Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Locker.17046

Added to the Dr.Web virus database: 2023-07-09

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Threat detection based on machine learning.
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) www.google####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) ht-####.a####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.2) 64.2####.165.94:443
  • TCP(TLS/1.2) p####.google####.com:443
  • TCP(TLS/1.2) www.google####.com:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • cdn1-sm####.ph####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.go####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google####.com
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/000001.dbtmp
  • /data/data/####/0073b88c072d3990_0
  • /data/data/####/00c8ab8d4d260129_0
  • /data/data/####/04c2d9f8066a61fb_0
  • /data/data/####/05143edfd34e0979_0
  • /data/data/####/058d639ce2bddc59_0
  • /data/data/####/065f0cba87f2ba12_0
  • /data/data/####/06e364c5e9a8e4b0_0
  • /data/data/####/0764746631e509ec_0 (deleted)
  • /data/data/####/07bb39f9c57b9545_0
  • /data/data/####/08549471aa442930_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0a97bc168accc90f_0
  • /data/data/####/0b2533dc94c233fb_0
  • /data/data/####/0cb83a19a59f2cfb_0
  • /data/data/####/0cebe27de571d78f_0
  • /data/data/####/0cfd0a4960091da1_0
  • /data/data/####/0d03f7cee8dc79e5_0
  • /data/data/####/0d5558a2609e723b_0
  • /data/data/####/0dc9c16e60477efc_0
  • /data/data/####/0e07011b39b6c4c2_0
  • /data/data/####/0f7434909abeafcf_0
  • /data/data/####/100b5b7a7fb64a2f_0
  • /data/data/####/10363b934e425781_0
  • /data/data/####/104905438112d6d6_0
  • /data/data/####/10fc82545bb6099b_0
  • /data/data/####/117725669bfdaa61_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/12482dd598446f62_0
  • /data/data/####/126756f5a75642b6_0
  • /data/data/####/12933b7606cf3595_0
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/1389d4be8da3180e_0
  • /data/data/####/13c8712dcdeedec3_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/147f9d21da784960_0
  • /data/data/####/14fac133455b76c7_0
  • /data/data/####/156d47050f598e3e_0
  • /data/data/####/1608d5454cf8768e_0
  • /data/data/####/1677ba9bf132d08f_0
  • /data/data/####/16f47d8fe61a77a4_0
  • /data/data/####/181cb8b25c6b6bec_0
  • /data/data/####/186837d72647b01e_0 (deleted)
  • /data/data/####/19c342dbbc6a6c98_0
  • /data/data/####/1a9bb6968f3b3bce_0
  • /data/data/####/1ae1b07ad20fda35_0
  • /data/data/####/1b438cabde9b923b_0
  • /data/data/####/1b8f15ecdf7906ef_0
  • /data/data/####/1c0a495bcaffb09c_0
  • /data/data/####/1c7454875650b11f_0
  • /data/data/####/1d36ebc8ef630c5d_0
  • /data/data/####/1d66eae5e5b59d45_0
  • /data/data/####/1d7ef95a2e83850a_0
  • /data/data/####/1e7caf8e4c9adddf_0 (deleted)
  • /data/data/####/1f665b6d62064fab_0
  • /data/data/####/1f8cea9cf55e644a_0 (deleted)
