Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Locker.17211

Added to the Dr.Web virus database: 2023-07-23

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) 64.2####.165.94:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) galle####.vcmd####.com:443
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) ht-####.a####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) c####.liveja####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) pt-sta####.js####.com:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) and####.google####.com:443
  • TCP(TLS/1.2) 64.2####.165.94:443
  • TCP(TLS/1.2) and####.google####.com:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • and####.google####.com
  • c####.liveja####.com
  • cdn1-sm####.ph####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • gmscomp####.google####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/000001.dbtmp
  • /data/data/####/0015d056bdd18816_0
  • /data/data/####/00238a8e51d77ab0_0
  • /data/data/####/00da7ed3191ff439_0
  • /data/data/####/011296c6de43a971_0
  • /data/data/####/0117c4d4627d2769_0
  • /data/data/####/01d499bc2f69c353_0
  • /data/data/####/020933333b5251ed_0
  • /data/data/####/0270fadd792b01d1_0
  • /data/data/####/047e0ae003260676_0
  • /data/data/####/048782789bb22c9f_0
  • /data/data/####/04c2d9f8066a61fb_0
  • /data/data/####/04e44d98a656d9fd_0
  • /data/data/####/05b5f9a52765cee8_0
  • /data/data/####/05f919250f0c6680_0
  • /data/data/####/062da087c827f6f7_0
  • /data/data/####/06fbe21da53bcf46_0
  • /data/data/####/0759315568ead34c_0
  • /data/data/####/07e7f495ec7d85ce_0
  • /data/data/####/08803c7f485c59d7_0
  • /data/data/####/08d46f1cedaff2fe_0
  • /data/data/####/097321bc543faaf4_0
  • /data/data/####/09823edf3e98be85_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0a61312c3ce937bc_0
  • /data/data/####/0a61312c3ce937bc_s
  • /data/data/####/0aa6b0fb2ffb75b9_0
  • /data/data/####/0bc24e998cb0ff8d_0
  • /data/data/####/0d20569c895efed1_0
  • /data/data/####/0e75b2d412bb60a6_0
  • /data/data/####/0ee18ba303ff4815_0
  • /data/data/####/0f6839ece9dffc14_0
  • /data/data/####/0f6839ece9dffc14_1
  • /data/data/####/10b540e81355b00f_0
  • /data/data/####/10bc5fde25b94ed1_0
  • /data/data/####/10bc5fde25b94ed1_1
  • /data/data/####/10c2457ebe688c81_0
  • /data/data/####/10e5f51bbc6c8cec_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/12937cadb2308de7_0
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/12bec23b784e1f0f_0
  • /data/data/####/12e52d671a5d4a06_0 (deleted)
  • /data/data/####/138d35b607755729_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13d854285369a8c7_0 (deleted)
  • /data/data/####/13d950bb8f63a073_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/146d06d154de130f_0
  • /data/data/####/14cc6c83ebafddaf_0
  • /data/data/####/15fb6cd4a78297e9_0 (deleted)
  • /data/data/####/1861f623c9c96050_0
  • /data/data/####/18b2224d6116098d_0
  • /data/data/####/18c0b3059e9a2cd3_0
  • /data/data/####/19b41c20310f10a7_0
  • /data/data/####/1a03b3f7851e1578_0
  • /data/data/####/1a1ef120be058aab_0
  • /data/data/####/1aeb26d53fdf6cdf_0
