Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Locker.16652

Added to the Dr.Web virus database: 2023-05-09

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Threat detection based on machine learning.
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) connect####.gst####.com:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) and####.google####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) ht-####.a####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) rr6---s####.g####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.2) and####.google####.com:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • and####.google####.com
  • cdn1-sm####.ph####.com
  • connect####.gst####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • gmscomp####.google####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.go####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • rr6---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/0029a619119e5381_0
  • /data/data/####/01a5ba26d08d0c19_0
  • /data/data/####/01fbb0f0fdc1f6ce_0
  • /data/data/####/0263b63cbfad2ee1_0
  • /data/data/####/03dc7afd7576e110_0
  • /data/data/####/04067e0e5dc895d6_0
  • /data/data/####/04724f9813cef5f1_0
  • /data/data/####/04c84505f7dfa0be_0
  • /data/data/####/04dd0fd8d8d20228_0
  • /data/data/####/0535e645245512a0_0
  • /data/data/####/05932495a0bf1957_0
  • /data/data/####/05b7bcc59247a275_0
  • /data/data/####/05c40ca2f436fe45_0
  • /data/data/####/05df78018b25f8cf_0
  • /data/data/####/06dac55a90e06670_0
  • /data/data/####/06e0c57c53f0b634_0
  • /data/data/####/086c769fec0331d2_0
  • /data/data/####/086c769fec0331d2_1
  • /data/data/####/086f26772c01bdcc_0
  • /data/data/####/08ce1c349c5e135a_0
  • /data/data/####/093cebf269f8f22c_0
  • /data/data/####/09488e9e9cf09857_0
  • /data/data/####/09488e9e9cf09857_1
  • /data/data/####/098b7f6819c09881_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0a61312c3ce937bc_0
  • /data/data/####/0a61312c3ce937bc_s
  • /data/data/####/0ae9610cfa69ac9e_0
  • /data/data/####/0b6c3bd569c0aff2_0
  • /data/data/####/0cc6f538aa1943fe_0
  • /data/data/####/0d035f037ab04930_0
  • /data/data/####/0d8002c4a68578f4_0
  • /data/data/####/0da8d053b8d7b754_0
  • /data/data/####/0dfb700435dcb891_0
  • /data/data/####/0e6021950d99d6c2_0
  • /data/data/####/0e92342f880d951a_0
  • /data/data/####/0f5c080873bdd64b_0
  • /data/data/####/0f81e82dcbca7aad_0
  • /data/data/####/108a35709f007ff3_0
  • /data/data/####/1251c9deb44f08a1_0
  • /data/data/####/1251c9deb44f08a1_s
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/14bcc3f3e134843a_0
  • /data/data/####/165681d59f35466b_0 (deleted)
  • /data/data/####/16c452dba299b451_0
  • /data/data/####/1718418df72ec6d3_0
  • /data/data/####/1756e6fdc0b163e8_0
  • /data/data/####/175713066b628a99_0
  • /data/data/####/17bbde1ecaa5f2a3_0
  • /data/data/####/188bfee55884bef8_0
  • /data/data/####/1ac466cc73c71a56_0
  • /data/data/####/1ac5b96ee8e5db35_0
  • /data/data/####/1adde5ba23826d96_0
  • /data/data/####/1c9d0791f1810a50_0
  • /data/data/####/1f52da09bb9480bf_0
  • /data/data/####/2047797818996a98_0
  • /data/data/####/20e844ca4701ea99_0
  • /data/data/####/212efe67e7238343_0 (deleted)
  • /data/data/####/21c631917a5244c3_0
  • /data/data/####/21c631917a5244c3_1
  • /data/data/####/223cd70cd7c7d975_0
  • /data/data/####/23209bb163228ba7_0
  • /data/data/####/23209bb163228ba7_1
  • /data/data/####/233036d8e0b60a87_0
  • /data/data/####/23ad48fb10631338_0
