Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Locker.17295

Added to the Dr.Web virus database: 2023-08-05

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) v.dy####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) i.cam####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) and####.google####.com:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) 1####.177.14.94:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.2) 1####.177.14.94:443
  • TCP(TLS/1.2) and####.google####.com:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • and####.google####.com
  • cdn1-sm####.ph####.com
  • cdn1-sm####.ph####.com.####.8
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • gmscomp####.google####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.cam####.com
  • i.dy####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.com.####.8
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/000001.dbtmp
  • /data/data/####/000d7eb33ee2e12c_0
  • /data/data/####/00858e90e36c00e8_0
  • /data/data/####/00da7ed3191ff439_0
  • /data/data/####/0125be87bf4cf2ba_0
  • /data/data/####/026478235ffd6137_0
  • /data/data/####/0353ddb123c13e6b_0
  • /data/data/####/03d1b496a638b7e3_0
  • /data/data/####/0627726177e47b9c_0
  • /data/data/####/06422e28bd852532_0
  • /data/data/####/07e7f495ec7d85ce_0
  • /data/data/####/08803c7f485c59d7_0
  • /data/data/####/097321bc543faaf4_0
  • /data/data/####/09babb8df3b19656_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0a61312c3ce937bc_0
  • /data/data/####/0a61312c3ce937bc_s
  • /data/data/####/0ae9610cfa69ac9e_0
  • /data/data/####/0b6c3bd569c0aff2_0
  • /data/data/####/0b90a6265ff54b8e_0
  • /data/data/####/0bde135352732814_0
  • /data/data/####/0bf990537a02c68a_0
  • /data/data/####/0c484261355e6048_0
  • /data/data/####/0d20569c895efed1_0
  • /data/data/####/0dc9c16e60477efc_0
  • /data/data/####/0ddf31e0606cb437_0
  • /data/data/####/0e07ec3c043221d0_0
  • /data/data/####/0e75b2d412bb60a6_0
  • /data/data/####/10659e56364e3023_0
  • /data/data/####/10659e56364e3023_1
  • /data/data/####/108a35709f007ff3_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/1251c9deb44f08a1_0
  • /data/data/####/1251c9deb44f08a1_s
  • /data/data/####/125967045413dd61_0
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/12c4318478cd3773_0
  • /data/data/####/12fb9b08ec3652ad_0
  • /data/data/####/138d35b607755729_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/14eb7087c3337ce1_0
  • /data/data/####/15bdf06e83e99b40_0
  • /data/data/####/15cbef205e46c4ed_0
  • /data/data/####/183e1af219bcef43_0
  • /data/data/####/18b2224d6116098d_0
  • /data/data/####/18c0b3059e9a2cd3_0
  • /data/data/####/1912fbf758024397_0
  • /data/data/####/1ac5b96ee8e5db35_0
  • /data/data/####/1adde5ba23826d96_0
  • /data/data/####/1b38d859cc6a9415_0
  • /data/data/####/1b6a6df9215c5f72_0
  • /data/data/####/1bfb0837f2dd846d_0
  • /data/data/####/1c60a9bf13a2f848_0
  • /data/data/####/1c9d0791f1810a50_0
  • /data/data/####/1d0632c49363f54a_0
  • /data/data/####/1d688efcc3b43e27_0
  • /data/data/####/1dca007ecd92b123_0
  • /data/data/####/1f03c858cd5c189b_0
  • /data/data/####/1f6bfe5dd116fb7c_0
