Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Locker.17009

Added to the Dr.Web virus database: 2023-07-06

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Threat detection based on machine learning.
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) 64.2####.164.94:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.0) ei.ph####.com:443
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.2) p####.google####.com:443
  • TCP(TLS/1.2) 64.2####.164.94:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • and####.google####.com
  • cdn1-sm####.ph####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • gmscomp####.google####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/00217288ae31fa32_0
  • /data/data/####/011296c6de43a971_0
  • /data/data/####/0197d9e3f4be0e44_0
  • /data/data/####/020933333b5251ed_0
  • /data/data/####/03559eef0bacaafc_0
  • /data/data/####/03b62337d1faf057_0
  • /data/data/####/048782789bb22c9f_0
  • /data/data/####/04ae9c3835d12b1c_0
  • /data/data/####/04e44d98a656d9fd_0
  • /data/data/####/067f925d61b6b423_0
  • /data/data/####/0694cd6ae710f2e4_0
  • /data/data/####/06e0c57c53f0b634_0
  • /data/data/####/07bb39f9c57b9545_0
  • /data/data/####/086f26772c01bdcc_0
  • /data/data/####/08ce1c349c5e135a_0
  • /data/data/####/08ebb08d0e8d2024_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0a97bc168accc90f_0
  • /data/data/####/0b0cbb0326fb3546_0
  • /data/data/####/0b0cbb0326fb3546_1
  • /data/data/####/0bab94aa0cbbf4b0_0
  • /data/data/####/0cc6f538aa1943fe_0
  • /data/data/####/0da8d053b8d7b754_0
  • /data/data/####/0db96edb4f68e993_0
  • /data/data/####/0dfb700435dcb891_0
  • /data/data/####/0e04b99b0b2da105_0 (deleted)
  • /data/data/####/0e6021950d99d6c2_0
  • /data/data/####/0e8040166e35e4d5_0
  • /data/data/####/0f408d8d940a1eb2_0
  • /data/data/####/0f81e82dcbca7aad_0
  • /data/data/####/111b4d6e6a4fb8ed_0
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/1316e232ca9cf0df_0
  • /data/data/####/13b93f7b4438ca1a_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/1527f1f04f607abf_0
  • /data/data/####/1596ad05f5541cb6_0 (deleted)
  • /data/data/####/15ddf2f56b8e42ca_0
  • /data/data/####/15f5884d9ad586bc_0
  • /data/data/####/167f3388c9be656d_0
  • /data/data/####/16d111bb45b3d42e_0
  • /data/data/####/17bbde1ecaa5f2a3_0
  • /data/data/####/195c60229cdec0a9_0 (deleted)
  • /data/data/####/19b41c20310f10a7_0
  • /data/data/####/19c342dbbc6a6c98_0
  • /data/data/####/1a03b3f7851e1578_0
  • /data/data/####/1a83aa048ec187d4_0
  • /data/data/####/1ab263d1ff58a2a3_0
  • /data/data/####/1b2a3ebceb969a10_0 (deleted)
  • /data/data/####/1b4119a4641d6ea2_0
  • /data/data/####/1e82426d1eb5d765_0
  • /data/data/####/1fdf9a0f080f329b_0
  • /data/data/####/1fefcd5784e5cdfe_0
  • /data/data/####/2031327907ac88bf_0
  • /data/data/####/203ce8d8-165d-42cc-9319-be76ddbe4826.dex
  • /data/data/####/203ce8d8-165d-42cc-9319-be76ddbe4826.dex.flock (deleted)
