ef-46ac-be43-6742c4102221.json
  • /data/media/####/pageitem2_1004_00188be0-40b0-4e43-82bd-5e0adda7295b.json
  • /data/media/####/pageitem2_1004_00ed202f-5f57-43c7-bb1a-7bb5b7fb5a80.json
  • /data/media/####/pageitem2_1004_107047fe-5f3c-48d5-b29d-b61645b53c68.json
  • /data/media/####/pageitem2_1004_1391a59d-8d31-4451-b7ce-3f2e78773e2d.json
  • /data/media/####/pageitem2_1004_13f04ac7-4dd9-40e8-b3f5-bd0817b09103.json
  • /data/media/####/pageitem2_1004_14281ff0-f3d1-4532-b349-53aa2d6c90db.json
  • /data/media/####/pageitem2_1004_14d44699-d128-4c39-ba30-02498b942eb7.json
  • /data/media/####/pageitem2_1004_17777a92-07b7-444e-99f3-6ed8a21badc8.json
  • /data/media/####/pageitem2_1004_178a25fc-5893-48b5-ad52-15bee354d1ca.json
  • /data/media/####/pageitem2_1004_1a5200bc-933e-40f5-8520-f56f688b2d4a.json
  • /data/media/####/pageitem2_1004_1a90fa2a-0ec4-4c2f-b535-47346ae013ca.json
  • /data/media/####/pageitem2_1004_236b4915-5233-429f-8433-a162e133b559.json
  • /data/media/####/pageitem2_1004_26cee4d2-738f-49d0-b706-72c8ce41984e.json
  • /data/media/####/pageitem2_1004_285a6170-3e73-4e7d-a257-96a23f16a438.json
  • /data/media/####/pageitem2_1004_2c934c99-ecde-4dc2-ada1-a757364f3a15.json
  • /data/media/####/pageitem2_1004_2eabd6d4-0253-4e9e-9561-c48b697f113c.json
  • /data/media/####/pageitem2_1004_2fcf341f-a4e5-445b-bf97-85707833fe0d.json
  • /data/media/####/pageitem2_1004_304a88b6-5a26-4a6d-8b73-ac26a76fd0fd.json
  • /data/media/####/pageitem2_1004_33748964-4036-4d49-ade8-fea288b93fba.json
  • /data/media/####/pageitem2_1004_36a29c05-6007-4eb6-add4-6f00778a22a9.json
  • /data/media/####/pageitem2_1004_3a4f27e6-aa0c-4277-9c16-5f994dcef146.json
  • /data/media/####/pageitem2_1004_3a7310ed-253d-4ce1-8b5e-a9d266dce442.json
  • /data/media/####/pageitem2_1004_3aad85c5-b77e-4644-bb18-6920b58d019f.json
  • /data/media/####/pageitem2_1004_3ac8e174-7e64-4190-a8ac-a4b03abb93a6.json
  • /data/media/####/pageitem2_1004_3c7ced68-7a2e-4b9a-8bfa-008aafbf763c.json
  • /data/media/####/pageitem2_1004_3e46a4fb-fa4c-4fbf-b5dd-7f1c497b642f.json
  • /data/media/####/pageitem2_1004_4937e73c-208f-4219-9574-61eebb1b656a.json
  • /data/media/####/pageitem2_1004_4e992fa8-2232-4aca-97db-8491251dab15.json
  • /data/media/####/pageitem2_1004_4fbcce60-1564-410e-bce0-50cbca743911.json
  • /data/media/####/pageitem2_1004_54660e8e-40d6-4252-9813-3e5fd171a543.json
  • /data/media/####/pageitem2_1004_571007fa-6f55-4dfb-8092-4a52a90e09e7.json
  • /data/media/####/pageitem2_1004_5aba3a58-5b02-4dd3-a664-3c1f9e7473cf.json
  • /data/media/####/pageitem2_1004_5ea788e9-f5f4-431d-8aca-9aee5c683ad7.json
  • /data/media/####/pageitem2_1004_6353a522-7da2-482f-91cb-537d4e8859c2.json