  • /data/data/####/1fa3976fed9774d2_0
  • /data/data/####/1fdfdf9572a4e8c4_0
  • /data/data/####/20276a125874cba7_0
  • /data/data/####/20284fccf2f0cd6e_0
  • /data/data/####/22150f5d8fa95cfb_0
  • /data/data/####/23e289af64782805_0
  • /data/data/####/23ea731994757fc7_0
  • /data/data/####/24212bf1b216ec2f_0
  • /data/data/####/24339d7c880e0b6f_0
  • /data/data/####/245915e0b3a96b9f_0
  • /data/data/####/24cc24ad06b07631_0
  • /data/data/####/252fe19e55445a8d_0
  • /data/data/####/252fe19e55445a8d_1
  • /data/data/####/25596ad6262b9576_0
  • /data/data/####/255c6f2da743cdc0_0
  • /data/data/####/25b5e8123c584f5c_0
  • /data/data/####/25f083de14c6acb6_0
  • /data/data/####/2641108aa7191a1f_0
  • /data/data/####/2641108aa7191a1f_1
  • /data/data/####/271f5cf593be0a54_0 (deleted)
  • /data/data/####/27392fac809846f5_0
  • /data/data/####/273f949923941ebe_0
  • /data/data/####/2826dc3c1d940873_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/29bf5707f6f5e718_0
  • /data/data/####/2c99a214db9ba0b4_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d4b2972a9caee53_0
  • /data/data/####/2e5f008538fd81d3_0
  • /data/data/####/2f331e719c109258_0
  • /data/data/####/2f6186b88d6e3335_0
  • /data/data/####/2fb4885fff7bd002_0
  • /data/data/####/2fca81a562cd2f44_0
  • /data/data/####/309333831e1045c6_0
  • /data/data/####/30ea6b083013208c_0
  • /data/data/####/30eb8309a12e4ca4_0
  • /data/data/####/31095393fa1573c9_0
  • /data/data/####/32107d13bd3f33f4_0
  • /data/data/####/32e2ae6847c4d6ce_0
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/33ba08621dfbe1f6_0
  • /data/data/####/343c65bcd4dddd5b_0
  • /data/data/####/351c3786664ea538_0
  • /data/data/####/35bc0b1bef61d54c_0
  • /data/data/####/3610e95e29d16a1e_0
  • /data/data/####/3639dfcdb38fa620_0
  • /data/data/####/36ac7e2d67dec583_0
  • /data/data/####/36b20eddfaa60e69_0
  • /data/data/####/3706839365bf21ba_0
  • /data/data/####/37ac064835e8559e_0
  • /data/data/####/38a2e3d1f73af953_0
  • /data/data/####/3905874a1bcab3f7_0
  • /data/data/####/39182953f976979d_0
  • /data/data/####/3a64b72c909eae61_0
  • /data/data/####/3d024371e079e82a_0
  • /data/data/####/3d024371e079e82a_1
  • /data/data/####/3d3d7b95d5294be4_0
  • /data/data/####/3d73325b5750b8bb_0
  • /data/data/####/3e0e3d3d2ebb0cb6_0
  • /data/data/####/3e77eb94ac9edb28_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3fbdff2e42cfacdb_0
  • /data/data/####/404b6ea30d8135d1_0
  • /data/data/####/40a17df2669a90df_0
  • /data/data/####/40bb0f0e27d3b283_0
  • /data/data/####/40bb0f0e27d3b283_1
  • /data/data/####/40cdbf12d63ff390_0
  • /data/data/####/41788e71d4efae19_0
  • /data/data/####/42a933e3c23b155a_0 (deleted)
  • /data/data/####/43548953f24fc917_0
  • /data/data/####/43f2ab16c9100ffe_0
  • /data/data/####/45440df98dd6e1a5_0
  • /data/data/####/45ba809e6d55161f_0
  • /data/data/####/45d7e61ab80e1930_0
  • /data/data/####/480173020210ec80_0
  • /data/data/####/486a594d84bfd856_0
  • /data/data/####/48767bd50f96f619_0
  • /data/data/####/48c81bd5e649515b_0
  • /data/data/####/48cdca5438bf112b_0
  • /data/data/####/491a3c44efc5eb0f_0
  • /data/data/####/49be43c77ec03522_0
  • /data/data/####/49ca270312b8519c_0
