Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Locker.17176

Added to the Dr.Web virus database: 2023-07-23

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Threat detection based on machine learning.
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) c####.liveja####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.0) v.dy####.com:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) galle####.vcmd####.com:443
  • TCP(TLS/1.0) 64.2####.165.94:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) pt-sta####.js####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.2) 64.2####.165.94:443
  • TCP(TLS/1.2) p####.google####.com:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • c####.liveja####.com
  • cdn1-sm####.ph####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.go####.com
  • m####.traffic####.net
  • p####.google####.com
  • p####.google####.com.####.8
  • pla####.google####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/00238a8e51d77ab0_0
  • /data/data/####/00da7ed3191ff439_0
  • /data/data/####/0134bfe6dc0472b4_0 (deleted)
  • /data/data/####/0293de76c70b9bc6_0
  • /data/data/####/0618dd4d04396436_0
  • /data/data/####/0652b01df81c3f9d_0 (deleted)
  • /data/data/####/065f0cba87f2ba12_0
  • /data/data/####/06fbe21da53bcf46_0
  • /data/data/####/070423cfc5b3e95a_0
  • /data/data/####/07e7f495ec7d85ce_0
  • /data/data/####/08803c7f485c59d7_0
  • /data/data/####/08917a0b88d0f142_0
  • /data/data/####/097321bc543faaf4_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0a61312c3ce937bc_0
  • /data/data/####/0a61312c3ce937bc_s
  • /data/data/####/0aa6b0fb2ffb75b9_0
  • /data/data/####/0b4dc7da95951385_0 (deleted)
  • /data/data/####/0bc24e998cb0ff8d_0
  • /data/data/####/0cb83a19a59f2cfb_0
  • /data/data/####/0cebe27de571d78f_0
  • /data/data/####/0d20569c895efed1_0
  • /data/data/####/0e75b2d412bb60a6_0
  • /data/data/####/10bc5fde25b94ed1_0
  • /data/data/####/10bc5fde25b94ed1_1
  • /data/data/####/117725669bfdaa61_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/12933b7606cf3595_0
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/1388d2ea9854cd70_0
  • /data/data/####/138d35b607755729_0
  • /data/data/####/13d1b1587015c6b6_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/144a4fc60fc7bfb0_0
  • /data/data/####/146d06d154de130f_0
  • /data/data/####/14cc6c83ebafddaf_0
  • /data/data/####/15ff67d7f790617c_0
  • /data/data/####/160c9ca1caafd1ec_0
  • /data/data/####/160e4788eb2deb62_0 (deleted)
  • /data/data/####/176e456ad06b8f5c_0
  • /data/data/####/18ac60a2f70217ff_0
  • /data/data/####/18b2224d6116098d_0
  • /data/data/####/18c0b3059e9a2cd3_0
  • /data/data/####/19b41c20310f10a7_0
  • /data/data/####/1a1ef120be058aab_0
  • /data/data/####/1a9bb6968f3b3bce_0
  • /data/data/####/1b6a6df9215c5f72_0
  • /data/data/####/1c5fd35dbc757da9_0
  • /data/data/####/1c60a9bf13a2f848_0
  • /data/data/####/1d31681f96e3c8eb_0
  • /data/data/####/1dca007ecd92b123_0
  • /data/data/####/1e5d7a667cae4c6e_0
  • /data/data/####/1f03c858cd5c189b_0
  • /data/data/####/1f7803a0937d6db4_0
  • /data/data/####/1fdfdf9572a4e8c4_0
  • /data/data/####/1ff48deb6764628a_0
  • /data/data/####/20276a125874cba7_0
  • /data/data/####/20284fccf2f0cd6e_0
  • /data/data/####/219937642c5998dd_0
  • /data/data/####/23673bc92c13fbe3_0
  • /data/data/####/23e289af64782805_0
