Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Locker.16822

Added to the Dr.Web virus database: 2023-06-10

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) and####.google####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) rr13---####.g####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) ei.ph####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) 1####.194.220.95:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) 1####.251.1.94:443
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.2) and####.google####.com:443
  • TCP(TLS/1.2) 1####.251.1.94:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • and####.google####.com
  • cdn1-sm####.ph####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • h####.por####.com
  • ht-####.a####.com
  • ht-####.a####.com.####.8
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • rr13---####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/000d7eb33ee2e12c_0
  • /data/data/####/00caa53aa63ce4f5_0
  • /data/data/####/00e5e6bf053f6d09_0
  • /data/data/####/026c5ac38d0b116b_0
  • /data/data/####/028df42e0a5a271f_0
  • /data/data/####/03ebf3f1c1d80cf6_0
  • /data/data/####/03ebf3f1c1d80cf6_1
  • /data/data/####/04aac141bfd7399d_0
  • /data/data/####/05a326d54e9100c2_0
  • /data/data/####/0627726177e47b9c_0
  • /data/data/####/06589a9f51fb6c5c_0
  • /data/data/####/06e0c57c53f0b634_0
  • /data/data/####/07a36df2c2255f84_0
  • /data/data/####/07a36df2c2255f84_1
  • /data/data/####/07eae26775d08f09_0
  • /data/data/####/086f26772c01bdcc_0
  • /data/data/####/08790570ec795a2f_0
  • /data/data/####/08ce1c349c5e135a_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0ab4e31af72b8e3a_0
  • /data/data/####/0ae9610cfa69ac9e_0
  • /data/data/####/0b4636275ada4fb9_0 (deleted)
  • /data/data/####/0b6c3bd569c0aff2_0
  • /data/data/####/0bf5bc52d98cb08f_0
  • /data/data/####/0c19aad176b2548e_0
  • /data/data/####/0c34bed6fd389b7b_0
  • /data/data/####/0cd3445d4a620356_0
  • /data/data/####/0ce05511738fcd6d_0
  • /data/data/####/0cf7f9d8acd1e169_0 (deleted)
  • /data/data/####/0d035f037ab04930_0
  • /data/data/####/0dfb700435dcb891_0
  • /data/data/####/0e07ec3c043221d0_0
  • /data/data/####/0e6021950d99d6c2_0
  • /data/data/####/0f26c200229407c4_0
  • /data/data/####/0f99e1c1983f8435_0
  • /data/data/####/108a35709f007ff3_0
  • /data/data/####/110230dde4036070_0
  • /data/data/####/1251c9deb44f08a1_0
  • /data/data/####/1251c9deb44f08a1_s
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/146d06d154de130f_0
  • /data/data/####/14ea6979bee6e5c7_0
  • /data/data/####/14f21be53f052a46_0
  • /data/data/####/15d20099a59bb62b_0
  • /data/data/####/1684b520f7484cb4_0
  • /data/data/####/1718418df72ec6d3_0
  • /data/data/####/1756e6fdc0b163e8_0
  • /data/data/####/17cbda359bffdc36_0
  • /data/data/####/17f904fdb5391e8e_0
  • /data/data/####/188bfee55884bef8_0
  • /data/data/####/18e96efe1e11f4fc_0 (deleted)
  • /data/data/####/194782edaf866907_0
  • /data/data/####/1ac5b96ee8e5db35_0
  • /data/data/####/1adde5ba23826d96_0
  • /data/data/####/1b38d859cc6a9415_0
  • /data/data/####/1b984eaf1298953c_0
  • /data/data/####/1bfb0837f2dd846d_0
  • /data/data/####/1c312bc0a8b1498f_0