  • /data/data/####/24cc24ad06b07631_0
  • /data/data/####/258a1f913f951c7c_0
  • /data/data/####/25e6325fb8ff7f3c_0
  • /data/data/####/26ae5f24821d1083_0 (deleted)
  • /data/data/####/2718304d561bc25a_0
  • /data/data/####/272bebb1f82fbdc7_0
  • /data/data/####/293e61e6a86db45d_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/29db5123ccbb92f8_0
  • /data/data/####/29e88bb3eec77167_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d4883580263576d_0
  • /data/data/####/2d8a3a0a7dc028a6_0
  • /data/data/####/2e13efd33bb76802_0
  • /data/data/####/2e445b7470df191d_0
  • /data/data/####/2ec6cc4269f80e52_0
  • /data/data/####/2eeb8a96c75ff148_0 (deleted)
  • /data/data/####/2fb4885fff7bd002_0
  • /data/data/####/30421c2a1355bc2b_0
  • /data/data/####/3107fa762e327670_0 (deleted)
  • /data/data/####/31095393fa1573c9_0
  • /data/data/####/3144978ac02bb0e9_0
  • /data/data/####/3144978ac02bb0e9_1
  • /data/data/####/321a461b8c231c44_0
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/335d6adc282f21d9_0 (deleted)
  • /data/data/####/3424017419a8b956_0
  • /data/data/####/347bfb137425d2cc_0
  • /data/data/####/348f4a742e0cc440_0
  • /data/data/####/3684a15e41c7fbd8_0
  • /data/data/####/36ac7e2d67dec583_0
  • /data/data/####/36fbdb2c1b91137a_0
  • /data/data/####/36fbdb2c1b91137a_1
  • /data/data/####/375478624da95dd6_0 (deleted)
  • /data/data/####/381b0820ae14d473_0
  • /data/data/####/38c33b2e286dff30_0
  • /data/data/####/391742625dc226df_0
  • /data/data/####/39798ea98ce8f4c8_0
  • /data/data/####/39938bfaae32da61_0
  • /data/data/####/39a99e05fe5a5c43_0
  • /data/data/####/39cfe2d742483863_0
  • /data/data/####/39f0f5b33b71b709_0
  • /data/data/####/39f686249d7a5209_0
  • /data/data/####/3a40e8f48f756057_0
  • /data/data/####/3a6635bd2d67a273_0
  • /data/data/####/3b4cf250778a8769_0
  • /data/data/####/3c01f5912e868e10_0
  • /data/data/####/3c01f5912e868e10_1
  • /data/data/####/3ccabe5398a1174a_0
  • /data/data/####/3d42c23aa6ddbfd6_0
  • /data/data/####/3e4b25ee9b2ba9a8_0
  • /data/data/####/3e77eb94ac9edb28_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/408d3a802a4a9708_0
  • /data/data/####/40cdbf12d63ff390_0
  • /data/data/####/4141738ead7fd037_0
  • /data/data/####/41788e71d4efae19_0
  • /data/data/####/41bf9ce91dcebcbb_0
  • /data/data/####/45f440f7bc1290a0_0
  • /data/data/####/47013c9db4c8e037_0
  • /data/data/####/488c60e7733c5a1f_0
  • /data/data/####/4a85ed5e7ac89eb9_0
  • /data/data/####/4b482d9f778f0483_0
  • /data/data/####/4b7d608e01c07fd2_0
  • /data/data/####/4c388ecef38a1b57_0 (deleted)
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4d10a8b3d567b0b4_0
  • /data/data/####/4dc3c3a268470351_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/4f11918da4a9a2a2_0 (deleted)
  • /data/data/####/4f53303ff7c2cb38_0
  • /data/data/####/5005224befa4799d_0
  • /data/data/####/50aa0e38d2e9d00d_0
  • /data/data/####/515fa18f5edf7a71_0
  • /data/data/####/51fccc1a0f9c2dff_0
  • /data/data/####/52120692f7288c2b_0
  • /data/data/####/528a758670694dad_0
  • /data/data/####/528a758670694dad_s
  • /data/data/####/53caacddfef6977b_0 (deleted)
  • /data/data/####/53f8ec7c49099d70_0
  • /data/data/####/54182b2b6fc364d6_0
  • /data/data/####/543650778f9843aa_0
  • /data/data/####/56b9440c8f63549b_0
  • /data/data/####/576bf85338180d4d_0
  • /data/data/####/579621fe03c7eabf_0
  • /data/data/####/57e43159b7d7a660_0 (deleted)
  • /data/data/####/58bce43e7c3eb393_0
  • /data/data/####/58bce43e7c3eb393_s
