Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Locker.16772

Added to the Dr.Web virus database: 2023-06-03

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Threat detection based on machine learning.
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) 64.2####.161.94:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.0) and####.google####.com:443
  • TCP(TLS/1.0) pt-sta####.js####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) c####.liveja####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) galle####.vcmd####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) ei.ph####.com:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) rr13---####.g####.com:443
  • TCP(TLS/1.2) 64.2####.161.94:443
  • TCP(TLS/1.2) and####.google####.com:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • and####.google####.com
  • c####.liveja####.com
  • cdn1-sm####.ph####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • gmscomp####.google####.com
  • h####.por####.com
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • rr13---####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.com.####.8
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/0015d056bdd18816_0
  • /data/data/####/0168e3e150375615_0
  • /data/data/####/0217aa3b4e7514f3_0
  • /data/data/####/023f0bcdc25563a9_0
  • /data/data/####/026c5ac38d0b116b_0
  • /data/data/####/0328339f1e4c5c14_0
  • /data/data/####/040fa7852cdb87b6_0
  • /data/data/####/058ab7718d0e4000_0
  • /data/data/####/05b5f9a52765cee8_0
  • /data/data/####/065f0cba87f2ba12_0
  • /data/data/####/074032b60f35a596_0
  • /data/data/####/0a28c5109aa80ca6_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0ad153c49febbabc_0
  • /data/data/####/0b2533dc94c233fb_0
  • /data/data/####/0bb88c88f80884d8_0
  • /data/data/####/0c5db5dd6c6ae4eb_0
  • /data/data/####/0cb83a19a59f2cfb_0
  • /data/data/####/0cebe27de571d78f_0
  • /data/data/####/0d2be03d70b20d08_0
  • /data/data/####/0d6705065d781779_0
  • /data/data/####/10c0c5243a45288b_0
  • /data/data/####/10e5f51bbc6c8cec_0
  • /data/data/####/117725669bfdaa61_0
  • /data/data/####/11ec1bcba9e047c0_0
  • /data/data/####/11ec1bcba9e047c0_1
  • /data/data/####/1251c9deb44f08a1_0
  • /data/data/####/1251c9deb44f08a1_s
  • /data/data/####/12933b7606cf3595_0
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/1311706c5eb3dffe_0
  • /data/data/####/1389d4be8da3180e_0
  • /data/data/####/13c8712dcdeedec3_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e147a4f44873d6_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/13ec05294dcfac37_0
  • /data/data/####/14f78644073b6e5b_0
  • /data/data/####/15e41ebda9f3b977_0
  • /data/data/####/1756e6fdc0b163e8_0
  • /data/data/####/17f7cf0a2f9b207e_0 (deleted)
  • /data/data/####/181cb8b25c6b6bec_0
  • /data/data/####/188bfee55884bef8_0
  • /data/data/####/1a9bb6968f3b3bce_0
  • /data/data/####/1b438cabde9b923b_0
  • /data/data/####/1ce912397b74eabd_0
  • /data/data/####/1d7ef95a2e83850a_0
  • /data/data/####/1e0f527b05947c92_0
  • /data/data/####/1f89a4680fe98ce0_0
  • /data/data/####/1f989cfcd32f933c_0
  • /data/data/####/1ff3468d17b56d6e_0
  • /data/data/####/1ff48deb6764628a_0
