Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Locker.17085

Added to the Dr.Web virus database: 2023-07-11

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) gmscomp####.google####.com:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) 64.2####.165.94:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) ht-####.a####.com:443
  • TCP(TLS/1.2) p####.google####.com:443
  • TCP(TLS/1.2) 64.2####.165.94:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • and####.google####.com
  • and####.google####.com.####.8
  • cdn1-sm####.ph####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • gmscomp####.google####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/000001.dbtmp
  • /data/data/####/00831ead6de3de80_0
  • /data/data/####/00bd7a8678348e19_0
  • /data/data/####/021adf50ec1e54dc_0
  • /data/data/####/02bd1db19a7b06e8_0
  • /data/data/####/031302f170cdaf16_0
  • /data/data/####/04c977e1a6cbbd03_0
  • /data/data/####/05143edfd34e0979_0
  • /data/data/####/05e6fbc11d17c9da_0
  • /data/data/####/05e82c8e0ee7f64b_0
  • /data/data/####/065f0cba87f2ba12_0
  • /data/data/####/067d7abb805b3efc_0
  • /data/data/####/06b52b6cee4382f9_0
  • /data/data/####/070423cfc5b3e95a_0
  • /data/data/####/07bb39f9c57b9545_0
  • /data/data/####/081326baf0f7877d_0
  • /data/data/####/08917a0b88d0f142_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0a97bc168accc90f_0
  • /data/data/####/0b62eed515481ed2_0 (deleted)
  • /data/data/####/0bbf26afae21889e_0
  • /data/data/####/0c81f89881d509aa_0
  • /data/data/####/0cb43bbbf6adbb6e_0 (deleted)
  • /data/data/####/0cebe27de571d78f_0
  • /data/data/####/0e4e5a96800bcbc5_0 (deleted)
  • /data/data/####/0ebb1bab5edd0ce1_0
  • /data/data/####/0f5ad6ed149de69e_0
  • /data/data/####/117725669bfdaa61_0
  • /data/data/####/11ab0f821d03e9ae_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/13d1b1587015c6b6_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/146d06d154de130f_0
  • /data/data/####/1608d5454cf8768e_0
  • /data/data/####/176e456ad06b8f5c_0
  • /data/data/####/18ac60a2f70217ff_0
  • /data/data/####/18c52b3466f6e252_0
  • /data/data/####/19790dfa0fb9d541_0
  • /data/data/####/19790dfa0fb9d541_s
  • /data/data/####/19b41c20310f10a7_0
  • /data/data/####/1af66e86f6c32353_0
  • /data/data/####/1bbca1555c3ff0c1_0
  • /data/data/####/1bbf3bb7420fcaac_0
  • /data/data/####/1d31681f96e3c8eb_0
  • /data/data/####/1d3cffe9179db8e6_0
  • /data/data/####/1ff48deb6764628a_0
  • /data/data/####/20f67250314f18fa_0
  • /data/data/####/20f67250314f18fa_1
  • /data/data/####/20fc077b41bf699a_0
  • /data/data/####/25f3463e1c2b5718_0
  • /data/data/####/26eb93ceb2bcd989_0
  • /data/data/####/2809b427efd7ba31_0
  • /data/data/####/28be7b82a7836fd5_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/29bf5707f6f5e718_0
  • /data/data/####/2ac0a0556ca0f77e_0
  • /data/data/####/2ad3f1606b0b34b7_0
  • /data/data/####/2b64754f5b81db67_0