  • /data/media/####/pageitem2_1004_684cdbc1-6fa2-469f-b569-64b421ca46ed.json
  • /data/media/####/pageitem2_1004_69381c7e-0909-420b-b644-c8bfdf428ecb.json
  • /data/media/####/pageitem2_1004_69c47b4a-6152-4f8d-a1bb-0af7052d5014.json
  • /data/media/####/pageitem2_1004_71ab4612-1752-4009-9152-68372f9b71a2.json
  • /data/media/####/pageitem2_1004_735e353b-3288-4279-8201-0d2317376f02.json
  • /data/media/####/pageitem2_1004_7da27b4d-ff0a-47a7-9df9-f2f4ae49a019.json
  • /data/media/####/pageitem2_1004_7e1cdcba-3d50-48d8-b4a1-81cc621d5afd.json
  • /data/media/####/pageitem2_1004_83a0c456-77b1-4994-92f4-7ccf2f98ef3e.json
  • /data/media/####/pageitem2_1004_8466cf6b-9c46-4904-8d3d-af7d5a513301.json
  • /data/media/####/pageitem2_1004_86ec8766-9349-40cc-8b96-5b97237fe038.json
  • /data/media/####/pageitem2_1004_877209d4-9b01-4153-953f-5f06f68895b7.json
  • /data/media/####/pageitem2_1004_8c8bcc82-bf3e-4afa-bf3c-118c084fd5e1.json
  • /data/media/####/pageitem2_1004_8d61386f-d053-4ab3-88f1-7c64b0ca5b57.json
  • /data/media/####/pageitem2_1004_8dbdec18-fdf9-4473-b89f-53cead373e40.json
  • /data/media/####/pageitem2_1004_8ea9e27d-13fe-4257-b33d-afeee96119e2.json
  • /data/media/####/pageitem2_1004_8fb007b2-7e96-4e5d-8d57-a314d003edb8.json
  • /data/media/####/pageitem2_1004_932a86fd-fa2a-485f-8b52-7b656cf6e499.json
  • /data/media/####/pageitem2_1004_98e99988-d376-4956-9196-85fdc996fe5c.json
  • /data/media/####/pageitem2_1004_a058d969-ca51-4a49-a583-1180b9ed197c.json
  • /data/media/####/pageitem2_1004_a18e791d-bb89-4e24-890e-95f11b789613.json
  • /data/media/####/pageitem2_1004_ae48935a-a626-4d3d-ba71-e8e731f1fbcf.json
  • /data/media/####/pageitem2_1004_af7bb50b-e83a-4b8b-8aa1-9d1e9d050e5e.json
  • /data/media/####/pageitem2_1004_b48c6757-ec05-432d-a8af-f9e5c0a33eae.json
  • /data/media/####/pageitem2_1004_b5234d28-954a-48e7-961f-63c8b35d26e5.json
  • /data/media/####/pageitem2_1004_b62f26e5-2a9b-4ec9-a7da-540a8f84a0fb.json
  • /data/media/####/pageitem2_1004_b980bdf8-1d8d-4ff7-b036-6e36911b4cfa.json
  • /data/media/####/pageitem2_1004_be182886-36fd-4daa-b383-5ef7ef981ea3.json
  • /data/media/####/pageitem2_1004_c20605d2-56ad-4247-b56a-26675aff3d44.json
  • /data/media/####/pageitem2_1004_c23e6fbf-4c48-46a9-9e5b-a4977b2cc520.json
  • /data/media/####/pageitem2_1004_c4fb594d-91bd-4a70-80d2-1a7f20ebab92.json
  • /data/media/####/pageitem2_1004_c5f32fe2-8731-4aee-b03f-1a8a74564e0d.json
  • /data/media/####/pageitem2_1004_c682aea5-34f0-44ab-a2c9-1ef13fc7cd9a.json
  • /data/media/####/pageitem2_1004_c6ba7981-dfbf-4ac5-9d54-92d77ff42180.json
  • /data/media/####/pageitem2_1004_d548d9d6-352b-4733-a573-8d09af550217.json
  • /data/media/####/pageitem2_1004_d618ecfc-5260-4281-8225-878fd1bbb4ef.json