  • /data/data/####/1c9d0791f1810a50_0
  • /data/data/####/1d72b5e662edd2ad_0
  • /data/data/####/206602e689df3bc8_0
  • /data/data/####/206602e689df3bc8_1
  • /data/data/####/219ffa6b9bc7627b_0
  • /data/data/####/22150f5d8fa95cfb_0
  • /data/data/####/226812a6ccdb088e_0
  • /data/data/####/238d535a802c0681_0
  • /data/data/####/23ea731994757fc7_0
  • /data/data/####/245ea5868a066dd9_0
  • /data/data/####/24b2af68e0140a8b_0
  • /data/data/####/24cc24ad06b07631_0
  • /data/data/####/2507661abdcd1208_0
  • /data/data/####/25fa4a3713c948e7_0 (deleted)
  • /data/data/####/260a05143c8523a0_0 (deleted)
  • /data/data/####/2663778406d3bcbf_0
  • /data/data/####/26a71b41ca5692f8_0
  • /data/data/####/270c273226c48a6c_0 (deleted)
  • /data/data/####/27392fac809846f5_0
  • /data/data/####/277aebf739fd3f35_0 (deleted)
  • /data/data/####/27ffd6c9fd322fc9_0
  • /data/data/####/2826dc3c1d940873_0
  • /data/data/####/28d406a0e4d244af_0
  • /data/data/####/293c4831e2d7012e_0
  • /data/data/####/293e61e6a86db45d_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/29e88bb3eec77167_0
  • /data/data/####/2a0115f5fb2e24ef_0
  • /data/data/####/2b62259149dd3389_0
  • /data/data/####/2c5b8558ab65fa3e_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2e7a21eb1e41c1ab_0
  • /data/data/####/2f331e719c109258_0
  • /data/data/####/2fb4885fff7bd002_0
  • /data/data/####/2fee69f5d890017f_0
  • /data/data/####/30307017f43d2bf6_0
  • /data/data/####/30307017f43d2bf6_s
  • /data/data/####/30386385c7820450_0
  • /data/data/####/30ea6b083013208c_0
  • /data/data/####/31095393fa1573c9_0
  • /data/data/####/31362d4adbadbe11_0
  • /data/data/####/3247b2144d27c31e_0 (deleted)
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/33cab104fd3f33cd_0
  • /data/data/####/342f98b4056aaa03_0
  • /data/data/####/350008baf88d2b52_0
  • /data/data/####/351c3786664ea538_0
  • /data/data/####/358243e49b8cec36_0
  • /data/data/####/3658ccaeb8f6e5e0_0
  • /data/data/####/36ac7e2d67dec583_0
  • /data/data/####/387bc38bc2f6db91_0
  • /data/data/####/38c33b2e286dff30_0
  • /data/data/####/3a5a09ad813fc316_0 (deleted)
  • /data/data/####/3aae410975d48c4f_0
  • /data/data/####/3b2c2bf4c3cf5cf8_0
  • /data/data/####/3b4cf250778a8769_0
  • /data/data/####/3b50ab79166b1300_0
  • /data/data/####/3c7672350eddce59_0
  • /data/data/####/3d3d7b95d5294be4_0
  • /data/data/####/3da8339896f45611_0
  • /data/data/####/3e35e5c55b8d924b_0
  • /data/data/####/3e6d3010026045a6_0
  • /data/data/####/3e77eb94ac9edb28_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3f15bc0fbcfd5f3e_0
  • /data/data/####/3f272aca370f27d2_0
  • /data/data/####/403cce35f7ea2965_0
  • /data/data/####/403cce35f7ea2965_1
  • /data/data/####/408d3a802a4a9708_0
  • /data/data/####/40adaa0cfa3b3c60_0 (deleted)
  • /data/data/####/40cdbf12d63ff390_0
  • /data/data/####/41788e71d4efae19_0
  • /data/data/####/425d28db80057c7f_0
  • /data/data/####/42fc9498a4a63bcf_0
  • /data/data/####/439e4b15dd3b77e9_0
  • /data/data/####/44817c1c10771430_0
  • /data/data/####/45440df98dd6e1a5_0
  • /data/data/####/46419dfa9dc2dba6_0
  • /data/data/####/47013c9db4c8e037_0
  • /data/data/####/48c81bd5e649515b_0
  • /data/data/####/491a3c44efc5eb0f_0
  • /data/data/####/4a13006f3eabc27f_0
