Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Locker.17281

Added to the Dr.Web virus database: 2023-08-05

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Threat detection based on machine learning.
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) i.cam####.com:443
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) ei.ph####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.2) 2####.85.233.100:443
  • TCP(TLS/1.2) 1####.177.14.94:443
  • TCP(TLS/1.2) p####.google####.com:443
DNS requests:
  • ads.traffic####.net
  • cdn1-sm####.ph####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.cam####.com
  • i.dy####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/000d7eb33ee2e12c_0
  • /data/data/####/0125be87bf4cf2ba_0
  • /data/data/####/01f231bdffae5caf_0 (deleted)
  • /data/data/####/026478235ffd6137_0
  • /data/data/####/026c5ac38d0b116b_0
  • /data/data/####/02ec6c7ded5a0249_0
  • /data/data/####/0344440b5a0d39ec_0
  • /data/data/####/0353ddb123c13e6b_0
  • /data/data/####/03b62337d1faf057_0
  • /data/data/####/0627726177e47b9c_0
  • /data/data/####/067f925d61b6b423_0
  • /data/data/####/0694cd6ae710f2e4_0
  • /data/data/####/06e0c57c53f0b634_0
  • /data/data/####/0817e3ee7f425717_0
  • /data/data/####/08ce1c349c5e135a_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0b90a6265ff54b8e_0
  • /data/data/####/0bab94aa0cbbf4b0_0
  • /data/data/####/0bde135352732814_0
  • /data/data/####/0bf990537a02c68a_0
  • /data/data/####/0cc6f538aa1943fe_0
  • /data/data/####/0cfac24e85bd17bb_0
  • /data/data/####/0cfac24e85bd17bb_s
  • /data/data/####/0cfd0a4960091da1_0
  • /data/data/####/0da8d053b8d7b754_0
  • /data/data/####/0ddf31e0606cb437_0
  • /data/data/####/0dfb700435dcb891_0
  • /data/data/####/0e07ec3c043221d0_0
  • /data/data/####/0e6021950d99d6c2_0
  • /data/data/####/0e8040166e35e4d5_0
  • /data/data/####/0f488722b38c6b01_0
  • /data/data/####/0f7434909abeafcf_0
  • /data/data/####/0f81e82dcbca7aad_0
  • /data/data/####/10659e56364e3023_0
  • /data/data/####/10659e56364e3023_1
  • /data/data/####/1251c9deb44f08a1_0
  • /data/data/####/1251c9deb44f08a1_s
  • /data/data/####/125967045413dd61_0
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/12fb9b08ec3652ad_0
  • /data/data/####/13aae11dd8eea84d_0 (deleted)
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/13fd53c5818aabd8_0
  • /data/data/####/14eb7087c3337ce1_0
  • /data/data/####/1527f1f04f607abf_0
  • /data/data/####/15ddf2f56b8e42ca_0
  • /data/data/####/17bbde1ecaa5f2a3_0
  • /data/data/####/185bff48c96979e4_0
  • /data/data/####/194681e48edb3e61_0 (deleted)
  • /data/data/####/19af43052d980f6b_0
  • /data/data/####/19b41c20310f10a7_0
  • /data/data/####/1ae1b07ad20fda35_0
  • /data/data/####/1b38d859cc6a9415_0
  • /data/data/####/1b4119a4641d6ea2_0
  • /data/data/####/1b9eaf93afbc9191_0 (deleted)
  • /data/data/####/1bfb0837f2dd846d_0
  • /data/data/####/1c7454875650b11f_0
  • /data/data/####/1d0632c49363f54a_0
  • /data/data/####/1d688efcc3b43e27_0
  • /data/data/####/1e82426d1eb5d765_0
  • /data/data/####/1eaca52419b2a560_0
  • /data/data/####/1f665b6d62064fab_0
  • /data/data/####/1fa3976fed9774d2_0
  • /data/data/####/22150f5d8fa95cfb_0
  • /data/data/####/223cd70cd7c7d975_0
  • /data/data/####/233036d8e0b60a87_0
  • /data/data/####/23ea731994757fc7_0
