Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Locker.16653

Added to the Dr.Web virus database: 2023-05-09

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Threat detection based on machine learning.
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) rr13---####.g####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) 64.2####.162.94:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) and####.google####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) v.dy####.com:443
  • TCP(TLS/1.2) and####.google####.com:443
  • TCP(TLS/1.2) 64.2####.162.94:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • and####.google####.com
  • cdn1-sm####.ph####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.go####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • rr13---####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/000001.dbtmp
  • /data/data/####/0029a619119e5381_0
  • /data/data/####/0088d4dd3249d4ed_0
  • /data/data/####/00a5ebd7bb03eb01_0
  • /data/data/####/012d1346e3025e17_0
  • /data/data/####/012d1346e3025e17_1
  • /data/data/####/019abd0061e406c1_0
  • /data/data/####/01ee4d7e77e5c5fb_0
  • /data/data/####/01fbb0f0fdc1f6ce_0
  • /data/data/####/02586e610ca63181_0
  • /data/data/####/0263b63cbfad2ee1_0
  • /data/data/####/03dc7afd7576e110_0
  • /data/data/####/04067e0e5dc895d6_0
  • /data/data/####/044d35e907cf5e44_0
  • /data/data/####/04724f9813cef5f1_0
  • /data/data/####/04dd0fd8d8d20228_0
  • /data/data/####/0535e645245512a0_0
  • /data/data/####/053927d0b10ec0ad_0
  • /data/data/####/05932495a0bf1957_0
  • /data/data/####/05b7bcc59247a275_0
  • /data/data/####/05b835037d959418_0 (deleted)
  • /data/data/####/05df78018b25f8cf_0
  • /data/data/####/06dac55a90e06670_0
  • /data/data/####/07c5b1f5cb637591_0
  • /data/data/####/0802f30c4ee3ef19_0
  • /data/data/####/080570cc4d3c1354_0
  • /data/data/####/083509c9e23f15db_0
  • /data/data/####/086f26772c01bdcc_0
  • /data/data/####/08e5215e58b59fae_0
  • /data/data/####/093cebf269f8f22c_0
  • /data/data/####/098b7f6819c09881_0
  • /data/data/####/09cb1fa745c8471b_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0a4eb50f2cc05fea_0
  • /data/data/####/0a61312c3ce937bc_0
  • /data/data/####/0a61312c3ce937bc_s
  • /data/data/####/0ad589580a61949e_0 (deleted)
  • /data/data/####/0b0392426795cfd1_0
  • /data/data/####/0b0eca142c572eb2_0
  • /data/data/####/0b2533dc94c233fb_0
  • /data/data/####/0c3ff4b8046490d7_0
  • /data/data/####/0d224d75f934a171_0
  • /data/data/####/0de7fde271a3585b_0
  • /data/data/####/0df6189734b10b61_0
  • /data/data/####/0f29dbb1c0f0bc0a_0
  • /data/data/####/0f5c080873bdd64b_0
  • /data/data/####/0f804754acbeb826_0
  • /data/data/####/1105e11dad29f7c8_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/124f40bb9d9dd9a1_0
  • /data/data/####/1251c9deb44f08a1_0
  • /data/data/####/1251c9deb44f08a1_s
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/1389d4be8da3180e_0
  • /data/data/####/13c8712dcdeedec3_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13de1a803e371024_0