  • /data/data/####/4aa848688fbc3fef_0
  • /data/data/####/4aa848688fbc3fef_1
  • /data/data/####/4aed58c0801873b3_0
  • /data/data/####/4c8addb23b524704_0
  • /data/data/####/4ca4fafcf1e6f237_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4d2b30d41d101827_0
  • /data/data/####/4d5b98bfcb1baa17_0
  • /data/data/####/4d9e142fa29b4d67_0
  • /data/data/####/4db5abfd1f3d4305_0
  • /data/data/####/4dc3c3a268470351_0
  • /data/data/####/4ecf467cdb6fd081_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/4f35ca258c2ee409_0
  • /data/data/####/4f7905df7b11e22d_0
  • /data/data/####/5005224befa4799d_0
  • /data/data/####/506ee205b5f80705_0
  • /data/data/####/506ee205b5f80705_1
  • /data/data/####/50a682da6b8803b5_0
  • /data/data/####/52847b1dd1f67213_0
  • /data/data/####/52983f169916d921_0
  • /data/data/####/54182b2b6fc364d6_0
  • /data/data/####/543650778f9843aa_0
  • /data/data/####/545684dca0fc263d_0
  • /data/data/####/55566cf0b9ad6cc9_0
  • /data/data/####/56b00c3e6a235433_0
  • /data/data/####/579217891453e1a7_0
  • /data/data/####/5793a89506917588_0 (deleted)
  • /data/data/####/58b9966494f3a7d9_0
  • /data/data/####/5955687962b5ffe5_0
  • /data/data/####/595d7afc5de73671_0
  • /data/data/####/59cb61f34580cfd0_0 (deleted)
  • /data/data/####/5a6d9bd76f87b4f2_0
  • /data/data/####/5cee73b9175ff7eb_0
  • /data/data/####/5dd78ea8f97a09c7_0
  • /data/data/####/5ddaf861d7dfe2b9_0
  • /data/data/####/5ebc6c5c37cb2715_0
  • /data/data/####/5f0f9c4c9d7c7a29_0
  • /data/data/####/5fd248593718c676_0
  • /data/data/####/5ff7058b33a6b1c4_0
  • /data/data/####/60560c5a4803c975_0
  • /data/data/####/607fa6e3f53992d1_0
  • /data/data/####/6086df273d8f6412_0
  • /data/data/####/60a0734efade5fd9_0
  • /data/data/####/60aa947c9b527c02_0
  • /data/data/####/60ce06867852e691_0
  • /data/data/####/60ce06867852e691_1
  • /data/data/####/61426e4e4a756086_0 (deleted)
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/631768a84a7a6c56_0
  • /data/data/####/63cc07fb611c953c_0
  • /data/data/####/641f77bdb8dbf5e7_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/647f54b0bbbfbd0c_0
  • /data/data/####/6532647e414fe5b7_0
  • /data/data/####/6532647e414fe5b7_1
  • /data/data/####/668db32a05c952e9_0
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/67b0a8f7427c44fd_0
  • /data/data/####/6860a59c2eebac4f_0
  • /data/data/####/689034a10ee04ba5_0
  • /data/data/####/690fd838ce6389e4_0
  • /data/data/####/690fd838ce6389e4_s
  • /data/data/####/691b4dbf35cc94eb_0
  • /data/data/####/6935d81685e9ea83_0
  • /data/data/####/69632eb0392a7b98_0
  • /data/data/####/6a03a2234c49a1fb_0
  • /data/data/####/6b98a68681711d75_0
  • /data/data/####/6bcffe2a36969236_0
  • /data/data/####/6bec6a0849d8a437_0
  • /data/data/####/6bf591b6958d2cbf_0
  • /data/data/####/6ce71269490871b7_0
  • /data/data/####/6d963a4ddb20c6c8_0 (deleted)
  • /data/data/####/6dfb9da65723cf9e_0
  • /data/data/####/6e1a5e0fe130f3ce_0
  • /data/data/####/7087f32d69ece070_0
  • /data/data/####/717021452bd9ef3a_0
  • /data/data/####/72bd0fcf68567dc6_0
  • /data/data/####/730f2df581f147ce_0
  • /data/data/####/731aaa9fb63f4a96_0
  • /data/data/####/734151022703a189_0