  • /data/data/####/2cc38d1cfc8a4190_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d039b4fa1b20466_0
  • /data/data/####/2d85985a37851099_0
  • /data/data/####/2e47c9e0a1ffa967_0
  • /data/data/####/3021aa01bbf972be_0
  • /data/data/####/30307017f43d2bf6_0
  • /data/data/####/30307017f43d2bf6_s
  • /data/data/####/311f951360d69985_0
  • /data/data/####/31acba0ca75d714b_0
  • /data/data/####/329563579c3714d5_0
  • /data/data/####/32f7dfa7d77c3b31_0
  • /data/data/####/33923f6d19d9cc5b_0
  • /data/data/####/33923f6d19d9cc5b_1
  • /data/data/####/34b09b4571a6edfc_0
  • /data/data/####/34fbfcf85fa6a7b4_0
  • /data/data/####/355d88afd9f81add_0
  • /data/data/####/371eb14f5d2174b4_0 (deleted)
  • /data/data/####/377f28d94e30a9e8_0
  • /data/data/####/38b3b93027851572_0
  • /data/data/####/39114fa5d4b5e2fd_0
  • /data/data/####/399323891edfa5a0_0 (deleted)
  • /data/data/####/3a930a4426e076a6_0
  • /data/data/####/3b6d39b83369f507_0
  • /data/data/####/3bd614b9b1f21684_0
  • /data/data/####/3d8ae358444e70f9_0
  • /data/data/####/3dbd712cf966bffb_0
  • /data/data/####/3dc50cc4b9a329c2_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3ea97e05058ce673_0
  • /data/data/####/3f517de0fe147b39_0
  • /data/data/####/3f87c5a23fdb633e_0 (deleted)
  • /data/data/####/3ff9bb5d5f3c7b7d_0
  • /data/data/####/400b707d20a9d2d5_0
  • /data/data/####/401280d618ab002c_0 (deleted)
  • /data/data/####/40f021b5b6c30b33_0
  • /data/data/####/43380b82b5ffddc1_0
  • /data/data/####/43ae12643c225c07_0
  • /data/data/####/44479bd327d7ea23_0
  • /data/data/####/46cf45581cf918a1_0
  • /data/data/####/46cf45581cf918a1_1
  • /data/data/####/479a95bfa74a4417_0
  • /data/data/####/48b64acbbe70a54a_0
  • /data/data/####/48e6d6333c92b94e_0
  • /data/data/####/4936a31db05b73b0_0
  • /data/data/####/4a59016d0dcf0ddb_0
  • /data/data/####/4aabd2e05aeba299_0
  • /data/data/####/4b4755f58803c3e8_0
  • /data/data/####/4beaa1a3cc9943b7_0
  • /data/data/####/4ca647d261704679_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4ead55c5ead51d68_0
  • /data/data/####/4f5a86dbf6189974_0
  • /data/data/####/4fbdc275b4479546_0
  • /data/data/####/500a6cabf873b59a_0
  • /data/data/####/518b3ebe7e4e763e_0
  • /data/data/####/518b3ebe7e4e763e_1
  • /data/data/####/51f31a08a14bf511_0
  • /data/data/####/5308995aae9ad2b4_0
  • /data/data/####/55f20fcf4cd57812_0 (deleted)
  • /data/data/####/57db4853d20c9ccb_0
  • /data/data/####/58de23262a6dd8ac_0
  • /data/data/####/59179a22fd0fc84a_0
  • /data/data/####/59766ced2feaa64d_0
  • /data/data/####/5bc528c031d33342_0
  • /data/data/####/5c16d8be06d25912_0 (deleted)
  • /data/data/####/5c599f4a04756482_0
  • /data/data/####/5ca939c7deedcb34_0
  • /data/data/####/5cb58b109b1acb2e_0
  • /data/data/####/5cb58b109b1acb2e_1
  • /data/data/####/5ccf0bbca05c7f79_0
  • /data/data/####/5cdc2048bff63a2e_0
  • /data/data/####/5ce734ac1d5f6520_0
  • /data/data/####/5d37bf12-6e92-4b7e-85b6-a7fa4190408b.dex
