Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Locker.16646

Added to the Dr.Web virus database: 2023-05-06

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Threat detection based on machine learning.
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) v.dy####.com:443
  • TCP(TLS/1.0) gmscomp####.google####.com:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) rr6---s####.g####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) and####.google####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) 74.1####.205.94:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.2) 74.1####.205.94:443
  • TCP(TLS/1.2) gmscomp####.google####.com:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • and####.google####.com
  • cdn1-sm####.ph####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • gmscomp####.google####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • rr6---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/000001.dbtmp
  • /data/data/####/00a5ebd7bb03eb01_0
  • /data/data/####/011296c6de43a971_0
  • /data/data/####/012d1346e3025e17_0
  • /data/data/####/012d1346e3025e17_1
  • /data/data/####/020933333b5251ed_0
  • /data/data/####/022a1c254e794b95_0
  • /data/data/####/035acb80185d1119_0 (deleted)
  • /data/data/####/03f4265ea9d649ef_0
  • /data/data/####/048782789bb22c9f_0
  • /data/data/####/04e44d98a656d9fd_0
  • /data/data/####/0592c682de8e7c36_0
  • /data/data/####/086c769fec0331d2_0
  • /data/data/####/086c769fec0331d2_1
  • /data/data/####/08ebb08d0e8d2024_0
  • /data/data/####/08ebdb37f712434f_0 (deleted)
  • /data/data/####/09488e9e9cf09857_0
  • /data/data/####/09488e9e9cf09857_1
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0a61312c3ce937bc_0
  • /data/data/####/0a61312c3ce937bc_s
  • /data/data/####/0a8fca8dff786a6d_0
  • /data/data/####/0ae9610cfa69ac9e_0
  • /data/data/####/0b52ee41b362a6d9_0
  • /data/data/####/0b6c3bd569c0aff2_0
  • /data/data/####/0c4d09b1c25c1abc_0
  • /data/data/####/0c5006e7612062e0_0
  • /data/data/####/0d035f037ab04930_0
  • /data/data/####/0f29dbb1c0f0bc0a_0
  • /data/data/####/108a35709f007ff3_0
  • /data/data/####/11896a04c6c7c392_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/123172f215e251de_0
  • /data/data/####/1251c9deb44f08a1_0
  • /data/data/####/1251c9deb44f08a1_s
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/14552815965a26fb_0
  • /data/data/####/15f5884d9ad586bc_0
  • /data/data/####/16cf40d1c9f511f7_0
  • /data/data/####/1718418df72ec6d3_0
  • /data/data/####/1756e6fdc0b163e8_0
  • /data/data/####/18329a2ed5f40be5_0
  • /data/data/####/194782edaf866907_0
  • /data/data/####/1a03b3f7851e1578_0
  • /data/data/####/1a83aa048ec187d4_0
  • /data/data/####/1ab263d1ff58a2a3_0
  • /data/data/####/1ac5b96ee8e5db35_0
  • /data/data/####/1adde5ba23826d96_0
  • /data/data/####/1b1661b2f59171d0_0
  • /data/data/####/1c9d0791f1810a50_0
  • /data/data/####/1d055edf16b65a09_0
  • /data/data/####/1dcb62184dea81db_0
  • /data/data/####/1f7e6cce3dd12d01_0