  • /data/data/####/13df41d479618f90_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/14bcc3f3e134843a_0
  • /data/data/####/1673c19a4cc76b5f_0
  • /data/data/####/16768c14cd8e0359_0 (deleted)
  • /data/data/####/16aad965f656f2c0_0
  • /data/data/####/16c452dba299b451_0
  • /data/data/####/170a1b734d807bf0_0
  • /data/data/####/1756e6fdc0b163e8_0
  • /data/data/####/17b0ff3fe394d903_0
  • /data/data/####/181cb8b25c6b6bec_0
  • /data/data/####/183f0cf96c4bf272_0
  • /data/data/####/188bfee55884bef8_0
  • /data/data/####/1a9a6a1fd4c03084_0
  • /data/data/####/1aa77f1fd894872a_0
  • /data/data/####/1ac466cc73c71a56_0
  • /data/data/####/1b05c15960b2e9b0_0
  • /data/data/####/1b438cabde9b923b_0
  • /data/data/####/1c31dff7da804d69_0
  • /data/data/####/1d0609c44c3286a1_0
  • /data/data/####/1d98b387f735c6b3_0
  • /data/data/####/1eee51ba645335d5_0 (deleted)
  • /data/data/####/1f52da09bb9480bf_0
  • /data/data/####/1fb0724cc5d7f9b1_0
  • /data/data/####/203bfcfad8287684_0
  • /data/data/####/2047797818996a98_0
  • /data/data/####/204941a3f0793a2f_0
  • /data/data/####/20c6784a7c722443_0
  • /data/data/####/20e844ca4701ea99_0
  • /data/data/####/2285869cb251bda3_0
  • /data/data/####/2285869cb251bda3_1
  • /data/data/####/228bcad22be86c7f_0
  • /data/data/####/23ad48fb10631338_0
  • /data/data/####/2452c3caafa9ffb0_0
  • /data/data/####/24bd373f92f842b5_0
  • /data/data/####/258a1f913f951c7c_0
  • /data/data/####/272bebb1f82fbdc7_0
  • /data/data/####/2798402e1fd526ab_0 (deleted)
  • /data/data/####/28ab49662d02b660_0
  • /data/data/####/28e2b7d67cb0ab61_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/295422f42f8b774d_0
  • /data/data/####/29547e0ca751f4db_0
  • /data/data/####/29bc492a1bf36459_0
  • /data/data/####/29db5123ccbb92f8_0
  • /data/data/####/2b299823f65172b2_0
  • /data/data/####/2b299823f65172b2_1
  • /data/data/####/2c6f30ae7045eeb5_0 (deleted)
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2cee1bbf287da500_0
  • /data/data/####/2d2f68045a77c373_0
  • /data/data/####/2d4883580263576d_0
  • /data/data/####/2d80118ae5302570_0
  • /data/data/####/2d80118ae5302570_1
  • /data/data/####/2e13efd33bb76802_0
  • /data/data/####/2e445b7470df191d_0
  • /data/data/####/2ec6cc4269f80e52_0
  • /data/data/####/2fb5c98e06cd37f1_0
  • /data/data/####/2fe1e9a5b1abf3ca_0
  • /data/data/####/2fe1e9a5b1abf3ca_1
  • /data/data/####/30421c2a1355bc2b_0
  • /data/data/####/315cf1fa25d7d53d_0
  • /data/data/####/321a461b8c231c44_0
  • /data/data/####/32ab65952012c752_0
  • /data/data/####/336df3793eb7a14b_0
  • /data/data/####/3424017419a8b956_0
  • /data/data/####/35225865ab65e4eb_0
  • /data/data/####/355c37c5be4f2f9e_0
  • /data/data/####/358f0478b0a513e7_0
  • /data/data/####/367df11a5b62ebd3_0
  • /data/data/####/374b21e46424a5b8_0
  • /data/data/####/375627442501bf3b_0
  • /data/data/####/391742625dc226df_0
  • /data/data/####/39a99e05fe5a5c43_0
  • /data/data/####/39b2ba65d658e470_0
  • /data/data/####/39dfdea55b8baaa3_0
  • /data/data/####/39e2dba0cfaaa5c1_0
  • /data/data/####/39f0f5b33b71b709_0
  • /data/data/####/3a40e8f48f756057_0
  • /data/data/####/3a5b596deb6a8198_0
