Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Locker.17005

Added to the Dr.Web virus database: 2023-07-06

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) 1####.177.14.95:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) f####.gst####.com:443
  • TCP(TLS/1.0) 64.2####.164.94:443
  • TCP(TLS/1.0) 2####.85.233.95:443
  • TCP(TLS/1.0) 1####.250.150.95:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) ei.ph####.com:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.2) 64.2####.161.138:443
  • TCP(TLS/1.2) 64.2####.164.94:443
  • TCP(TLS/1.2) 2####.85.233.95:443
  • UDP 1####.250.150.95:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • cdn1-sm####.ph####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • f####.gst####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.go####.com
  • m####.traffic####.net
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/0051bf515e86a36d_0
  • /data/data/####/00da7ed3191ff439_0
  • /data/data/####/01224990206ae7fa_0
  • /data/data/####/01c45a3e29354ba5_0
  • /data/data/####/026d3b2b13cb3d79_0
  • /data/data/####/03cbabcabdd38d77_0
  • /data/data/####/0409d57b6b3aea5d_0 (deleted)
  • /data/data/####/04371df229dfafb8_0
  • /data/data/####/044a738dfa53bc26_0
  • /data/data/####/04dc8cda76293b27_0
  • /data/data/####/052511a21cd3defb_0
  • /data/data/####/059785ce72634c26_0
  • /data/data/####/05a7087ec0c36c81_0
  • /data/data/####/0740d3e5da9169bf_0
  • /data/data/####/07bb39f9c57b9545_0
  • /data/data/####/07e7f495ec7d85ce_0
  • /data/data/####/0840f5cefbe6e9cd_0
  • /data/data/####/08803c7f485c59d7_0
  • /data/data/####/097321bc543faaf4_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0a61312c3ce937bc_0
  • /data/data/####/0a61312c3ce937bc_s
  • /data/data/####/0a6c0c6074d17b5a_0
  • /data/data/####/0a97bc168accc90f_0
  • /data/data/####/0b0cbb0326fb3546_0
  • /data/data/####/0b0cbb0326fb3546_1
  • /data/data/####/0b5fdd1e3e9f615f_0
  • /data/data/####/0bf5bc52d98cb08f_0
  • /data/data/####/0c34bed6fd389b7b_0
  • /data/data/####/0d20569c895efed1_0
  • /data/data/####/0d2115534668b441_0 (deleted)
  • /data/data/####/0e22a1ad0158c973_0
  • /data/data/####/0e75b2d412bb60a6_0
  • /data/data/####/0f52d00cbbe64bbe_0
  • /data/data/####/1068d43cfa372393_0
  • /data/data/####/12a3d3f163ca088a_0
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/1362f315c886722e_0
  • /data/data/####/138d35b607755729_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/1427e4a75ac91889_0
  • /data/data/####/1432b17ce7279d11_0
  • /data/data/####/144bc2e91afd4f97_0
  • /data/data/####/14d6b931c01656cb_0
  • /data/data/####/14f21be53f052a46_0
  • /data/data/####/16009aac15d65eea_0
  • /data/data/####/17a9d5c566209acd_0
  • /data/data/####/17f904fdb5391e8e_0
  • /data/data/####/185f22188b4b39ab_0
  • /data/data/####/18b2224d6116098d_0
  • /data/data/####/18c0b3059e9a2cd3_0
  • /data/data/####/1910521e8f5c1f3f_0
  • /data/data/####/19c342dbbc6a6c98_0
  • /data/data/####/1b6a6df9215c5f72_0
  • /data/data/####/1b6d0f1161421eaf_0
  • /data/data/####/1b984eaf1298953c_0
  • /data/data/####/1c1bbf6f796987d8_0
  • /data/data/####/1c60a9bf13a2f848_0