  • /data/data/####/1fa41812901e6661_0
  • /data/data/####/1ff48deb6764628a_0
  • /data/data/####/201ad768e48b7267_0 (deleted)
  • /data/data/####/20f3ec27c14ead69_0
  • /data/data/####/20f67250314f18fa_0
  • /data/data/####/20f67250314f18fa_1
  • /data/data/####/228bcad22be86c7f_0
  • /data/data/####/2317931925f4c8f0_0
  • /data/data/####/25735d61fc3efa4c_0
  • /data/data/####/25c0b40bff5d8182_0
  • /data/data/####/25e904f2700669a1_0
  • /data/data/####/270af7d644778612_0
  • /data/data/####/272bebb1f82fbdc7_0
  • /data/data/####/27669ad753a964fa_0
  • /data/data/####/2809b427efd7ba31_0
  • /data/data/####/28b91cfbb39c0b9a_0
  • /data/data/####/290347cd73e628ae_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/2ad3f1606b0b34b7_0
  • /data/data/####/2ad8270a075d1c30_0
  • /data/data/####/2b527737092c8b35_0
  • /data/data/####/2b64754f5b81db67_0
  • /data/data/####/2bb864b96105fbd1_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d039b4fa1b20466_0
  • /data/data/####/2d3caee04918ba4c_0
  • /data/data/####/2d85985a37851099_0
  • /data/data/####/2dc29f3c-3384-464b-a704-a62bc00f803c.dex
  • /data/data/####/2dc29f3c-3384-464b-a704-a62bc00f803c.dex.flock (deleted)
  • /data/data/####/2e5041ca8ac7bd4a_0
  • /data/data/####/2e5aacc64e4c970d_0
  • /data/data/####/2e7ce99a73a3e1e1_0
  • /data/data/####/2ee95df18bd05b6d_0
  • /data/data/####/2f121d50afcca045_0
  • /data/data/####/3055001a405e3997_0
  • /data/data/####/30dff655222879f8_0
  • /data/data/####/30e7fbe61a2feaca_0
  • /data/data/####/32c4e026696d3d3a_0
  • /data/data/####/32d6dcb5f98be0cf_0
  • /data/data/####/33923f6d19d9cc5b_0
  • /data/data/####/33923f6d19d9cc5b_1
  • /data/data/####/33b0fe9d9863a051_0
  • /data/data/####/33fa42b65d56bfb4_0
  • /data/data/####/342f98b4056aaa03_0
  • /data/data/####/34b09b4571a6edfc_0
  • /data/data/####/34e7a7c5198e7002_0
  • /data/data/####/3628129ff5d9de06_0
  • /data/data/####/37e7af1406b63d78_0
  • /data/data/####/38ce5c977593cdc1_0
  • /data/data/####/39e2dba0cfaaa5c1_0
  • /data/data/####/3a40e8f48f756057_0
  • /data/data/####/3a5b596deb6a8198_0
  • /data/data/####/3ab8d0aa0433531c_0
  • /data/data/####/3ad67917d2e8c63f_0
  • /data/data/####/3b1cacb8ad5de981_0
  • /data/data/####/3b8ab16293efe744_0
  • /data/data/####/3c51354a8af0f4a9_0
  • /data/data/####/3d45136bb8ae5f9c_0
  • /data/data/####/3d7678501df3dd94_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3ff9bb5d5f3c7b7d_0
  • /data/data/####/400b707d20a9d2d5_0
  • /data/data/####/40192257d108d9c8_0
  • /data/data/####/413a2fcbed87d4a8_0
  • /data/data/####/417424906a776e25_0
  • /data/data/####/4184e607c84717fb_0
  • /data/data/####/42d26cc055b5d19d_0
  • /data/data/####/42e162baa24750de_0
  • /data/data/####/430843e9cd3a9793_0
  • /data/data/####/44eeb4d8bc419c56_0
  • /data/data/####/45440df98dd6e1a5_0
  • /data/data/####/45abb526b1d14c29_0
  • /data/data/####/4608a0c39f309d7e_0
  • /data/data/####/4669262a0bd4d66d_0