  • /data/data/####/4a13006f3eabc27f_0
  • /data/data/####/4a357a4ae2ed8d38_0
  • /data/data/####/4b482d9f778f0483_0
  • /data/data/####/4c0a873319a07065_0
  • /data/data/####/4c3e02e17f7a05ae_0
  • /data/data/####/4c8addb23b524704_0
  • /data/data/####/4ca4fafcf1e6f237_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4d00a239c975d270_0
  • /data/data/####/4d6a2d172910fdf1_0
  • /data/data/####/4dc3c3a268470351_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/4ee5306597cf4bfc_0
  • /data/data/####/4f601c1bb81aa8f0_0
  • /data/data/####/4fbea7d7c91a2d12_0
  • /data/data/####/5005224befa4799d_0
  • /data/data/####/50543230f8cf392b_0 (deleted)
  • /data/data/####/50744750cc7a0610_0
  • /data/data/####/50a682da6b8803b5_0
  • /data/data/####/50ccb316cac9d43b_0
  • /data/data/####/51efe9ca7dc521a2_0
  • /data/data/####/51efe9ca7dc521a2_1
  • /data/data/####/52928d02c3e8f856_0
  • /data/data/####/52983f169916d921_0
  • /data/data/####/52e2ee53f8d5a284_0
  • /data/data/####/53fed62e3a766062_0
  • /data/data/####/54182b2b6fc364d6_0
  • /data/data/####/54d0188dfd2bec66_0
  • /data/data/####/55566cf0b9ad6cc9_0
  • /data/data/####/561feeb94d66038b_0
  • /data/data/####/561feeb94d66038b_1
  • /data/data/####/56685a0051f4144d_0
  • /data/data/####/56ca75bf377dd1a4_0
  • /data/data/####/579217891453e1a7_0
  • /data/data/####/57c36cfb046a29ad_0 (deleted)
  • /data/data/####/57fe16c4c090ef76_0 (deleted)
  • /data/data/####/588056b1f3e10161_0
  • /data/data/####/595d7afc5de73671_0
  • /data/data/####/597c7504dfdf291b_0
  • /data/data/####/5beff771db0438bf_0
  • /data/data/####/5cf93bc99e960b68_0
  • /data/data/####/606279ca6ba210e2_0
  • /data/data/####/609cd5bff0a7875d_0
  • /data/data/####/612e31288567dd54_0
  • /data/data/####/621d0e64af6d9a1b_0
  • /data/data/####/62c226458ed71f6d_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/62cdd152c8d4f93a_0
  • /data/data/####/62d7311b4c1c8384_0
  • /data/data/####/63cc07fb611c953c_0
  • /data/data/####/63fa55a35e7849d3_0
  • /data/data/####/63fa55a35e7849d3_1
  • /data/data/####/641f77bdb8dbf5e7_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/6540aebe967aa167_0
  • /data/data/####/65415f216dad930a_0
  • /data/data/####/6564723d1c5d6942_0
  • /data/data/####/6579799b3aee52a4_0
  • /data/data/####/6591c4938d5cba67_0
  • /data/data/####/66401b0c20b0e3a0_0
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/66f22e8e2247d2d7_0
  • /data/data/####/671ce8fb6cecf26e_0
  • /data/data/####/675c7e9d757240d9_0
  • /data/data/####/67ee89322a4e404e_0
  • /data/data/####/68986941fc82c5b4_0
  • /data/data/####/68b4362225c0afe1_0 (deleted)
  • /data/data/####/694a3da3cd30c5eb_0
  • /data/data/####/69dd15a632c131d2_0
  • /data/data/####/6a360b5b303ca3da_0
  • /data/data/####/6a6bd2bae7e676cb_0
  • /data/data/####/6d59caae7d85f890_0
  • /data/data/####/6df7bbe2ff16961a_0
  • /data/data/####/6ea0bc25a9bc6b4a_0
  • /data/data/####/6ea0bc25a9bc6b4a_1
  • /data/data/####/70184bfaa10813bb_0
  • /data/data/####/70224a11cd9637e6_0
  • /data/data/####/7054b56eb5326142_0
  • /data/data/####/706d5e8197c80e36_0
  • /data/data/####/7074063d3d696416_0
  • /data/data/####/713ff680fe2b6dc1_0 (deleted)