  • /data/data/####/1fc4dd66d8933a0d_0
  • /data/data/####/2130018f4be0cb0a_0
  • /data/data/####/216b358f5e8353a5_0
  • /data/data/####/21986f86f2b2cca7_0
  • /data/data/####/21c631917a5244c3_0
  • /data/data/####/21c631917a5244c3_1
  • /data/data/####/2211be2b832a7824_0
  • /data/data/####/222b0eae340c86f3_0
  • /data/data/####/2285869cb251bda3_0
  • /data/data/####/2285869cb251bda3_1
  • /data/data/####/23209bb163228ba7_0
  • /data/data/####/23209bb163228ba7_1
  • /data/data/####/2338abd69fde6486_0
  • /data/data/####/235c0d1fd83b8acb_0
  • /data/data/####/23619ace7fb8c207_0 (deleted)
  • /data/data/####/23ed19829be7e7dc_0
  • /data/data/####/24cc24ad06b07631_0
  • /data/data/####/254433d1e71f246c_0
  • /data/data/####/264efbef8a00c387_0
  • /data/data/####/28ab49662d02b660_0
  • /data/data/####/28e2b7d67cb0ab61_0
  • /data/data/####/293e61e6a86db45d_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/2a0e9b6d3b382e2e_0
  • /data/data/####/2a4ca04863d88c10_0
  • /data/data/####/2b299823f65172b2_0
  • /data/data/####/2b299823f65172b2_1
  • /data/data/####/2bb899ded3dd9b72_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d2900ab256ce573_0
  • /data/data/####/2d80118ae5302570_0
  • /data/data/####/2d80118ae5302570_1
  • /data/data/####/2fb4885fff7bd002_0
  • /data/data/####/2fe1e9a5b1abf3ca_0
  • /data/data/####/2fe1e9a5b1abf3ca_1
  • /data/data/####/304f973ca243aa3d_0
  • /data/data/####/31095393fa1573c9_0
  • /data/data/####/312c35252a0f8eed_0
  • /data/data/####/3144978ac02bb0e9_0
  • /data/data/####/3144978ac02bb0e9_1
  • /data/data/####/315cf1fa25d7d53d_0
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/33a8d6426ad0400d_0
  • /data/data/####/358f0478b0a513e7_0
  • /data/data/####/36ac7e2d67dec583_0
  • /data/data/####/36fbdb2c1b91137a_0
  • /data/data/####/36fbdb2c1b91137a_1
  • /data/data/####/381b0820ae14d473_0
  • /data/data/####/390816ab82866504_0
  • /data/data/####/39d214b87771bd6e_0
  • /data/data/####/39f0f5b33b71b709_0
  • /data/data/####/3b10ccc4c338aadf_0
  • /data/data/####/3b4cf250778a8769_0
  • /data/data/####/3c01f5912e868e10_0
  • /data/data/####/3c01f5912e868e10_1
  • /data/data/####/3ccabe5398a1174a_0
  • /data/data/####/3e77eb94ac9edb28_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/40192257d108d9c8_0
  • /data/data/####/40654482db499995_0
  • /data/data/####/407c7fcc5930e775_0
  • /data/data/####/40cdbf12d63ff390_0
  • /data/data/####/41788e71d4efae19_0
  • /data/data/####/41bf9ce91dcebcbb_0
  • /data/data/####/42382427c1ac7446_0
  • /data/data/####/43add253d3196048_0
  • /data/data/####/443711a059dd7c3d_0
  • /data/data/####/45f21be55d998367_0
  • /data/data/####/45f440f7bc1290a0_0
  • /data/data/####/468e01c1fcb8bd71_0
  • /data/data/####/472e58c456998a58_0
  • /data/data/####/484671c1d7f0dd52_0 (deleted)
  • /data/data/####/488c60e7733c5a1f_0
  • /data/data/####/4985820d52e58017_0
  • /data/data/####/49cdcae70b0f71a9_0
  • /data/data/####/4a89fdaf34446b94_0