  • /data/data/####/255c6f2da743cdc0_0
  • /data/data/####/25f3463e1c2b5718_0
  • /data/data/####/26869e0c35f1a120_0
  • /data/data/####/26869e0c35f1a120_1
  • /data/data/####/273cd67096ca9b71_0
  • /data/data/####/28ec2d8842be25b3_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/29973d7ab5507f60_0
  • /data/data/####/29bf5707f6f5e718_0
  • /data/data/####/2ad3f1606b0b34b7_0
  • /data/data/####/2b5df817a62f29fd_0
  • /data/data/####/2c7e61fd2ea2adbc_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d039b4fa1b20466_0
  • /data/data/####/2e5aacc64e4c970d_0
  • /data/data/####/30307017f43d2bf6_0
  • /data/data/####/30307017f43d2bf6_s
  • /data/data/####/308bb017a2e1783e_0
  • /data/data/####/32107d13bd3f33f4_0
  • /data/data/####/3241a2abdc0d9e44_0
  • /data/data/####/329826c457f4f130_0
  • /data/data/####/331a777a68d1ec1c_0
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/343c65bcd4dddd5b_0
  • /data/data/####/345285701b3c74aa_0
  • /data/data/####/34649aa3a79c1754_0 (deleted)
  • /data/data/####/34a522e70ffed0e5_0
  • /data/data/####/34a522e70ffed0e5_1
  • /data/data/####/34b09b4571a6edfc_0
  • /data/data/####/355b84a63488b3d0_0
  • /data/data/####/3610e95e29d16a1e_0
  • /data/data/####/3639dfcdb38fa620_0
  • /data/data/####/3778c3ff3510e7c2_0
  • /data/data/####/37c4c8df92d952a6_0
  • /data/data/####/38b3b93027851572_0
  • /data/data/####/39798ea98ce8f4c8_0
  • /data/data/####/3a140542c7237f9c_0
  • /data/data/####/3b49c339781f24d5_0
  • /data/data/####/3d73325b5750b8bb_0
  • /data/data/####/3d772c103e0dc867_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3f36508165932c17_0
  • /data/data/####/3ff9bb5d5f3c7b7d_0
  • /data/data/####/400792e9e2bec210_0 (deleted)
  • /data/data/####/404fca90fcc8b83f_0
  • /data/data/####/404fca90fcc8b83f_1
  • /data/data/####/41201213438aae6d_0
  • /data/data/####/41e91095cd7e4f9f_0
  • /data/data/####/422919baddae6984_0 (deleted)
  • /data/data/####/42f6b661ebc929f4_0
  • /data/data/####/48767bd50f96f619_0
  • /data/data/####/48ae36a8f404fed4_0
  • /data/data/####/48ae36a8f404fed4_1
  • /data/data/####/4a357a4ae2ed8d38_0
  • /data/data/####/4a7d5b2e8e252c57_0
  • /data/data/####/4ac31db319f68191_0
  • /data/data/####/4b482d9f778f0483_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4ce1ab0580d20077_0
  • /data/data/####/4ce1ab0580d20077_1
  • /data/data/####/4d00a239c975d270_0
  • /data/data/####/4df9b66c7c05361a_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/4fb3a298d0046c99_0
  • /data/data/####/4fbdc275b4479546_0
  • /data/data/####/5143ca52fb98fdaf_0
  • /data/data/####/514e9e0b3402c746_0
  • /data/data/####/516898c5e452429a_0 (deleted)
  • /data/data/####/51c03a86af60e5c7_0
  • /data/data/####/51f31a08a14bf511_0
  • /data/data/####/536c5f6e24b60b74_0
  • /data/data/####/5571a526ba1a4974_0
  • /data/data/####/5579e9cb4024f40d_0
  • /data/data/####/56f802f343ffe37a_0
  • /data/data/####/57db4853d20c9ccb_0
  • /data/data/####/588056b1f3e10161_0
  • /data/data/####/597c7504dfdf291b_0
  • /data/data/####/5a9a3e4049b3cfb1_0
  • /data/data/####/5aad641a04c25277_0
  • /data/data/####/5ad5155de91cec36_0
  • /data/data/####/5b0026553351630e_0
  • /data/data/####/5b4abc2bedee19e8_0
  • /data/data/####/5ba99d35a42534c9_0
  • /data/data/####/5bd9bb61c199c6c2_0
  • /data/data/####/5c0a584d8551dc5c_0 (deleted)