  • /data/data/####/3a6635bd2d67a273_0
  • /data/data/####/3ad438fa2056d095_0
  • /data/data/####/3b1cacb8ad5de981_0
  • /data/data/####/3b8ab16293efe744_0
  • /data/data/####/3c51354a8af0f4a9_0
  • /data/data/####/3d42c23aa6ddbfd6_0
  • /data/data/####/3e4b25ee9b2ba9a8_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/4031b06c5201c6e4_0 (deleted)
  • /data/data/####/4091e6a9be631552_0
  • /data/data/####/40a33d34b56cbf3f_0
  • /data/data/####/4141738ead7fd037_0
  • /data/data/####/441f2c399b8abf71_0
  • /data/data/####/443b02ad2929c73e_0
  • /data/data/####/45846d8408de388d_0
  • /data/data/####/45a61af7abe6dbd2_0
  • /data/data/####/45f440f7bc1290a0_0
  • /data/data/####/4608a0c39f309d7e_0
  • /data/data/####/472e58c456998a58_0
  • /data/data/####/4914f542750be1d7_0
  • /data/data/####/49a4d78fc5282b66_0
  • /data/data/####/49d1c53632a800cd_0
  • /data/data/####/4ad4007fa510af0d_0
  • /data/data/####/4b82a4aeffe6360f_0
  • /data/data/####/4bcd4a6e3d4cf487_0
  • /data/data/####/4c2c7e9a3c0d2aa3_0
  • /data/data/####/4c52ffcc9091672f_0
  • /data/data/####/4c82ebf8f44e23d1_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4cd9349b276d1bad_0
  • /data/data/####/4dc26fa5c902e8a4_0
  • /data/data/####/4e19b9e9694ccabe_0
  • /data/data/####/4e4516c6337cfb07_0
  • /data/data/####/4e9611e49c8bf868_0
  • /data/data/####/4f53303ff7c2cb38_0
  • /data/data/####/50aa0e38d2e9d00d_0
  • /data/data/####/519774d583e1ffa7_0
  • /data/data/####/52340c612e1384c6_0
  • /data/data/####/528a758670694dad_0
  • /data/data/####/528a758670694dad_s
  • /data/data/####/52f5918cd3053064_0
  • /data/data/####/53b239990bd5f724_0
  • /data/data/####/53f8ec7c49099d70_0
  • /data/data/####/5512f66567189962_0 (deleted)
  • /data/data/####/559626588e523cf9_0
  • /data/data/####/55d4f60383048e6e_0
  • /data/data/####/562a4e1da65baad2_0
  • /data/data/####/565b6d3ad01d3182_0
  • /data/data/####/56b9440c8f63549b_0
  • /data/data/####/576bf85338180d4d_0
  • /data/data/####/57b2b11dd2c3ccd8_0 (deleted)
  • /data/data/####/58bce43e7c3eb393_0
  • /data/data/####/58bce43e7c3eb393_s
  • /data/data/####/598a4a1ab5ab975f_0
  • /data/data/####/59f8385b031ae421_0
  • /data/data/####/5a5a71dbf93db3f0_0
  • /data/data/####/5a679bb49dc3e038_0
  • /data/data/####/5a819188a03df308_0
  • /data/data/####/5b926d4a82fb2bf0_0
  • /data/data/####/5b926d4a82fb2bf0_1
  • /data/data/####/5c9f979478ebe721_0
  • /data/data/####/5d168bbd359fdc6e_0
  • /data/data/####/5d34ec6134c491ae_0
  • /data/data/####/5d4db2f32a415476_0
  • /data/data/####/5ea6d43beda28f62_0
  • /data/data/####/5f0436b6fbe0bda0_0 (deleted)
  • /data/data/####/5f4d3f104c23e73e_0
  • /data/data/####/60165a3a04e1bae9_0
  • /data/data/####/60165a3a04e1bae9_1
  • /data/data/####/6201de6755143d01_0
  • /data/data/####/6221c5f020cd484a_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/6327b6a6d5f24b19_0
  • /data/data/####/6335b7718e42f190_0
  • /data/data/####/63a636f200819591_0
  • /data/data/####/63a7e674b52c0771_0 (deleted)
  • /data/data/####/63d4ed7b78118893_0
  • /data/data/####/63e3991bcfabb6d4_0