  • /data/data/####/46cf45581cf918a1_0
  • /data/data/####/46cf45581cf918a1_1
  • /data/data/####/472e58c456998a58_0
  • /data/data/####/479a95bfa74a4417_0
  • /data/data/####/483c98240cab9370_0
  • /data/data/####/4877f9184b94bf06_0
  • /data/data/####/48f2573aa08560e7_0
  • /data/data/####/4936a31db05b73b0_0
  • /data/data/####/49a4d78fc5282b66_0
  • /data/data/####/4b12d5a94211b0da_0
  • /data/data/####/4c1039a95dc39bdf_0
  • /data/data/####/4c82ebf8f44e23d1_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4df9b66c7c05361a_0
  • /data/data/####/4e29dff9e646028d_0
  • /data/data/####/4e4516c6337cfb07_0
  • /data/data/####/4ecceb18c6b686a2_0 (deleted)
  • /data/data/####/4efe6925815a3aab_0
  • /data/data/####/4fbdc275b4479546_0
  • /data/data/####/506c25e468df488e_0
  • /data/data/####/50c6d10cae49b0ba_0
  • /data/data/####/518b3ebe7e4e763e_0
  • /data/data/####/518b3ebe7e4e763e_1
  • /data/data/####/51948bdbf09687fc_0
  • /data/data/####/519774d583e1ffa7_0
  • /data/data/####/51f31a08a14bf511_0
  • /data/data/####/527804bfebe9e59d_0
  • /data/data/####/530ffd2d8b37f681_0
  • /data/data/####/536c5f6e24b60b74_0
  • /data/data/####/539a67bcda7a3284_0
  • /data/data/####/541941a299c48023_0 (deleted)
  • /data/data/####/548a1bf4af87e60a_0
  • /data/data/####/559626588e523cf9_0
  • /data/data/####/57b9bf85222797c8_0
  • /data/data/####/57db4853d20c9ccb_0
  • /data/data/####/5801287c2976b6b3_0
  • /data/data/####/58bce43e7c3eb393_0
  • /data/data/####/58bce43e7c3eb393_s
  • /data/data/####/59766ced2feaa64d_0
  • /data/data/####/598a4a1ab5ab975f_0
  • /data/data/####/5a3549206b344be7_0
  • /data/data/####/5a9a3e4049b3cfb1_0
  • /data/data/####/5aad641a04c25277_0
  • /data/data/####/5ab28e9e373d4cd5_0
  • /data/data/####/5b42207f5489b105_0
  • /data/data/####/5b4abc2bedee19e8_0
  • /data/data/####/5b4e79695e47a8f2_0
  • /data/data/####/5c3b1f3b55250bde_0
  • /data/data/####/5ca07a511bea4ecf_0
  • /data/data/####/5ca939c7deedcb34_0
  • /data/data/####/5cb58b109b1acb2e_0
  • /data/data/####/5cb58b109b1acb2e_1
  • /data/data/####/5e3d39639bc18ac9_0
  • /data/data/####/5e3d39639bc18ac9_1
  • /data/data/####/5e46b164c3657816_0
  • /data/data/####/6007fa171938b538_0
  • /data/data/####/6008e523a27d0e38_0
  • /data/data/####/601de4facd2c6e78_0
  • /data/data/####/6030200bf20e7cb1_0
  • /data/data/####/60560c5a4803c975_0
  • /data/data/####/624ec724120c0f62_0
  • /data/data/####/62ae8f447d12f989_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/634b4c11e61ac8a5_0
  • /data/data/####/63fd13035338a218_0
  • /data/data/####/63fd5992fa70f35c_0
  • /data/data/####/6476a476b0d49d09_0
  • /data/data/####/64bd479c901d40a0_0
  • /data/data/####/64f2166c243a23d1_0
  • /data/data/####/653f6073f63e5a35_0
  • /data/data/####/656e4c758ae103db_0
  • /data/data/####/6649eb2378cb9942_0
  • /data/data/####/6669323b2a2faac8_0
  • /data/data/####/681592e67301e0ed_0
  • /data/data/####/68cf38761d191f63_0