  • /data/data/####/1b6a6df9215c5f72_0
  • /data/data/####/1c60a9bf13a2f848_0
  • /data/data/####/1dca007ecd92b123_0
  • /data/data/####/1f03c858cd5c189b_0
  • /data/data/####/1f2710207c06c3b0_0
  • /data/data/####/1f89a4680fe98ce0_0
  • /data/data/####/1fdfdf9572a4e8c4_0
  • /data/data/####/1ff4950a6d1bdfb2_0
  • /data/data/####/20276a125874cba7_0
  • /data/data/####/20284fccf2f0cd6e_0
  • /data/data/####/20f8ee660cf3336e_0
  • /data/data/####/21986f86f2b2cca7_0
  • /data/data/####/23673bc92c13fbe3_0
  • /data/data/####/23db4dc426b90f3c_0
  • /data/data/####/23e289af64782805_0
  • /data/data/####/24b20b0e69d901ee_0
  • /data/data/####/253db71cfe15d4bd_0
  • /data/data/####/254433d1e71f246c_0
  • /data/data/####/255c6f2da743cdc0_0
  • /data/data/####/26869e0c35f1a120_0
  • /data/data/####/26869e0c35f1a120_1
  • /data/data/####/275bf31fc9174fb5_0
  • /data/data/####/28108a05fbb7d573_0
  • /data/data/####/28f62e44512edc96_0
  • /data/data/####/28fe10886cd79777_0 (deleted)
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/2a95151305aed423_0
  • /data/data/####/2ae27119344d1f41_0
  • /data/data/####/2b03b7b05f2cc069_0
  • /data/data/####/2b5df817a62f29fd_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d6d9480fe658ffd_0
  • /data/data/####/30307017f43d2bf6_0
  • /data/data/####/30307017f43d2bf6_s
  • /data/data/####/304f973ca243aa3d_0
  • /data/data/####/32107d13bd3f33f4_0
  • /data/data/####/32958eb166700d5e_0
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/335b05941506b140_0
  • /data/data/####/343c65bcd4dddd5b_0
  • /data/data/####/34a522e70ffed0e5_0
  • /data/data/####/34a522e70ffed0e5_1
  • /data/data/####/34f4f69bc1d8a32f_0 (deleted)
  • /data/data/####/353b27e0a17a260e_0
  • /data/data/####/355b84a63488b3d0_0
  • /data/data/####/35fb639df7a2cca8_0
  • /data/data/####/3610e95e29d16a1e_0
  • /data/data/####/3639dfcdb38fa620_0
  • /data/data/####/36bcd0ff197616a4_0
  • /data/data/####/378a2afc2732d74f_0
  • /data/data/####/37c4c8df92d952a6_0
  • /data/data/####/394cce8b6569c384_0
  • /data/data/####/399c3317c31c8642_0
  • /data/data/####/39f0f5b33b71b709_0
  • /data/data/####/3a140542c7237f9c_0
  • /data/data/####/3b1161fbeeb3a923_0
  • /data/data/####/3b1161fbeeb3a923_1
  • /data/data/####/3c3a28b337a2db7e_0
  • /data/data/####/3d244073c8634bca_0
  • /data/data/####/3d293fec38e19e33_0
  • /data/data/####/3d73325b5750b8bb_0
  • /data/data/####/3dd7155d93a1fed9_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3f272aca370f27d2_0
  • /data/data/####/3f27d1ba04e742c8_0
  • /data/data/####/3f27d1ba04e742c8_1
  • /data/data/####/3f34ef208c734bc9_0 (deleted)
  • /data/data/####/3f9c592d9f7efa22_0
  • /data/data/####/3ffb769005f85fce_0
  • /data/data/####/404fca90fcc8b83f_0
  • /data/data/####/404fca90fcc8b83f_1
  • /data/data/####/411cc488e9122696_0
  • /data/data/####/41492c80a610cd32_0
  • /data/data/####/4203a0a11f052e6d_0
  • /data/data/####/424a844b97b3df46_0
  • /data/data/####/4282d57dbebb1b47_0
  • /data/data/####/42f6b661ebc929f4_0
  • /data/data/####/432a7b16a2477094_0
  • /data/data/####/43548953f24fc917_0
  • /data/data/####/43add253d3196048_0