  • /data/data/####/4a940811468207ff_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4d12573b6ce7b5c5_0
  • /data/data/####/4dc3c3a268470351_0
  • /data/data/####/4e059e79a6804a89_0
  • /data/data/####/4e12792e1fe2d655_0 (deleted)
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/4f31a535744136d8_0
  • /data/data/####/5005224befa4799d_0
  • /data/data/####/515fa18f5edf7a71_0
  • /data/data/####/52120692f7288c2b_0
  • /data/data/####/530083c80e4d0b1c_0
  • /data/data/####/54182b2b6fc364d6_0
  • /data/data/####/543650778f9843aa_0
  • /data/data/####/54c94a863a383ff2_0
  • /data/data/####/5614eb79a5b0e38e_0
  • /data/data/####/566e470e01f892d5_0
  • /data/data/####/5702cfbe3fdf4f5e_0
  • /data/data/####/579621fe03c7eabf_0
  • /data/data/####/587e74e602cff877_0
  • /data/data/####/5a44e2418a965539_0
  • /data/data/####/5a707b3f0e1f5ee0_0
  • /data/data/####/5b926d4a82fb2bf0_0
  • /data/data/####/5b926d4a82fb2bf0_1
  • /data/data/####/5ca8fb63a2fdb3a7_0
  • /data/data/####/5ca8fb63a2fdb3a7_1
  • /data/data/####/5cb3dbc7784b512d_0
  • /data/data/####/5ce577687323a903_0
  • /data/data/####/5e0938991732e2a8_0
  • /data/data/####/5ef6cb363c3bbe2d_0
  • /data/data/####/5f2dd39d683f58af_0
  • /data/data/####/5f3fdfc65fddcf6d_0
  • /data/data/####/5f74217898c9612a_0
  • /data/data/####/5fa595d16f85c031_0
  • /data/data/####/60165a3a04e1bae9_0
  • /data/data/####/60165a3a04e1bae9_1
  • /data/data/####/6086f05f872a4072_0
  • /data/data/####/62067fc72dda7eb7_0
  • /data/data/####/62262e5b708d4dd4_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/63cc07fb611c953c_0
  • /data/data/####/63d9ce14bd2a3609_0
  • /data/data/####/63e3991bcfabb6d4_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/67355e2fc38574fa_0
  • /data/data/####/674550d420fcf9e0_0
  • /data/data/####/69958cd4236c3ce4_0
  • /data/data/####/6ba5a647cd4dd379_0
  • /data/data/####/6bec6a0849d8a437_0
  • /data/data/####/6c58bdf159cb62c7_0
  • /data/data/####/6c58bdf159cb62c7_1
  • /data/data/####/6c98efda04df9170_0
  • /data/data/####/6cbe6d5df16f64ba_0
  • /data/data/####/6cf40482e8e69783_0
  • /data/data/####/6d395d16e7c678a1_0
  • /data/data/####/6edc0726e108ad96_0
  • /data/data/####/6fbfcd0f228a113d_0
  • /data/data/####/6fd1cc4e719ee8bc_0
  • /data/data/####/7023a8b7280d77e6_0
  • /data/data/####/70a90dc0c4f1579f_0 (deleted)
  • /data/data/####/70d904ecc0a8cf4f_0
  • /data/data/####/70d904ecc0a8cf4f_1
  • /data/data/####/7164c8b1540e4cfd_0 (deleted)
  • /data/data/####/729adec0d04545d1_0
  • /data/data/####/734151022703a189_0
  • /data/data/####/7453bbb79a0d4ff1_0
  • /data/data/####/745a3bd6882a205b_0
  • /data/data/####/74b37c637783d7e0_0
  • /data/data/####/74f79efc53b76242_0
  • /data/data/####/75e46a93df8d7816_0
  • /data/data/####/7663912ec421d7be_0
  • /data/data/####/7696bd6b0ec3a4c3_0
  • /data/data/####/78ba71f8940c57e1_0
  • /data/data/####/79b075f4bb0bfc53_0
  • /data/data/####/79b84fed6e8090af_0
  • /data/data/####/79ec04884b2835f9_0
  • /data/data/####/7a9ab3ccc0d49f52_0