  • /data/media/####/pageitem2_1004_d61ddf97-3ecf-40c5-99d5-8c0935b261a7.json
  • /data/media/####/pageitem2_1004_d82b5f5b-767e-45d2-b631-309b568d5ec5.json
  • /data/media/####/pageitem2_1004_decebd78-7ec1-4787-8ccc-1851ad936739.json
  • /data/media/####/pageitem2_1004_e0733f86-abc3-4377-a8fe-668233bbf78b.json
  • /data/media/####/pageitem2_1004_e20793aa-6e74-446b-a0c1-ce6acd824c10.json
  • /data/media/####/pageitem2_1004_e2ef366d-8079-431f-a710-ee801c78aac4.json
  • /data/media/####/pageitem2_1004_e38a8185-2974-4815-bdee-7f34bc3b20d6.json
  • /data/media/####/pageitem2_1004_e413a5b3-97bf-46dd-bff6-6d72f5c3b0cb.json
  • /data/media/####/pageitem2_1004_e418920e-ce62-4811-a865-1be15c531c98.json
  • /data/media/####/pageitem2_1004_f01bbbc8-16fb-4a74-94e1-502f5c68a4a9.json
  • /data/media/####/pageitem2_1004_f3e735d1-5ae6-4e42-a65d-ced38920cd0f.json
  • /data/media/####/pageitem2_1004_f4962f4d-2f13-494d-9e74-eef122160539.json
  • /data/media/####/pageitem2_1004_f80c1242-7ea1-41b3-99c8-75132d04fa88.json
  • /data/media/####/pageitem2_1004_faab75f6-07ae-4bdd-b9ea-7df1cb093e74.json
  • /data/media/####/pageitem2_1004_fb77626f-391f-40f0-a780-a3f75871955a.json
  • /data/media/####/pageitem2_1005_18d480ae-9dc2-41d1-ba45-1b12030928a2.json
  • /data/media/####/pageitem_1004_00188be0-40b0-4e43-82bd-5e0adda7295b.json
  • /data/media/####/pageitem_1004_00ed202f-5f57-43c7-bb1a-7bb5b7fb5a80.json
  • /data/media/####/pageitem_1004_107047fe-5f3c-48d5-b29d-b61645b53c68.json
  • /data/media/####/pageitem_1004_1391a59d-8d31-4451-b7ce-3f2e78773e2d.json
  • /data/media/####/pageitem_1004_13f04ac7-4dd9-40e8-b3f5-bd0817b09103.json
  • /data/media/####/pageitem_1004_14281ff0-f3d1-4532-b349-53aa2d6c90db.json
  • /data/media/####/pageitem_1004_14d44699-d128-4c39-ba30-02498b942eb7.json
  • /data/media/####/pageitem_1004_17777a92-07b7-444e-99f3-6ed8a21badc8.json
  • /data/media/####/pageitem_1004_178a25fc-5893-48b5-ad52-15bee354d1ca.json
  • /data/media/####/pageitem_1004_1a5200bc-933e-40f5-8520-f56f688b2d4a.json
  • /data/media/####/pageitem_1004_1a90fa2a-0ec4-4c2f-b535-47346ae013ca.json
  • /data/media/####/pageitem_1004_236b4915-5233-429f-8433-a162e133b559.json
  • /data/media/####/pageitem_1004_26cee4d2-738f-49d0-b706-72c8ce41984e.json
  • /data/media/####/pageitem_1004_285a6170-3e73-4e7d-a257-96a23f16a438.json
  • /data/media/####/pageitem_1004_2c934c99-ecde-4dc2-ada1-a757364f3a15.json
  • /data/media/####/pageitem_1004_2eabd6d4-0253-4e9e-9561-c48b697f113c.json
  • /data/media/####/pageitem_1004_2fcf341f-a4e5-445b-bf97-85707833fe0d.json
  • /data/media/####/pageitem_1004_304a88b6-5a26-4a6d-8b73-ac26a76fd0fd.json
  • /data/media/####/pageitem_1004_33748964-4036-4d49-ade8-fea288b93fba.json