  • /data/data/####/24212bf1b216ec2f_0
  • /data/data/####/2470b3aff377487d_0
  • /data/data/####/252fe19e55445a8d_0
  • /data/data/####/252fe19e55445a8d_1
  • /data/data/####/25596ad6262b9576_0
  • /data/data/####/25f083de14c6acb6_0
  • /data/data/####/2641108aa7191a1f_0
  • /data/data/####/2641108aa7191a1f_1
  • /data/data/####/26fa7380795f1233_0
  • /data/data/####/27392fac809846f5_0
  • /data/data/####/273f949923941ebe_0
  • /data/data/####/2826dc3c1d940873_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/29e88bb3eec77167_0
  • /data/data/####/2a582eb3e740ca69_0
  • /data/data/####/2be54bdf8c75a050_0
  • /data/data/####/2c99a214db9ba0b4_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d3caee04918ba4c_0
  • /data/data/####/2d4b2972a9caee53_0
  • /data/data/####/2d8a3a0a7dc028a6_0
  • /data/data/####/2dc8fe1bf8c15535_0
  • /data/data/####/2e5041ca8ac7bd4a_0
  • /data/data/####/2e5f008538fd81d3_0
  • /data/data/####/2f331e719c109258_0
  • /data/data/####/2f6186b88d6e3335_0
  • /data/data/####/2fca81a562cd2f44_0
  • /data/data/####/3044596b7a97a456_0
  • /data/data/####/3055001a405e3997_0
  • /data/data/####/309333831e1045c6_0
  • /data/data/####/30ea6b083013208c_0
  • /data/data/####/30eb8309a12e4ca4_0
  • /data/data/####/31998091293807c6_0
  • /data/data/####/323ad3e22b541f5f_0
  • /data/data/####/3241a2abdc0d9e44_0
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/33ba08621dfbe1f6_0
  • /data/data/####/348f4a742e0cc440_0
  • /data/data/####/351c3786664ea538_0
  • /data/data/####/35bc0b1bef61d54c_0
  • /data/data/####/37d492506a838f44_0
  • /data/data/####/38125cf998136e54_0
  • /data/data/####/38a2e3d1f73af953_0
  • /data/data/####/38c33b2e286dff30_0
  • /data/data/####/39182953f976979d_0
  • /data/data/####/39938bfaae32da61_0
  • /data/data/####/39f686249d7a5209_0
  • /data/data/####/3a64b72c909eae61_0
  • /data/data/####/3bf727b695d8ef89_0
  • /data/data/####/3c18d1254a918ec1_0
  • /data/data/####/3c410df04863e71c_0
  • /data/data/####/3d024371e079e82a_0
  • /data/data/####/3d024371e079e82a_1
  • /data/data/####/3d3d7b95d5294be4_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3fbdff2e42cfacdb_0
  • /data/data/####/404b6ea30d8135d1_0
  • /data/data/####/408d3a802a4a9708_0
  • /data/data/####/40a17df2669a90df_0
  • /data/data/####/40bb0f0e27d3b283_0
  • /data/data/####/40bb0f0e27d3b283_1
  • /data/data/####/40ecba02beac40c4_0
  • /data/data/####/41b5f279904aabf5_0 (deleted)
  • /data/data/####/4224ccac5860d228_0
  • /data/data/####/4226998f8e0723ed_0
  • /data/data/####/43f73167c1f6215c_0 (deleted)
  • /data/data/####/44a8106c922197fa_0
  • /data/data/####/45440df98dd6e1a5_0
  • /data/data/####/45805eda0714a852_0 (deleted)
  • /data/data/####/45ba809e6d55161f_0
  • /data/data/####/45d7e61ab80e1930_0
  • /data/data/####/47013c9db4c8e037_0
  • /data/data/####/4729403011ac6c10_0
  • /data/data/####/47d94c5e9bb4f5c7_0
  • /data/data/####/480173020210ec80_0
  • /data/data/####/48186a0dce0a3022_0
  • /data/data/####/483c98240cab9370_0
  • /data/data/####/48451f872699ac33_0 (deleted)
  • /data/data/####/4877f9184b94bf06_0
  • /data/data/####/488a6f9c95a9fe2e_0
  • /data/data/####/48c81bd5e649515b_0
  • /data/data/####/48cdca5438bf112b_0
  • /data/data/####/491a3c44efc5eb0f_0
  • /data/data/####/4955c5df5edd6212_0
  • /data/data/####/49be43c77ec03522_0