  • /data/data/####/4481699d00a5de94_0
  • /data/data/####/448a1373a92e3548_0
  • /data/data/####/45440df98dd6e1a5_0
  • /data/data/####/468e01c1fcb8bd71_0
  • /data/data/####/474960683ca14002_0
  • /data/data/####/47d94c5e9bb4f5c7_0
  • /data/data/####/48685ba339aeb85b_0 (deleted)
  • /data/data/####/48767bd50f96f619_0
  • /data/data/####/48ae36a8f404fed4_0
  • /data/data/####/48ae36a8f404fed4_1
  • /data/data/####/4a357a4ae2ed8d38_0
  • /data/data/####/4a7d5b2e8e252c57_0
  • /data/data/####/4a89fdaf34446b94_0
  • /data/data/####/4afd97f81e073633_0
  • /data/data/####/4c0a873319a07065_0
  • /data/data/####/4c3e02e17f7a05ae_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4ce1ab0580d20077_0
  • /data/data/####/4ce1ab0580d20077_1
  • /data/data/####/4d00a239c975d270_0
  • /data/data/####/4e059e79a6804a89_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/50f182e1c3d7352b_0
  • /data/data/####/5126303d73de4334_0
  • /data/data/####/514e9e0b3402c746_0
  • /data/data/####/515da17fb0db6dc2_0
  • /data/data/####/51828a8553edbd39_0
  • /data/data/####/51c03a86af60e5c7_0
  • /data/data/####/52928d02c3e8f856_0
  • /data/data/####/52e2ee53f8d5a284_0
  • /data/data/####/530083c80e4d0b1c_0
  • /data/data/####/530e1859aa657b7c_0
  • /data/data/####/54d0188dfd2bec66_0
  • /data/data/####/550fa898b1aa05db_0
  • /data/data/####/5517b114ea7879fa_0 (deleted)
  • /data/data/####/5571a526ba1a4974_0
  • /data/data/####/5614eb79a5b0e38e_0
  • /data/data/####/56ca75bf377dd1a4_0
  • /data/data/####/578cc2bb1c7be1cf_0
  • /data/data/####/5816f873679ee3ec_0
  • /data/data/####/588056b1f3e10161_0
  • /data/data/####/58b3696069218ba2_0
  • /data/data/####/58b3696069218ba2_1
  • /data/data/####/58bb09415e8b6a1b_0
  • /data/data/####/597c7504dfdf291b_0
  • /data/data/####/59f8385b031ae421_0
  • /data/data/####/5a0bb955ee46f908_0
  • /data/data/####/5a44e2418a965539_0
  • /data/data/####/5bd9bb61c199c6c2_0
  • /data/data/####/5beff771db0438bf_0
  • /data/data/####/5c76e5e9dd7b1d7b_0
  • /data/data/####/5c8124f6b842cc52_0
  • /data/data/####/5c8124f6b842cc52_1
  • /data/data/####/5ce577687323a903_0
  • /data/data/####/5d683db1ce5d24c3_0
  • /data/data/####/5e2d132b97d8b30c_0
  • /data/data/####/5e2d132b97d8b30c_1
  • /data/data/####/5ea3f638f586fc71_0
  • /data/data/####/5ea3f638f586fc71_1
  • /data/data/####/5ef6cb363c3bbe2d_0
  • /data/data/####/5f6bdd293d4350c7_0
  • /data/data/####/60560c5a4803c975_0
  • /data/data/####/6086f05f872a4072_0
  • /data/data/####/609cd5bff0a7875d_0
  • /data/data/####/60e65095bfe87ca7_0
  • /data/data/####/61a1b58fbe187bbf_0
  • /data/data/####/61c2682f0e78587a_0
  • /data/data/####/628bc57dc6522ec1_0
  • /data/data/####/629969b8324f8e54_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/6495ac9722e24b59_0
  • /data/data/####/65415f216dad930a_0
  • /data/data/####/65ca9e7b885b6026_0
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/67ee89322a4e404e_0
  • /data/data/####/68986941fc82c5b4_0
  • /data/data/####/6900f6f3c0f78c07_0
  • /data/data/####/693446326105833f_0
  • /data/data/####/69486c4ed23340f8_0
  • /data/data/####/69486c4ed23340f8_1