  • /data/data/####/7aaf58be5f153874_0
  • /data/data/####/7b96ccd2b5ed7b99_0
  • /data/data/####/7b96ccd2b5ed7b99_1
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c4a9f887100bc9d_0 (deleted)
  • /data/data/####/7dac69fb6abee99e_0
  • /data/data/####/7e2b20bced5e2500_0
  • /data/data/####/7fdaf1f0ab05325a_0
  • /data/data/####/7fdaf1f0ab05325a_1
  • /data/data/####/7fe4f8749b31f1a7_0
  • /data/data/####/81c014fc23362ae2_0
  • /data/data/####/81eab523811d01cf_0
  • /data/data/####/85a7becdaa0be6aa_0
  • /data/data/####/85a7becdaa0be6aa_1
  • /data/data/####/8612cd76bb6677f4_0
  • /data/data/####/865304e3d8cf23c4_0
  • /data/data/####/878d4c73d34f62e1_0
  • /data/data/####/87af7f615cc3101c_0
  • /data/data/####/87ba751df673868e_0
  • /data/data/####/87ca42518e9d9531_0
  • /data/data/####/87ca42518e9d9531_1
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/889cdc123a2f269d_0
  • /data/data/####/88c4fa0a0ac6dd42_0
  • /data/data/####/88c990f43f73c500_0
  • /data/data/####/88e0abecb3419fff_0
  • /data/data/####/88fa35acfc6ca020_0
  • /data/data/####/8942892aca09c28b_0
  • /data/data/####/8b04ac5cc8a97801_0
  • /data/data/####/8cd0f9b81ff3fd78_0
  • /data/data/####/8ef391bca04077f9_0
  • /data/data/####/8f95402b800fd8e9_0
  • /data/data/####/8ffc97ff3f5b276b_0
  • /data/data/####/8ffc97ff3f5b276b_1
  • /data/data/####/91ec2cd7d944b26f_0
  • /data/data/####/91ec435d59b097ce_0
  • /data/data/####/923a95f8612d658f_0
  • /data/data/####/927c81f49c686279_0
  • /data/data/####/929671b7467e26f8_0
  • /data/data/####/92d1d834794a04b8_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/95964d62c9def653_0
  • /data/data/####/95b77c950e22c7a6_0
  • /data/data/####/95bb372d9da15771_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/965af61f3b29e14f_0
  • /data/data/####/970699dfcfb59ff1_0
  • /data/data/####/99151900b0d1fcb8_0
  • /data/data/####/997373d01d090c31_0 (deleted)
  • /data/data/####/9a88a6dcc268050a_0
  • /data/data/####/9af024fcaf5b58d8_0
  • /data/data/####/9b5e254113bbeb25_0
  • /data/data/####/9b6086584cc1f9b4_0
  • /data/data/####/9cef30d4e4ba4130_0
  • /data/data/####/9d17adee18db34dc_0
  • /data/data/####/9d17adee18db34dc_1
  • /data/data/####/9defa1b01f0dfdb1_0
  • /data/data/####/9df1fce02a2e0327_0
  • /data/data/####/9df30a11e1b9af51_0
  • /data/data/####/9ea4b735086718a2_0
  • /data/data/####/9ffd71979038173b_0
  • /data/data/####/BRQjA.dex
  • /data/data/####/BRQjA.dex.flock (deleted)
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/XCfaY.dex
  • /data/data/####/XCfaY.dex.flock (deleted)
  • /data/data/####/a1764250d7879f4a_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a220af5d647d0f55_0
  • /data/data/####/a39a6bba9829a61c_0
  • /data/data/####/a3d970d37df78be2_0
  • /data/data/####/a5aad13febc6a967_0
  • /data/data/####/a6776be334f5c46e_0
  • /data/data/####/a887e14cda142498_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/aa11eb6d7bbbc3c7_0
  • /data/data/####/ac23679c84b122dc_0