  • /data/media/####/pageitem_1004_36a29c05-6007-4eb6-add4-6f00778a22a9.json
  • /data/media/####/pageitem_1004_3a4f27e6-aa0c-4277-9c16-5f994dcef146.json
  • /data/media/####/pageitem_1004_3a7310ed-253d-4ce1-8b5e-a9d266dce442.json
  • /data/media/####/pageitem_1004_3aad85c5-b77e-4644-bb18-6920b58d019f.json
  • /data/media/####/pageitem_1004_3ac8e174-7e64-4190-a8ac-a4b03abb93a6.json
  • /data/media/####/pageitem_1004_3c7ced68-7a2e-4b9a-8bfa-008aafbf763c.json
  • /data/media/####/pageitem_1004_3e46a4fb-fa4c-4fbf-b5dd-7f1c497b642f.json
  • /data/media/####/pageitem_1004_4937e73c-208f-4219-9574-61eebb1b656a.json
  • /data/media/####/pageitem_1004_4e992fa8-2232-4aca-97db-8491251dab15.json
  • /data/media/####/pageitem_1004_4fbcce60-1564-410e-bce0-50cbca743911.json
  • /data/media/####/pageitem_1004_54660e8e-40d6-4252-9813-3e5fd171a543.json
  • /data/media/####/pageitem_1004_571007fa-6f55-4dfb-8092-4a52a90e09e7.json
  • /data/media/####/pageitem_1004_5aba3a58-5b02-4dd3-a664-3c1f9e7473cf.json
  • /data/media/####/pageitem_1004_5ea788e9-f5f4-431d-8aca-9aee5c683ad7.json
  • /data/media/####/pageitem_1004_6353a522-7da2-482f-91cb-537d4e8859c2.json
  • /data/media/####/pageitem_1004_684cdbc1-6fa2-469f-b569-64b421ca46ed.json
  • /data/media/####/pageitem_1004_69381c7e-0909-420b-b644-c8bfdf428ecb.json
  • /data/media/####/pageitem_1004_69c47b4a-6152-4f8d-a1bb-0af7052d5014.json
  • /data/media/####/pageitem_1004_71ab4612-1752-4009-9152-68372f9b71a2.json
  • /data/media/####/pageitem_1004_735e353b-3288-4279-8201-0d2317376f02.json
  • /data/media/####/pageitem_1004_7da27b4d-ff0a-47a7-9df9-f2f4ae49a019.json
  • /data/media/####/pageitem_1004_7e1cdcba-3d50-48d8-b4a1-81cc621d5afd.json
  • /data/media/####/pageitem_1004_83a0c456-77b1-4994-92f4-7ccf2f98ef3e.json
  • /data/media/####/pageitem_1004_8466cf6b-9c46-4904-8d3d-af7d5a513301.json
  • /data/media/####/pageitem_1004_86ec8766-9349-40cc-8b96-5b97237fe038.json
  • /data/media/####/pageitem_1004_877209d4-9b01-4153-953f-5f06f68895b7.json
  • /data/media/####/pageitem_1004_8c8bcc82-bf3e-4afa-bf3c-118c084fd5e1.json
  • /data/media/####/pageitem_1004_8d61386f-d053-4ab3-88f1-7c64b0ca5b57.json
  • /data/media/####/pageitem_1004_8dbdec18-fdf9-4473-b89f-53cead373e40.json
  • /data/media/####/pageitem_1004_8ea9e27d-13fe-4257-b33d-afeee96119e2.json
  • /data/media/####/pageitem_1004_8fb007b2-7e96-4e5d-8d57-a314d003edb8.json
  • /data/media/####/pageitem_1004_932a86fd-fa2a-485f-8b52-7b656cf6e499.json
  • /data/media/####/pageitem_1004_98e99988-d376-4956-9196-85fdc996fe5c.json
  • /data/media/####/pageitem_1004_a058d969-ca51-4a49-a583-1180b9ed197c.json
  • /data/media/####/pageitem_1004_a18e791d-bb89-4e24-890e-95f11b789613.json