  • /data/data/####/69b38e49ea2f3ee4_0
  • /data/data/####/6abc317ab565b304_0
  • /data/data/####/6be916b020aab8b1_0
  • /data/data/####/6c64d73829afd6c7_0
  • /data/data/####/6e3a73f4a27d9901_0
  • /data/data/####/6e60402d447fdb05_0
  • /data/data/####/6ec03d6b95fe058e_0
  • /data/data/####/6fa7c94b04abf43b_0
  • /data/data/####/6fb4cbe63b02dee3_0
  • /data/data/####/6fb6d1f3af26b320_0
  • /data/data/####/7038000a51d14634_0 (deleted)
  • /data/data/####/7053fa1d37fee2b4_0
  • /data/data/####/70dfbfefaa472394_0
  • /data/data/####/710f4cd27a2a3cff_0
  • /data/data/####/712a94f0e4b33c5a_0
  • /data/data/####/71d1245b213eea28_0
  • /data/data/####/73893c5725eeb953_0
  • /data/data/####/73f567a1a6f488b2_0
  • /data/data/####/74aa7b82e2ad1017_0
  • /data/data/####/75bbea05dc16aaf9_0
  • /data/data/####/76877a1c78822101_0
  • /data/data/####/76e32c7bbf120562_0
  • /data/data/####/77655a0f3632988e_0
  • /data/data/####/77a0bd444f198fe6_0
  • /data/data/####/782beebbe8ae1043_0
  • /data/data/####/782beebbe8ae1043_1
  • /data/data/####/78c0a79ae0eaf16f_0
  • /data/data/####/7932f52679ba5fe6_0
  • /data/data/####/796b6583296abcaa_0
  • /data/data/####/79f2b2f0b1c736f7_0
  • /data/data/####/7bd51ff9561e7667_0
  • /data/data/####/7c0c3670ce8c6ef4_0
  • /data/data/####/7c0c3670ce8c6ef4_s
  • /data/data/####/7c127aa3e2948cb3_0
  • /data/data/####/7c28e6eb840fcb74_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c69e09cfced33c4_0
  • /data/data/####/7c69e09cfced33c4_1
  • /data/data/####/7f11cafd7ccfed25_0
  • /data/data/####/7f31355d5709d4d7_0
  • /data/data/####/7f98e3dffa4a8661_0
  • /data/data/####/802f03674d0eea32_0
  • /data/data/####/80f468ecf75b6b3f_0
  • /data/data/####/81297a439c774582_0
  • /data/data/####/816edab88afc770f_0
  • /data/data/####/826446ab9e739a73_0
  • /data/data/####/8270bd3a1e4c095d_0
  • /data/data/####/82ba0398de1589b3_0
  • /data/data/####/82c3177b9169ea97_0
  • /data/data/####/8386d11d46a60f6f_0
  • /data/data/####/83c27c7d02510afd_0
  • /data/data/####/848c137783d9c148_0
  • /data/data/####/848c137783d9c148_1
  • /data/data/####/848f584eb2980526_0
  • /data/data/####/84e6fab5d5bc1334_0
  • /data/data/####/855d4806184d2e0a_0
  • /data/data/####/867c2b140020ba6b_0
  • /data/data/####/869ae8a2a55067e0_0
  • /data/data/####/869ae8a2a55067e0_s
  • /data/data/####/86fa628d5a83c4a1_0
  • /data/data/####/8752e96d011d86de_0
  • /data/data/####/8753fa2389d0efa0_0
  • /data/data/####/876f248d207317a0_0
  • /data/data/####/882e803f112e79d2_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/88b3b19f4134047a_0
  • /data/data/####/8945c1c43ff02128_0
  • /data/data/####/898f4048f09cc6bd_0
  • /data/data/####/89d2fb97cd5ac431_0
  • /data/data/####/8a8b6a9be3a74228_0
  • /data/data/####/8bc2c30514adf66a_0
  • /data/data/####/8bd197ff6922a42d_0
  • /data/data/####/8c20e0b1d6ed5a74_0
  • /data/data/####/8c2b045b2e446455_0
  • /data/data/####/8c3cee66e572cd97_0