  • /data/data/####/63fd5992fa70f35c_0
  • /data/data/####/63fef874966547ec_0
  • /data/data/####/64a869247ce1b265_0
  • /data/data/####/64ca0332f6584757_0 (deleted)
  • /data/data/####/653a9f8350eded2d_0
  • /data/data/####/6546ef17e8befef3_0
  • /data/data/####/65a6f9c68346699b_0
  • /data/data/####/65ff5183fdd6e522_0
  • /data/data/####/66182d4ac0fea3ea_0
  • /data/data/####/6669323b2a2faac8_0
  • /data/data/####/67264cca03434f75_0
  • /data/data/####/674550d420fcf9e0_0
  • /data/data/####/6748dc31f2ee2524_0
  • /data/data/####/67732eace4525db1_0
  • /data/data/####/68a6b4b8c7aae507_0
  • /data/data/####/691a3469e9a38f85_0
  • /data/data/####/697febbd12349fe0_0
  • /data/data/####/69d271694bb82201_0
  • /data/data/####/6a4d4164e0b0acff_0
  • /data/data/####/6a6a9d196825721b_0
  • /data/data/####/6b9e37d30da7577b_0 (deleted)
  • /data/data/####/6bfc8f895aadcee5_0
  • /data/data/####/6c2ca652803b5920_0
  • /data/data/####/6c64d73829afd6c7_0
  • /data/data/####/6cbe6d5df16f64ba_0
  • /data/data/####/6d001f1efc3f8cd1_0
  • /data/data/####/6d38f79eb29f3c05_0
  • /data/data/####/6dac3b4c8325ab3a_0
  • /data/data/####/6dcd57f333c4a917_0
  • /data/data/####/6f6c8ce10c472171_0
  • /data/data/####/7023a8b7280d77e6_0
  • /data/data/####/70a197053fe0949d_0
  • /data/data/####/70d904ecc0a8cf4f_0
  • /data/data/####/70d904ecc0a8cf4f_1
  • /data/data/####/715850b179a5172e_0
  • /data/data/####/71710b7e017dfddc_0
  • /data/data/####/72fcafe07e2e1044_0 (deleted)
  • /data/data/####/73898ed8ad3cc46b_0
  • /data/data/####/741cf733637debcf_0
  • /data/data/####/7437f2f82cb1dcf8_0
  • /data/data/####/74b37c637783d7e0_0
  • /data/data/####/75abe82e14d59020_0
  • /data/data/####/75bc32b172b1883a_0
  • /data/data/####/775d9e8fe874ba15_0
  • /data/data/####/77655a0f3632988e_0
  • /data/data/####/77be586f2d9a1dbb_0
  • /data/data/####/77fd87f4862ea984_0
  • /data/data/####/78115a1ae176d71b_0
  • /data/data/####/789bfbb1978c2dc7_0
  • /data/data/####/7939ec78a0170e9b_0
  • /data/data/####/7953adc2ed8f3fe0_0
  • /data/data/####/79b84fed6e8090af_0
  • /data/data/####/7a72547b236bf171_0
  • /data/data/####/7afdfb98eaa78df9_0
  • /data/data/####/7b96ccd2b5ed7b99_0
  • /data/data/####/7b96ccd2b5ed7b99_1
  • /data/data/####/7bf06682486cf6ca_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7e839e0aaa73cfe0_0
  • /data/data/####/7fdaf1f0ab05325a_0
  • /data/data/####/7fdaf1f0ab05325a_1
  • /data/data/####/80465620a10ab583_0
  • /data/data/####/81a0ad701fb80563_0
  • /data/data/####/81c014fc23362ae2_0
  • /data/data/####/81dd0528ec61f8c1_0
  • /data/data/####/82a94c05068de0fd_0
  • /data/data/####/83b0560b15d7f48a_0
  • /data/data/####/83bc48503eca2456_0
  • /data/data/####/85bcc6d781e8c293_0
  • /data/data/####/85cc6aa5040ff08a_0
  • /data/data/####/85f5ee5591bbf2ae_0
  • /data/data/####/8612cd76bb6677f4_0
  • /data/data/####/865304e3d8cf23c4_0
  • /data/data/####/873f18ba4dcb9332_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/88e0b1032b6214f9_0
  • /data/data/####/891e79d72447bed0_0
  • /data/data/####/8a5838c2fa010412_0 (deleted)