  • /data/data/####/736647aca8f96357_0
  • /data/data/####/740dc26ba8daddab_0
  • /data/data/####/7539fcaab4cbfbf8_0
  • /data/data/####/75796d26479bcf8a_0
  • /data/data/####/75f462102affdde1_0
  • /data/data/####/76a2dad8fd00ebac_0
  • /data/data/####/76a2dad8fd00ebac_1
  • /data/data/####/79f860392a8973e3_0
  • /data/data/####/7a62602e8a652d76_0
  • /data/data/####/7a9ab3ccc0d49f52_0
  • /data/data/####/7b18d78c043b68df_0
  • /data/data/####/7bd306018619c131_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c509332ca3d1ba3_0
  • /data/data/####/7c5fe1f244a63d7d_0
  • /data/data/####/7d5969f107923b57_0
  • /data/data/####/7d632781d55a8733_0
  • /data/data/####/7daf53d96b278a9a_0
  • /data/data/####/7daf53d96b278a9a_s
  • /data/data/####/7dc3b494b6708ff7_0
  • /data/data/####/7dcb61e15de2d57b_0
  • /data/data/####/7dd023d61715bc7e_0
  • /data/data/####/7e43e7e970114285_0
  • /data/data/####/7e4836cacaad7bf5_0
  • /data/data/####/7ec224298c55c3e2_0
  • /data/data/####/7ec989bc84577fec_0
  • /data/data/####/7ee1fcc6ef46a1d0_0
  • /data/data/####/7f321e70b534c9c1_0
  • /data/data/####/7f60e19d0c12448e_0 (deleted)
  • /data/data/####/7fe4f8749b31f1a7_0
  • /data/data/####/8093987f93697c42_0 (deleted)
  • /data/data/####/8164a06f8cc2ad1c_0
  • /data/data/####/81f20af281320436_0
  • /data/data/####/81fd0b9dc3543a31_0
  • /data/data/####/82b084d7f8fa10fc_0
  • /data/data/####/84ec62bc5d24c609_0
  • /data/data/####/85e4309438e95191_0
  • /data/data/####/86d3b46624781641_0
  • /data/data/####/8743096f8933c459_0
  • /data/data/####/87af7f615cc3101c_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/88c4fa0a0ac6dd42_0
  • /data/data/####/88e0abecb3419fff_0
  • /data/data/####/8a19cd95135de0be_0
  • /data/data/####/8a6a66797a8083d5_0
  • /data/data/####/8a7be01e7d606acf_0
  • /data/data/####/8c765efd11bfbc1f_0
  • /data/data/####/8e8cc8cc5d90e788_0
  • /data/data/####/8fd6f38d0a6746ad_0
  • /data/data/####/92206d673b348ef3_0
  • /data/data/####/927c81f49c686279_0
  • /data/data/####/92d0a82e2d30cf53_0
  • /data/data/####/92f87a7791750684_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/95964d62c9def653_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/984949c4cecd610d_0
  • /data/data/####/9889bd74a4f9f15f_0
  • /data/data/####/992a44c9b39a3167_0
  • /data/data/####/99d47c988c8117f6_0 (deleted)
  • /data/data/####/9a8468ba3011487e_0
  • /data/data/####/9b82a4f0550e8348_0
  • /data/data/####/9c96d4f507a70c98_0
  • /data/data/####/9d0b2f1d5439c241_0
  • /data/data/####/9d0ec0b1c17328a2_0
  • /data/data/####/9d1b44e2edf843d2_0
  • /data/data/####/9df1fce02a2e0327_0
  • /data/data/####/9ea4b735086718a2_0
  • /data/data/####/9f33480f50a9a71d_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/EnUoy.dex
  • /data/data/####/EnUoy.dex.flock (deleted)
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/ZBHWS.dex
  • /data/data/####/ZBHWS.dex.flock (deleted)
  • /data/data/####/a0d85f3c51ddd3ec_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a220af5d647d0f55_0
  • /data/data/####/a30250ddbaa4bc48_0
  • /data/data/####/a3d970d37df78be2_0
  • /data/data/####/a3f3f163d03ff1f2_0
  • /data/data/####/a3fdccc2158ea1f2_0
  • /data/data/####/a456ba9d57396cdf_0