  • /data/media/####/pageitem_1004_ae48935a-a626-4d3d-ba71-e8e731f1fbcf.json
  • /data/media/####/pageitem_1004_af7bb50b-e83a-4b8b-8aa1-9d1e9d050e5e.json
  • /data/media/####/pageitem_1004_b48c6757-ec05-432d-a8af-f9e5c0a33eae.json
  • /data/media/####/pageitem_1004_b5234d28-954a-48e7-961f-63c8b35d26e5.json
  • /data/media/####/pageitem_1004_b62f26e5-2a9b-4ec9-a7da-540a8f84a0fb.json
  • /data/media/####/pageitem_1004_b980bdf8-1d8d-4ff7-b036-6e36911b4cfa.json
  • /data/media/####/pageitem_1004_be182886-36fd-4daa-b383-5ef7ef981ea3.json
  • /data/media/####/pageitem_1004_c20605d2-56ad-4247-b56a-26675aff3d44.json
  • /data/media/####/pageitem_1004_c23e6fbf-4c48-46a9-9e5b-a4977b2cc520.json
  • /data/media/####/pageitem_1004_c4fb594d-91bd-4a70-80d2-1a7f20ebab92.json
  • /data/media/####/pageitem_1004_c5f32fe2-8731-4aee-b03f-1a8a74564e0d.json
  • /data/media/####/pageitem_1004_c682aea5-34f0-44ab-a2c9-1ef13fc7cd9a.json
  • /data/media/####/pageitem_1004_c6ba7981-dfbf-4ac5-9d54-92d77ff42180.json
  • /data/media/####/pageitem_1004_d548d9d6-352b-4733-a573-8d09af550217.json
  • /data/media/####/pageitem_1004_d618ecfc-5260-4281-8225-878fd1bbb4ef.json
  • /data/media/####/pageitem_1004_d61ddf97-3ecf-40c5-99d5-8c0935b261a7.json
  • /data/media/####/pageitem_1004_d82b5f5b-767e-45d2-b631-309b568d5ec5.json
  • /data/media/####/pageitem_1004_decebd78-7ec1-4787-8ccc-1851ad936739.json
  • /data/media/####/pageitem_1004_e0733f86-abc3-4377-a8fe-668233bbf78b.json
  • /data/media/####/pageitem_1004_e20793aa-6e74-446b-a0c1-ce6acd824c10.json
  • /data/media/####/pageitem_1004_e2ef366d-8079-431f-a710-ee801c78aac4.json
  • /data/media/####/pageitem_1004_e38a8185-2974-4815-bdee-7f34bc3b20d6.json
  • /data/media/####/pageitem_1004_e413a5b3-97bf-46dd-bff6-6d72f5c3b0cb.json
  • /data/media/####/pageitem_1004_e418920e-ce62-4811-a865-1be15c531c98.json
  • /data/media/####/pageitem_1004_f01bbbc8-16fb-4a74-94e1-502f5c68a4a9.json
  • /data/media/####/pageitem_1004_f3e735d1-5ae6-4e42-a65d-ced38920cd0f.json
  • /data/media/####/pageitem_1004_f4962f4d-2f13-494d-9e74-eef122160539.json
  • /data/media/####/pageitem_1004_f80c1242-7ea1-41b3-99c8-75132d04fa88.json
  • /data/media/####/pageitem_1004_faab75f6-07ae-4bdd-b9ea-7df1cb093e74.json
  • /data/media/####/pageitem_1004_fb77626f-391f-40f0-a780-a3f75871955a.json
  • /data/media/####/pageitem_1005_18d480ae-9dc2-41d1-ba45-1b12030928a2.json
  • /data/media/####/pageitem_2003_1.json
  • /data/media/####/pageitem_3_41855297-8fe4-429d-8d98-1ffe80ce9c77.json
Miscellaneous:
Uses the following algorithms to encrypt data:
  • DES
Uses the following algorithms to decrypt data:
  • DES
Gets information about location.
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android