  • /data/data/####/7147df6c4bfeee2e_0
  • /data/data/####/71e84b9d141fdfd1_0
  • /data/data/####/72c51024b7082564_0
  • /data/data/####/731c6a868b1d78d7_0
  • /data/data/####/734151022703a189_0
  • /data/data/####/735b5e776fbd4df2_0
  • /data/data/####/736647aca8f96357_0
  • /data/data/####/7387a061ad84992e_0
  • /data/data/####/73c888895696cfde_0 (deleted)
  • /data/data/####/74df6687d05cd653_0
  • /data/data/####/755dc49fabeb6d87_0
  • /data/data/####/756bbdfb06827c04_0
  • /data/data/####/758f67ebb2aafa56_0
  • /data/data/####/76099ba0ac22b4ec_0
  • /data/data/####/76105296525708f2_0
  • /data/data/####/767a9aa1bf3949cd_0
  • /data/data/####/7693a67e3f8fd29c_0
  • /data/data/####/77f7e43730ee8c50_0
  • /data/data/####/781a61d4a489c585_0
  • /data/data/####/7857e1f70dfdf631_0
  • /data/data/####/7a306f769ece4b62_0
  • /data/data/####/7a5600e51f46dc0c_0
  • /data/data/####/7a91f92996a9fc82_0
  • /data/data/####/7a91f92996a9fc82_1
  • /data/data/####/7ac8a94a716cd3dd_0 (deleted)
  • /data/data/####/7b33fdead8767b0b_0
  • /data/data/####/7b4e1e2dd27bfa3d_0
  • /data/data/####/7bc96ac091e2c940_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c3df9f65ed5afc2_0
  • /data/data/####/7cb2bcf80850eda0_0 (deleted)
  • /data/data/####/7d20f1828d7b1cbe_0
  • /data/data/####/7d5969f107923b57_0
  • /data/data/####/7daf53d96b278a9a_0
  • /data/data/####/7daf53d96b278a9a_s
  • /data/data/####/7dc3b494b6708ff7_0
  • /data/data/####/7ec224298c55c3e2_0
  • /data/data/####/7efa9e58757091ff_0
  • /data/data/####/7fe4f8749b31f1a7_0
  • /data/data/####/8023b24f1b21fff6_0
  • /data/data/####/809314cb2160a2a1_0
  • /data/data/####/814013efc82b29d2_0
  • /data/data/####/814e92d1588d5704_0
  • /data/data/####/8164a06f8cc2ad1c_0
  • /data/data/####/819a2dd4a67dbb25_0
  • /data/data/####/82df6486424fe40e_0
  • /data/data/####/82df6486424fe40e_1
  • /data/data/####/84b235b03a14db5e_0
  • /data/data/####/84c49811f40b6a61_0
  • /data/data/####/85678c6df50718b8_0
  • /data/data/####/85aac0d26bc919f2_0
  • /data/data/####/85ae6de2baf8f38f_0
  • /data/data/####/85e4309438e95191_0
  • /data/data/####/864ba7b3147d1391_0
  • /data/data/####/868cc0432d0fbd62_0
  • /data/data/####/86aaa2c20a596d7c_0
  • /data/data/####/87af7f615cc3101c_0
  • /data/data/####/883c4ae930e15a5a_0
  • /data/data/####/888494125650092a_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/88c4fa0a0ac6dd42_0
  • /data/data/####/8a19cd95135de0be_0
  • /data/data/####/8a5d930b1c81ed82_0
  • /data/data/####/8ac2cfebe334fa88_0
  • /data/data/####/8c2ae296c491af3f_0
  • /data/data/####/8c765efd11bfbc1f_0
  • /data/data/####/8d3c6f54a0dc74a5_0
  • /data/data/####/8db8ef6f042ea924_0
  • /data/data/####/8ed98a80a9dca3d1_0
  • /data/data/####/8f7cca73519a46b6_0
  • /data/data/####/8fcc900296f7d6a3_0
  • /data/data/####/906e73bf9e2f2a4b_0
  • /data/data/####/92206d673b348ef3_0
  • /data/data/####/92981146dce670c9_0
  • /data/data/####/92d9f47c317f287d_0
  • /data/data/####/92d9f47c317f287d_1
  • /data/data/####/93c912d0ac905866_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/949ce422a3408186_0
  • /data/data/####/95964d62c9def653_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/961bdbab5be55ede_0