  • /data/data/####/212a08c541e5f1fb_0
  • /data/data/####/228bcad22be86c7f_0
  • /data/data/####/2316776b4dbdc1d0_0
  • /data/data/####/236eb5b82f7e23cc_0
  • /data/data/####/23db4dc426b90f3c_0
  • /data/data/####/245ea5868a066dd9_0
  • /data/data/####/24b20b0e69d901ee_0
  • /data/data/####/253db71cfe15d4bd_0
  • /data/data/####/263a502700939bbb_0
  • /data/data/####/272bebb1f82fbdc7_0
  • /data/data/####/27696f025ed3d5b5_0
  • /data/data/####/27cbac713781f08a_0
  • /data/data/####/28825fc2b6484b4f_0
  • /data/data/####/28c28376f2ea9dd6_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/29a7c599521f84a6_0
  • /data/data/####/29bf5707f6f5e718_0
  • /data/data/####/2ad3f1606b0b34b7_0
  • /data/data/####/2c85ff8b60108227_0 (deleted)
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d039b4fa1b20466_0
  • /data/data/####/2d277ba862cea0aa_0
  • /data/data/####/2e2d4459a1a20db3_0
  • /data/data/####/2e5aacc64e4c970d_0
  • /data/data/####/2e7a21eb1e41c1ab_0
  • /data/data/####/2ed3ddaa843d2359_0
  • /data/data/####/2f4e4589d426f1b0_0
  • /data/data/####/30942fdf03781829_0
  • /data/data/####/30c216f87d10532b_0
  • /data/data/####/30c216f87d10532b_1
  • /data/data/####/311653d260d8c87c_0
  • /data/data/####/315ebf0b45b9872a_0
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/342e06a2a308415e_0
  • /data/data/####/34b09b4571a6edfc_0
  • /data/data/####/350f92190f156885_0
  • /data/data/####/352a1ac66af5cb5e_0
  • /data/data/####/353b27e0a17a260e_0
  • /data/data/####/3636c7a11c8f5386_0
  • /data/data/####/378a2afc2732d74f_0
  • /data/data/####/37e7ec27ed4a9802_0
  • /data/data/####/39e2dba0cfaaa5c1_0
  • /data/data/####/3a40e8f48f756057_0
  • /data/data/####/3a5b596deb6a8198_0
  • /data/data/####/3b1ace1cdc38c1dc_0 (deleted)
  • /data/data/####/3b1cacb8ad5de981_0
  • /data/data/####/3b2cd0f85392d15c_0
  • /data/data/####/3b6d79609a754296_0
  • /data/data/####/3b8ab16293efe744_0
  • /data/data/####/3b91bb746a3732c9_0
  • /data/data/####/3c51354a8af0f4a9_0
  • /data/data/####/3cf707f34f8994cd_0
  • /data/data/####/3d5c5304c3c807f9_0
  • /data/data/####/3d72d958e6d501d5_0
  • /data/data/####/3d7a226f67061e21_0
  • /data/data/####/3d899c710c3f0edb_0
  • /data/data/####/3dd7155d93a1fed9_0
  • /data/data/####/3e7b69c48db88487_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3f4bc55a4f05b819_0
  • /data/data/####/3f60e3864e1d5de0_0
  • /data/data/####/3fb4a57b969c0627_0
  • /data/data/####/3fbb9ff5bcdd5dcf_0
  • /data/data/####/3fd1b90407feb9ed_0
  • /data/data/####/3ff9bb5d5f3c7b7d_0
  • /data/data/####/40b43a60855dc858_0
  • /data/data/####/40d6328eda2f5f1b_0
  • /data/data/####/448a1373a92e3548_0
  • /data/data/####/450ced695e8d0661_0
  • /data/data/####/45440df98dd6e1a5_0
  • /data/data/####/4587a5479beed3ef_0
  • /data/data/####/4587a5479beed3ef_1
  • /data/data/####/458b77440e40045a_0
  • /data/data/####/45d527aae71c7da3_0
  • /data/data/####/4608a0c39f309d7e_0
  • /data/data/####/461baafade3a3f7f_0
  • /data/data/####/49a4d78fc5282b66_0
  • /data/data/####/49ca5157e245c841_0
  • /data/data/####/4abe71a612593ce6_0
  • /data/data/####/4ae0e98c82cda987_0
  • /data/data/####/4afd97f81e073633_0