  • /data/data/####/1cfb2f40a8c8acf1_0
  • /data/data/####/1d133919fb207359_0
  • /data/data/####/1d692672ff699e63_0
  • /data/data/####/1d72b5e662edd2ad_0
  • /data/data/####/1dca007ecd92b123_0
  • /data/data/####/1ecb37eaafc8cd4c_0
  • /data/data/####/1ecc6c5ad58fef2a_0
  • /data/data/####/1f03c858cd5c189b_0
  • /data/data/####/1fdfdf9572a4e8c4_0
  • /data/data/####/1fefcd5784e5cdfe_0
  • /data/data/####/20276a125874cba7_0
  • /data/data/####/20284fccf2f0cd6e_0
  • /data/data/####/20d1c3171eb1b46e_0
  • /data/data/####/212a08c541e5f1fb_0
  • /data/data/####/2228d59b04e44a65_0
  • /data/data/####/23e289af64782805_0
  • /data/data/####/2498a9d36c6b8cd5_0
  • /data/data/####/2498a9d36c6b8cd5_1
  • /data/data/####/255c6f2da743cdc0_0
  • /data/data/####/2685df34372e4b0c_0 (deleted)
  • /data/data/####/26a71b41ca5692f8_0
  • /data/data/####/26f5085a300a08a8_0
  • /data/data/####/275c5c4f4b98b888_0
  • /data/data/####/2773f20389eb53c9_0
  • /data/data/####/279f8a574a17abbd_0
  • /data/data/####/27c0fc6bb76ae508_0
  • /data/data/####/28d406a0e4d244af_0
  • /data/data/####/28f4ef108c6a1cf7_0
  • /data/data/####/293c4831e2d7012e_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/29bf5707f6f5e718_0
  • /data/data/####/2a1b1cecdef134b8_0 (deleted)
  • /data/data/####/2a81ca31fac624d6_0
  • /data/data/####/2b62259149dd3389_0
  • /data/data/####/2bbe6d8bc5adfb88_0
  • /data/data/####/2c36877573574b6d_0
  • /data/data/####/2c68c03c531b48bf_0 (deleted)
  • /data/data/####/2ca64fc0f163b425_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2e01048730db2bdb_0 (deleted)
  • /data/data/####/2f2db5b90139600a_0
  • /data/data/####/2f310c7fababf426_0
  • /data/data/####/30766b40789c72b4_0
  • /data/data/####/30766b40789c72b4_1
  • /data/data/####/30d2db6fb09b1b72_0
  • /data/data/####/30de884ca0756c97_0
  • /data/data/####/32107d13bd3f33f4_0
  • /data/data/####/3273d3198ab9d392_0
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/33e81ab21afdd228_0
  • /data/data/####/342f98b4056aaa03_0
  • /data/data/####/343c65bcd4dddd5b_0
  • /data/data/####/358243e49b8cec36_0
  • /data/data/####/3610e95e29d16a1e_0
  • /data/data/####/3615ae765d9af10e_0 (deleted)
  • /data/data/####/3620b7585c313665_0
  • /data/data/####/3639dfcdb38fa620_0
  • /data/data/####/36b163effb37148d_0
  • /data/data/####/36b20eddfaa60e69_0
  • /data/data/####/38b283f81757fd20_0
  • /data/data/####/39f17d151ef6dfd8_0
  • /data/data/####/3a3cc08606991f5b_0
  • /data/data/####/3a5c5bf5811bfdf8_0
  • /data/data/####/3abfa2e40ccf642c_0 (deleted)
  • /data/data/####/3c4a1a6ec5cad227_0
  • /data/data/####/3d73325b5750b8bb_0
  • /data/data/####/3e3d55e9ccc81f79_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3fd942525dbae422_0
  • /data/data/####/3fd942525dbae422_1
  • /data/data/####/4003f5c51a5b9422_0
  • /data/data/####/404d9ad9e4f945f1_0
  • /data/data/####/40b4c416892634f5_0
  • /data/data/####/40f645d8a01284d0_0
  • /data/data/####/41bf9ce91dcebcbb_0
  • /data/data/####/42cc29b8d6727900_0
  • /data/data/####/43548953f24fc917_0
  • /data/data/####/43781d3eb905851e_0
  • /data/data/####/450bd851ebc3997d_0
  • /data/data/####/45b061390775d922_0