  • /data/data/####/8ced9904ab99cc7f_0
  • /data/data/####/8d3a54608a3f26c7_0
  • /data/data/####/8dc20b019aa6c3f3_0
  • /data/data/####/8de14fe9e9ff800c_0
  • /data/data/####/8f53b467a2e97d28_0
  • /data/data/####/8fbf6d0bbaf8b105_0
  • /data/data/####/8fcebe8b268233c8_0
  • /data/data/####/8fd21389d8c47c2f_0
  • /data/data/####/8fd21389d8c47c2f_1
  • /data/data/####/901f76aaef85a6d4_0
  • /data/data/####/916fb92dc02dea23_0
  • /data/data/####/919b5c93797ac643_0
  • /data/data/####/92131a23f681d12c_0
  • /data/data/####/92b74dc6571d53c6_0
  • /data/data/####/935cc2388c734226_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/95342c48b6e8d450_0
  • /data/data/####/95608fa29fe611c0_0 (deleted)
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/9636eb77ce213953_0
  • /data/data/####/96ba6042ff8ff827_0
  • /data/data/####/973072b78aaa9b77_0
  • /data/data/####/97ee07df8b7dfcfd_0
  • /data/data/####/987499be7dbc2381_0
  • /data/data/####/987499be7dbc2381_1
  • /data/data/####/987804fea6a07e79_0
  • /data/data/####/98b23df52008f6d0_0
  • /data/data/####/9a29b26e3147f9de_0
  • /data/data/####/9a37bf4d1edce7ab_0
  • /data/data/####/9a96b3a70d6d698d_0
  • /data/data/####/9ae1ed240112f4c8_0
  • /data/data/####/9ae90431d736d10a_0
  • /data/data/####/9b5356b68d3f8e55_0
  • /data/data/####/9b71edf832d0ae4c_0
  • /data/data/####/9be65208026e0b90_0
  • /data/data/####/9c6a33e1d79a2bbb_0
  • /data/data/####/9d95ec8f7bba531c_0
  • /data/data/####/9e1c39eea2574ed1_0
  • /data/data/####/9e3e224ad3ddab01_0
  • /data/data/####/9e9305a8799ddca4_0
  • /data/data/####/9e9c42f9cf8f5dfb_0
  • /data/data/####/9eb1a5351ef3ca18_0
  • /data/data/####/9f7c383c6817ebb1_0
  • /data/data/####/9fba23b3d287a38d_0
  • /data/data/####/9fba23b3d287a38d_1
  • /data/data/####/9fc3ff3b8445fe1d_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QOseO.dex
  • /data/data/####/QOseO.dex.flock (deleted)
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a050780ad9a0b4e3_0
  • /data/data/####/a0c5fcc46b44722e_0
  • /data/data/####/a0c5fcc46b44722e_1
  • /data/data/####/a0f8d3dd-0124-4a3e-b005-d356a6cdff46.dex
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a1a5f49b0f2fe846_0
  • /data/data/####/a1d8e33cbf64f6ba_0
  • /data/data/####/a3b98cda956f1fc9_0
  • /data/data/####/a45809df79fe6c8d_0
  • /data/data/####/a45fb1d2d8f580ce_0
  • /data/data/####/a497130f7bf612fe_0
  • /data/data/####/a4a86499d9012f9b_0
  • /data/data/####/a55c30def9b9a97b_0
  • /data/data/####/a762a77a6c4da4f1_0
  • /data/data/####/a7c66b9e37d05aab_0
  • /data/data/####/a7d28f177d61332d_0
  • /data/data/####/a7f0e64b417bb0db_0
  • /data/data/####/a8093488fae7da3c_0
  • /data/data/####/a80ee7b08003fc68_0
  • /data/data/####/a82efac44fb336fa_0
  • /data/data/####/a8aca7685c83e747_0
  • /data/data/####/a9349d6b1660255b_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/aa3291c7b2a74ed8_0
  • /data/data/####/aa3ba6e88bbc09f8_0