  • /data/data/####/4c82ebf8f44e23d1_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4cc21f345fbd6b9a_0
  • /data/data/####/4d08e1bedebf5e77_0
  • /data/data/####/4d0c72056791e9ed_0 (deleted)
  • /data/data/####/4db914dae789c303_0
  • /data/data/####/4dc267de75eb2c91_0
  • /data/data/####/4df9b66c7c05361a_0
  • /data/data/####/4e4516c6337cfb07_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/4fa2bf9119477aa1_0
  • /data/data/####/4fabca391a165007_0
  • /data/data/####/4fbdc275b4479546_0
  • /data/data/####/503b3f52dae89415_0 (deleted)
  • /data/data/####/50f182e1c3d7352b_0
  • /data/data/####/515fa18f5edf7a71_0
  • /data/data/####/519774d583e1ffa7_0
  • /data/data/####/5237457e9753186b_0
  • /data/data/####/52d95fb2808cd8c1_0
  • /data/data/####/53331bc92943177f_0
  • /data/data/####/536c5f6e24b60b74_0
  • /data/data/####/54b6feaf12c343f8_0
  • /data/data/####/559626588e523cf9_0
  • /data/data/####/55ab32f00e4406b6_0
  • /data/data/####/55bb84defb84aad0_0
  • /data/data/####/56303ac50b04af99_0
  • /data/data/####/573bf4df2d946c56_0
  • /data/data/####/5757f5622a9ee2e7_0
  • /data/data/####/57db4853d20c9ccb_0
  • /data/data/####/58bce43e7c3eb393_0
  • /data/data/####/58bce43e7c3eb393_s
  • /data/data/####/5954b2beb2285143_0
  • /data/data/####/59cd2c9102d8d2df_0
  • /data/data/####/5a7e723af6fa7163_0
  • /data/data/####/5a9a3e4049b3cfb1_0
  • /data/data/####/5aad641a04c25277_0
  • /data/data/####/5b1951448d94ddbd_0
  • /data/data/####/5b1951448d94ddbd_1
  • /data/data/####/5b4abc2bedee19e8_0
  • /data/data/####/5c3b1f3b55250bde_0
  • /data/data/####/5c76e5e9dd7b1d7b_0
  • /data/data/####/5ca939c7deedcb34_0
  • /data/data/####/5cbf4d8e9745577c_0
  • /data/data/####/5d01276a2b1fec02_0
  • /data/data/####/5e324da11bbe8985_0
  • /data/data/####/5e441fe9cf032e48_0
  • /data/data/####/5ea4cd7805dc067e_0
  • /data/data/####/5f10f48fb80755d4_0
  • /data/data/####/6007fa171938b538_0
  • /data/data/####/6008e523a27d0e38_0
  • /data/data/####/60f71df4f7a3774a_0
  • /data/data/####/61a1d2a86719d4ad_0
  • /data/data/####/62822b00bdd71683_0 (deleted)
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/62e4c662f95dcd1d_0
  • /data/data/####/62eb74bc065f96ff_0
  • /data/data/####/63e3991bcfabb6d4_0
  • /data/data/####/63fd5992fa70f35c_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/6453d2b6ddaf56ed_0
  • /data/data/####/64a1ea02d5608bf3_0
  • /data/data/####/64bd479c901d40a0_0
  • /data/data/####/653f93ce182fa272_0
  • /data/data/####/6669323b2a2faac8_0
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/67bec7986ab2f4db_0
  • /data/data/####/67fb138053a88fa4_0
  • /data/data/####/6850bd19d5083bb1_0
  • /data/data/####/686e29cb8f43730e_0
  • /data/data/####/69b38e49ea2f3ee4_0
  • /data/data/####/6a87933aa8f49270_0
  • /data/data/####/6b322b4bf2fb1cfe_0
  • /data/data/####/6b322b4bf2fb1cfe_1
  • /data/data/####/6b85ab96cd13e187_0
  • /data/data/####/6bbff0e0051c869c_0 (deleted)
  • /data/data/####/6c64d73829afd6c7_0
  • /data/data/####/6cc907757fd2ff2e_0
  • /data/data/####/6d02395dbf6cf986_0
  • /data/data/####/6d4dce77ffb96a48_0
  • /data/data/####/6e24105fb9bfa545_0
  • /data/data/####/6e60402d447fdb05_0