  • /data/data/####/45f6c7024c5eb668_0
  • /data/data/####/4657f35ab0df8b1e_0
  • /data/data/####/4657f35ab0df8b1e_1
  • /data/data/####/46da74d1dfbb4084_0
  • /data/data/####/472e58c456998a58_0
  • /data/data/####/47894a5b6d6632d2_0
  • /data/data/####/479a95bfa74a4417_0
  • /data/data/####/483204bf8509bf7e_0
  • /data/data/####/48767bd50f96f619_0
  • /data/data/####/489c0507edf71464_0
  • /data/data/####/4979df7590e95f2e_0
  • /data/data/####/49e8acd721a85b33_0
  • /data/data/####/4a357a4ae2ed8d38_0
  • /data/data/####/4c0a873319a07065_0
  • /data/data/####/4c3e02e17f7a05ae_0
  • /data/data/####/4c437578b1ea0ae2_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4cc78e2f65c56152_0
  • /data/data/####/4d00a239c975d270_0
  • /data/data/####/4d5b98bfcb1baa17_0
  • /data/data/####/4d9e142fa29b4d67_0
  • /data/data/####/4da78945fcc076b4_0
  • /data/data/####/4dcbfb3bd5b18cf8_0
  • /data/data/####/4e78eef0168203a3_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/4fafce6313a4ef34_0
  • /data/data/####/50962c339ac741c4_0
  • /data/data/####/50aee5cd53947a58_0
  • /data/data/####/50c6d10cae49b0ba_0
  • /data/data/####/515fa18f5edf7a71_0
  • /data/data/####/51afc9dd229b143b_0
  • /data/data/####/51afc9dd229b143b_1
  • /data/data/####/5215694ca2c50dcf_0
  • /data/data/####/52928d02c3e8f856_0
  • /data/data/####/52e2ee53f8d5a284_0
  • /data/data/####/52faf0fa88dd9daf_0
  • /data/data/####/5308995aae9ad2b4_0
  • /data/data/####/5428bf24fa6a3d5c_0
  • /data/data/####/54d0188dfd2bec66_0
  • /data/data/####/55ab9d409a8edbde_0
  • /data/data/####/56270704fa8832bf_0
  • /data/data/####/564393117a51a77c_0
  • /data/data/####/56443abcc6f1e6c1_0
  • /data/data/####/56ca75bf377dd1a4_0
  • /data/data/####/5722b8e0913a19d4_0
  • /data/data/####/5777b9d8ec5c742a_0
  • /data/data/####/5810e02d1cfe934b_0
  • /data/data/####/588056b1f3e10161_0
  • /data/data/####/58e7244ec77736cc_0
  • /data/data/####/597c7504dfdf291b_0
  • /data/data/####/5ab7d65c2e95506e_0
  • /data/data/####/5abf6e105198d522_0
  • /data/data/####/5bb61d413d1d68b2_0
  • /data/data/####/5beff771db0438bf_0
  • /data/data/####/5bfdc1db61b6f885_0
  • /data/data/####/5bfdc1db61b6f885_s
  • /data/data/####/5c52e1a6848671a1_0
  • /data/data/####/5c70358e6bbad7cb_0 (deleted)
  • /data/data/####/5ebc6c5c37cb2715_0
  • /data/data/####/5f0f9c4c9d7c7a29_0
  • /data/data/####/5fa3e315b17b2519_0
  • /data/data/####/5ffc81895e12cca1_0
  • /data/data/####/60560c5a4803c975_0
  • /data/data/####/609cd5bff0a7875d_0
  • /data/data/####/615e83a87c6ad34e_0
  • /data/data/####/61f83d0b79bbd419_0
  • /data/data/####/628e6854f765ea76_0
  • /data/data/####/628e6854f765ea76_s
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/62d3da36a14b3f7b_0
  • /data/data/####/640bef20dd2381aa_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/6453d2b6ddaf56ed_0
  • /data/data/####/64c3becab65f7913_0
  • /data/data/####/64c6dfe38c013ada_0
  • /data/data/####/6513f539d3dc5102_0
  • /data/data/####/65415f216dad930a_0
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/67ee89322a4e404e_0
  • /data/data/####/689034a10ee04ba5_0
  • /data/data/####/68986941fc82c5b4_0