  • /data/data/####/69dbd3dbfd13959d_0
  • /data/data/####/69dbd3dbfd13959d_1
  • /data/data/####/6a31ba252f8d91e7_0
  • /data/data/####/6bc15b6a1820001f_0
  • /data/data/####/6c98efda04df9170_0
  • /data/data/####/6ca8e75da5747077_0
  • /data/data/####/6cf40482e8e69783_0
  • /data/data/####/6d2c5f6061feb457_0
  • /data/data/####/6d4c738691b51598_0
  • /data/data/####/6d59caae7d85f890_0
  • /data/data/####/6edc0726e108ad96_0
  • /data/data/####/6fc2ab214b38e216_0
  • /data/data/####/6fccdbd2b3b10adb_0
  • /data/data/####/6fd1cc4e719ee8bc_0
  • /data/data/####/7054b56eb5326142_0
  • /data/data/####/7070ba9d9e292d7f_0
  • /data/data/####/7147df6c4bfeee2e_0
  • /data/data/####/71795e1fc4b0df1e_0
  • /data/data/####/71ccc6b959ad23c3_0
  • /data/data/####/723081c927855ab5_0
  • /data/data/####/723081c927855ab5_1
  • /data/data/####/72cd4501977cab30_0
  • /data/data/####/731c6a868b1d78d7_0
  • /data/data/####/731f4855cd62d098_0
  • /data/data/####/735b5e776fbd4df2_0
  • /data/data/####/7387a061ad84992e_0
  • /data/data/####/753d6d78bca7ac18_0
  • /data/data/####/759c583c6c12ed2b_0
  • /data/data/####/765d680c200c2967_0
  • /data/data/####/7857e1f70dfdf631_0
  • /data/data/####/788e2bd6919e51b1_0
  • /data/data/####/79b075f4bb0bfc53_0
  • /data/data/####/7a5a297c53e12fa3_0
  • /data/data/####/7bd66c27e8ca5f88_0
  • /data/data/####/7c0c3670ce8c6ef4_0
  • /data/data/####/7c0c3670ce8c6ef4_s
  • /data/data/####/7c2123e6b4c0ca44_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c5958a416dea722_0
  • /data/data/####/7c5958a416dea722_1
  • /data/data/####/7c5ddeea4b309c2c_0
  • /data/data/####/7c727833a4faf048_0
  • /data/data/####/7cc3d677738ca555_0
  • /data/data/####/7cc3d677738ca555_1
  • /data/data/####/7cf7f895ef00b94b_0
  • /data/data/####/7e75b8e8e17e5881_0
  • /data/data/####/7e75b8e8e17e5881_s
  • /data/data/####/7e769773a38f8c2e_0
  • /data/data/####/8023b24f1b21fff6_0
  • /data/data/####/810e5cdf8e5d2d41_0
  • /data/data/####/819a2dd4a67dbb25_0
  • /data/data/####/834be64ecc5fe148_0
  • /data/data/####/83f6bb0bf9835770_0
  • /data/data/####/855d7a104d58c708_0
  • /data/data/####/855d7a104d58c708_1
  • /data/data/####/85678c6df50718b8_0
  • /data/data/####/85cac60e33a8bcf7_0
  • /data/data/####/85e07d946d9b4bd4_0
  • /data/data/####/86a6e9a2df18aeae_0
  • /data/data/####/86befc9c6617ab8c_0 (deleted)
  • /data/data/####/86d63e10618a7167_0
  • /data/data/####/878c550a4553fb85_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/88fa35acfc6ca020_0
  • /data/data/####/8942892aca09c28b_0
  • /data/data/####/898f4048f09cc6bd_0
  • /data/data/####/8a4f672baffa4c03_0
  • /data/data/####/8a4f8ebcbacadc6b_0
  • /data/data/####/8a4f8ebcbacadc6b_1
  • /data/data/####/8a5d930b1c81ed82_0
  • /data/data/####/8a7b7cd8986b8d74_0
  • /data/data/####/8ac7579fd0e7bbe5_0
  • /data/data/####/8ac7579fd0e7bbe5_1
  • /data/data/####/8c2ae296c491af3f_0
  • /data/data/####/8c4b981c4ca0f3d9_0
  • /data/data/####/8c8047b99ed90101_0
  • /data/data/####/8cf97e98ffc6ff67_0
  • /data/data/####/8d7bf343f414ba31_0
  • /data/data/####/8db8ef6f042ea924_0
  • /data/data/####/8dcfdb43bdc6bc20_0