  • /data/data/####/20d59cedfc1e6dfa_0
  • /data/data/####/216b358f5e8353a5_0
  • /data/data/####/21986f86f2b2cca7_0
  • /data/data/####/2228d59b04e44a65_0
  • /data/data/####/223cd70cd7c7d975_0
  • /data/data/####/22574e372ca718ce_0
  • /data/data/####/233036d8e0b60a87_0
  • /data/data/####/2338abd69fde6486_0
  • /data/data/####/249452d0aca78df4_0 (deleted)
  • /data/data/####/2498a9d36c6b8cd5_0
  • /data/data/####/2498a9d36c6b8cd5_1
  • /data/data/####/254433d1e71f246c_0
  • /data/data/####/26fa7380795f1233_0
  • /data/data/####/272bebb1f82fbdc7_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/29e88bb3eec77167_0
  • /data/data/####/2a582eb3e740ca69_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d2900ab256ce573_0
  • /data/data/####/2d4b2972a9caee53_0
  • /data/data/####/2d8a3a0a7dc028a6_0
  • /data/data/####/2dc8fe1bf8c15535_0
  • /data/data/####/2f2db5b90139600a_0
  • /data/data/####/2f316a11197fdaf6_0
  • /data/data/####/3044596b7a97a456_0
  • /data/data/####/304f973ca243aa3d_0
  • /data/data/####/30766b40789c72b4_0
  • /data/data/####/30766b40789c72b4_1
  • /data/data/####/308bb017a2e1783e_0
  • /data/data/####/31998091293807c6_0
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/33a8d6426ad0400d_0
  • /data/data/####/33c3080c9e124790_0
  • /data/data/####/348f4a742e0cc440_0
  • /data/data/####/34f61196bfc39c9c_0 (deleted)
  • /data/data/####/35b06ec751a5045f_0
  • /data/data/####/377fd8fd-8e77-4450-83de-16c4e1d090a5.dex
  • /data/data/####/38125cf998136e54_0
  • /data/data/####/38c33b2e286dff30_0
  • /data/data/####/39938bfaae32da61_0
  • /data/data/####/39f686249d7a5209_0
  • /data/data/####/3a3cc08606991f5b_0
  • /data/data/####/3b10ccc4c338aadf_0
  • /data/data/####/3c410df04863e71c_0
  • /data/data/####/3c4a1a6ec5cad227_0
  • /data/data/####/3dbcf69c4da7d6ed_0
  • /data/data/####/3df33a01d79f0dbd_0
  • /data/data/####/3e5b48e26a9682c3_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3fd942525dbae422_0
  • /data/data/####/3fd942525dbae422_1
  • /data/data/####/408d3a802a4a9708_0
  • /data/data/####/40b43a60855dc858_0
  • /data/data/####/40ecba02beac40c4_0
  • /data/data/####/413efcfed41cfd42_0
  • /data/data/####/43add253d3196048_0
  • /data/data/####/44a8106c922197fa_0
  • /data/data/####/45440df98dd6e1a5_0
  • /data/data/####/45b061390775d922_0
  • /data/data/####/45f21be55d998367_0
  • /data/data/####/4657f35ab0df8b1e_0
  • /data/data/####/4657f35ab0df8b1e_1
  • /data/data/####/4667766c4e0655c2_0
  • /data/data/####/468e01c1fcb8bd71_0
  • /data/data/####/47013c9db4c8e037_0
  • /data/data/####/4724daffd2928f89_0
  • /data/data/####/4760f070e097b306_0
  • /data/data/####/47d94c5e9bb4f5c7_0
  • /data/data/####/4985820d52e58017_0
  • /data/data/####/4a3c7a57a2968879_0
  • /data/data/####/4a71d1002b78b514_0
  • /data/data/####/4a89fdaf34446b94_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4d1f933ee59d8552_0