  • /data/data/####/5e3d39639bc18ac9_0
  • /data/data/####/5e3d39639bc18ac9_1
  • /data/data/####/5e3d8f8f18e3ef42_0
  • /data/data/####/5f782b73987a0ae1_0
  • /data/data/####/6007fa171938b538_0
  • /data/data/####/604177dbe1d5ecbe_0
  • /data/data/####/60639ce8b8e958a7_0
  • /data/data/####/60e6331c0dcfa968_0
  • /data/data/####/60ee609796db35a4_0
  • /data/data/####/61a1b58fbe187bbf_0
  • /data/data/####/61e92a81e5990326_0
  • /data/data/####/621d0e64af6d9a1b_0
  • /data/data/####/628fd421166019ae_0
  • /data/data/####/628fd421166019ae_s
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/63dc50d01357a923_0
  • /data/data/####/64bd479c901d40a0_0
  • /data/data/####/65420e613012fee5_0
  • /data/data/####/6631fcd46ab76c8c_0
  • /data/data/####/68cf38761d191f63_0
  • /data/data/####/698d8bb0b3119a94_0
  • /data/data/####/698d8bb0b3119a94_s
  • /data/data/####/69b38e49ea2f3ee4_0
  • /data/data/####/6abc317ab565b304_0
  • /data/data/####/6c753f388aaf72e0_0
  • /data/data/####/6c8ccd8b0e65707c_0
  • /data/data/####/6d89e6d77db7efc6_0
  • /data/data/####/6e356ed9ce03f38a_0
  • /data/data/####/6e3a73f4a27d9901_0
  • /data/data/####/6f5f49e41a6774e9_0
  • /data/data/####/70dfbfefaa472394_0
  • /data/data/####/710f4cd27a2a3cff_0
  • /data/data/####/71710b7e017dfddc_0
  • /data/data/####/71c3fea0b0261988_0
  • /data/data/####/7202163565f1af3f_0
  • /data/data/####/735b1ba42c3380e0_0
  • /data/data/####/740d54dffff52643_0
  • /data/data/####/752c1e4c287092d4_0
  • /data/data/####/75fff9f4906ad7b7_0
  • /data/data/####/76877a1c78822101_0
  • /data/data/####/76e32c7bbf120562_0
  • /data/data/####/782a39b2942e2ec6_0
  • /data/data/####/782beebbe8ae1043_0
  • /data/data/####/782beebbe8ae1043_1
  • /data/data/####/791bf551fb547776_0
  • /data/data/####/79f2b2f0b1c736f7_0
  • /data/data/####/7a70cc967a76684f_0
  • /data/data/####/7c0dd1d5a5f855c1_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c69e09cfced33c4_0
  • /data/data/####/7c69e09cfced33c4_1
  • /data/data/####/7e75b8e8e17e5881_0
  • /data/data/####/7e75b8e8e17e5881_s
  • /data/data/####/7eb044f234dd2aba_0
  • /data/data/####/7f806872910bbafc_0
  • /data/data/####/805675e1458804f8_0
  • /data/data/####/805675e1458804f8_1
  • /data/data/####/80f468ecf75b6b3f_0
  • /data/data/####/81297a439c774582_0
  • /data/data/####/81e23e6eaad0191a_0
  • /data/data/####/820483acd33ae95f_0
  • /data/data/####/823535c0ffa46a88_0
  • /data/data/####/8270bd3a1e4c095d_0
  • /data/data/####/8338591f2757fbb5_0
  • /data/data/####/83930361fe5db381_0
  • /data/data/####/83a3932e595b8155_0
  • /data/data/####/844cffbd459255ca_0
  • /data/data/####/845daef7680336f3_0
  • /data/data/####/8484ba805a0405bc_0
  • /data/data/####/848c137783d9c148_0
  • /data/data/####/848c137783d9c148_1
  • /data/data/####/855a29299c3c85f1_0 (deleted)
  • /data/data/####/855d4806184d2e0a_0
  • /data/data/####/85d685f0adcc59de_0