  • /data/data/####/5c599f4a04756482_0
  • /data/data/####/5c81153b1d451ade_0 (deleted)
  • /data/data/####/5c8124f6b842cc52_0
  • /data/data/####/5c8124f6b842cc52_1
  • /data/data/####/5ca939c7deedcb34_0
  • /data/data/####/5ccfb4fc15070ca4_0
  • /data/data/####/5cdc2048bff63a2e_0
  • /data/data/####/5e8285f970616ba5_0
  • /data/data/####/6007fa171938b538_0
  • /data/data/####/604266e7d788468d_0
  • /data/data/####/60639ce8b8e958a7_0
  • /data/data/####/609cd5bff0a7875d_0
  • /data/data/####/621d0e64af6d9a1b_0
  • /data/data/####/629969b8324f8e54_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/638d110599e2f23f_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/6453d2b6ddaf56ed_0
  • /data/data/####/64722d20dd9b8059_0
  • /data/data/####/64bd479c901d40a0_0
  • /data/data/####/65415f216dad930a_0
  • /data/data/####/65ca9e7b885b6026_0
  • /data/data/####/664e2183cdf6a7c8_0
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/67ee89322a4e404e_0
  • /data/data/####/68986941fc82c5b4_0
  • /data/data/####/69b38e49ea2f3ee4_0
  • /data/data/####/69dbd3dbfd13959d_0
  • /data/data/####/69dbd3dbfd13959d_1
  • /data/data/####/6b2c7361-0b5a-45b6-b61e-bb05dbee46fb.dex
  • /data/data/####/6b2c7361-0b5a-45b6-b61e-bb05dbee46fb.dex.flock (deleted)
  • /data/data/####/6ca8e75da5747077_0
  • /data/data/####/6d658f0afb5f9d07_0
  • /data/data/####/6d6ae115068b0c8c_0
  • /data/data/####/6d88a21bb0a5ee6f_0 (deleted)
  • /data/data/####/6dbd08cace7f10df_0
  • /data/data/####/6e60402d447fdb05_0
  • /data/data/####/70206293812224ce_0
  • /data/data/####/70206293812224ce_s
  • /data/data/####/7054b56eb5326142_0
  • /data/data/####/710f4cd27a2a3cff_0
  • /data/data/####/7147df6c4bfeee2e_0
  • /data/data/####/719511f96d521c07_0
  • /data/data/####/71ccc6b959ad23c3_0
  • /data/data/####/723081c927855ab5_0
  • /data/data/####/723081c927855ab5_1
  • /data/data/####/72cd4501977cab30_0
  • /data/data/####/731c6a868b1d78d7_0
  • /data/data/####/731f4855cd62d098_0
  • /data/data/####/735b5e776fbd4df2_0
  • /data/data/####/73ef86876f3b551b_0 (deleted)
  • /data/data/####/7484b032cdee0e87_0
  • /data/data/####/75fff9f4906ad7b7_0
  • /data/data/####/77a0bd444f198fe6_0
  • /data/data/####/7857e1f70dfdf631_0
  • /data/data/####/788e2bd6919e51b1_0
  • /data/data/####/79aa09e86b94dcf9_0
  • /data/data/####/7a5eceabd216faa0_0
  • /data/data/####/7c0c3670ce8c6ef4_0
  • /data/data/####/7c0c3670ce8c6ef4_s
  • /data/data/####/7c127aa3e2948cb3_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c5958a416dea722_0
  • /data/data/####/7c5958a416dea722_1
  • /data/data/####/7c840dcbab62e783_0
  • /data/data/####/7cf7f895ef00b94b_0
  • /data/data/####/7d20f1828d7b1cbe_0
  • /data/data/####/7d5452cfc1b2c8d3_0
  • /data/data/####/7e75b8e8e17e5881_0
  • /data/data/####/7e75b8e8e17e5881_s
  • /data/data/####/7e93923c44b5b8d0_0
  • /data/data/####/802f03674d0eea32_0
  • /data/data/####/810e5cdf8e5d2d41_0
  • /data/data/####/81297a439c774582_0
  • /data/data/####/81dc12bb35bd05d3_0
  • /data/data/####/8270bd3a1e4c095d_0
  • /data/data/####/852aefd2dabd606a_0 (deleted)
  • /data/data/####/855d4806184d2e0a_0
  • /data/data/####/855d7a104d58c708_0
  • /data/data/####/855d7a104d58c708_1
  • /data/data/####/85678c6df50718b8_0
  • /data/data/####/86d3b46624781641_0