  • /data/data/####/4dcbfb3bd5b18cf8_0
  • /data/data/####/4e059e79a6804a89_0
  • /data/data/####/4eacbb8c66f75b09_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/51948bdbf09687fc_0
  • /data/data/####/51afc9dd229b143b_0
  • /data/data/####/51afc9dd229b143b_1
  • /data/data/####/51fccc1a0f9c2dff_0
  • /data/data/####/5239560409ddafeb_0
  • /data/data/####/530083c80e4d0b1c_0
  • /data/data/####/5308995aae9ad2b4_0
  • /data/data/####/53de03ecaf702915_0
  • /data/data/####/55560435fd6b43bb_0
  • /data/data/####/5614eb79a5b0e38e_0
  • /data/data/####/566e470e01f892d5_0
  • /data/data/####/587e74e602cff877_0
  • /data/data/####/594df5e837d97298_0
  • /data/data/####/596b02d6558f6231_0
  • /data/data/####/5a44e2418a965539_0
  • /data/data/####/5b0026553351630e_0
  • /data/data/####/5ce577687323a903_0
  • /data/data/####/5de152511e0841af_0
  • /data/data/####/5e0938991732e2a8_0
  • /data/data/####/5ef6cb363c3bbe2d_0
  • /data/data/####/5fa3e315b17b2519_0
  • /data/data/####/60560c5a4803c975_0
  • /data/data/####/607fa6e3f53992d1_0
  • /data/data/####/6086f05f872a4072_0
  • /data/data/####/61a1b58fbe187bbf_0
  • /data/data/####/61f83d0b79bbd419_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/634ea92b6f4924c7_0
  • /data/data/####/63d9ce14bd2a3609_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/6458fbf56ffc074d_0
  • /data/data/####/647371707e792c50_0
  • /data/data/####/647f54b0bbbfbd0c_0
  • /data/data/####/64d138ee684d561e_0 (deleted)
  • /data/data/####/66a36a532c57be5d_0
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/67355e2fc38574fa_0
  • /data/data/####/67b0a8f7427c44fd_0
  • /data/data/####/68706bce10e52d9c_0
  • /data/data/####/68cf8590dff382a5_0
  • /data/data/####/68d7e2986731e026_0
  • /data/data/####/698d8bb0b3119a94_0
  • /data/data/####/698d8bb0b3119a94_s
  • /data/data/####/69958cd4236c3ce4_0
  • /data/data/####/6a90837614e3cf1a_0
  • /data/data/####/6ace4e56fefe15de_0
  • /data/data/####/6bcffe2a36969236_0
  • /data/data/####/6c33f72fe5193130_0
  • /data/data/####/6c98efda04df9170_0
  • /data/data/####/6cf40482e8e69783_0
  • /data/data/####/6d395d16e7c678a1_0
  • /data/data/####/6dce9bbe2abc8ea0_0
  • /data/data/####/6edc0726e108ad96_0
  • /data/data/####/6f1d6d73aa4178e3_0
  • /data/data/####/6fd1cc4e719ee8bc_0
  • /data/data/####/723e7e52d885ff4a_0
  • /data/data/####/724c60cdc7bf9f2e_0
  • /data/data/####/724c60cdc7bf9f2e_1
  • /data/data/####/7312246a81cfd32a_0
  • /data/data/####/736fe6d5e90e4bde_0
  • /data/data/####/736fe6d5e90e4bde_1
  • /data/data/####/748e6d7a-f3d0-4d92-97e3-2d30f4e0d8ce.dex
  • /data/data/####/748e6d7a-f3d0-4d92-97e3-2d30f4e0d8ce.dex.flock (deleted)
  • /data/data/####/74a62894ea10fee4_0
  • /data/data/####/74b6d3f843733889_0 (deleted)
  • /data/data/####/74df6687d05cd653_0
  • /data/data/####/74eea3d072557082_0
  • /data/data/####/75e46a93df8d7816_0
  • /data/data/####/76dc53e9dbd722d0_0 (deleted)