  • /data/data/####/8651e178a0c8ccee_0
  • /data/data/####/86d0fa6b-8b1d-435d-81fa-3a9e931121e7.dex
  • /data/data/####/86d0fa6b-8b1d-435d-81fa-3a9e931121e7.dex.flock (deleted)
  • /data/data/####/8753fa2389d0efa0_0
  • /data/data/####/87d4785b078892ac_0
  • /data/data/####/881cd3151c2bfcb6_0 (deleted)
  • /data/data/####/88535fd7d702998f_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/89458020c5849794_0
  • /data/data/####/89963bd91632dae4_0
  • /data/data/####/8aeab91756e747af_0
  • /data/data/####/8b7b060da2a656f3_0
  • /data/data/####/8b9c1bc6ecf8a42b_0 (deleted)
  • /data/data/####/8c254af9d88d9949_0
  • /data/data/####/8cc178f051b0b345_0 (deleted)
  • /data/data/####/8d370449385ed857_0
  • /data/data/####/8d4d178edb3a3e28_0
  • /data/data/####/8dc26b306b9424fc_0
  • /data/data/####/8e745a5deaafb374_0
  • /data/data/####/8fd21389d8c47c2f_0
  • /data/data/####/8fd21389d8c47c2f_1
  • /data/data/####/8fd2f70bbfccfc6a_0
  • /data/data/####/8fee17bc555f0b3a_0 (deleted)
  • /data/data/####/8ff8b74fc2748c78_0
  • /data/data/####/9126061ed4f6cdb3_0
  • /data/data/####/913e556374075ac5_0
  • /data/data/####/926d0bfa1e20b844_0
  • /data/data/####/92a0e20fff614adb_0
  • /data/data/####/92b526f89adc5a02_0
  • /data/data/####/92b74dc6571d53c6_0
  • /data/data/####/92cb1f4fa1bdfc41_0
  • /data/data/####/930c2e9ac9cba6bd_0
  • /data/data/####/939afc0be81fde4b_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/9453999690a964cd_0
  • /data/data/####/951a7239503f812a_0 (deleted)
  • /data/data/####/95add73aa2c65657_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/963d8aa42c971fe3_0
  • /data/data/####/96ba6042ff8ff827_0
  • /data/data/####/96ec85cdb8c348ad_0
  • /data/data/####/9756ae40c4034040_0
  • /data/data/####/97d663eec4ab58bb_0
  • /data/data/####/981278de69f36b5a_0
  • /data/data/####/987229c4eae5319e_0
  • /data/data/####/987499be7dbc2381_0
  • /data/data/####/987499be7dbc2381_1
  • /data/data/####/9a29b26e3147f9de_0
  • /data/data/####/9a3157fd5ae00a50_0
  • /data/data/####/9ae1ed240112f4c8_0
  • /data/data/####/9b5356b68d3f8e55_0
  • /data/data/####/9be65208026e0b90_0
  • /data/data/####/9c903c0c6ae14b3d_0
  • /data/data/####/9e4b83e367498ad9_0
  • /data/data/####/9e635611ec969e75_0
  • /data/data/####/9fba23b3d287a38d_0
  • /data/data/####/9fba23b3d287a38d_1
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/UZXdTVJ.dex
  • /data/data/####/UZXdTVJ.dex.flock (deleted)
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a016515926470611_0
  • /data/data/####/a050780ad9a0b4e3_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a1de6a4ab6f56e95_0
  • /data/data/####/a2775fffb6a35622_0
  • /data/data/####/a3f1216233de2a7d_0
  • /data/data/####/a4a86499d9012f9b_0
  • /data/data/####/a4e9add9592af931_0 (deleted)
  • /data/data/####/a55c30def9b9a97b_0
  • /data/data/####/a57680f6e63961c8_0
  • /data/data/####/a5b29f029aea6bb7_0
  • /data/data/####/a5b56b625eabc5b1_0