  • /data/data/####/8a7928e43c3f23ff_0
  • /data/data/####/8aa99ca7e283c335_0
  • /data/data/####/8ad9cae5a09c0f9f_0
  • /data/data/####/8b026b7f0a9af298_0
  • /data/data/####/8b6ddb6769e29416_0
  • /data/data/####/8b70bad9e50fcc46_0
  • /data/data/####/8bc2c30514adf66a_0
  • /data/data/####/8c057b4aab852fc3_0
  • /data/data/####/8c90699ef55b2e6d_0
  • /data/data/####/8cbe31db7122f03e_0
  • /data/data/####/8dee3643fb248b7c_0
  • /data/data/####/8e915f7006358848_0
  • /data/data/####/8f9f7aba66d71c06_0
  • /data/data/####/90204cb96f5603e7_0
  • /data/data/####/904fa527df0d197c_0
  • /data/data/####/90eb6d837373ec61_0
  • /data/data/####/9190ff445b73d424_0
  • /data/data/####/919b5c93797ac643_0
  • /data/data/####/919f395842ac5d10_0
  • /data/data/####/924beeaddb2e42ec_0
  • /data/data/####/927c81f49c686279_0
  • /data/data/####/9335deaedab92c77_0
  • /data/data/####/933b8442d5aa0410_0
  • /data/data/####/9359889e6b379e83_0
  • /data/data/####/937af14ff38d6c36_0
  • /data/data/####/93b70bd6977ef3e2_0
  • /data/data/####/93b7a2093917d872_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/952bc933e6928c7d_0
  • /data/data/####/95bb372d9da15771_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/96ab3f3fec13d7f0_0
  • /data/data/####/987804fea6a07e79_0
  • /data/data/####/989a56110165dae8_0
  • /data/data/####/98a27dcf965df150_0
  • /data/data/####/9969fbdc2bd2ce3f_0
  • /data/data/####/9adcc6b50f462477_0
  • /data/data/####/9b6086584cc1f9b4_0
  • /data/data/####/9c34436c1b1050e9_0
  • /data/data/####/9d458f470cf80685_0
  • /data/data/####/9d5bed79b013f164_0
  • /data/data/####/9ddbf553e2381eaf_0 (deleted)
  • /data/data/####/9ded548abfb02027_0
  • /data/data/####/9e019029488a1b1d_0
  • /data/data/####/9e0bb2fb30ba1115_0
  • /data/data/####/9e9305a8799ddca4_0
  • /data/data/####/9e9e06894d3009f6_0
  • /data/data/####/9eba3963b65a48e9_0
  • /data/data/####/9edb6fb9c3a5c056_0
  • /data/data/####/9f7c383c6817ebb1_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/XtyYWGguw.dex
  • /data/data/####/XtyYWGguw.dex.flock (deleted)
  • /data/data/####/XxrVS.dex
  • /data/data/####/XxrVS.dex.flock (deleted)
  • /data/data/####/a06c3aa8a40537bf_0
  • /data/data/####/a080d9a6632f0bbd_0
  • /data/data/####/a16986c30a46ff75_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a20dae800c21e682_0
  • /data/data/####/a3e6d708486b42d7_0
  • /data/data/####/a3f74af5f170c82d_0
  • /data/data/####/a45809df79fe6c8d_0
  • /data/data/####/a497130f7bf612fe_0
  • /data/data/####/a573b5b86ed98a39_0
  • /data/data/####/a63327b4414f33ea_0
  • /data/data/####/a67794635716f83c_0
  • /data/data/####/a84c92eaf4dc40d1_0
  • /data/data/####/a85a9f00f81dc3ed_0
  • /data/data/####/a86ccd0df54c5aaa_0
  • /data/data/####/a9349d6b1660255b_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/aa4c06014c5781fc_0
  • /data/data/####/aaf160fde210a92d_0
  • /data/data/####/ab0097d5e69d2f48_0
  • /data/data/####/ab0b87eea674dee5_0
  • /data/data/####/ab1821b709715aba_0
  • /data/data/####/ac36871934299753_0
  • /data/data/####/ad427cf8bddd1525_0
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/aef1cdad8c7bc382_0