  • /data/data/####/79b075f4bb0bfc53_0
  • /data/data/####/7aaf58be5f153874_0
  • /data/data/####/7abdfae2d2c33293_0
  • /data/data/####/7b02b784ddc1cdc5_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7d0372943b85ddae_0
  • /data/data/####/7dac69fb6abee99e_0
  • /data/data/####/7e47e55292c832ba_0
  • /data/data/####/7e68f54051b6d55a_0
  • /data/data/####/7e7502214ad2755b_0
  • /data/data/####/7ec989bc84577fec_0
  • /data/data/####/7ee1fcc6ef46a1d0_0
  • /data/data/####/7f321e70b534c9c1_0
  • /data/data/####/80c5c538010e2146_0
  • /data/data/####/80cd5418208e408b_0
  • /data/data/####/814dbd5fe5f054c6_0
  • /data/data/####/81966c6699ff2dc9_0
  • /data/data/####/81966c6699ff2dc9_1
  • /data/data/####/823282802f8b4948_0 (deleted)
  • /data/data/####/849866345a6cd1cc_0
  • /data/data/####/8588a5d71d8d1836_0
  • /data/data/####/85aac0d26bc919f2_0
  • /data/data/####/8651e178a0c8ccee_0
  • /data/data/####/867c2b140020ba6b_0
  • /data/data/####/86d0188ee7120075_0
  • /data/data/####/86d3b46624781641_0
  • /data/data/####/87b6440ec6c702c2_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/88fa35acfc6ca020_0
  • /data/data/####/89121e20b9698d08_0
  • /data/data/####/8942892aca09c28b_0
  • /data/data/####/89cee6c7ac591fab_0
  • /data/data/####/8b7b060da2a656f3_0
  • /data/data/####/8d03a537b7b5d4ab_0
  • /data/data/####/8db26d2f8623390c_0
  • /data/data/####/8de14fe9e9ff800c_0
  • /data/data/####/8ef391bca04077f9_0
  • /data/data/####/8f95402b800fd8e9_0
  • /data/data/####/8fa65c3e7e970ae6_0
  • /data/data/####/909548e6d57c1df5_0
  • /data/data/####/90b270345c1c63d8_0
  • /data/data/####/9211921317bafee9_0
  • /data/data/####/923a95f8612d658f_0
  • /data/data/####/92d4a7418d022c90_0
  • /data/data/####/92e9b49d313d1e15_0
  • /data/data/####/92f87a7791750684_0
  • /data/data/####/935e7610842a8f39_0
  • /data/data/####/9401dfc9088d1ae8_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/9403ca19684fec2a_0
  • /data/data/####/95b77c950e22c7a6_0
  • /data/data/####/95bd5a46ae25b8b9_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/96c6571f1d52739e_0
  • /data/data/####/96e20a393176806f_0
  • /data/data/####/970699dfcfb59ff1_0
  • /data/data/####/979202d9953196c6_0
  • /data/data/####/9883685c06c3972e_0
  • /data/data/####/9889bd74a4f9f15f_0
  • /data/data/####/99c52d1182738c82_0
  • /data/data/####/9a88a6dcc268050a_0
  • /data/data/####/9b680a00b8876691_0
  • /data/data/####/9b7f6df916c6071e_0
  • /data/data/####/9b7f6df916c6071e_1
  • /data/data/####/9bb13ffd1a11a214_0
  • /data/data/####/9bb99f60f31af240_0
  • /data/data/####/9d1b44e2edf843d2_0
  • /data/data/####/9dbcda60bf001396_0
  • /data/data/####/9dbcda60bf001396_1
  • /data/data/####/9ef6af65c92b4e10_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a1764250d7879f4a_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a1b184392e3665e6_0
  • /data/data/####/a26172a000493c26_0
  • /data/data/####/a2775fffb6a35622_0