  • /data/data/####/aa7e059fc67a2912_0
  • /data/data/####/aa809e580b5a6538_0
  • /data/data/####/aaf160fde210a92d_0
  • /data/data/####/ab0e05760903ae30_0
  • /data/data/####/ab287c06ce62a545_0
  • /data/data/####/ab634d5deb30a8dc_0
  • /data/data/####/abbfc53d3d11dc66_0
  • /data/data/####/acb3b8e4428ede57_0
  • /data/data/####/acddf071572eecc4_0
  • /data/data/####/ad0ab0a3846e9ea6_0
  • /data/data/####/ad2f04409ba4406c_0 (deleted)
  • /data/data/####/ad7ad3ff71727a97_0
  • /data/data/####/ad840a191c6128bc_0
  • /data/data/####/ada50a2f6b89a4a7_0
  • /data/data/####/adfca368cd217089_0 (deleted)
  • /data/data/####/ae8f9bbcb48f5b38_0
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/aec5b5f07b0f77ad_0
  • /data/data/####/aefcfe7acccf98ec_0
  • /data/data/####/af3fd0e76bb5b3e3_0
  • /data/data/####/afc5aa4124d5b42f_0
  • /data/data/####/afcc10aba53829f8_0
  • /data/data/####/b0d0ccd1f92c3da2_0
  • /data/data/####/b1838d737df25916_0
  • /data/data/####/b1cb104592c88735_0
  • /data/data/####/b22e3937bf8d39f5_0
  • /data/data/####/b269dfb8b1b62cba_0
  • /data/data/####/b278c8a4b39c2a7e_0
  • /data/data/####/b3848e47edef269f_0
  • /data/data/####/b3c904ed104d99ef_0 (deleted)
  • /data/data/####/b418fc573d83e63d_0
  • /data/data/####/b42f3e34-4343-4666-99bc-a715b3c40d0c.dex
  • /data/data/####/b42f3e34-4343-4666-99bc-a715b3c40d0c.dex.flock (deleted)
  • /data/data/####/b5be872091cbcda8_0
  • /data/data/####/b6184a6cb5692ece_0
  • /data/data/####/b662c1d473a924ed_0
  • /data/data/####/b66435cabac5daae_0
  • /data/data/####/b68e9b5f1e98c5ec_0
  • /data/data/####/b6cba36601b4ff3d_0
  • /data/data/####/b704a8d16f5b4ebf_0
  • /data/data/####/b736445424efd0b2_0
  • /data/data/####/b75bb3de16c00efc_0
  • /data/data/####/b7a2794621acf38d_0
  • /data/data/####/b7a7dd547f37d1e5_0
  • /data/data/####/b7a7dd547f37d1e5_s
  • /data/data/####/b7ef769e9eeb0f75_0
  • /data/data/####/b80ffb1664d45d3e_0
  • /data/data/####/b857490943958dc4_0
  • /data/data/####/b89159f39dc825fa_0
  • /data/data/####/b902acf79335f0e5_0
  • /data/data/####/b944c4c4192ec264_0
  • /data/data/####/b96b47331096a7b5_0
  • /data/data/####/b978a973d373c6f6_0
  • /data/data/####/ba0adfdcb36f53e8_0
  • /data/data/####/ba95b7b94f888bef_0
  • /data/data/####/bb10749c9fe1d23d_0
  • /data/data/####/bc1ab1ee2c686f9a_0
  • /data/data/####/bc99f63e2b200cec_0
  • /data/data/####/bcacdbcca2506799_0
  • /data/data/####/bcd65d5e7a2bf62d_0
  • /data/data/####/bcf796c81f6d8345_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bdf0075dde4e06c7_0
  • /data/data/####/be9873c0f047ac27_0
  • /data/data/####/bf09b72d390b58ad_0
  • /data/data/####/bf30177e3e3d294f_0
  • /data/data/####/bf93ec309865b001_0
  • /data/data/####/bfd8f7b82902f519_0
  • /data/data/####/bff6dcdc72ad5d41_0
  • /data/data/####/c04962c4c73af5f2_0
  • /data/data/####/c086e53b6ff36c6c_0
  • /data/data/####/c09b11e30f2a8d6e_0
  • /data/data/####/c0a5ba2d33b289a2_0