  • /data/data/####/6fccdbd2b3b10adb_0
  • /data/data/####/70983512aa0c5f6e_0
  • /data/data/####/70d925b39d3f476c_0
  • /data/data/####/710f4cd27a2a3cff_0
  • /data/data/####/721b22ac912614be_0
  • /data/data/####/721b22ac912614be_1
  • /data/data/####/7262016a0d4dbcc4_0
  • /data/data/####/729ddace601184a0_0
  • /data/data/####/751b1826c95af675_0
  • /data/data/####/75e097c4faa3befd_0
  • /data/data/####/765d680c200c2967_0
  • /data/data/####/766abf2af5e530c5_0
  • /data/data/####/77655a0f3632988e_0
  • /data/data/####/77a0bd444f198fe6_0
  • /data/data/####/77cc6df46de2563c_0
  • /data/data/####/7821efe6b9bedc1e_0
  • /data/data/####/7912e15abc5237a6_0
  • /data/data/####/79ab33dcf3067bfc_0
  • /data/data/####/79ccd204bf4520bc_0 (deleted)
  • /data/data/####/7bd66c27e8ca5f88_0
  • /data/data/####/7c0c3670ce8c6ef4_0
  • /data/data/####/7c0c3670ce8c6ef4_s
  • /data/data/####/7c127aa3e2948cb3_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c5ddeea4b309c2c_0
  • /data/data/####/7cf39f6f79b20200_0
  • /data/data/####/7f40e43b657bd27d_0
  • /data/data/####/7fd0043b20627493_0
  • /data/data/####/802f03674d0eea32_0
  • /data/data/####/80462c757f06b9a3_0
  • /data/data/####/80462c757f06b9a3_1
  • /data/data/####/80ca1e6ad8900907_0 (deleted)
  • /data/data/####/81297a439c774582_0
  • /data/data/####/82435aeb549b6bb9_0
  • /data/data/####/8270bd3a1e4c095d_0
  • /data/data/####/829300f77941cc38_0
  • /data/data/####/82e95cb98e6908c1_0
  • /data/data/####/836a023684118ee0_0
  • /data/data/####/847acb095d64a7e8_0
  • /data/data/####/848388f88726f022_0
  • /data/data/####/854a98751282b77b_0
  • /data/data/####/855d4806184d2e0a_0
  • /data/data/####/8753fa2389d0efa0_0
  • /data/data/####/878fde7c1019ae13_0
  • /data/data/####/87a22d38eb6386bc_0
  • /data/data/####/881eeba6b0cc79bf_0 (deleted)
  • /data/data/####/8870e3eee72d2726_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/89649f29addb74b8_0 (deleted)
  • /data/data/####/898f4048f09cc6bd_0
  • /data/data/####/89a96567207a90f7_0
  • /data/data/####/8b6e66ba1e5a8cf8_0
  • /data/data/####/8b8bdb1152a3411d_0
  • /data/data/####/8bc2c30514adf66a_0
  • /data/data/####/8c3ecb0d54a3abe8_0
  • /data/data/####/8c3ecb0d54a3abe8_1
  • /data/data/####/8c8921e8e5c81b9a_0
  • /data/data/####/8cb9b137f544f30f_0
  • /data/data/####/8ced9904ab99cc7f_0
  • /data/data/####/8cf97e98ffc6ff67_0
  • /data/data/####/8d07b109365e3170_0
  • /data/data/####/8d07b109365e3170_1
  • /data/data/####/8d7e17787e94567d_0
  • /data/data/####/8e155403cc545933_0
  • /data/data/####/8e52af0b01d1c2e8_0
  • /data/data/####/8f53b467a2e97d28_0
  • /data/data/####/901f76aaef85a6d4_0
  • /data/data/####/90eb6d837373ec61_0
  • /data/data/####/90ebb27be1454e2f_0
  • /data/data/####/910a25edf06cdbcf_0
  • /data/data/####/916fb92dc02dea23_0
  • /data/data/####/91867390e86f5c10_0
  • /data/data/####/91963ac434aff432_0
  • /data/data/####/919b5c93797ac643_0
  • /data/data/####/927c81f49c686279_0
  • /data/data/####/92b12eb17805c4f2_0
  • /data/data/####/92b74dc6571d53c6_0
  • /data/data/####/935bf11063fe2273_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/9576800d782ac577_0