  • /data/data/####/8dee5a0db80318e8_0
  • /data/data/####/8dee5a0db80318e8_1
  • /data/data/####/8ec19d16881d90ca_0
  • /data/data/####/8ee312de0e400c67_0
  • /data/data/####/8fcc900296f7d6a3_0
  • /data/data/####/9049fdadcd027ff5_0 (deleted)
  • /data/data/####/906e73bf9e2f2a4b_0
  • /data/data/####/917c0dc0b619ae04_0
  • /data/data/####/91b0c31e0be65530_0
  • /data/data/####/92981146dce670c9_0
  • /data/data/####/939df17af186a68c_0
  • /data/data/####/93a78e2022ab7c5f_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/945c6ea98edcf88f_0
  • /data/data/####/9540f5906bc33816_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/961bdbab5be55ede_0
  • /data/data/####/9644b00057a5d01e_0 (deleted)
  • /data/data/####/9662ac23c7f2a32e_0
  • /data/data/####/969f4aff55d97727_0
  • /data/data/####/970699dfcfb59ff1_0
  • /data/data/####/97886369afec0b00_0
  • /data/data/####/98035feb8dc60e2b_0
  • /data/data/####/980a8279402097a6_0
  • /data/data/####/980a8279402097a6_1
  • /data/data/####/983d931d7a653552_0
  • /data/data/####/991311957b842bdf_0
  • /data/data/####/993ef5e96d789e71_0
  • /data/data/####/99e1d7f70792b254_0
  • /data/data/####/9aa94c6f444426b7_0
  • /data/data/####/9afc50d78b5a8ebe_0
  • /data/data/####/9b85c960b3c6a888_0
  • /data/data/####/9c5313fd976555cf_0
  • /data/data/####/9cfd968dea58e900_0
  • /data/data/####/9dbff11187e8108c_0
  • /data/data/####/9e34b6b74befeb40_0
  • /data/data/####/9f557d107db931a5_0
  • /data/data/####/AFxAIXR.dex
  • /data/data/####/AFxAIXR.dex.flock (deleted)
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/IGdDrfDdo.dex
  • /data/data/####/MANIFEST-000001
  • /data/data/####/PZvrtOH.dex
  • /data/data/####/PZvrtOH.dex.flock (deleted)
  • /data/data/####/QuotaManager-journal
  • /data/data/####/TtCxto.dex
  • /data/data/####/TtCxto.dex.flock (deleted)
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a0e3f4e8c2461ae8_0
  • /data/data/####/a0f2226241294254_0
  • /data/data/####/a136137dcc3a33f7_0
  • /data/data/####/a1764250d7879f4a_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a1c50fb91d9cc9f7_0
  • /data/data/####/a1cae395e9f447b3_0
  • /data/data/####/a2775fffb6a35622_0
  • /data/data/####/a289e3c74d5abff6_0
  • /data/data/####/a29e648042a61aa8_0
  • /data/data/####/a2b023ae7cf91c8f_0
  • /data/data/####/a2d0a4729b872d83_0
  • /data/data/####/a39a6bba9829a61c_0
  • /data/data/####/a3f1ff315e7db11a_0
  • /data/data/####/a3f1ff315e7db11a_1
  • /data/data/####/a4156aa71168bfae_0
  • /data/data/####/a44922c962a8cae1_0
  • /data/data/####/a4721bab72ecca29_0 (deleted)
  • /data/data/####/a5dd74a10e91ec4a_0
  • /data/data/####/a8da9ab591f2bcdc_0
  • /data/data/####/a926584e22a7bbd3_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/aa164e2b7cfa8203_0
  • /data/data/####/aad4be480424f9bb_0
  • /data/data/####/ac973ee7b6d8febe_0
  • /data/data/####/acac0bc7443eeb43_0
  • /data/data/####/acb5c109341c6901_0
  • /data/data/####/acb919fc0d3f9e02_0
  • /data/data/####/acbd73b98eae7237_0 (deleted)
  • /data/data/####/adb0161b1a8010b0_0
  • /data/data/####/ae2a9887724b9c08_0
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/af3ecb04eb139bd8_0