  • /data/data/####/969f4aff55d97727_0
  • /data/data/####/979c1dcc8f0c1189_0
  • /data/data/####/98035feb8dc60e2b_0
  • /data/data/####/980c993391aeba89_0
  • /data/data/####/980c993391aeba89_1
  • /data/data/####/983d931d7a653552_0
  • /data/data/####/991311957b842bdf_0
  • /data/data/####/993ef5e96d789e71_0
  • /data/data/####/993f87b6a8aa639f_0
  • /data/data/####/9989493cebaff546_0 (deleted)
  • /data/data/####/99e1d7f70792b254_0
  • /data/data/####/9aa94c6f444426b7_0
  • /data/data/####/9b71edf832d0ae4c_0
  • /data/data/####/9c96d4f507a70c98_0
  • /data/data/####/9cd6c2615ad7442a_0
  • /data/data/####/9cd6c2615ad7442a_s
  • /data/data/####/9d4622f9a44a6275_0
  • /data/data/####/9d5c589d9130c365_0
  • /data/data/####/9dbff11187e8108c_0
  • /data/data/####/9de12a0f52691fec_0
  • /data/data/####/9df1fce02a2e0327_0
  • /data/data/####/9e34b6b74befeb40_0
  • /data/data/####/9ea4b735086718a2_0
  • /data/data/####/9ef6af65c92b4e10_0
  • /data/data/####/9f557d107db931a5_0
  • /data/data/####/9fab8bedbaaa2cda_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/ICLUWJteC.dex
  • /data/data/####/ICLUWJteC.dex.flock (deleted)
  • /data/data/####/KJNZSjg.dex
  • /data/data/####/KJNZSjg.dex.flock (deleted)
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a0e3f4e8c2461ae8_0
  • /data/data/####/a136137dcc3a33f7_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a1c50fb91d9cc9f7_0
  • /data/data/####/a1f4402a924ff534_0
  • /data/data/####/a220af5d647d0f55_0
  • /data/data/####/a2775fffb6a35622_0
  • /data/data/####/a29e648042a61aa8_0
  • /data/data/####/a3d970d37df78be2_0
  • /data/data/####/a3f3f163d03ff1f2_0
  • /data/data/####/a4156aa71168bfae_0
  • /data/data/####/a42b2e18206cade7_0
  • /data/data/####/a456ba9d57396cdf_0
  • /data/data/####/a5aad13febc6a967_0
  • /data/data/####/a5e458c8f2f7b764_0
  • /data/data/####/a7452c8c5f0963a1_0
  • /data/data/####/a887e14cda142498_0
  • /data/data/####/a8f035289a6ec018_0
  • /data/data/####/a9064635a74e49e7_0
  • /data/data/####/a9064635a74e49e7_1
  • /data/data/####/a94e3d28831e85d5_0
  • /data/data/####/a990ca7fd8a38925_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/aa164e2b7cfa8203_0
  • /data/data/####/aa3492eef66b5208_0
  • /data/data/####/aaca50d537b72b9b_0
  • /data/data/####/ab7c5132db84c161_0
  • /data/data/####/ac973ee7b6d8febe_0
  • /data/data/####/aca764273de775c3_0
  • /data/data/####/acf8542fe8f4c0b0_0
  • /data/data/####/ad27a84033dbec84_0
  • /data/data/####/ae2a9887724b9c08_0
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/afd7b962cd08bf1a_0
  • /data/data/####/b02593c8281befbe_0
  • /data/data/####/b03acc385ffbeaf8_0
  • /data/data/####/b04542ac77c2a83d_0
  • /data/data/####/b058aef0879c7e55_0
  • /data/data/####/b058aef0879c7e55_1
  • /data/data/####/b0d91e1a64a3e65e_0
  • /data/data/####/b14808a180c50e2e_0
  • /data/data/####/b2575f6ecf380ef9_0
  • /data/data/####/b2dc456c499f66ec_0 (deleted)
  • /data/data/####/b4d55937d2b947cd_0
  • /data/data/####/b4df51fc6c13d1c5_0
  • /data/data/####/b5196d93b1871c1e_0
  • /data/data/####/b5d571bcf26b1598_0
  • /data/data/####/b60453b6cc8c7d02_0
  • /data/data/####/b620e0222e35840b_0