  • /data/data/####/4a13006f3eabc27f_0
  • /data/data/####/4a3c7a57a2968879_0
  • /data/data/####/4a5b846c59191f7d_0 (deleted)
  • /data/data/####/4b482d9f778f0483_0
  • /data/data/####/4b97055e43037c4f_0
  • /data/data/####/4c1039a95dc39bdf_0
  • /data/data/####/4c7f4efe6c3ddcdb_0
  • /data/data/####/4c8addb23b524704_0
  • /data/data/####/4ca4fafcf1e6f237_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4d1f933ee59d8552_0
  • /data/data/####/4d6a2d172910fdf1_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/4ee5306597cf4bfc_0
  • /data/data/####/4f601c1bb81aa8f0_0
  • /data/data/####/506c25e468df488e_0
  • /data/data/####/50744750cc7a0610_0
  • /data/data/####/50a682da6b8803b5_0
  • /data/data/####/50ccb316cac9d43b_0
  • /data/data/####/50fa3b07f96a6e7a_0
  • /data/data/####/51efe9ca7dc521a2_0
  • /data/data/####/51efe9ca7dc521a2_1
  • /data/data/####/51fccc1a0f9c2dff_0
  • /data/data/####/52983f169916d921_0
  • /data/data/####/547da68ed4869b11_0
  • /data/data/####/55566cf0b9ad6cc9_0
  • /data/data/####/556b1bae5cf5d796_0
  • /data/data/####/561feeb94d66038b_0
  • /data/data/####/561feeb94d66038b_1
  • /data/data/####/563ae8fccfa4862e_0
  • /data/data/####/56685a0051f4144d_0
  • /data/data/####/579217891453e1a7_0
  • /data/data/####/594df5e837d97298_0
  • /data/data/####/595d7afc5de73671_0
  • /data/data/####/596b02d6558f6231_0
  • /data/data/####/5ca07a511bea4ecf_0
  • /data/data/####/5cf93bc99e960b68_0
  • /data/data/####/60560c5a4803c975_0
  • /data/data/####/607fa6e3f53992d1_0
  • /data/data/####/615153fe3368b5ec_0
  • /data/data/####/61a1b58fbe187bbf_0
  • /data/data/####/61a7438964da0606_0
  • /data/data/####/62c226458ed71f6d_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/62cdd152c8d4f93a_0
  • /data/data/####/62d7311b4c1c8384_0
  • /data/data/####/63fa55a35e7849d3_0
  • /data/data/####/63fa55a35e7849d3_1
  • /data/data/####/641f77bdb8dbf5e7_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/647371707e792c50_0
  • /data/data/####/647f54b0bbbfbd0c_0
  • /data/data/####/6540aebe967aa167_0
  • /data/data/####/6564723d1c5d6942_0
  • /data/data/####/6579799b3aee52a4_0
  • /data/data/####/6591c4938d5cba67_0
  • /data/data/####/659b36dd916f4b3a_0 (deleted)
  • /data/data/####/66a36a532c57be5d_0
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/66f22e8e2247d2d7_0
  • /data/data/####/675c7e9d757240d9_0
  • /data/data/####/67b0a8f7427c44fd_0
  • /data/data/####/6888aea6faf1d28b_0
  • /data/data/####/68cf8590dff382a5_0
  • /data/data/####/694a3da3cd30c5eb_0
  • /data/data/####/6bcffe2a36969236_0
  • /data/data/####/6bf39f013df29934_0
  • /data/data/####/6df7bbe2ff16961a_0
  • /data/data/####/6ea0bc25a9bc6b4a_0
  • /data/data/####/6ea0bc25a9bc6b4a_1
  • /data/data/####/6ec03d6b95fe058e_0
  • /data/data/####/70224a11cd9637e6_0
  • /data/data/####/70507c57b4ae4c48_0
  • /data/data/####/7074063d3d696416_0
  • /data/data/####/71e84b9d141fdfd1_0
  • /data/data/####/723e7e52d885ff4a_0
  • /data/data/####/72c51024b7082564_0
  • /data/data/####/736647aca8f96357_0
  • /data/data/####/74a62894ea10fee4_0
  • /data/data/####/7537d73a696881cf_0
  • /data/data/####/755dc49fabeb6d87_0
  • /data/data/####/76105296525708f2_0
  • /data/data/####/766c217cb76e670c_0
  • /data/data/####/767a9aa1bf3949cd_0
  • /data/data/####/7693a67e3f8fd29c_0
  • /data/data/####/7a2e2bab8f3a9b77_0