  • /data/data/####/af3fd0e76bb5b3e3_0
  • /data/data/####/af458985efb3a07a_0 (deleted)
  • /data/data/####/b145a44d1ed26909_0
  • /data/data/####/b360e405c5648450_0
  • /data/data/####/b360e405c5648450_1
  • /data/data/####/b39b9579835876ff_0
  • /data/data/####/b4879d0b9c326752_0
  • /data/data/####/b4d61cbd8815c233_0
  • /data/data/####/b704a8d16f5b4ebf_0
  • /data/data/####/b7bb9eead774bdf4_0
  • /data/data/####/b8463e46d94a4b73_0
  • /data/data/####/b8d54c598ad3701c_0
  • /data/data/####/b8e6a13fda124fc5_0
  • /data/data/####/b956003e43f29d46_0
  • /data/data/####/b9a7418611547348_0
  • /data/data/####/ba111f80d42cd392_0
  • /data/data/####/ba16f95b23a9f26b_0
  • /data/data/####/ba518f91b9b87a1d_0
  • /data/data/####/bb061d00f64ddc20_0
  • /data/data/####/bbfbebb6c4ad4a14_0
  • /data/data/####/bc81283c6b0c2fb8_0
  • /data/data/####/bd0bf0609270cf77_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/be513a5cea4a4202_0
  • /data/data/####/bebb1c6a0d4400c6_0
  • /data/data/####/bf83cdc713e2e548_0
  • /data/data/####/bf8debddaccb05ac_0
  • /data/data/####/bfcbde6fe21514c7_0
  • /data/data/####/c0b9247194897caa_0
  • /data/data/####/c1001d555adb6792_0
  • /data/data/####/c118a6e60f63af53_0
  • /data/data/####/c14ca00c05ad58f4_0
  • /data/data/####/c1db41427b8e97af_0
  • /data/data/####/c247df450ff24862_0
  • /data/data/####/c2c5925afdd8a538_0
  • /data/data/####/c3231c3c251e639b_0
  • /data/data/####/c34b5310265b7613_0
  • /data/data/####/c34b5310265b7613_1
  • /data/data/####/c3c1c98c7ae8e07b_0
  • /data/data/####/c44192a7285d527f_0
  • /data/data/####/c44192a7285d527f_1
  • /data/data/####/c4543b2d482928bb_0
  • /data/data/####/c4c837d661dca67d_0
  • /data/data/####/c4c837d661dca67d_s
  • /data/data/####/c4f942e8c916a251_0
  • /data/data/####/c54acf5c4931b095_0
  • /data/data/####/c69991b674bedc7b_0
  • /data/data/####/c6a495632c46f4a6_0
  • /data/data/####/c6efd9f73f05ec62_0
  • /data/data/####/c83e75d9202d2bd2_0
  • /data/data/####/c8cbbba2f93deaf1_0
  • /data/data/####/c8cbbba2f93deaf1_1
  • /data/data/####/c8dbed8c2cf18f0a_0
  • /data/data/####/c8ddf737db06b519_0
  • /data/data/####/cae55daa884bcc34_0
  • /data/data/####/cb1dc80942a6730d_0
  • /data/data/####/cb85a05460978c01_0
  • /data/data/####/cbdbca0830988ca4_0
  • /data/data/####/cc9ffdf5cfbe5bda_0
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/cec83d32cd163740_0
  • /data/data/####/com.llg_preferences.xml
  • /data/data/####/d07cdabb87ee11f2_0
  • /data/data/####/d0842f7e75e2c2c7_0
  • /data/data/####/d178a2ac58988b7c_0
  • /data/data/####/d23dda4c6662ecec_0
  • /data/data/####/d2ed990619f6bc17_0 (deleted)
  • /data/data/####/d3849618ce0ceb66_0
  • /data/data/####/d412254bda362281_0
  • /data/data/####/d443ca96d6aff725_0
  • /data/data/####/d4e176a6e7874d3f_0
  • /data/data/####/d4e63e6902feb759_0
  • /data/data/####/d5156a62f111615c_0
  • /data/data/####/d58a38f736e3140b_0
  • /data/data/####/d6ca0c3238c05159_0
  • /data/data/####/d71920f3c7ddf4e8_0
  • /data/data/####/d7b5ec36fd1466ae_0
  • /data/data/####/d7c03766f5bd3ac9_0