  • /data/data/####/8753fa2389d0efa0_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/88f0111294ed13ee_0 (deleted)
  • /data/data/####/8964ea4ae9486c75_0 (deleted)
  • /data/data/####/898f4048f09cc6bd_0
  • /data/data/####/89964467ed2a6283_0
  • /data/data/####/8a4f8ebcbacadc6b_0
  • /data/data/####/8a4f8ebcbacadc6b_1
  • /data/data/####/8a5d930b1c81ed82_0
  • /data/data/####/8a7b7cd8986b8d74_0
  • /data/data/####/8ac7579fd0e7bbe5_0
  • /data/data/####/8ac7579fd0e7bbe5_1
  • /data/data/####/8c254af9d88d9949_0
  • /data/data/####/8c2ae296c491af3f_0
  • /data/data/####/8c4b981c4ca0f3d9_0
  • /data/data/####/8ced9904ab99cc7f_0
  • /data/data/####/8db8ef6f042ea924_0
  • /data/data/####/8e745a5deaafb374_0
  • /data/data/####/8ec19d16881d90ca_0
  • /data/data/####/8ee312de0e400c67_0
  • /data/data/####/8fcc900296f7d6a3_0
  • /data/data/####/9031303831ad7b2b_0
  • /data/data/####/906e73bf9e2f2a4b_0
  • /data/data/####/913e556374075ac5_0
  • /data/data/####/91786464bc51e875_0
  • /data/data/####/917c0dc0b619ae04_0
  • /data/data/####/91b0c31e0be65530_0
  • /data/data/####/92981146dce670c9_0
  • /data/data/####/92b74dc6571d53c6_0
  • /data/data/####/92cbe3eb92ad9266_0
  • /data/data/####/93240e811fc3997e_0
  • /data/data/####/9344398be7abc103_0 (deleted)
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/950946f11acb41e1_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/961bdbab5be55ede_0
  • /data/data/####/96285a7b357de963_0
  • /data/data/####/969f4aff55d97727_0
  • /data/data/####/97886369afec0b00_0
  • /data/data/####/98035feb8dc60e2b_0
  • /data/data/####/983d931d7a653552_0
  • /data/data/####/991311957b842bdf_0
  • /data/data/####/993ef5e96d789e71_0
  • /data/data/####/99e1d7f70792b254_0
  • /data/data/####/9a29b26e3147f9de_0
  • /data/data/####/9aa94c6f444426b7_0
  • /data/data/####/9ae1ed240112f4c8_0
  • /data/data/####/9afc50d78b5a8ebe_0
  • /data/data/####/9b71edf832d0ae4c_0
  • /data/data/####/9dbff11187e8108c_0
  • /data/data/####/9e34b6b74befeb40_0
  • /data/data/####/9e635611ec969e75_0
  • /data/data/####/9f075ac9f9197c52_0
  • /data/data/####/9ff02eea4dd44594_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Cookies-journal (deleted)
  • /data/data/####/Databases.db-journal
  • /data/data/####/GJiVnZOh.dex
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/VZWpVr.dex
  • /data/data/####/VZWpVr.dex.flock (deleted)
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a050780ad9a0b4e3_0
  • /data/data/####/a0e3f4e8c2461ae8_0
  • /data/data/####/a136137dcc3a33f7_0
  • /data/data/####/a1752b35dd94e007_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a1c50fb91d9cc9f7_0
  • /data/data/####/a1de6a4ab6f56e95_0
  • /data/data/####/a3f1ff315e7db11a_0
  • /data/data/####/a3f1ff315e7db11a_1
  • /data/data/####/a4156aa71168bfae_0
  • /data/data/####/a41decec-c1a2-4755-b8cc-85da0dcbfb28.dex
  • /data/data/####/a41decec-c1a2-4755-b8cc-85da0dcbfb28.dex.flock (deleted)
  • /data/data/####/a44922c962a8cae1_0
  • /data/data/####/a4a86499d9012f9b_0
  • /data/data/####/a55c30def9b9a97b_0
  • /data/data/####/a7c66b9e37d05aab_0
  • /data/data/####/a964c902f1f31db2_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/a9f229848c1f9f23_0
  • /data/data/####/aa164e2b7cfa8203_0
  • /data/data/####/aa3e9c3bd180fddb_0
  • /data/data/####/aad4be480424f9bb_0
  • /data/data/####/ac13c387c466680d_0
  • /data/data/####/ac13c387c466680d_s