  • /data/data/####/695d7224e9f5436e_0
  • /data/data/####/69de7cfe9fad3915_0 (deleted)
  • /data/data/####/6a1adda6981ecd5a_0
  • /data/data/####/6a447354f1b7b719_0
  • /data/data/####/6aadfe627bed2128_0
  • /data/data/####/6b5a5bc608b78897_0
  • /data/data/####/6bc946468d0e615a_0
  • /data/data/####/6c33f72fe5193130_0
  • /data/data/####/6c4eb37738f8029c_0
  • /data/data/####/6c70e6eb569ab166_0
  • /data/data/####/6d59caae7d85f890_0
  • /data/data/####/6e1f2f71bcd7584a_0
  • /data/data/####/6e4133aec0fd7553_0
  • /data/data/####/6e5578cc28684228_0
  • /data/data/####/6e6193988188664c_0
  • /data/data/####/6f1f2832-5a48-4b6a-9814-2f7d30a7d481.dex
  • /data/data/####/6f1f2832-5a48-4b6a-9814-2f7d30a7d481.dex.flock (deleted)
  • /data/data/####/6fb4b0e34813f2b3_0
  • /data/data/####/7054b56eb5326142_0
  • /data/data/####/70983512aa0c5f6e_0
  • /data/data/####/711391686efde1fa_0
  • /data/data/####/7147df6c4bfeee2e_0
  • /data/data/####/717021452bd9ef3a_0
  • /data/data/####/7225ae108f9f2f81_0 (deleted)
  • /data/data/####/723e08d35bf00818_0
  • /data/data/####/724c60cdc7bf9f2e_0
  • /data/data/####/724c60cdc7bf9f2e_1
  • /data/data/####/7312246a81cfd32a_0
  • /data/data/####/731c6a868b1d78d7_0
  • /data/data/####/735b5e776fbd4df2_0
  • /data/data/####/736fe6d5e90e4bde_0
  • /data/data/####/736fe6d5e90e4bde_1
  • /data/data/####/7539fcaab4cbfbf8_0
  • /data/data/####/75522645aa5ddf0c_0
  • /data/data/####/75796d26479bcf8a_0
  • /data/data/####/76cb7c967ed9c71b_0
  • /data/data/####/77435a2b9e896c45_0
  • /data/data/####/7857e1f70dfdf631_0
  • /data/data/####/7923e489b0ca05e4_0
  • /data/data/####/7923e489b0ca05e4_s
  • /data/data/####/799c3876432b1bfa_0
  • /data/data/####/7ad0a7326927a4f8_0
  • /data/data/####/7b5770daa890828d_0 (deleted)
  • /data/data/####/7b9f041434350b4b_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c5fe1f244a63d7d_0
  • /data/data/####/7ca36122aa978f14_0
  • /data/data/####/7cf35c1703e04731_0
  • /data/data/####/7d20f1828d7b1cbe_0
  • /data/data/####/8023b24f1b21fff6_0
  • /data/data/####/81966c6699ff2dc9_0
  • /data/data/####/81966c6699ff2dc9_1
  • /data/data/####/819a2dd4a67dbb25_0
  • /data/data/####/81a54b42b9c7ab97_0
  • /data/data/####/832b4eecc78a0d0b_0
  • /data/data/####/849866345a6cd1cc_0
  • /data/data/####/85577113c1686197_0
  • /data/data/####/85678c6df50718b8_0
  • /data/data/####/857b56bb92b19c85_0
  • /data/data/####/85aac0d26bc919f2_0
  • /data/data/####/867c2b140020ba6b_0
  • /data/data/####/870e0a80453bbfde_0
  • /data/data/####/8713faf1b32f6bf6_0
  • /data/data/####/8743096f8933c459_0
  • /data/data/####/877dff5936998c2c_0 (deleted)
  • /data/data/####/88535fd7d702998f_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/89eb8808fce21e81_0
  • /data/data/####/8a35c2c5671afc26_0
  • /data/data/####/8a5d930b1c81ed82_0
  • /data/data/####/8a8b6a9be3a74228_0
  • /data/data/####/8aec1826e73b52b8_0 (deleted)
  • /data/data/####/8b7b060da2a656f3_0
  • /data/data/####/8be1cdcb57d003c2_0
  • /data/data/####/8c2ae296c491af3f_0
  • /data/data/####/8c8921e8e5c81b9a_0
  • /data/data/####/8ca12b759bc84c0f_0
  • /data/data/####/8db8ef6f042ea924_0