  • /data/data/####/d93eed7ca2f80f0e_0
  • /data/data/####/d9996c1f813f196c_0
  • /data/data/####/d9aeee046cfc3d97_0
  • /data/data/####/d9b5a5412f7e7b85_0
  • /data/data/####/d9c3e0f052104f4c_0
  • /data/data/####/d9d408bc58b2d5f5_0
  • /data/data/####/da2d15291d449059_0
  • /data/data/####/db06c872df3d15cf_0
  • /data/data/####/dd5fe3b6771afefb_0
  • /data/data/####/dd974bb9f53f1e81_0
  • /data/data/####/ddc5d40f6aa8dd8c_0
  • /data/data/####/df80762fa47cd8cc_0
  • /data/data/####/dfabd53141a5f2af_0 (deleted)
  • /data/data/####/dkYqYSLj.dex
  • /data/data/####/dkYqYSLj.dex.flock (deleted)
  • /data/data/####/e0b117f102402d24_0 (deleted)
  • /data/data/####/e0e55331c3d12c23_0
  • /data/data/####/e0f997b71c5a30f0_0
  • /data/data/####/e0f997b71c5a30f0_1
  • /data/data/####/e19814e4a8a3e4ea_0
  • /data/data/####/e19814e4a8a3e4ea_1
  • /data/data/####/e32a62804e4f6e7f_0
  • /data/data/####/e3fc2f53418e2b49_0
  • /data/data/####/e5156def0b56a913_0
  • /data/data/####/e6370593234b2623_0
  • /data/data/####/e66b6e86dfaf46c2_0
  • /data/data/####/e6bf767338220954_0
  • /data/data/####/e79c9855970a2333_0
  • /data/data/####/e7d48dcb4a374aba_0
  • /data/data/####/e82497673048a956_0
  • /data/data/####/e87249a2790564e8_0
  • /data/data/####/ea41f27050df38f4_0
  • /data/data/####/ea8bed89e322eac8_0
  • /data/data/####/eb00cf0019add5e8_0
  • /data/data/####/eb5a4d5cbdcb6323_0
  • /data/data/####/eba212378239b1e8_0
  • /data/data/####/edbb7c6bbe63a10a_0
  • /data/data/####/edbe5aabf2d38656_0
  • /data/data/####/ee883af6f976b2a2_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f0608d444bfd6adc_0
  • /data/data/####/f12fb74bf8be3f66_0
  • /data/data/####/f12fb74bf8be3f66_1
  • /data/data/####/f147c1ad3afc9f8e_0
  • /data/data/####/f1f35cebda9b8533_0
  • /data/data/####/f24d980e4578c9c9_0
  • /data/data/####/f24d980e4578c9c9_s
  • /data/data/####/f30d2025a4a6268e_0
  • /data/data/####/f5281bc2e2b08283_0
  • /data/data/####/f5fa9c6556e1c73b_0
  • /data/data/####/f5fa9c6556e1c73b_1
  • /data/data/####/f60e66be92db9573_0 (deleted)
  • /data/data/####/f64e2412d4f14c22_0
  • /data/data/####/f7932e5db398cfea_0
  • /data/data/####/f7bcc298e46d0587_0
  • /data/data/####/f802fbd30c77043b_0
  • /data/data/####/f8389536d31a94e7_0
  • /data/data/####/f8ac517558024414_0
  • /data/data/####/fa3b3f14a5d5eebd_0
  • /data/data/####/fb166d9e6c38d6ec_0
  • /data/data/####/fbaab4544ba2c867_0
  • /data/data/####/fbb5b81205293157_0
  • /data/data/####/fbe50f65cd1d0c49_0
  • /data/data/####/fc04f45b4eb8eb27_0
  • /data/data/####/fcc6a90d1d1a08bb_0
  • /data/data/####/fcc6a90d1d1a08bb_s
  • /data/data/####/fd1036ab888782d5_0
  • /data/data/####/fd1570633738796c_0 (deleted)
  • /data/data/####/fdecd124d942fccf_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff97ef09f80a2388_0
  • /data/data/####/ffc5a5b1ba5c3463_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/temp-index
  • /data/data/####/the-real-index
  • /data/data/####/uRwnJAgq.dex
  • /data/data/####/uRwnJAgq.dex.flock (deleted)
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android