  • /data/data/####/ac973ee7b6d8febe_0
  • /data/data/####/acb3b8e4428ede57_0
  • /data/data/####/acb5c109341c6901_0
  • /data/data/####/ad0ab0a3846e9ea6_0
  • /data/data/####/ad5b168b5ed52bc5_0 (deleted)
  • /data/data/####/ada50a2f6b89a4a7_0
  • /data/data/####/ae585b04064c2f7c_0
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/af55b66b2853a8e2_0
  • /data/data/####/af55b66b2853a8e2_1
  • /data/data/####/afcc10aba53829f8_0
  • /data/data/####/b003b3d4d04019d6_0
  • /data/data/####/b02e07811b93dfbd_0 (deleted)
  • /data/data/####/b03acc385ffbeaf8_0
  • /data/data/####/b0705fdc5a27d44f_0
  • /data/data/####/b0705fdc5a27d44f_1
  • /data/data/####/b0c60a04f4f952b9_0
  • /data/data/####/b0d0ccd1f92c3da2_0
  • /data/data/####/b12f9ae004acc81d_0
  • /data/data/####/b13a05f164c96302_0
  • /data/data/####/b14808a180c50e2e_0
  • /data/data/####/b1f93927bd84b0bb_0
  • /data/data/####/b2b45069752caa03_0
  • /data/data/####/b32bda7bd06ff1e1_0
  • /data/data/####/b337fc22439c2dbf_0
  • /data/data/####/b418fc573d83e63d_0
  • /data/data/####/b4d55937d2b947cd_0
  • /data/data/####/b4eef6df3a94cb48_0
  • /data/data/####/b5d571bcf26b1598_0
  • /data/data/####/b6184a6cb5692ece_0
  • /data/data/####/b7a2794621acf38d_0
  • /data/data/####/b84eab1fcd57fa91_0
  • /data/data/####/b86d5aaa935cbac6_0
  • /data/data/####/b8de74d958316c70_0
  • /data/data/####/b905ed819aa2234d_0
  • /data/data/####/baafc4ea1b0e3b5d_0
  • /data/data/####/bad36ec02516b867_0
  • /data/data/####/bb10749c9fe1d23d_0
  • /data/data/####/bb6dbee5922ee14d_0
  • /data/data/####/bb9b5423852ee814_0
  • /data/data/####/bc157e730f3bd184_0
  • /data/data/####/bcaad22cd8953116_0
  • /data/data/####/bcebbb41c46ee1f9_0
  • /data/data/####/bcf796c81f6d8345_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bda6d8b9d1d5892a_0
  • /data/data/####/bf3c59600da39618_0
  • /data/data/####/bf70cc938786ec6d_0
  • /data/data/####/bf93ec309865b001_0
  • /data/data/####/bfe7d92b5b3c726a_0
  • /data/data/####/bff6dcdc72ad5d41_0
  • /data/data/####/c04962c4c73af5f2_0
  • /data/data/####/c05dbbd8067dce6b_0
  • /data/data/####/c09b11e30f2a8d6e_0
  • /data/data/####/c0a5ba2d33b289a2_0
  • /data/data/####/c0dd57aa85e05435_0
  • /data/data/####/c34f16d3646a4b13_0
  • /data/data/####/c3e8ba353bea5015_0
  • /data/data/####/c430bb7e1f3d21f3_0
  • /data/data/####/c433ab12aa084f9a_0
  • /data/data/####/c4a27f43ba3860ac_0
  • /data/data/####/c4d7296ddb95928d_0
  • /data/data/####/c4ddfa0460d481be_0
  • /data/data/####/c54ee5c118c5000b_0
  • /data/data/####/c6e848954fa4816b_0
  • /data/data/####/c704fe4e6415e91a_0
  • /data/data/####/c76a5c1b3cc7aa9c_0
  • /data/data/####/c78cf62a88606672_0
  • /data/data/####/c78cf62a88606672_1
  • /data/data/####/c87c03fa2b476e19_0
  • /data/data/####/cb21163042d8660e_0
  • /data/data/####/cb21163042d8660e_s
  • /data/data/####/cb7c2ba667649b8d_0
  • /data/data/####/cb85a05460978c01_0
  • /data/data/####/ccb1918df5c1ed67_0
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/ce26f43ffb6b308e_0
  • /data/data/####/cff16a92e5db6c51_0
  • /data/data/####/com.qtx_preferences.xml
  • /data/data/####/d11ab2a640112800_0
  • /data/data/####/d14003d469bd09a8_0
  • /data/data/####/d1da459e01307c49_0
  • /data/data/####/d298261e7625dd06_0
  • /data/data/####/d33d5fd8de91fa7f_0
  • /data/data/####/d33d5fd8de91fa7f_s