  • /data/data/####/a55e70ffe6ab0096_0
  • /data/data/####/a5aad13febc6a967_0
  • /data/data/####/a6198e49276ff811_0
  • /data/data/####/a73495d8f4eed396_0
  • /data/data/####/a7579f9a6b094b6e_0
  • /data/data/####/a882343e9ffb3607_0
  • /data/data/####/a882343e9ffb3607_1
  • /data/data/####/a887e14cda142498_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/ac958348e4b67183_0
  • /data/data/####/ae6db6211fcaecf0_0
  • /data/data/####/b12f47b824c35b76_0
  • /data/data/####/b1746c7a7748450c_0
  • /data/data/####/b1e6891f3b969b61_0
  • /data/data/####/b3da61289b965ba5_0
  • /data/data/####/b4534b734b3627cb_0
  • /data/data/####/b4ba1508bc7af0f5_0
  • /data/data/####/b4df51fc6c13d1c5_0
  • /data/data/####/b5a861a8e6ea4f78_0
  • /data/data/####/b5d6a8b6d45cae4e_0 (deleted)
  • /data/data/####/b60453b6cc8c7d02_0
  • /data/data/####/b67637b99e21cae8_0
  • /data/data/####/b67637b99e21cae8_s
  • /data/data/####/b6873d5e91db1a82_0
  • /data/data/####/b81ecd3014544fc1_0
  • /data/data/####/b86ba1bd8dd7cb18_0
  • /data/data/####/b905ed819aa2234d_0
  • /data/data/####/b922e6234071619c_0
  • /data/data/####/ba3145df04d10ced_0
  • /data/data/####/ba9369e8a270e3d5_0
  • /data/data/####/bb14644eae78e0b3_0
  • /data/data/####/bb2e4ab2957fb0fd_0
  • /data/data/####/bb4d8ffcb8448efb_0
  • /data/data/####/bc571ba57686d97d_0 (deleted)
  • /data/data/####/bc73f8734c001a33_0
  • /data/data/####/bceec9c7fa9ed778_0
  • /data/data/####/bd3715e0a1ce2ec5_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bdaa1c47560ecdfd_0
  • /data/data/####/bea14472f3545b13_0
  • /data/data/####/bec5eafc9af51afe_0
  • /data/data/####/bf882280db4bae07_0
  • /data/data/####/bfd9bcf022ea402b_0
  • /data/data/####/c00c39458d85fcd8_0
  • /data/data/####/c1049c0b8f3c130f_0
  • /data/data/####/c1a9db76d27f305c_0
  • /data/data/####/c2409c242fb77112_0
  • /data/data/####/c2ea4a38d429b275_0
  • /data/data/####/c2ea4a38d429b275_1
  • /data/data/####/c3566b9563b7cacf_0
  • /data/data/####/c4420e5520ee7d4b_0
  • /data/data/####/c451cf81c01502b7_0
  • /data/data/####/c4c837d661dca67d_0
  • /data/data/####/c4c837d661dca67d_s
  • /data/data/####/c517a2f38837f21e_0
  • /data/data/####/c65ef706f90025a9_0
  • /data/data/####/c7e3d5e4c9762cd8_0
  • /data/data/####/ca58de0edd185247_0
  • /data/data/####/ca656a6680c4aea1_0
  • /data/data/####/cb21163042d8660e_0
  • /data/data/####/cb21163042d8660e_s
  • /data/data/####/cb80aeeacb66ab24_0
  • /data/data/####/cbdbca0830988ca4_0
  • /data/data/####/cbdcfeb7b1383cc7_0 (deleted)
  • /data/data/####/cc456dc8532b0e4a_0
  • /data/data/####/cc9bd299d36161c5_0
  • /data/data/####/cc9bd299d36161c5_1
  • /data/data/####/ccdc5c52035e7b54_0
  • /data/data/####/cd6df9bdd189bffb_0
  • /data/data/####/cd77093ac05ef264_0
  • /data/data/####/cd9ae6e50aa5fb61_0
  • /data/data/####/cf105bb09a86fe25_0
  • /data/data/####/cf5e64602240bd70_0
  • /data/data/####/cf5e64602240bd70_1
  • /data/data/####/cf6065bce46db94f_0
  • /data/data/####/cff92c661aa46add_0
  • /data/data/####/com.dlvvsw_preferences.xml
  • /data/data/####/d011ebdb713e5b78_0
  • /data/data/####/d0e5bce6b28ff9a0_0
  • /data/data/####/d17a55b56e238e34_0
  • /data/data/####/d1c2bce7d9ddfb0c_0
  • /data/data/####/d2dc6e3bc242279a_0