  • /data/data/####/af55b66b2853a8e2_0
  • /data/data/####/af55b66b2853a8e2_1
  • /data/data/####/b003b3d4d04019d6_0
  • /data/data/####/b03acc385ffbeaf8_0
  • /data/data/####/b0705fdc5a27d44f_0
  • /data/data/####/b0705fdc5a27d44f_1
  • /data/data/####/b14808a180c50e2e_0
  • /data/data/####/b34c838f9731347c_0
  • /data/data/####/b34d51f02d2dbc7a_0
  • /data/data/####/b358cc45980fb473_0
  • /data/data/####/b358cc45980fb473_1
  • /data/data/####/b3e207bde6eba7f8_0
  • /data/data/####/b4d55937d2b947cd_0
  • /data/data/####/b4eef6df3a94cb48_0
  • /data/data/####/b5128f5780c2e08f_0
  • /data/data/####/b5d571bcf26b1598_0
  • /data/data/####/b6492cb596c08ab0_0
  • /data/data/####/b6873d5e91db1a82_0
  • /data/data/####/b6b89c2a3070b887_0
  • /data/data/####/b845b8fe6dac31f0_0 (deleted)
  • /data/data/####/b84eab1fcd57fa91_0
  • /data/data/####/b895d57e3460980c_0
  • /data/data/####/b8a6be9b3e374d86_0
  • /data/data/####/b8de74d958316c70_0
  • /data/data/####/b905ed819aa2234d_0
  • /data/data/####/b95148b46e656954_0
  • /data/data/####/b992fd8ea483b187_0
  • /data/data/####/ba497004cfcec4ff_0
  • /data/data/####/baafc4ea1b0e3b5d_0
  • /data/data/####/bad36ec02516b867_0
  • /data/data/####/bb15f9d051bf9850_0
  • /data/data/####/bb5c5dac9914cacd_0
  • /data/data/####/bb88ee075b7d43a6_0
  • /data/data/####/bc157e730f3bd184_0
  • /data/data/####/bcaad22cd8953116_0
  • /data/data/####/bcebbb41c46ee1f9_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bda6d8b9d1d5892a_0
  • /data/data/####/bf3c59600da39618_0
  • /data/data/####/bf70cc938786ec6d_0
  • /data/data/####/bfe7d92b5b3c726a_0
  • /data/data/####/c05dbbd8067dce6b_0
  • /data/data/####/c0dd57aa85e05435_0
  • /data/data/####/c14ca00c05ad58f4_0
  • /data/data/####/c323eba53079e07e_0
  • /data/data/####/c34f16d3646a4b13_0
  • /data/data/####/c36f7718439e4bba_0
  • /data/data/####/c4c95a4a3476bfa9_0
  • /data/data/####/c5af5bd718ab3515_0 (deleted)
  • /data/data/####/c6a1ff306393fa5d_0
  • /data/data/####/c7011ffdf41ce9b0_0 (deleted)
  • /data/data/####/c704fe4e6415e91a_0
  • /data/data/####/c78cf62a88606672_0
  • /data/data/####/c78cf62a88606672_1
  • /data/data/####/c79eff18c547cd87_0
  • /data/data/####/c819cbfc8e4baee7_0
  • /data/data/####/ca8dfc3a853091da_0
  • /data/data/####/cb21163042d8660e_0
  • /data/data/####/cb21163042d8660e_s
  • /data/data/####/cb6e8490fe0e7327_0
  • /data/data/####/cb7c2ba667649b8d_0
  • /data/data/####/cb85a05460978c01_0
  • /data/data/####/cc1d01782d923db7_0
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/ce24b48a4c43124d_0
  • /data/data/####/ce4842dd5125338e_0
  • /data/data/####/ced59743599d65b3_0
  • /data/data/####/cef3b74a68a71666_0
  • /data/data/####/com.lcrgydbxg_preferences.xml
  • /data/data/####/d0738d80aa52ffa1_0
  • /data/data/####/d10b3e818e533bbd_0
  • /data/data/####/d1b24b1e189dd435_0
  • /data/data/####/d1da459e01307c49_0
  • /data/data/####/d286997a9a59b888_0
  • /data/data/####/d286997a9a59b888_1
  • /data/data/####/d3593c30fe553d7e_0
  • /data/data/####/d3cc98f208258776_0
  • /data/data/####/d3f9c68e0b18830c_0
  • /data/data/####/d3f9c68e0b18830c_1