  • /data/data/####/c139830fa08cc96e_0
  • /data/data/####/c139830fa08cc96e_1
  • /data/data/####/c2c818104e63a95a_0
  • /data/data/####/c483bb5c110dcb06_0
  • /data/data/####/c4a5fcb85d71a657_0
  • /data/data/####/c4ddfa0460d481be_0
  • /data/data/####/c54ee5c118c5000b_0
  • /data/data/####/c551a48fc9bd5a2e_0
  • /data/data/####/c55ce3c37b8521da_0
  • /data/data/####/c5b7e46790a09f66_0
  • /data/data/####/c68d361d90a701c7_0 (deleted)
  • /data/data/####/c7257e80d3b872dc_0
  • /data/data/####/c76a5c1b3cc7aa9c_0
  • /data/data/####/c7f699bea1b1077c_0
  • /data/data/####/c7f699bea1b1077c_1
  • /data/data/####/c838859f91a0e64c_0
  • /data/data/####/c83e75d9202d2bd2_0
  • /data/data/####/c85e98db9a9bd774_0
  • /data/data/####/c87c03fa2b476e19_0
  • /data/data/####/c946995cbd566094_0
  • /data/data/####/c97e15e25f96c502_0
  • /data/data/####/cc507114381d8738_0
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/cde08d455983447d_0
  • /data/data/####/ce93fc67ddd1daca_0
  • /data/data/####/cff16a92e5db6c51_0
  • /data/data/####/com.zgarapr_preferences.xml
  • /data/data/####/d01ebfbd31f4fcad_0
  • /data/data/####/d11ab2a640112800_0
  • /data/data/####/d1a14bf486a9e564_0
  • /data/data/####/d26a8f758e250dc6_0
  • /data/data/####/d298261e7625dd06_0
  • /data/data/####/d2f671cdf9999b19_0 (deleted)
  • /data/data/####/d33d5fd8de91fa7f_0
  • /data/data/####/d33d5fd8de91fa7f_s
  • /data/data/####/d38b1a408161e71c_0
  • /data/data/####/d3fb1480804a0837_0
  • /data/data/####/d419db3afe189859_0
  • /data/data/####/d437633c74f12500_0
  • /data/data/####/d43b8ad7a8817370_0
  • /data/data/####/d468390a37f3095c_0
  • /data/data/####/d478c6d5d34c7d71_0
  • /data/data/####/d4ffa0c6a4eda20c_0
  • /data/data/####/d502e08bbb1f3df4_0
  • /data/data/####/d50d42d12eaf166f_0
  • /data/data/####/d5a246c3e225dc96_0
  • /data/data/####/d5b73a213d7f4bbf_0
  • /data/data/####/d5eed6a4131f8ddf_0
  • /data/data/####/d60933a005867787_0 (deleted)
  • /data/data/####/d6aca34181a75c3e_0
  • /data/data/####/d6ca0c3238c05159_0
  • /data/data/####/d6ea771d2f00bc27_0
  • /data/data/####/d74ae5176699bf22_0
  • /data/data/####/d7ada45f66459310_0
  • /data/data/####/d81dcbe1129a38e5_0 (deleted)
  • /data/data/####/d88583e5a868d5d7_0
  • /data/data/####/d89c621233f08263_0
  • /data/data/####/d8fb9e46ed459e22_0
  • /data/data/####/d9415c62571f495b_0
  • /data/data/####/d957a2264bd7b882_0
  • /data/data/####/da9a4fd623b6ffb9_0
  • /data/data/####/daabba3b9f4c9b7a_0
  • /data/data/####/dafcdac2aef95795_0
  • /data/data/####/db87cf4e1c611555_0
  • /data/data/####/db87cf4e1c611555_1
  • /data/data/####/dc17956fec9ba63f_0
  • /data/data/####/dc2509af90653fb9_0
  • /data/data/####/dcf9723c0a0c1215_0
  • /data/data/####/dd3e5fb6b6aef45b_0
  • /data/data/####/ddb810ed65f3737b_0
  • /data/data/####/de179d03083ded78_0
  • /data/data/####/de2e06416403853d_0
  • /data/data/####/de2e06416403853d_1
  • /data/data/####/de6c61f89d9296f5_0