  • /data/data/####/596b02d6558f6231_0
  • /data/data/####/5a5a71dbf93db3f0_0
  • /data/data/####/5a707b3f0e1f5ee0_0
  • /data/data/####/5a819188a03df308_0
  • /data/data/####/5b0026553351630e_0
  • /data/data/####/5ca8fb63a2fdb3a7_0
  • /data/data/####/5ca8fb63a2fdb3a7_1
  • /data/data/####/5d168bbd359fdc6e_0
  • /data/data/####/5d34ec6134c491ae_0
  • /data/data/####/5f3fdfc65fddcf6d_0
  • /data/data/####/603afddca1bdcc79_0
  • /data/data/####/607fa6e3f53992d1_0
  • /data/data/####/60bf2295b9f190e6_0 (deleted)
  • /data/data/####/6201de6755143d01_0
  • /data/data/####/6213424f657516ba_0 (deleted)
  • /data/data/####/62262e5b708d4dd4_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/63cc07fb611c953c_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/646182eb9d0fbf48_0 (deleted)
  • /data/data/####/647f54b0bbbfbd0c_0
  • /data/data/####/653a9f8350eded2d_0
  • /data/data/####/6546ef17e8befef3_0
  • /data/data/####/65a6f9c68346699b_0
  • /data/data/####/66182d4ac0fea3ea_0
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/6748dc31f2ee2524_0
  • /data/data/####/67b0a8f7427c44fd_0
  • /data/data/####/69186c50b3896c4c_0
  • /data/data/####/691a3469e9a38f85_0
  • /data/data/####/6a6a9d196825721b_0
  • /data/data/####/6bcffe2a36969236_0
  • /data/data/####/6bec6a0849d8a437_0
  • /data/data/####/6c2ca652803b5920_0
  • /data/data/####/6c58bdf159cb62c7_0
  • /data/data/####/6c58bdf159cb62c7_1
  • /data/data/####/6d001f1efc3f8cd1_0
  • /data/data/####/6d38f79eb29f3c05_0
  • /data/data/####/6dac3b4c8325ab3a_0
  • /data/data/####/6dcd57f333c4a917_0
  • /data/data/####/6ed0c944eb5e51bf_0
  • /data/data/####/6f6c8ce10c472171_0
  • /data/data/####/70a197053fe0949d_0
  • /data/data/####/71710b7e017dfddc_0
  • /data/data/####/723e7e52d885ff4a_0
  • /data/data/####/72e4d1dbe46e82eb_0
  • /data/data/####/734151022703a189_0
  • /data/data/####/741cf733637debcf_0
  • /data/data/####/74b37c637783d7e0_0
  • /data/data/####/75865375bd85e9b8_0
  • /data/data/####/75bc32b172b1883a_0
  • /data/data/####/7696bd6b0ec3a4c3_0
  • /data/data/####/775d9e8fe874ba15_0
  • /data/data/####/77fd87f4862ea984_0
  • /data/data/####/789bfbb1978c2dc7_0
  • /data/data/####/7939ec78a0170e9b_0
  • /data/data/####/7953adc2ed8f3fe0_0
  • /data/data/####/7a72547b236bf171_0
  • /data/data/####/7a9ab3ccc0d49f52_0
  • /data/data/####/7bd0b7055970d550_0
  • /data/data/####/7bf06682486cf6ca_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7ec989bc84577fec_0
  • /data/data/####/7ee1fcc6ef46a1d0_0
  • /data/data/####/7f321e70b534c9c1_0
  • /data/data/####/7fe4f8749b31f1a7_0
  • /data/data/####/80c5c538010e2146_0
  • /data/data/####/81a0ad701fb80563_0
  • /data/data/####/82a94c05068de0fd_0
  • /data/data/####/85a7becdaa0be6aa_0
  • /data/data/####/85a7becdaa0be6aa_1
  • /data/data/####/85bcc6d781e8c293_0
  • /data/data/####/85d2b669c130822d_0 (deleted)
  • /data/data/####/873f18ba4dcb9332_0
  • /data/data/####/87af7f615cc3101c_0
  • /data/data/####/87ba751df673868e_0
  • /data/data/####/87ca42518e9d9531_0
  • /data/data/####/87ca42518e9d9531_1
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/88c4fa0a0ac6dd42_0
  • /data/data/####/88e0b1032b6214f9_0
  • /data/data/####/8a7928e43c3f23ff_0
  • /data/data/####/8b04ac5cc8a97801_0
  • /data/data/####/8b70bad9e50fcc46_0
  • /data/data/####/8de00e310322d831_0
  • /data/data/####/8e34661e9fdba580_0
  • /data/data/####/8ffc97ff3f5b276b_0
  • /data/data/####/8ffc97ff3f5b276b_1
  • /data/data/####/9190ff445b73d424_0
  • /data/data/####/91ec2cd7d944b26f_0