  • /data/data/####/a762a77a6c4da4f1_0
  • /data/data/####/a7c66b9e37d05aab_0
  • /data/data/####/a82ada334f3040eb_0
  • /data/data/####/a8736b25d2bc79ee_0
  • /data/data/####/a8c9c9bad24abe07_0
  • /data/data/####/a9117de1688b2279_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/a9eb5b32e7cd9ae0_0
  • /data/data/####/ab88128ab69b3d44_0
  • /data/data/####/abbfc53d3d11dc66_0
  • /data/data/####/ac4dfe48-e8c8-4aaa-9c21-f0b9cfcd87b5.dex
  • /data/data/####/ac4dfe48-e8c8-4aaa-9c21-f0b9cfcd87b5.dex.flock (deleted)
  • /data/data/####/ac895a13210f75c7_0
  • /data/data/####/acb3b8e4428ede57_0
  • /data/data/####/ad0ab0a3846e9ea6_0
  • /data/data/####/ada50a2f6b89a4a7_0
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/b14f6028ffeab3ef_0
  • /data/data/####/b15cb31e0daff369_0 (deleted)
  • /data/data/####/b266ea5cd87cb8ab_0
  • /data/data/####/b2b45069752caa03_0
  • /data/data/####/b389392cdd6c3d17_0
  • /data/data/####/b62fdc0dd8217895_0
  • /data/data/####/b6bd0678b5fe6ce1_0
  • /data/data/####/b7a2794621acf38d_0
  • /data/data/####/b937bff71c5514f1_0
  • /data/data/####/b960d4d33087cb43_0
  • /data/data/####/bb4d8ffcb8448efb_0
  • /data/data/####/bb5e6f59f50e5241_0
  • /data/data/####/bb9b5423852ee814_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bd4fade29d7d12e6_0
  • /data/data/####/bd722c8a38752a82_0
  • /data/data/####/bff6dcdc72ad5d41_0
  • /data/data/####/c0254d739baed177_0
  • /data/data/####/c08fde37c58d9446_0
  • /data/data/####/c139830fa08cc96e_0
  • /data/data/####/c139830fa08cc96e_1
  • /data/data/####/c1b985a4462fdeb7_0
  • /data/data/####/c281f7888a4df1a5_0
  • /data/data/####/c2841a3ac7a6734a_0 (deleted)
  • /data/data/####/c29a6ee15665a880_0
  • /data/data/####/c2c818104e63a95a_0
  • /data/data/####/c2f21f3d41747605_0
  • /data/data/####/c414a8bac4a95724_0
  • /data/data/####/c414ca0779405f2f_0
  • /data/data/####/c46ba043eaac1485_0
  • /data/data/####/c4d7296ddb95928d_0
  • /data/data/####/c4ef1361e90122a4_0
  • /data/data/####/c54ee5c118c5000b_0
  • /data/data/####/c689e8193f73de10_0
  • /data/data/####/c6e848954fa4816b_0
  • /data/data/####/c76a5c1b3cc7aa9c_0
  • /data/data/####/c7f699bea1b1077c_0
  • /data/data/####/c7f699bea1b1077c_1
  • /data/data/####/c83e72ff43f7160f_0
  • /data/data/####/c87c03fa2b476e19_0
  • /data/data/####/cbdbca0830988ca4_0
  • /data/data/####/cc77a71d1e6cdae1_0
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/cd3944ba199e1520_0
  • /data/data/####/cd798bfb60e80b24_0
  • /data/data/####/ce06f62cedb24bb8_0
  • /data/data/####/cff16a92e5db6c51_0
  • /data/data/####/com.svtbcxi_preferences.xml
  • /data/data/####/d01f8e6ee761640c_0 (deleted)
  • /data/data/####/d053783e049ee221_0
  • /data/data/####/d0a21d8d0726c5d3_0
  • /data/data/####/d0e654a0b346d8cc_0
  • /data/data/####/d10f64d27168c24a_0
  • /data/data/####/d11ab2a640112800_0
  • /data/data/####/d176547e4e80a764_0
  • /data/data/####/d18448241a9699fc_0