  • /data/data/####/8eb2c34205068936_0
  • /data/data/####/8fcc900296f7d6a3_0
  • /data/data/####/906e73bf9e2f2a4b_0
  • /data/data/####/909548e6d57c1df5_0
  • /data/data/####/90b270345c1c63d8_0
  • /data/data/####/912d4c32ff71b8eb_0
  • /data/data/####/91856c9c316a8cc6_0
  • /data/data/####/91bc16a06218074d_0
  • /data/data/####/9211921317bafee9_0
  • /data/data/####/92981146dce670c9_0
  • /data/data/####/92fc23382ad8644b_0
  • /data/data/####/9401dfc9088d1ae8_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/947145f91da058ae_0
  • /data/data/####/94b24fee0a6f4bf4_0
  • /data/data/####/94c6738b2fb6849f_0
  • /data/data/####/9599b61ec3533a39_0
  • /data/data/####/95bd5a46ae25b8b9_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/95e181e2e269b0b8_0
  • /data/data/####/95f3f676985a29f3_0
  • /data/data/####/961bdbab5be55ede_0
  • /data/data/####/969f4aff55d97727_0
  • /data/data/####/96ac4ea645950996_0
  • /data/data/####/978ee057a86b35b0_0
  • /data/data/####/98035feb8dc60e2b_0
  • /data/data/####/98386aa5452db50b_0
  • /data/data/####/983d931d7a653552_0
  • /data/data/####/991311957b842bdf_0
  • /data/data/####/993ef5e96d789e71_0
  • /data/data/####/99e1d7f70792b254_0
  • /data/data/####/9a5dfe510db82fe6_0
  • /data/data/####/9a8468ba3011487e_0
  • /data/data/####/9aa94c6f444426b7_0
  • /data/data/####/9b71edf832d0ae4c_0
  • /data/data/####/9b7f6df916c6071e_0
  • /data/data/####/9b7f6df916c6071e_1
  • /data/data/####/9c903c0c6ae14b3d_0
  • /data/data/####/9dbcda60bf001396_0
  • /data/data/####/9dbcda60bf001396_1
  • /data/data/####/9dbff11187e8108c_0
  • /data/data/####/9e34b6b74befeb40_0
  • /data/data/####/9ef6af65c92b4e10_0
  • /data/data/####/9f318c54c3a318ac_0
  • /data/data/####/9f557d107db931a5_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QiHQf.dex
  • /data/data/####/QiHQf.dex.flock (deleted)
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a0e3f4e8c2461ae8_0
  • /data/data/####/a1249513a7eb8cb1_0
  • /data/data/####/a136137dcc3a33f7_0
  • /data/data/####/a17e184342672a6d_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a1c50fb91d9cc9f7_0
  • /data/data/####/a29e648042a61aa8_0
  • /data/data/####/a2b15949-462f-4752-8f27-3a13ea653c52.dex
  • /data/data/####/a2b15949-462f-4752-8f27-3a13ea653c52.dex.flock (deleted)
  • /data/data/####/a3daab7f46a591e2_0
  • /data/data/####/a3daab7f46a591e2_1
  • /data/data/####/a3fdccc2158ea1f2_0
  • /data/data/####/a4085565f002f7a9_0
  • /data/data/####/a40fe0a074b7b1fc_0
  • /data/data/####/a4156aa71168bfae_0
  • /data/data/####/a47ddd82cced970a_0
  • /data/data/####/a47ddd82cced970a_s
  • /data/data/####/a5145a0929c18577_0
  • /data/data/####/a55e70ffe6ab0096_0
  • /data/data/####/a657ce49eb6336bb_0
  • /data/data/####/a7579f9a6b094b6e_0
  • /data/data/####/a7805fff01159c35_0
  • /data/data/####/a8a9093f09b4a96b_0
  • /data/data/####/a9c6049f876bcb10_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/aa164e2b7cfa8203_0
  • /data/data/####/aa410e9f5a6007c6_0
  • /data/data/####/aa588cac74d3bd57_0
  • /data/data/####/ac39537a6763e494_0
  • /data/data/####/ac973ee7b6d8febe_0
  • /data/data/####/acd0832d2f61595f_0