  • /data/data/####/7a306f769ece4b62_0
  • /data/data/####/7abdfae2d2c33293_0
  • /data/data/####/7b33fdead8767b0b_0
  • /data/data/####/7b4e1e2dd27bfa3d_0
  • /data/data/####/7bc96ac091e2c940_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7d0372943b85ddae_0
  • /data/data/####/7d5969f107923b57_0
  • /data/data/####/7d61f0887b0bf076_0
  • /data/data/####/7daf53d96b278a9a_0
  • /data/data/####/7daf53d96b278a9a_s
  • /data/data/####/7dc3b494b6708ff7_0
  • /data/data/####/7e68f54051b6d55a_0
  • /data/data/####/7ec224298c55c3e2_0
  • /data/data/####/7ec989bc84577fec_0
  • /data/data/####/7ee1fcc6ef46a1d0_0
  • /data/data/####/7f31355d5709d4d7_0
  • /data/data/####/7f321e70b534c9c1_0
  • /data/data/####/7f98e3dffa4a8661_0
  • /data/data/####/80c5c538010e2146_0
  • /data/data/####/814013efc82b29d2_0
  • /data/data/####/814dbd5fe5f054c6_0
  • /data/data/####/814e92d1588d5704_0
  • /data/data/####/8164a06f8cc2ad1c_0
  • /data/data/####/816edab88afc770f_0
  • /data/data/####/82ba0398de1589b3_0
  • /data/data/####/8342bc913e09e07a_0
  • /data/data/####/848f584eb2980526_0
  • /data/data/####/84c49811f40b6a61_0
  • /data/data/####/8588a5d71d8d1836_0
  • /data/data/####/85ae6de2baf8f38f_0
  • /data/data/####/85e4309438e95191_0
  • /data/data/####/864ba7b3147d1391_0
  • /data/data/####/888494125650092a_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/89d2fb97cd5ac431_0
  • /data/data/####/8a19cd95135de0be_0
  • /data/data/####/8c18ead9017548c4_0
  • /data/data/####/8c2b045b2e446455_0
  • /data/data/####/8c3736599404cf3a_0
  • /data/data/####/8c765efd11bfbc1f_0
  • /data/data/####/8d03a537b7b5d4ab_0
  • /data/data/####/8d3a54608a3f26c7_0
  • /data/data/####/8d3c6f54a0dc74a5_0
  • /data/data/####/8f7cca73519a46b6_0
  • /data/data/####/90eb6d837373ec61_0
  • /data/data/####/92206d673b348ef3_0
  • /data/data/####/92d9f47c317f287d_0
  • /data/data/####/92d9f47c317f287d_1
  • /data/data/####/92f87a7791750684_0
  • /data/data/####/935e7610842a8f39_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/9403ca19684fec2a_0
  • /data/data/####/949ce422a3408186_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/96e20a393176806f_0
  • /data/data/####/979202d9953196c6_0
  • /data/data/####/980c993391aeba89_0
  • /data/data/####/980c993391aeba89_1
  • /data/data/####/9883685c06c3972e_0
  • /data/data/####/9889bd74a4f9f15f_0
  • /data/data/####/98bc9bffa00ff8b7_0
  • /data/data/####/993f87b6a8aa639f_0
  • /data/data/####/9b680a00b8876691_0
  • /data/data/####/9bb99f60f31af240_0
  • /data/data/####/9c8c712bf7c34be5_0
  • /data/data/####/9c96d4f507a70c98_0
  • /data/data/####/9cd6c2615ad7442a_0
  • /data/data/####/9cd6c2615ad7442a_s
  • /data/data/####/9cea2fb24a0a2833_0
  • /data/data/####/9d1b44e2edf843d2_0
  • /data/data/####/9d5c589d9130c365_0
  • /data/data/####/9de12a0f52691fec_0
  • /data/data/####/9e58e6ad38eacbff_0
  • /data/data/####/9fab8bedbaaa2cda_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/KeAMwKvT.dex
  • /data/data/####/KeAMwKvT.dex.flock (deleted)
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a1d8e33cbf64f6ba_0
  • /data/data/####/a1f4402a924ff534_0
  • /data/data/####/a2775fffb6a35622_0
  • /data/data/####/a3238c2596542399_0
  • /data/data/####/a3f3f163d03ff1f2_0
  • /data/data/####/a456ba9d57396cdf_0
  • /data/data/####/a4c464b7ce13c11d_0 (deleted)