  • /data/data/####/9593cfbc28ec4cb8_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/96943a877c833749_0
  • /data/data/####/973072b78aaa9b77_0
  • /data/data/####/987804fea6a07e79_0
  • /data/data/####/98cf7a2424e7dd04_0
  • /data/data/####/9933d49c412ed0d8_0
  • /data/data/####/9933d49c412ed0d8_1
  • /data/data/####/9a17de15e038f64b_0
  • /data/data/####/9a29b26e3147f9de_0
  • /data/data/####/9a6dc6d131eb44d5_0
  • /data/data/####/9ae1ed240112f4c8_0
  • /data/data/####/9b99fbd3b1575124_0
  • /data/data/####/9cc4bca611dfd625_0
  • /data/data/####/9d4cc036ddaf4cbc_0
  • /data/data/####/9e9305a8799ddca4_0
  • /data/data/####/9eb1a5351ef3ca18_0
  • /data/data/####/9fbccd8ed89bfb50_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/KXzXhDSz.dex
  • /data/data/####/KXzXhDSz.dex.flock (deleted)
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/SrZFa.dex
  • /data/data/####/SrZFa.dex.flock (deleted)
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a050780ad9a0b4e3_0
  • /data/data/####/a0f2226241294254_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a260aa5a3de9319c_0
  • /data/data/####/a260aa5a3de9319c_1
  • /data/data/####/a2775fffb6a35622_0
  • /data/data/####/a2c6f6d7c197d3aa_0 (deleted)
  • /data/data/####/a2d0a4729b872d83_0
  • /data/data/####/a446fbaae7a0c56f_0
  • /data/data/####/a45809df79fe6c8d_0
  • /data/data/####/a497130f7bf612fe_0
  • /data/data/####/a4a86499d9012f9b_0
  • /data/data/####/a52fb2d3928a0bc7_0
  • /data/data/####/a55c30def9b9a97b_0
  • /data/data/####/a5aad211dc860993_0
  • /data/data/####/a65e85ecfa2aab0b_0 (deleted)
  • /data/data/####/a68e5a03d6c8d6a5_0
  • /data/data/####/a6de974ba3e9eea4_0
  • /data/data/####/a76c77a652a80d8a_0 (deleted)
  • /data/data/####/a7c66b9e37d05aab_0
  • /data/data/####/a7c71e711a619633_0
  • /data/data/####/a8367b0baff899c3_0
  • /data/data/####/a84fcf5b22d06a38_0
  • /data/data/####/a86b9451647a3f05_0
  • /data/data/####/a9349d6b1660255b_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/aaf160fde210a92d_0
  • /data/data/####/ac65c0f511adc88e_0 (deleted)
  • /data/data/####/acac0bc7443eeb43_0
  • /data/data/####/acb3b8e4428ede57_0
  • /data/data/####/ace04a3e3f1bc816_0
  • /data/data/####/ad0ab0a3846e9ea6_0
  • /data/data/####/ada50a2f6b89a4a7_0
  • /data/data/####/adb0161b1a8010b0_0
  • /data/data/####/aebcfd6e48cc1423_0
  • /data/data/####/af3fd0e76bb5b3e3_0
  • /data/data/####/afcc10aba53829f8_0
  • /data/data/####/b00033d4bd2273cf_0
  • /data/data/####/b0d0ccd1f92c3da2_0
  • /data/data/####/b307728663e4da03_0
  • /data/data/####/b418fc573d83e63d_0
  • /data/data/####/b4aa49e12a14f1e0_0
  • /data/data/####/b4aa49e12a14f1e0_s
  • /data/data/####/b523428923e91889_0 (deleted)
  • /data/data/####/b5be872091cbcda8_0
  • /data/data/####/b6184a6cb5692ece_0
  • /data/data/####/b6bcbd00103a1206_0
  • /data/data/####/b6bcbd00103a1206_1
  • /data/data/####/b6d0ba6ee220dad1_0
  • /data/data/####/b704a8d16f5b4ebf_0
  • /data/data/####/b70c40eddf2c966b_0
  • /data/data/####/b7659e338f5bfe98_0
  • /data/data/####/b7a2794621acf38d_0
  • /data/data/####/b8c9d19b5d0526b3_0
  • /data/data/####/b936edc43ecbaaee_0
  • /data/data/####/ba55c36adde11c5b_0
  • /data/data/####/bb10749c9fe1d23d_0