  • /data/data/####/aea28d79b5bee5e3_0
  • /data/data/####/af31ca0625d3eee3_0
  • /data/data/####/b03acc385ffbeaf8_0
  • /data/data/####/b14808a180c50e2e_0
  • /data/data/####/b2953232ff5825f7_0
  • /data/data/####/b3568652b0fddc3b_0
  • /data/data/####/b4534b734b3627cb_0
  • /data/data/####/b469581922dc5e81_0
  • /data/data/####/b4d55937d2b947cd_0
  • /data/data/####/b50b47a3ec6debce_0
  • /data/data/####/b5d571bcf26b1598_0
  • /data/data/####/b640b930b300e37a_0
  • /data/data/####/b6478ef047ff68c6_0
  • /data/data/####/b67436ab2bf8dc1e_0
  • /data/data/####/b67637b99e21cae8_0
  • /data/data/####/b67637b99e21cae8_s
  • /data/data/####/b7044a9fdd8524ef_0
  • /data/data/####/b84eab1fcd57fa91_0
  • /data/data/####/b944c4c4192ec264_0
  • /data/data/####/ba3145df04d10ced_0
  • /data/data/####/bb14644eae78e0b3_0
  • /data/data/####/bb79fc680c135512_0 (deleted)
  • /data/data/####/bc1a473c787c3638_0
  • /data/data/####/bc7e3b81b32b3828_0
  • /data/data/####/bcaad22cd8953116_0
  • /data/data/####/bcebbb41c46ee1f9_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bd934edf83b4df6d_0
  • /data/data/####/bda003a737a61b4d_0
  • /data/data/####/bda6d8b9d1d5892a_0
  • /data/data/####/bdced96f51b5431a_0
  • /data/data/####/bed899804cfa3073_0
  • /data/data/####/bed899804cfa3073_1
  • /data/data/####/bf3c59600da39618_0
  • /data/data/####/bf70cc938786ec6d_0
  • /data/data/####/c029563dfa053522_0
  • /data/data/####/c0a3cfc618ae6abf_0
  • /data/data/####/c0bb1b3ae80636c4_0
  • /data/data/####/c0dd57aa85e05435_0
  • /data/data/####/c115aa53f85f1204_0
  • /data/data/####/c17bbb2e51b00a39_0
  • /data/data/####/c2168d59b0f3b0cd_0
  • /data/data/####/c2b07071e67a1253_0
  • /data/data/####/c2c818104e63a95a_0
  • /data/data/####/c33f377ee05bdca7_0
  • /data/data/####/c355a6034018c2da_0
  • /data/data/####/c39bd311df2bde90_0
  • /data/data/####/c540eb1e19174836_0
  • /data/data/####/c5738f20ade9554e_0
  • /data/data/####/c588c06fdce92099_0 (deleted)
  • /data/data/####/c5c6161591584f2f_0
  • /data/data/####/c704fe4e6415e91a_0
  • /data/data/####/c89ac6269f669d88_0
  • /data/data/####/c8f71771cfc13da0_0
  • /data/data/####/ca812b35fef3b0f9_0
  • /data/data/####/caf92540fffbfdae_0
  • /data/data/####/cb6e8490fe0e7327_0
  • /data/data/####/cb85a05460978c01_0
  • /data/data/####/cc3f3f0bd459e32e_0
  • /data/data/####/ce463d78f3b184a8_0
  • /data/data/####/ce463d78f3b184a8_1
  • /data/data/####/ce6adc2a3faecc0e_0
  • /data/data/####/com.zwl_preferences.xml
  • /data/data/####/d053783e049ee221_0
  • /data/data/####/d06cb3bf586243a6_0
  • /data/data/####/d06cb3bf586243a6_1
  • /data/data/####/d0a21d8d0726c5d3_0
  • /data/data/####/d0e5bce6b28ff9a0_0
  • /data/data/####/d16f94ebb7b178aa_0
  • /data/data/####/d2abceba1c62458b_0 (deleted)
  • /data/data/####/d3533d75-24e7-4be7-b955-681ab12835bd.dex
  • /data/data/####/d3533d75-24e7-4be7-b955-681ab12835bd.dex.flock (deleted)
  • /data/data/####/d3593c30fe553d7e_0
  • /data/data/####/d3cb68d9d7b0a5d6_0
  • /data/data/####/d4e63e6902feb759_0
  • /data/data/####/d4ff65941fd192a3_0
  • /data/data/####/d5060f15a5b0a871_0
  • /data/data/####/d5060f15a5b0a871_1
  • /data/data/####/d5ac595c5c83c582_0