  • /data/data/####/a5e458c8f2f7b764_0
  • /data/data/####/a6198e49276ff811_0
  • /data/data/####/a71de588214302a3_0
  • /data/data/####/a73495d8f4eed396_0
  • /data/data/####/a7452c8c5f0963a1_0
  • /data/data/####/a9064635a74e49e7_0
  • /data/data/####/a9064635a74e49e7_1
  • /data/data/####/a94e3d28831e85d5_0
  • /data/data/####/a964c902f1f31db2_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/aa3492eef66b5208_0
  • /data/data/####/aa3ba6e88bbc09f8_0
  • /data/data/####/aaca50d537b72b9b_0
  • /data/data/####/ab0e05760903ae30_0
  • /data/data/####/ab1084569fab9ff8_0
  • /data/data/####/ab7c5132db84c161_0
  • /data/data/####/ac41e8afbe828959_0 (deleted)
  • /data/data/####/aca764273de775c3_0
  • /data/data/####/acf8542fe8f4c0b0_0
  • /data/data/####/ae2a9887724b9c08_0
  • /data/data/####/af803d2ad1146738_0
  • /data/data/####/afc5aa4124d5b42f_0
  • /data/data/####/b02593c8281befbe_0
  • /data/data/####/b04542ac77c2a83d_0
  • /data/data/####/b058aef0879c7e55_0
  • /data/data/####/b058aef0879c7e55_1
  • /data/data/####/b2f514f490e78dd5_0
  • /data/data/####/b60453b6cc8c7d02_0
  • /data/data/####/b620e0222e35840b_0
  • /data/data/####/b756fc80daef6fc1_0
  • /data/data/####/b7a7dd547f37d1e5_0
  • /data/data/####/b7a7dd547f37d1e5_s
  • /data/data/####/b80ffb1664d45d3e_0
  • /data/data/####/b8104ad6aaafbce7_0
  • /data/data/####/b922e6234071619c_0
  • /data/data/####/b9377eba784e6471_0
  • /data/data/####/b94ad261bba7a220_0
  • /data/data/####/b978a973d373c6f6_0
  • /data/data/####/ba3145df04d10ced_0
  • /data/data/####/ba80fdec7d3db430_0
  • /data/data/####/ba9369e8a270e3d5_0
  • /data/data/####/bae06b29657ba062_0
  • /data/data/####/bb717713183f6e3d_0
  • /data/data/####/bbc346c3bfaf9f9f_0
  • /data/data/####/bc00b8a88088b09a_0
  • /data/data/####/bc1ab1ee2c686f9a_0
  • /data/data/####/bc73f8734c001a33_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bd6d1df7a5367d59_0 (deleted)
  • /data/data/####/bec5eafc9af51afe_0
  • /data/data/####/bf882280db4bae07_0
  • /data/data/####/bff3f4f186657da1_0
  • /data/data/####/c00c39458d85fcd8_0
  • /data/data/####/c0188e1dd2cccbaf_0
  • /data/data/####/c1049c0b8f3c130f_0
  • /data/data/####/c21a4f5e61c8bc20_0
  • /data/data/####/c45e56ae3d3f41f5_0 (deleted)
  • /data/data/####/c48cbe8e9c782eec_0
  • /data/data/####/c4a27f43ba3860ac_0
  • /data/data/####/c4a5fcb85d71a657_0
  • /data/data/####/c4c837d661dca67d_0
  • /data/data/####/c4c837d661dca67d_s
  • /data/data/####/c5a3f3b48e337ace_0
  • /data/data/####/c5b7e46790a09f66_0
  • /data/data/####/c6c9d84ca9815447_0
  • /data/data/####/c819cbfc8e4baee7_0
  • /data/data/####/c85d5dd699487874_0
  • /data/data/####/c85e98db9a9bd774_0
  • /data/data/####/c88b777f1938049c_0
  • /data/data/####/c8a279397b770648_0
  • /data/data/####/c8a279397b770648_1
  • /data/data/####/c97e15e25f96c502_0
  • /data/data/####/ca3e391223ae5af3_0 (deleted)
  • /data/data/####/ca41fba5bc21fe66_0
  • /data/data/####/cc16b9261e9f021b_0
  • /data/data/####/cc40f1ccd60547a4_0
  • /data/data/####/ccd4e659f352f663_0
  • /data/data/####/cd640a0fddc3cb3c_0
  • /data/data/####/ced89eb72121c6f4_0 (deleted)
  • /data/data/####/cefe8b30135e530d_0
  • /data/data/####/cf52e5f0e00a9035_0
  • /data/data/####/cf8d2febce4497cd_0
  • /data/data/####/cfc182382710ae70_0
  • /data/data/####/cff92c661aa46add_0