  • /data/data/####/926bb3ac62794f45_0 (deleted)
  • /data/data/####/927c81f49c686279_0
  • /data/data/####/92f87a7791750684_0
  • /data/data/####/933b8442d5aa0410_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/9484251c1c576308_0 (deleted)
  • /data/data/####/95964d62c9def653_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/967b3d7c5563b206_0
  • /data/data/####/9883685c06c3972e_0
  • /data/data/####/9889bd74a4f9f15f_0
  • /data/data/####/99151900b0d1fcb8_0
  • /data/data/####/9969fbdc2bd2ce3f_0
  • /data/data/####/9a4b4fe93c4d8200_0 (deleted)
  • /data/data/####/9b6d9235252cf2c5_0
  • /data/data/####/9bb20c0e7e5ab6b5_0
  • /data/data/####/9d17adee18db34dc_0
  • /data/data/####/9d17adee18db34dc_1
  • /data/data/####/9d1b44e2edf843d2_0
  • /data/data/####/9d458f470cf80685_0
  • /data/data/####/9ded548abfb02027_0
  • /data/data/####/9defa1b01f0dfdb1_0
  • /data/data/####/9df1fce02a2e0327_0
  • /data/data/####/9e6ac076357b73f9_0
  • /data/data/####/9ea4b735086718a2_0
  • /data/data/####/9f895de5de173cda_0 (deleted)
  • /data/data/####/AgQAJdE.dex
  • /data/data/####/AgQAJdE.dex.flock (deleted)
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a0be6dcf79ed42f8_0
  • /data/data/####/a13a171712c8566a_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a20dae800c21e682_0
  • /data/data/####/a220af5d647d0f55_0
  • /data/data/####/a3d970d37df78be2_0
  • /data/data/####/a5aad13febc6a967_0
  • /data/data/####/a5b29f029aea6bb7_0
  • /data/data/####/a60a76a2dd4e084c_0
  • /data/data/####/a6198e49276ff811_0
  • /data/data/####/a63327b4414f33ea_0
  • /data/data/####/a73495d8f4eed396_0
  • /data/data/####/a80fb90778f73989_0
  • /data/data/####/a84c92eaf4dc40d1_0
  • /data/data/####/a85a9f00f81dc3ed_0
  • /data/data/####/a887e14cda142498_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/aaaedafbf983f728_0
  • /data/data/####/ab1821b709715aba_0
  • /data/data/####/ab5736ccb505a4aa_0 (deleted)
  • /data/data/####/ad427cf8bddd1525_0
  • /data/data/####/ad55b6a6574c495d_0
  • /data/data/####/adf35de53642c363_0 (deleted)
  • /data/data/####/af52d6e7ba8d54af_0
  • /data/data/####/af52d6e7ba8d54af_1
  • /data/data/####/b1693ed68b7d1617_0
  • /data/data/####/b2575f6ecf380ef9_0
  • /data/data/####/b2faefda4f4a389a_0
  • /data/data/####/b360e405c5648450_0
  • /data/data/####/b360e405c5648450_1
  • /data/data/####/b4d61cbd8815c233_0
  • /data/data/####/b4df51fc6c13d1c5_0
  • /data/data/####/b956003e43f29d46_0
  • /data/data/####/bDjMjt.dex
  • /data/data/####/ba65ed8060117bed_0
  • /data/data/####/ba80fdec7d3db430_0
  • /data/data/####/ba9369e8a270e3d5_0
  • /data/data/####/bc73f8734c001a33_0
  • /data/data/####/bc81283c6b0c2fb8_0
  • /data/data/####/bd3fae13e58134e0_0
  • /data/data/####/bd3fae13e58134e0_1
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bdaa1c47560ecdfd_0
  • /data/data/####/bdabe385b30bbddf_0
  • /data/data/####/bf5d059b74f6824e_0
  • /data/data/####/bf83cdc713e2e548_0
  • /data/data/####/bf882280db4bae07_0
  • /data/data/####/bfcbde6fe21514c7_0
  • /data/data/####/bxsRpVlBc.dex
  • /data/data/####/bxsRpVlBc.dex.flock (deleted)
  • /data/data/####/c00c39458d85fcd8_0
  • /data/data/####/c1001d555adb6792_0
  • /data/data/####/c14ca00c05ad58f4_0
  • /data/data/####/c2c5925afdd8a538_0
  • /data/data/####/c3231c3c251e639b_0
  • /data/data/####/c4420e5520ee7d4b_0
  • /data/data/####/c451cf81c01502b7_0
  • /data/data/####/c4c837d661dca67d_0
  • /data/data/####/c4c837d661dca67d_s
  • /data/data/####/c54acf5c4931b095_0