  • /data/data/####/decca703e0c6dd7e_0 (deleted)
  • /data/data/####/df8797ac0b475a05_0
  • /data/data/####/dfca5c66340a07d4_0
  • /data/data/####/e030f0d4e3bcc82b_0
  • /data/data/####/e0b1789663d8add4_0
  • /data/data/####/e0fdf7d86f9d81c4_0
  • /data/data/####/e130c2ec12bdf103_0
  • /data/data/####/e1bce4a966ac917b_0
  • /data/data/####/e26395c59895ca28_0
  • /data/data/####/e35bf22ec48a3094_0
  • /data/data/####/e4ce32bf3e6c3d14_0
  • /data/data/####/e4ce32bf3e6c3d14_s
  • /data/data/####/e64f753fc1603046_0 (deleted)
  • /data/data/####/e68d96b8bb6f7073_0
  • /data/data/####/e6976af5eaad7997_0
  • /data/data/####/e754d67f4bd1bd1a_0
  • /data/data/####/e75dcf3c53c558d5_0
  • /data/data/####/e88a19bbac029a41_0
  • /data/data/####/e896b0f1fc1b6438_0
  • /data/data/####/e8eb80236ce3b384_0
  • /data/data/####/e90552391dc62079_0
  • /data/data/####/e91337a63e71d6b9_0
  • /data/data/####/e9e695fc39caf801_0
  • /data/data/####/e9eff3a88dd31484_0
  • /data/data/####/ea2be62b3e4364f7_0
  • /data/data/####/eacb251ab98d9a04_0
  • /data/data/####/eb00cf0019add5e8_0
  • /data/data/####/eb206379a60d671a_0
  • /data/data/####/ebf4952b735f067f_0
  • /data/data/####/ec3008cc1cd1334e_0
  • /data/data/####/ec6ae1fe1dc737c2_0 (deleted)
  • /data/data/####/ec9b2aa6c608c702_0
  • /data/data/####/ed259c2ebc903a01_0
  • /data/data/####/ed41ea8d0b831ec2_0
  • /data/data/####/ed5d6d9ae06b6206_0
  • /data/data/####/ee4a4b91c8186a83_0
  • /data/data/####/eecfc1d1e7ea7cb0_0
  • /data/data/####/eede775c18805df2_0
  • /data/data/####/ef2474f85801451b_0
  • /data/data/####/ef32e8658102fd1d_0
  • /data/data/####/ef7455bff21cea6f_0
  • /data/data/####/ef84b7c19441018c_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f02c7ff8ef6b9314_0
  • /data/data/####/f03125f2851315df_0
  • /data/data/####/f0954a7ce65c3fe3_0
  • /data/data/####/f0954a7ce65c3fe3_s
  • /data/data/####/f0ae0fdf3aa707ae_0
  • /data/data/####/f0b9196db7a4e12c_0
  • /data/data/####/f2137a0f2032b3f3_0
  • /data/data/####/f2703691fbaa92bc_0
  • /data/data/####/f41e90fd3e046bdf_0
  • /data/data/####/f4cb50196b6b0afa_0
  • /data/data/####/f4eb124fca70a0d9_0
  • /data/data/####/f5356162410ddbdc_0
  • /data/data/####/f5fa9c6556e1c73b_0
  • /data/data/####/f5fa9c6556e1c73b_1
  • /data/data/####/f95828492786241a_0
  • /data/data/####/fad08b73b544550d_0
  • /data/data/####/fb49f95d0c1227bd_0 (deleted)
  • /data/data/####/fb6b996b26dac582_0
  • /data/data/####/fc73bbf306c6a3f1_0
  • /data/data/####/fd2ed5dc79a11bd7_0
  • /data/data/####/fd763d3a3ef4d714_0
  • /data/data/####/fdd41d13a4acb2a7_0
  • /data/data/####/fdfa4ada70a64df5_0
  • /data/data/####/fe91003f72b74da5_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff092888d4cd9f74_0
  • /data/data/####/httza.dex
  • /data/data/####/httza.dex.flock (deleted)
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/the-real-index
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android