  • /data/data/####/com.muiebcnl_preferences.xml
  • /data/data/####/d011ebdb713e5b78_0
  • /data/data/####/d1030f1f8e4c1b96_0
  • /data/data/####/d17a55b56e238e34_0
  • /data/data/####/d2dc6e3bc242279a_0
  • /data/data/####/d43745e11e159e84_0
  • /data/data/####/d47376780ad53931_0
  • /data/data/####/d4cd6e09830b47ee_0
  • /data/data/####/d59a62f87da343b1_0
  • /data/data/####/d5ebef5cfaf131ab_0 (deleted)
  • /data/data/####/d6c691d4d20ab1db_0
  • /data/data/####/d77ab3d283443a6f_0
  • /data/data/####/d9da6edcf2ec636a_0
  • /data/data/####/dDxXF.dex
  • /data/data/####/dDxXF.dex.flock (deleted)
  • /data/data/####/da29b751d807944e_0
  • /data/data/####/db49680b955394b5_0
  • /data/data/####/dbc5ef5ef750bec9_0
  • /data/data/####/dbc5ef5ef750bec9_1
  • /data/data/####/dd9f377062cb3b33_0
  • /data/data/####/df618664dc95b999_0
  • /data/data/####/dmwmQ.dex
  • /data/data/####/dmwmQ.dex.flock (deleted)
  • /data/data/####/e02fb251f66f5aad_0
  • /data/data/####/e04d5cfea3e1a3bc_0
  • /data/data/####/e04d5cfea3e1a3bc_1
  • /data/data/####/e04ecf0bca57320a_0
  • /data/data/####/e06b43a5f749511b_0 (deleted)
  • /data/data/####/e130c2ec12bdf103_0
  • /data/data/####/e1b4015b0c1fb74e_0
  • /data/data/####/e1cf3aea14e1bfac_0
  • /data/data/####/e33fb3355013e44a_0
  • /data/data/####/e3ae3d0a19725557_0
  • /data/data/####/e5435cda768dcecf_0
  • /data/data/####/e58ab70a4e92ab9f_0
  • /data/data/####/e65a4572cddb52cf_0
  • /data/data/####/e65d0b8cf91b00fe_0
  • /data/data/####/e727c4b8f582b78b_0
  • /data/data/####/e75dc8afbd8e3da8_0
  • /data/data/####/e7795bba4c293ac0_0
  • /data/data/####/e7f1db409f55d10b_0
  • /data/data/####/e8d75ad78669bd02_0
  • /data/data/####/e8eb80236ce3b384_0
  • /data/data/####/e901a8b1d3f4b0bf_0
  • /data/data/####/ea4767eaf9d51405_0
  • /data/data/####/ec273ca1d808304d_0
  • /data/data/####/edf292f624515dc6_0
  • /data/data/####/ee4a4b91c8186a83_0
  • /data/data/####/ef38f17ca3a93976_0
  • /data/data/####/ef808b91b8f6b8e5_0
  • /data/data/####/efd308539a596bc6_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/efff44b68eaaaeca_0
  • /data/data/####/f109e1a0d3df16fd_0
  • /data/data/####/f143a2116cd34b30_0
  • /data/data/####/f15abab729f708ee_0
  • /data/data/####/f1cf4233768decb5_0
  • /data/data/####/f20f383709205048_0
  • /data/data/####/f315febdecf7be4a_0
  • /data/data/####/f4a71d5e8f60db3c_0
  • /data/data/####/f6007e30c8e36a13_0
  • /data/data/####/f6576ef7214591f7_0
  • /data/data/####/f684a021f93b4e0b_0
  • /data/data/####/f68635843452f9f4_0
  • /data/data/####/f9f6fc8723b81ea3_0
  • /data/data/####/fa2d63a81f0719f7_0
  • /data/data/####/fa2d63a81f0719f7_1
  • /data/data/####/faa3080003c91bbf_0
  • /data/data/####/fb62890d875b217e_0
  • /data/data/####/fb8792c3067fe6b6_0
  • /data/data/####/fc2fb92cd0beb51f_0
  • /data/data/####/fcfb1594f6864eda_0
  • /data/data/####/fddfeb87b3831729_0
  • /data/data/####/fe854941f4db7149_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff5a9e2cbb08395c_0
  • /data/data/####/ff890e53896ed482_0
  • /data/data/####/ffcbff16af48e2d4_0
  • /data/data/####/ffd0e14ed80450fd_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/temp-index
  • /data/data/####/the-real-index
  • /data/data/####/yGxlLO.dex
  • /data/data/####/yGxlLO.dex.flock (deleted)
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android