  • /data/data/####/bb144e63b92c800d_0
  • /data/data/####/bc230038b53711b0_0
  • /data/data/####/bcf796c81f6d8345_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/befb0a74eabfe922_0
  • /data/data/####/bf0ec84bb385fb6d_0
  • /data/data/####/bf0ec84bb385fb6d_1
  • /data/data/####/bf93ec309865b001_0
  • /data/data/####/bfe6c497c5896bb9_0
  • /data/data/####/bfe773b73ce169b1_0
  • /data/data/####/bff6dcdc72ad5d41_0
  • /data/data/####/c04962c4c73af5f2_0
  • /data/data/####/c09b11e30f2a8d6e_0
  • /data/data/####/c0a5ba2d33b289a2_0
  • /data/data/####/c113f4a7e8c618ab_0
  • /data/data/####/c14ca00c05ad58f4_0
  • /data/data/####/c1b8696e3b9fea80_0
  • /data/data/####/c2f1366100d54f17_0
  • /data/data/####/c36c1d4115ba6d39_0
  • /data/data/####/c36f7718439e4bba_0
  • /data/data/####/c3d1de2db7b0f0ce_0
  • /data/data/####/c3effc0bebc1fad8_0
  • /data/data/####/c44342f37d646bcd_0
  • /data/data/####/c4ddfa0460d481be_0
  • /data/data/####/c54ee5c118c5000b_0
  • /data/data/####/c6828fb4c98f5ee7_0
  • /data/data/####/c6bb490016567b06_0
  • /data/data/####/c6bb490016567b06_s
  • /data/data/####/c76a5c1b3cc7aa9c_0
  • /data/data/####/c7c5d06c074634b3_0
  • /data/data/####/c87c03fa2b476e19_0
  • /data/data/####/c8e0f0c1789ce061_0
  • /data/data/####/c9124ce6a693de3f_0
  • /data/data/####/c968ebf13f9a54d2_0
  • /data/data/####/c982dcf4b02dbd8c_0
  • /data/data/####/ca46a3089b3c35fb_0
  • /data/data/####/cb67277b23292d95_0
  • /data/data/####/cb8bae4e1af518db_0
  • /data/data/####/cb8bae4e1af518db_1
  • /data/data/####/cbdbca0830988ca4_0
  • /data/data/####/cbeae3bca9e2bfba_0
  • /data/data/####/cccfe1a9516fd576_0
  • /data/data/####/ccdc5c52035e7b54_0
  • /data/data/####/ccf99a65a9f87d12_0
  • /data/data/####/cff16a92e5db6c51_0
  • /data/data/####/com.sfntziyd_preferences.xml
  • /data/data/####/d0971cdbf8b7c775_0
  • /data/data/####/d10b3e818e533bbd_0
  • /data/data/####/d11ab2a640112800_0
  • /data/data/####/d16393af3df9310c_0
  • /data/data/####/d16393af3df9310c_1
  • /data/data/####/d23aad0f0e33bc0f_0
  • /data/data/####/d298261e7625dd06_0
  • /data/data/####/d32e8a7b04fddeab_0
  • /data/data/####/d33d5fd8de91fa7f_0
  • /data/data/####/d33d5fd8de91fa7f_s
  • /data/data/####/d3cba3848b5d9b50_0
  • /data/data/####/d3f9c68e0b18830c_0
  • /data/data/####/d3f9c68e0b18830c_1
  • /data/data/####/d3fb1480804a0837_0
  • /data/data/####/d3fb247b32fb5e1e_0
  • /data/data/####/d40d3835f51e3044_0
  • /data/data/####/d43b8ad7a8817370_0
  • /data/data/####/d4763d93b033d722_0
  • /data/data/####/d49281a647c57da6_0
  • /data/data/####/d4cae4f58fb6a274_0
  • /data/data/####/d50d42d12eaf166f_0
  • /data/data/####/d564d441dfe17196_0
  • /data/data/####/d5691f82a4dc4db7_0
  • /data/data/####/d582249dfad11aeb_0
  • /data/data/####/d5eed6a4131f8ddf_0
  • /data/data/####/d6ca0c3238c05159_0
  • /data/data/####/d74ae5176699bf22_0
  • /data/data/####/d7a3899ca7df3241_0
  • /data/data/####/d7b3f70a081d098a_0
  • /data/data/####/d87019253e25075f_0
  • /data/data/####/d89c621233f08263_0
  • /data/data/####/d8d917fce8dff6fc_0
  • /data/data/####/d922f9740d4ce710_0
  • /data/data/####/d9b53d4edb26f239_0
  • /data/data/####/d9b53d4edb26f239_1