  • /data/data/####/d37d2fcb4446f350_0
  • /data/data/####/d4243381eadad9bd_0
  • /data/data/####/d47376780ad53931_0
  • /data/data/####/d4e63e6902feb759_0
  • /data/data/####/d5a7bb6c2d0f0894_0
  • /data/data/####/d70e291ee8294987_0
  • /data/data/####/d77f4266ad999b55_0 (deleted)
  • /data/data/####/d79837f3b1d601d4_0
  • /data/data/####/d9eaf2214622213b_0
  • /data/data/####/da29b751d807944e_0
  • /data/data/####/da3084bc3e8cb0f8_0
  • /data/data/####/dac9b39541ac334c_0
  • /data/data/####/dcd1c004915dbdf9_0
  • /data/data/####/ddb29d119dfe34ae_0
  • /data/data/####/de3263fc09021750_0
  • /data/data/####/de441a27ee5d3631_0
  • /data/data/####/de441a27ee5d3631_1
  • /data/data/####/df39d88701e353fa_0
  • /data/data/####/df618664dc95b999_0
  • /data/data/####/df96f3686f60304c_0
  • /data/data/####/dfd1a3f434adfaeb_0
  • /data/data/####/e09d44f20deddb8f_0
  • /data/data/####/e0a0e5fae41376a8_0
  • /data/data/####/e32d4f8802586eeb_0
  • /data/data/####/e3d48a51efd5a838_0
  • /data/data/####/e46cc0b406a2ab4a_0 (deleted)
  • /data/data/####/e609e31b4d41e48d_0
  • /data/data/####/e609e31b4d41e48d_1
  • /data/data/####/e6fd53d0bd10b2fd_0
  • /data/data/####/e727c4b8f582b78b_0
  • /data/data/####/e7b5754ed668de7e_0
  • /data/data/####/e80802a0d2cbe4ea_0
  • /data/data/####/e8295dbd46a5946a_0
  • /data/data/####/e89a866587ac4710_0
  • /data/data/####/e8dea98c37bce5a8_0
  • /data/data/####/e8eb80236ce3b384_0
  • /data/data/####/e991fbfedba2aab9_0
  • /data/data/####/e9a0dfe405912f2e_0
  • /data/data/####/e9a0fa7f8554083a_0
  • /data/data/####/ea0c7ed70355b665_0
  • /data/data/####/ea420e2d7e655b78_0
  • /data/data/####/ea5a6f44c8eaf6f7_0
  • /data/data/####/eb8fcfe3cb455784_0
  • /data/data/####/ec24d5446002124a_0
  • /data/data/####/ee9b17d19223f60c_0
  • /data/data/####/eebec726c8f50eee_0
  • /data/data/####/eebec726c8f50eee_1
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/efff44b68eaaaeca_0
  • /data/data/####/f143a2116cd34b30_0
  • /data/data/####/f20f383709205048_0
  • /data/data/####/f240ad85a9dbeaaa_0
  • /data/data/####/f264a1d123ef22eb_0
  • /data/data/####/f401fac982711425_0
  • /data/data/####/f5c088f5d1accab7_0
  • /data/data/####/f6576ef7214591f7_0
  • /data/data/####/f68635843452f9f4_0
  • /data/data/####/f73944a2030bcb9a_0
  • /data/data/####/f75b3f6afb775623_0
  • /data/data/####/f77b15d559b40e5d_0
  • /data/data/####/f77b15d559b40e5d_1
  • /data/data/####/f7a2e601ad139347_0
  • /data/data/####/f7b5dd247fe8a83f_0
  • /data/data/####/f80a04e56bb6308e_0
  • /data/data/####/f9f6fc8723b81ea3_0
  • /data/data/####/faa3080003c91bbf_0
  • /data/data/####/fae3ad2aa1bcce9b_0
  • /data/data/####/fddbcea3300fb530_0
  • /data/data/####/fe5af4246295a23f_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff010b80af433279_0
  • /data/data/####/ff890e53896ed482_0
  • /data/data/####/ff913dd4f5b48aaf_0
  • /data/data/####/fff62006a0281d39_0
  • /data/data/####/fjcLQ.dex
  • /data/data/####/fjcLQ.dex.flock (deleted)
  • /data/data/####/index
  • /data/data/####/luuYrX.dex
  • /data/data/####/luuYrX.dex.flock (deleted)
  • /data/data/####/metrics_guid
  • /data/data/####/the-real-index
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android