  • /data/data/####/d5d654b69620d846_0
  • /data/data/####/d6f1f3bbc34f0878_0
  • /data/data/####/d864ef7a5110e351_0
  • /data/data/####/d9258dc3ac51e859_0
  • /data/data/####/d9adaf3e03aef3eb_0
  • /data/data/####/db7762091bf36ad4_0
  • /data/data/####/dc53d0023bc94be4_0
  • /data/data/####/ddb29d119dfe34ae_0
  • /data/data/####/ddc6a2f6ced53a52_0
  • /data/data/####/de11caa1f953e1f0_0
  • /data/data/####/de1466764b62e22d_0
  • /data/data/####/de29830ac535b215_0
  • /data/data/####/de328aa6cc2d328b_0
  • /data/data/####/df8797ac0b475a05_0
  • /data/data/####/df96f3686f60304c_0
  • /data/data/####/e0334ae22dcf6ff0_0
  • /data/data/####/e161c841a9b0fa1c_0
  • /data/data/####/e20a03e5ce689670_0
  • /data/data/####/e3b8c1c5836d925a_0
  • /data/data/####/e44c22abb6029238_0 (deleted)
  • /data/data/####/e45cec0feeb246da_0
  • /data/data/####/e5dd13c53d3ca112_0
  • /data/data/####/e74026a43bc75cbe_0
  • /data/data/####/e750fcc05e1d0fc0_0
  • /data/data/####/e7a289fbe2aa35d8_0
  • /data/data/####/e80ee39b44355f28_0
  • /data/data/####/ea246514597a4243_0
  • /data/data/####/eaf8126ffc28c8d8_0
  • /data/data/####/ebe84f2bde3aae56_0
  • /data/data/####/ed6429e9f240768d_0
  • /data/data/####/ee2f01cf661930be_0
  • /data/data/####/ee6ef61348d776c5_0 (deleted)
  • /data/data/####/eea453bb9d2ed839_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f02030816a645202_0
  • /data/data/####/f094a7dcb636da6a_0
  • /data/data/####/f0b920685a39e863_0
  • /data/data/####/f11118a0cd8c6dd5_0
  • /data/data/####/f1a1da9db0c648eb_0
  • /data/data/####/f25a093ad2e70662_0
  • /data/data/####/f28346ea19d3daab_0
  • /data/data/####/f2ab4059d4bd03c9_0
  • /data/data/####/f3b693b4e4d83a72_0
  • /data/data/####/f3b693b4e4d83a72_1
  • /data/data/####/f54b31e3f36ed283_0
  • /data/data/####/f5aaddc865a11260_0
  • /data/data/####/f60af6ce45522b89_0
  • /data/data/####/f7211c59cf0cc6aa_0
  • /data/data/####/f7b5dd247fe8a83f_0
  • /data/data/####/f7c9a9a21cdac395_0
  • /data/data/####/f80f58138ff4d303_0 (deleted)
  • /data/data/####/f868db0f64bb7f2f_0
  • /data/data/####/f8b4772dd5c0051f_0
  • /data/data/####/f94cf0ef6620e077_0
  • /data/data/####/f9733f67abef82de_0
  • /data/data/####/f9fc598859d7fb55_0
  • /data/data/####/fa0d90a43fc897ee_0
  • /data/data/####/fa0d90a43fc897ee_s
  • /data/data/####/fa8e07abef072eed_0
  • /data/data/####/fad08b73b544550d_0
  • /data/data/####/faf95043d1de6e49_0
  • /data/data/####/fbb97c9270a7fe43_0
  • /data/data/####/fc366b0ff457cc9d_0
  • /data/data/####/fcfb1594f6864eda_0
  • /data/data/####/fd0dc7f4fb4b9836_0
  • /data/data/####/fd9b742b94c0b798_0
  • /data/data/####/fd9b8611100ca8c7_0
  • /data/data/####/fe1a8f36012031ad_0
  • /data/data/####/fe2035b29e6c5ab6_0
  • /data/data/####/fe424b794bd9d633_0
  • /data/data/####/fe5af4246295a23f_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff41d80802607a57_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/niNTXZnC.dex
  • /data/data/####/temp-index
  • /data/data/####/the-real-index
  • /data/data/####/usUnNQbXd.dex
  • /data/data/####/usUnNQbXd.dex.flock (deleted)
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android