  • /data/data/####/dafcdac2aef95795_0
  • /data/data/####/dc17956fec9ba63f_0
  • /data/data/####/dc2509af90653fb9_0
  • /data/data/####/dcd37a536dff139b_0
  • /data/data/####/dcf9723c0a0c1215_0
  • /data/data/####/dd3e5fb6b6aef45b_0
  • /data/data/####/decefb430efc4930_0
  • /data/data/####/df5f1bbc91a54525_0
  • /data/data/####/dfca5c66340a07d4_0
  • /data/data/####/e030f0d4e3bcc82b_0
  • /data/data/####/e05a788bd336c310_0
  • /data/data/####/e0ac7de7bf9e48f5_0
  • /data/data/####/e0fdf7d86f9d81c4_0
  • /data/data/####/e21f1ccd1496d732_0
  • /data/data/####/e21f1ccd1496d732_1
  • /data/data/####/e26395c59895ca28_0
  • /data/data/####/e2dd10de6f143820_0
  • /data/data/####/e302f9df0e7421e2_0
  • /data/data/####/e30de57075a86aec_0
  • /data/data/####/e35bf22ec48a3094_0
  • /data/data/####/e369e1303da1bc13_0
  • /data/data/####/e3dccc6b0435b366_0
  • /data/data/####/e4631a7bb4e392f2_0 (deleted)
  • /data/data/####/e5ba638c080ca8b5_0
  • /data/data/####/e649f129b0ec9805_0
  • /data/data/####/e67fc66b1380edac_0
  • /data/data/####/e70c86d29216a272_0
  • /data/data/####/e71bf6f698c063ab_0
  • /data/data/####/e7c39cf554f6e1fc_0
  • /data/data/####/e7de5e80b3221401_0
  • /data/data/####/e7ed4ef6660703cd_0
  • /data/data/####/e88a19bbac029a41_0
  • /data/data/####/e896b0f1fc1b6438_0
  • /data/data/####/e8eb80236ce3b384_0
  • /data/data/####/e90552391dc62079_0
  • /data/data/####/eHzIPuX.dex
  • /data/data/####/eHzIPuX.dex.flock (deleted)
  • /data/data/####/ea69e58fb9e17352_0
  • /data/data/####/eb00cf0019add5e8_0
  • /data/data/####/eb481277568e94d8_0 (deleted)
  • /data/data/####/ebf848ac0524c728_0
  • /data/data/####/ec3008cc1cd1334e_0
  • /data/data/####/ec9b2aa6c608c702_0
  • /data/data/####/ed5d6d9ae06b6206_0
  • /data/data/####/edbc4ac4fdad8aca_0 (deleted)
  • /data/data/####/ee54696b81d48de1_0
  • /data/data/####/ee54696b81d48de1_1
  • /data/data/####/eece84f89ed2dc52_0 (deleted)
  • /data/data/####/eecfc1d1e7ea7cb0_0
  • /data/data/####/ef6769270cd04594_0 (deleted)
  • /data/data/####/ef7455bff21cea6f_0
  • /data/data/####/ef84b7c19441018c_0
  • /data/data/####/eff7220d7e1b32ff_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f2df256412b01529_0
  • /data/data/####/f3efd23e686f45bb_0
  • /data/data/####/f43038022ccd5671_0
  • /data/data/####/f4bc8c6ac03256e5_0
  • /data/data/####/f525e38291a2fca8_0
  • /data/data/####/f70b0ed90b344652_0
  • /data/data/####/f7e201785a80f387_0
  • /data/data/####/f9c089466ca6ac5d_0
  • /data/data/####/f9c4659ef7957c3f_0
  • /data/data/####/fa619a65cae30c3a_0
  • /data/data/####/fa619a65cae30c3a_1
  • /data/data/####/faa4062026857792_0
  • /data/data/####/fc254de0b751b71a_0
  • /data/data/####/fc31a9fdbbddc1f6_0
  • /data/data/####/fc79d7e61b559820_0
  • /data/data/####/fd04aab0652dfa4a_0
  • /data/data/####/fd2ed5dc79a11bd7_0
  • /data/data/####/fdfa4ada70a64df5_0
  • /data/data/####/fe0a968ab9c0d6a8_0
  • /data/data/####/fe6353099c0888f4_0 (deleted)
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/nwgEPDr.dex
  • /data/data/####/nwgEPDr.dex.flock (deleted)
  • /data/data/####/temp-index
  • /data/data/####/the-real-index
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android