  • /data/data/####/d3593c30fe553d7e_0
  • /data/data/####/d3f9c68e0b18830c_0
  • /data/data/####/d3f9c68e0b18830c_1
  • /data/data/####/d3fb1480804a0837_0
  • /data/data/####/d43b8ad7a8817370_0
  • /data/data/####/d4ff65941fd192a3_0
  • /data/data/####/d50d42d12eaf166f_0
  • /data/data/####/d5a5a745ea0506b5_0
  • /data/data/####/d5d654b69620d846_0
  • /data/data/####/d5eed6a4131f8ddf_0
  • /data/data/####/d67f30d503ac8486_0
  • /data/data/####/d6c450d0-4620-4117-995c-0c07bea14e05.dex
  • /data/data/####/d6c450d0-4620-4117-995c-0c07bea14e05.dex.flock (deleted)
  • /data/data/####/d74ae5176699bf22_0
  • /data/data/####/d77d655ec40a4bfd_0
  • /data/data/####/d89c621233f08263_0
  • /data/data/####/d97687764f00595a_0
  • /data/data/####/da96ff9599c8ad50_0
  • /data/data/####/dafcdac2aef95795_0
  • /data/data/####/db10a687dc779be0_0
  • /data/data/####/db10a687dc779be0_1
  • /data/data/####/db49680b955394b5_0
  • /data/data/####/dc17956fec9ba63f_0
  • /data/data/####/dc2509af90653fb9_0
  • /data/data/####/dcf9723c0a0c1215_0
  • /data/data/####/dd3e5fb6b6aef45b_0
  • /data/data/####/df29368180c7b429_0
  • /data/data/####/dfca5c66340a07d4_0
  • /data/data/####/e030f0d4e3bcc82b_0
  • /data/data/####/e0d83eb4e6cd321a_0
  • /data/data/####/e0fdf7d86f9d81c4_0
  • /data/data/####/e29a027067023812_0 (deleted)
  • /data/data/####/e35bf22ec48a3094_0
  • /data/data/####/e74026a43bc75cbe_0
  • /data/data/####/e88a19bbac029a41_0
  • /data/data/####/e896b0f1fc1b6438_0
  • /data/data/####/e90552391dc62079_0
  • /data/data/####/e9767c8b01d94457_0
  • /data/data/####/eac6770594f25937_0
  • /data/data/####/eb00d06a265ea773_0
  • /data/data/####/eb00d06a265ea773_1
  • /data/data/####/ec3008cc1cd1334e_0
  • /data/data/####/ec9b2aa6c608c702_0
  • /data/data/####/ecacdb6b8749d885_0
  • /data/data/####/ed1e59d6e3822b29_0
  • /data/data/####/ed5d6d9ae06b6206_0
  • /data/data/####/ee1e28a9b2d0db2d_0
  • /data/data/####/ee49e188b9f930d9_0
  • /data/data/####/ee49e188b9f930d9_1
  • /data/data/####/eecfc1d1e7ea7cb0_0
  • /data/data/####/eed091e9fc853d23_0
  • /data/data/####/eed091e9fc853d23_1
  • /data/data/####/ef7455bff21cea6f_0
  • /data/data/####/ef84b7c19441018c_0
  • /data/data/####/efba7f119d0c2ad1_0
  • /data/data/####/efba7f119d0c2ad1_1
  • /data/data/####/efca0f5fae8e9209_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f0b920685a39e863_0
  • /data/data/####/f1cd06b84aeb5690_0
  • /data/data/####/f1cd06b84aeb5690_1
  • /data/data/####/f26704702001957a_0
  • /data/data/####/f28346ea19d3daab_0
  • /data/data/####/f2ab4059d4bd03c9_0
  • /data/data/####/f3d53db9d746804f_0
  • /data/data/####/f4a7f662183dd5e5_0
  • /data/data/####/f60af6ce45522b89_0
  • /data/data/####/f7c9f819cbb323b3_0
  • /data/data/####/f94cf0ef6620e077_0
  • /data/data/####/faf95043d1de6e49_0
  • /data/data/####/fd0dc7f4fb4b9836_0
  • /data/data/####/fd2ed5dc79a11bd7_0
  • /data/data/####/fd9b8611100ca8c7_0
  • /data/data/####/fdb5bbea58fe9728_0 (deleted)
  • /data/data/####/fdfa4ada70a64df5_0
  • /data/data/####/fe424b794bd9d633_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff2efaac62bf01c5_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/temp-index
  • /data/data/####/the-real-index
  • /data/data/####/xGCPkup.dex
  • /data/data/####/xGCPkup.dex.flock (deleted)
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android