  • /data/data/####/acb919fc0d3f9e02_0
  • /data/data/####/ad1ac79377d0e4aa_0 (deleted)
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/aef1cdad8c7bc382_0
  • /data/data/####/af153880b80e8975_0 (deleted)
  • /data/data/####/af52d6e7ba8d54af_0
  • /data/data/####/af52d6e7ba8d54af_1
  • /data/data/####/b12165236098806c_0
  • /data/data/####/b253f4b682cd1ba2_0
  • /data/data/####/b2575f6ecf380ef9_0
  • /data/data/####/b4df51fc6c13d1c5_0
  • /data/data/####/b63252ddd2d130d5_0
  • /data/data/####/b6733258db17a11a_0
  • /data/data/####/b72ca0ba3723566c_0
  • /data/data/####/b8463e46d94a4b73_0
  • /data/data/####/b8d222be9ff93471_0
  • /data/data/####/b905ed819aa2234d_0
  • /data/data/####/b90b75d1f5746cb8_0
  • /data/data/####/b917e1bda1f88a7a_0
  • /data/data/####/b9845da70b9d0946_0
  • /data/data/####/ba65ed8060117bed_0
  • /data/data/####/bb58f9422331d36f_0
  • /data/data/####/bc58015795b33389_0
  • /data/data/####/bd0bf0609270cf77_0
  • /data/data/####/bd3fae13e58134e0_0
  • /data/data/####/bd3fae13e58134e0_1
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bd6a3493c4b43291_0
  • /data/data/####/bdaa1c47560ecdfd_0
  • /data/data/####/be12c253073e3b40_0
  • /data/data/####/be7f1454500497dc_0
  • /data/data/####/bf1c33707db6d91c_0 (deleted)
  • /data/data/####/bf5d059b74f6824e_0
  • /data/data/####/c13b4b1dac5804dc_0
  • /data/data/####/c34b5310265b7613_0
  • /data/data/####/c34b5310265b7613_1
  • /data/data/####/c36352d7d8250758_0
  • /data/data/####/c4280d1d14312d8e_0
  • /data/data/####/c4406947e971d662_0
  • /data/data/####/c44192a7285d527f_0
  • /data/data/####/c44192a7285d527f_1
  • /data/data/####/c4420e5520ee7d4b_0
  • /data/data/####/c451cf81c01502b7_0
  • /data/data/####/c6a1ff306393fa5d_0
  • /data/data/####/c6ef9e66cab1ff9c_0
  • /data/data/####/c8cbbba2f93deaf1_0
  • /data/data/####/c8cbbba2f93deaf1_1
  • /data/data/####/caec9c4ba0b554b3_0
  • /data/data/####/cb21163042d8660e_0
  • /data/data/####/cb21163042d8660e_s
  • /data/data/####/cb85a05460978c01_0
  • /data/data/####/cbb4edb83cb14ad0_0
  • /data/data/####/cc954c850263aa65_0
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/cd2d121893087462_0
  • /data/data/####/cd5cd96474b6c069_0
  • /data/data/####/cdd3a7d2fb32249c_0
  • /data/data/####/cde5b29ca46d706d_0
  • /data/data/####/ce24b48a4c43124d_0
  • /data/data/####/ced59743599d65b3_0
  • /data/data/####/cee7d6979b2b3f79_0
  • /data/data/####/cf105bb09a86fe25_0
  • /data/data/####/cf5d479a4874e9f3_0
  • /data/data/####/com.fwqorosrs_preferences.xml
  • /data/data/####/d084ed47299bbe1a_0
  • /data/data/####/d08a77f411bfbce3_0
  • /data/data/####/d1b24b1e189dd435_0
  • /data/data/####/d26a356579ad36a4_0
  • /data/data/####/d321a8d78e53bff9_0
  • /data/data/####/d443ca96d6aff725_0
  • /data/data/####/d4992a4f803f262c_0 (deleted)
  • /data/data/####/d4a0f59d3ed06c50_0
  • /data/data/####/d514afbdce703bbd_0
  • /data/data/####/d5245af59d5909f5_0
  • /data/data/####/d6113a0046fbd544_0