  • /data/data/####/a39a6bba9829a61c_0
  • /data/data/####/a3daab7f46a591e2_0
  • /data/data/####/a3daab7f46a591e2_1
  • /data/data/####/a4016166afa477ca_0
  • /data/data/####/a539868c2c9adfcb_0
  • /data/data/####/a5df506e02cfada6_0
  • /data/data/####/a6198e49276ff811_0
  • /data/data/####/a73495d8f4eed396_0
  • /data/data/####/a7c66b9e37d05aab_0
  • /data/data/####/a964c902f1f31db2_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/ab1084569fab9ff8_0
  • /data/data/####/acb919fc0d3f9e02_0
  • /data/data/####/ad7ad3ff71727a97_0
  • /data/data/####/add4b485305c0872_0
  • /data/data/####/add7363c1aaa05cf_0
  • /data/data/####/af803d2ad1146738_0
  • /data/data/####/afYMXmOu.dex
  • /data/data/####/afYMXmOu.dex.flock (deleted)
  • /data/data/####/b053e2d9d7e03510_0
  • /data/data/####/b235f3fe5c0461d0_0
  • /data/data/####/b2575f6ecf380ef9_0
  • /data/data/####/b5927085327a9c3a_0
  • /data/data/####/b67436ab2bf8dc1e_0
  • /data/data/####/b6dde9017c46753e_0
  • /data/data/####/b756fc80daef6fc1_0
  • /data/data/####/b86d5aaa935cbac6_0
  • /data/data/####/b905ed819aa2234d_0
  • /data/data/####/b90b75d1f5746cb8_0
  • /data/data/####/b917e1bda1f88a7a_0
  • /data/data/####/b9377eba784e6471_0
  • /data/data/####/b94ad261bba7a220_0
  • /data/data/####/b9585bd7ee12f40b_0
  • /data/data/####/ba80fdec7d3db430_0
  • /data/data/####/ba9369e8a270e3d5_0
  • /data/data/####/bb58f9422331d36f_0
  • /data/data/####/bc00b8a88088b09a_0
  • /data/data/####/bc73f8734c001a33_0
  • /data/data/####/bcf0fca291f88024_0 (deleted)
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bde881ac257c0505_0
  • /data/data/####/be12c253073e3b40_0
  • /data/data/####/be7f1454500497dc_0
  • /data/data/####/bed899804cfa3073_0
  • /data/data/####/bed899804cfa3073_1
  • /data/data/####/bf11bdada05cd2b5_0
  • /data/data/####/bf882280db4bae07_0
  • /data/data/####/c00c39458d85fcd8_0
  • /data/data/####/c13b4b1dac5804dc_0
  • /data/data/####/c14ca00c05ad58f4_0
  • /data/data/####/c2168d59b0f3b0cd_0
  • /data/data/####/c36352d7d8250758_0
  • /data/data/####/c4c837d661dca67d_0
  • /data/data/####/c4c837d661dca67d_s
  • /data/data/####/c5a3f3b48e337ace_0
  • /data/data/####/c5b8105e0dd367f6_0
  • /data/data/####/c6a1ff306393fa5d_0
  • /data/data/####/c6c9d84ca9815447_0
  • /data/data/####/c6ef9e66cab1ff9c_0
  • /data/data/####/c8411b114ac7cb45_0
  • /data/data/####/c85d5dd699487874_0
  • /data/data/####/caf92540fffbfdae_0
  • /data/data/####/cb0e8e62fb41cdda_0
  • /data/data/####/cb21163042d8660e_0
  • /data/data/####/cb21163042d8660e_s
  • /data/data/####/cbdbca0830988ca4_0
  • /data/data/####/cd798bfb60e80b24_0
  • /data/data/####/cdd3a7d2fb32249c_0
  • /data/data/####/ce24b48a4c43124d_0
  • /data/data/####/ce463d78f3b184a8_0
  • /data/data/####/ce463d78f3b184a8_1
  • /data/data/####/ce6adc2a3faecc0e_0
  • /data/data/####/ced59743599d65b3_0
  • /data/data/####/cf0594e94aaca032_0
  • /data/data/####/cf820dc253cf8654_0 (deleted)