  • /data/data/####/d4ff65941fd192a3_0
  • /data/data/####/d5691f82a4dc4db7_0
  • /data/data/####/d5d654b69620d846_0
  • /data/data/####/d67f30d503ac8486_0
  • /data/data/####/d7a3899ca7df3241_0
  • /data/data/####/d8e12ee8e92557b1_0
  • /data/data/####/d9258dc3ac51e859_0
  • /data/data/####/d9d408bc58b2d5f5_0
  • /data/data/####/da1a2d40a30f4e47_0
  • /data/data/####/da4af38e3b0901ac_0
  • /data/data/####/da96ff9599c8ad50_0
  • /data/data/####/db10a687dc779be0_0
  • /data/data/####/db10a687dc779be0_1
  • /data/data/####/db49680b955394b5_0
  • /data/data/####/dcd37a536dff139b_0
  • /data/data/####/de11caa1f953e1f0_0
  • /data/data/####/de2158acd13c37f3_0
  • /data/data/####/debfcf2992c5c00e_0
  • /data/data/####/df29368180c7b429_0
  • /data/data/####/e0124f627c4b6215_0 (deleted)
  • /data/data/####/e04ecf0bca57320a_0
  • /data/data/####/e1578edf24fb29d6_0
  • /data/data/####/e16adb5713fce02c_0
  • /data/data/####/e1cd55847a0fc023_0
  • /data/data/####/e2dd10de6f143820_0
  • /data/data/####/e34f2135f8c559ef_0 (deleted)
  • /data/data/####/e369e1303da1bc13_0
  • /data/data/####/e3796ee3e1554a5b_0 (deleted)
  • /data/data/####/e5b9038f7f1f2bd8_0
  • /data/data/####/e65aedfb7e40afa9_0
  • /data/data/####/e74026a43bc75cbe_0
  • /data/data/####/e8eb80236ce3b384_0
  • /data/data/####/e9410ef8293c5c2b_0
  • /data/data/####/e9767c8b01d94457_0
  • /data/data/####/e9a0dfe405912f2e_0
  • /data/data/####/eac6770594f25937_0
  • /data/data/####/eae158fb87a14316_0
  • /data/data/####/eb00d06a265ea773_0
  • /data/data/####/eb00d06a265ea773_1
  • /data/data/####/ebf8fad7c371ffce_0
  • /data/data/####/ee49e188b9f930d9_0
  • /data/data/####/ee49e188b9f930d9_1
  • /data/data/####/eea453bb9d2ed839_0
  • /data/data/####/eed091e9fc853d23_0
  • /data/data/####/eed091e9fc853d23_1
  • /data/data/####/ef22c68f3a5f77fd_0
  • /data/data/####/ef936e591861eb3b_0
  • /data/data/####/efba7f119d0c2ad1_0
  • /data/data/####/efba7f119d0c2ad1_1
  • /data/data/####/efc7282980fa5b08_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f0b920685a39e863_0
  • /data/data/####/f1466ec10d48cddb_0 (deleted)
  • /data/data/####/f1cd06b84aeb5690_0
  • /data/data/####/f1cd06b84aeb5690_1
  • /data/data/####/f214e0e0577d2bcd_0
  • /data/data/####/f26704702001957a_0
  • /data/data/####/f28346ea19d3daab_0
  • /data/data/####/f2ab4059d4bd03c9_0
  • /data/data/####/f421df9c55205ca0_0
  • /data/data/####/f4c18c6294a07176_0
  • /data/data/####/f5fa9c6556e1c73b_0
  • /data/data/####/f5fa9c6556e1c73b_1
  • /data/data/####/f60af6ce45522b89_0
  • /data/data/####/f72afbae8e18e01e_0
  • /data/data/####/f7c9f819cbb323b3_0
  • /data/data/####/f94cf0ef6620e077_0
  • /data/data/####/fa89d615c9399940_0
  • /data/data/####/faf95043d1de6e49_0
  • /data/data/####/fc31a9fdbbddc1f6_0
  • /data/data/####/fc79d7e61b559820_0
  • /data/data/####/fd0dc7f4fb4b9836_0
  • /data/data/####/fd9b8611100ca8c7_0
  • /data/data/####/fe424b794bd9d633_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff03f34d351f9813_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/the-real-index
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android