  • /data/data/####/d62a6013ffaabc56_0
  • /data/data/####/d72ac3b66e872e2d_0
  • /data/data/####/d9d408bc58b2d5f5_0
  • /data/data/####/d9fd9d3895e13b03_0
  • /data/data/####/da1a2d40a30f4e47_0
  • /data/data/####/da3084bc3e8cb0f8_0
  • /data/data/####/da4af38e3b0901ac_0
  • /data/data/####/db993b77586946c7_0
  • /data/data/####/dbd26dd3eea9399c_0
  • /data/data/####/dd974bb9f53f1e81_0
  • /data/data/####/dfb6d0898b03fa12_0
  • /data/data/####/e0bc45fcd726c23a_0
  • /data/data/####/e0f997b71c5a30f0_0
  • /data/data/####/e0f997b71c5a30f0_1
  • /data/data/####/e19814e4a8a3e4ea_0
  • /data/data/####/e19814e4a8a3e4ea_1
  • /data/data/####/e2b4ad83ed04ac6b_0
  • /data/data/####/e34ab6c73ea15eb8_0
  • /data/data/####/e390105b29957971_0
  • /data/data/####/e3f74fa11743f9e4_0
  • /data/data/####/e5156def0b56a913_0
  • /data/data/####/e5b9038f7f1f2bd8_0
  • /data/data/####/e65aedfb7e40afa9_0
  • /data/data/####/e6c3638a84fe0719_0 (deleted)
  • /data/data/####/e7461e546faf282e_0
  • /data/data/####/e76b64084a29fe01_0
  • /data/data/####/e76b64084a29fe01_1
  • /data/data/####/e7b5754ed668de7e_0
  • /data/data/####/e8118e85331a8aa8_0 (deleted)
  • /data/data/####/e89b5a6ebffb94bc_0
  • /data/data/####/e89f6a18a20a472b_0
  • /data/data/####/e8dea98c37bce5a8_0
  • /data/data/####/e991fbfedba2aab9_0
  • /data/data/####/ea0c7ed70355b665_0
  • /data/data/####/ea420e2d7e655b78_0
  • /data/data/####/ea5a94e6b6c17eef_0
  • /data/data/####/eabd54013e4cfb14_0
  • /data/data/####/eaf81141265dd929_0 (deleted)
  • /data/data/####/eb3a645e5b272c0c_0
  • /data/data/####/ec55875cf6dfb94d_0 (deleted)
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f0608d444bfd6adc_0
  • /data/data/####/f12fb74bf8be3f66_0
  • /data/data/####/f12fb74bf8be3f66_1
  • /data/data/####/f216e17ad0cc944b_0 (deleted)
  • /data/data/####/f240ad85a9dbeaaa_0
  • /data/data/####/f3d53db9d746804f_0
  • /data/data/####/f5792fe01abadcc9_0 (deleted)
  • /data/data/####/f5fa9c6556e1c73b_0
  • /data/data/####/f5fa9c6556e1c73b_1
  • /data/data/####/f60c2ac1001b92da_0 (deleted)
  • /data/data/####/f64e2412d4f14c22_0
  • /data/data/####/f75b3f6afb775623_0
  • /data/data/####/f80a04e56bb6308e_0
  • /data/data/####/f9df78b63565453e_0
  • /data/data/####/f9df78b63565453e_1
  • /data/data/####/fa89d615c9399940_0
  • /data/data/####/fac4a07f34f22493_0
  • /data/data/####/fad35a043c981528_0
  • /data/data/####/faf2c4446e3c03ae_0 (deleted)
  • /data/data/####/fbf4d66a13e778a7_0
  • /data/data/####/fc04f45b4eb8eb27_0
  • /data/data/####/fd0d36bbdacea1f4_0 (deleted)
  • /data/data/####/fda5e8deeb418265_0
  • /data/data/####/fdecd124d942fccf_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff03f34d351f9813_0
  • /data/data/####/ff913dd4f5b48aaf_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/pjihWuFD.dex
  • /data/data/####/pjihWuFD.dex.flock (deleted)
  • /data/data/####/pziUoFYOD.dex
  • /data/data/####/temp-index
  • /data/data/####/the-real-index
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android