  • /data/data/####/cff92c661aa46add_0
  • /data/data/####/com.mgisbwaj_preferences.xml
  • /data/data/####/d06cb3bf586243a6_0
  • /data/data/####/d06cb3bf586243a6_1
  • /data/data/####/d0a21d8d0726c5d3_0
  • /data/data/####/d16f94ebb7b178aa_0
  • /data/data/####/d17a55b56e238e34_0
  • /data/data/####/d1b24b1e189dd435_0
  • /data/data/####/d3cdac1619b59d1a_0 (deleted)
  • /data/data/####/d4a0f59d3ed06c50_0
  • /data/data/####/d5060f15a5b0a871_0
  • /data/data/####/d5060f15a5b0a871_1
  • /data/data/####/d5ee96305312815d_0
  • /data/data/####/d62a6013ffaabc56_0
  • /data/data/####/d6c691d4d20ab1db_0
  • /data/data/####/d8aaf41e5179f1e6_0 (deleted)
  • /data/data/####/d9da6edcf2ec636a_0
  • /data/data/####/d9dbdccd15842753_0
  • /data/data/####/da1a2d40a30f4e47_0
  • /data/data/####/da4af38e3b0901ac_0
  • /data/data/####/da997374328a4bc6_0 (deleted)
  • /data/data/####/db993b77586946c7_0
  • /data/data/####/dd37588cd3c72176_0
  • /data/data/####/dd9f377062cb3b33_0
  • /data/data/####/de28d7a47451afff_0
  • /data/data/####/df0e09941f9b0258_0 (deleted)
  • /data/data/####/df8797ac0b475a05_0
  • /data/data/####/e02fb251f66f5aad_0
  • /data/data/####/e0bc45fcd726c23a_0
  • /data/data/####/e390105b29957971_0
  • /data/data/####/e58ab70a4e92ab9f_0
  • /data/data/####/e5b9038f7f1f2bd8_0
  • /data/data/####/e5fc3ae2d8305360_0 (deleted)
  • /data/data/####/e608e75150c85b24_0 (deleted)
  • /data/data/####/e65aedfb7e40afa9_0
  • /data/data/####/e65d0b8cf91b00fe_0
  • /data/data/####/e67ba5effefab7c7_0
  • /data/data/####/e75dc8afbd8e3da8_0
  • /data/data/####/e87dbacc5509d9c6_0 (deleted)
  • /data/data/####/e89b5a6ebffb94bc_0
  • /data/data/####/e8eb80236ce3b384_0
  • /data/data/####/eIUywEEJT.dex
  • /data/data/####/eIUywEEJT.dex.flock (deleted)
  • /data/data/####/eaed16032926cf4f_0
  • /data/data/####/eb3a645e5b272c0c_0
  • /data/data/####/eb41f2cf92112e2f_0
  • /data/data/####/ec5d3456b4b9d4d7_0
  • /data/data/####/ee161672cf174ac6_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f109e1a0d3df16fd_0
  • /data/data/####/f15abab729f708ee_0
  • /data/data/####/f20f383709205048_0
  • /data/data/####/f3b693b4e4d83a72_0
  • /data/data/####/f3b693b4e4d83a72_1
  • /data/data/####/f6007e30c8e36a13_0
  • /data/data/####/f9733f67abef82de_0
  • /data/data/####/f9af2ae61006852d_0
  • /data/data/####/fa20084c693da922_0 (deleted)
  • /data/data/####/fa89d615c9399940_0
  • /data/data/####/fad08b73b544550d_0
  • /data/data/####/fbb97c9270a7fe43_0
  • /data/data/####/fc2fb92cd0beb51f_0
  • /data/data/####/fcfb1594f6864eda_0
  • /data/data/####/fe854941f4db7149_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff03f34d351f9813_0
  • /data/data/####/ff61a738eb7449ca_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/the-real-index
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.
Requests the system alert window permission.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android