  • /data/data/####/d30bf4ab4b1cf8ff_0
  • /data/data/####/d33d5fd8de91fa7f_0
  • /data/data/####/d33d5fd8de91fa7f_s
  • /data/data/####/d3f699767b2c784b_0
  • /data/data/####/d497a73fc0025441_0
  • /data/data/####/d53b3e6c767746c5_0
  • /data/data/####/d65588eedfb1d0b0_0
  • /data/data/####/d67f30d503ac8486_0
  • /data/data/####/d6ea771d2f00bc27_0
  • /data/data/####/d74ae5176699bf22_0
  • /data/data/####/dafcdac2aef95795_0
  • /data/data/####/db87cf4e1c611555_0
  • /data/data/####/db87cf4e1c611555_1
  • /data/data/####/dcf9723c0a0c1215_0
  • /data/data/####/dd08969630e1b74b_0
  • /data/data/####/dd27c3a86af5b22f_0
  • /data/data/####/dd3e5fb6b6aef45b_0
  • /data/data/####/de2e06416403853d_0
  • /data/data/####/de2e06416403853d_1
  • /data/data/####/de3b2a9ea571f75e_0
  • /data/data/####/deacd877190c8f55_0
  • /data/data/####/df3b8b3e4889150e_0
  • /data/data/####/df8797ac0b475a05_0
  • /data/data/####/dfca5c66340a07d4_0
  • /data/data/####/e030f0d4e3bcc82b_0
  • /data/data/####/e13c5e3bcaddcc25_0
  • /data/data/####/e1b2c4a379f9ab09_0
  • /data/data/####/e1bce4a966ac917b_0
  • /data/data/####/e294c3d7499992f4_0
  • /data/data/####/e2c2b0a3cbf0c677_0
  • /data/data/####/e300f6c7142a02c5_0 (deleted)
  • /data/data/####/e30de57075a86aec_0
  • /data/data/####/e448710b7971d178_0
  • /data/data/####/e466578ab3dbaf93_0
  • /data/data/####/e4a877fc13af311d_0
  • /data/data/####/e4f452ae9e2309e0_0
  • /data/data/####/e585f66bd2dde063_0
  • /data/data/####/e616a85fe1c18460_0
  • /data/data/####/e8829c8d0d9297cc_0
  • /data/data/####/e896b0f1fc1b6438_0
  • /data/data/####/e90552391dc62079_0
  • /data/data/####/eb35019136b9df66_0
  • /data/data/####/ec3008cc1cd1334e_0
  • /data/data/####/ec9b2aa6c608c702_0
  • /data/data/####/ecacdb6b8749d885_0
  • /data/data/####/ecbbc3e97414cdb3_0
  • /data/data/####/ed1e59d6e3822b29_0
  • /data/data/####/ed4444f50c9c8923_0
  • /data/data/####/ed5d6d9ae06b6206_0
  • /data/data/####/ee161672cf174ac6_0
  • /data/data/####/eec04f0906588c46_0
  • /data/data/####/ef7455bff21cea6f_0
  • /data/data/####/ef84b7c19441018c_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f24d980e4578c9c9_0
  • /data/data/####/f24d980e4578c9c9_s
  • /data/data/####/f420e2659f601ff7_0
  • /data/data/####/f4a7f662183dd5e5_0
  • /data/data/####/f5fa9c6556e1c73b_0
  • /data/data/####/f5fa9c6556e1c73b_1
  • /data/data/####/faae7919b34686c4_0
  • /data/data/####/fd2ed5dc79a11bd7_0
  • /data/data/####/fdfa4ada70a64df5_0
  • /data/data/####/fe6e05ca4d4e6506_0
  • /data/data/####/fe91003f72b74da5_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff2efaac62bf01c5_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/nVktJU.dex
  • /data/data/####/nVktJU.dex.flock (deleted)
  • /data/data/####/the-real-index
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.
Requests the system alert window permission.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android