  • /data/data/####/c6a495632c46f4a6_0
  • /data/data/####/c6efd9f73f05ec62_0
  • /data/data/####/c85d5dd699487874_0
  • /data/data/####/c8ddf737db06b519_0
  • /data/data/####/cb2631bf77d8de0d_0
  • /data/data/####/cb85a05460978c01_0
  • /data/data/####/cb8f59ff8cecde76_0
  • /data/data/####/cc9ffdf5cfbe5bda_0
  • /data/data/####/ccdc5c52035e7b54_0
  • /data/data/####/cd5cd96474b6c069_0
  • /data/data/####/cd6df9bdd189bffb_0
  • /data/data/####/cd74b9a669dafda6_0
  • /data/data/####/cf105bb09a86fe25_0
  • /data/data/####/cf5d479a4874e9f3_0
  • /data/data/####/cff92c661aa46add_0
  • /data/data/####/com.rnmaiwlr_preferences.xml
  • /data/data/####/d17a55b56e238e34_0
  • /data/data/####/d3bc5fc6d2861a5d_0
  • /data/data/####/d443ca96d6aff725_0
  • /data/data/####/d4e176a6e7874d3f_0
  • /data/data/####/d5156a62f111615c_0
  • /data/data/####/d58a38f736e3140b_0
  • /data/data/####/d6c691d4d20ab1db_0
  • /data/data/####/d71920f3c7ddf4e8_0
  • /data/data/####/d77d655ec40a4bfd_0
  • /data/data/####/d79105bfdc37eaad_0
  • /data/data/####/d7b5ec36fd1466ae_0
  • /data/data/####/d7c03766f5bd3ac9_0
  • /data/data/####/d9aeee046cfc3d97_0
  • /data/data/####/d9b5a5412f7e7b85_0
  • /data/data/####/d9da6edcf2ec636a_0
  • /data/data/####/d9fd9d3895e13b03_0
  • /data/data/####/da3084bc3e8cb0f8_0
  • /data/data/####/db13014918758a45_0
  • /data/data/####/dd5fe3b6771afefb_0
  • /data/data/####/de3d1be82389e866_0
  • /data/data/####/deb4e04dae51da17_0 (deleted)
  • /data/data/####/e02fb251f66f5aad_0
  • /data/data/####/e06e2b9891100227_0
  • /data/data/####/e0e55331c3d12c23_0
  • /data/data/####/e21dec81e8bb0175_0
  • /data/data/####/e3f74fa11743f9e4_0
  • /data/data/####/e3fc2f53418e2b49_0
  • /data/data/####/e5156def0b56a913_0
  • /data/data/####/e6370593234b2623_0
  • /data/data/####/e66b6e86dfaf46c2_0
  • /data/data/####/e7461e546faf282e_0
  • /data/data/####/e75dc8afbd8e3da8_0
  • /data/data/####/e79c9855970a2333_0
  • /data/data/####/e7b5754ed668de7e_0
  • /data/data/####/e82497673048a956_0
  • /data/data/####/e8dea98c37bce5a8_0
  • /data/data/####/e991fbfedba2aab9_0
  • /data/data/####/ea0c7ed70355b665_0
  • /data/data/####/ea41f27050df38f4_0
  • /data/data/####/ea420e2d7e655b78_0
  • /data/data/####/eabd54013e4cfb14_0
  • /data/data/####/ebe303d2b58d4921_0
  • /data/data/####/ec75bc7890645d42_0
  • /data/data/####/ee883af6f976b2a2_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f109e1a0d3df16fd_0
  • /data/data/####/f147c1ad3afc9f8e_0
  • /data/data/####/f20f383709205048_0
  • /data/data/####/f240ad85a9dbeaaa_0
  • /data/data/####/f24d980e4578c9c9_0
  • /data/data/####/f24d980e4578c9c9_s
  • /data/data/####/f30d2025a4a6268e_0
  • /data/data/####/f55624d406504fb2_0
  • /data/data/####/f75b3f6afb775623_0
  • /data/data/####/f7bcc298e46d0587_0
  • /data/data/####/f80a04e56bb6308e_0
  • /data/data/####/f8ac517558024414_0
  • /data/data/####/f9df78b63565453e_0
  • /data/data/####/f9df78b63565453e_1
  • /data/data/####/fbe50f65cd1d0c49_0
  • /data/data/####/fcc6a90d1d1a08bb_0
  • /data/data/####/fcc6a90d1d1a08bb_s
  • /data/data/####/fdeb4ece9d89c217_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff1b7708a040d82f_0
  • /data/data/####/ff913dd4f5b48aaf_0
  • /data/data/####/ff97ef09f80a2388_0
  • /data/data/####/ffc5a5b1ba5c3463_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/the-real-index
  • /data/data/####/zthrUWNI.dex
  • /data/data/####/zthrUWNI.dex.flock (deleted)
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android