  • /data/data/####/b63793b36e307826_0 (deleted)
  • /data/data/####/b76ea44ab006e7e6_0 (deleted)
  • /data/data/####/b8104ad6aaafbce7_0
  • /data/data/####/b84eab1fcd57fa91_0
  • /data/data/####/b922e6234071619c_0
  • /data/data/####/ba62682cff0b2448_0
  • /data/data/####/ba62adc3e88a903e_0
  • /data/data/####/bae06b29657ba062_0
  • /data/data/####/bbc346c3bfaf9f9f_0
  • /data/data/####/bcaad22cd8953116_0
  • /data/data/####/bcebbb41c46ee1f9_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bda6d8b9d1d5892a_0
  • /data/data/####/bdaa1c47560ecdfd_0
  • /data/data/####/be7bf9715bb21d8b_0
  • /data/data/####/be7bf9715bb21d8b_1
  • /data/data/####/bf3c59600da39618_0
  • /data/data/####/bf70cc938786ec6d_0
  • /data/data/####/c0188e1dd2cccbaf_0
  • /data/data/####/c0dd57aa85e05435_0
  • /data/data/####/c0fbd9f6a82937d3_0 (deleted)
  • /data/data/####/c1049c0b8f3c130f_0
  • /data/data/####/c1cd42ad14ca8715_0
  • /data/data/####/c1cd42ad14ca8715_1
  • /data/data/####/c1d13ec40eb1e5f2_0
  • /data/data/####/c21a4f5e61c8bc20_0
  • /data/data/####/c4420e5520ee7d4b_0
  • /data/data/####/c451cf81c01502b7_0
  • /data/data/####/c48cbe8e9c782eec_0
  • /data/data/####/c4c837d661dca67d_0
  • /data/data/####/c4c837d661dca67d_s
  • /data/data/####/c6a611b18319a71e_0
  • /data/data/####/c6c50b88641b8117_0
  • /data/data/####/c704fe4e6415e91a_0
  • /data/data/####/c819cbfc8e4baee7_0
  • /data/data/####/c8a279397b770648_0
  • /data/data/####/c8a279397b770648_1
  • /data/data/####/c90d73f553965eec_0
  • /data/data/####/c96db79ae8a9a482_0
  • /data/data/####/c97ec69923dc2f07_0
  • /data/data/####/ca41fba5bc21fe66_0
  • /data/data/####/cb6e8490fe0e7327_0
  • /data/data/####/cb7c2ba667649b8d_0
  • /data/data/####/cb84cd334a2a860c_0
  • /data/data/####/cbdbca0830988ca4_0
  • /data/data/####/cc16b9261e9f021b_0
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/ccd4e659f352f663_0
  • /data/data/####/cce2d9d1aaace2e3_0
  • /data/data/####/cd640a0fddc3cb3c_0
  • /data/data/####/cf75ccfee9ae306a_0
  • /data/data/####/com.nvogaxfk_preferences.xml
  • /data/data/####/d011ebdb713e5b78_0
  • /data/data/####/d1030f1f8e4c1b96_0
  • /data/data/####/d15fac7c35d0f87b_0
  • /data/data/####/d2dc6e3bc242279a_0
  • /data/data/####/d3593c30fe553d7e_0
  • /data/data/####/d43c25dcc000e28b_0
  • /data/data/####/d47376780ad53931_0
  • /data/data/####/d4cd6e09830b47ee_0
  • /data/data/####/d4ff65941fd192a3_0
  • /data/data/####/d59a62f87da343b1_0
  • /data/data/####/d5a5a745ea0506b5_0
  • /data/data/####/d5d654b69620d846_0
  • /data/data/####/d77ab3d283443a6f_0
  • /data/data/####/d80feaa54722b061_0
  • /data/data/####/d8f79924ef12a451_0
  • /data/data/####/d9258dc3ac51e859_0
  • /data/data/####/da29b751d807944e_0
  • /data/data/####/db679dffd997e136_0
  • /data/data/####/dbc5ef5ef750bec9_0
  • /data/data/####/dbc5ef5ef750bec9_1
  • /data/data/####/de11caa1f953e1f0_0
  • /data/data/####/df618664dc95b999_0
  • /data/data/####/e030ad03a206fdbd_0
  • /data/data/####/e04d5cfea3e1a3bc_0
  • /data/data/####/e04d5cfea3e1a3bc_1
  • /data/data/####/e04ecf0bca57320a_0
  • /data/data/####/e108099952f13c64_0
  • /data/data/####/e1b4015b0c1fb74e_0
  • /data/data/####/e1cf3aea14e1bfac_0
  • /data/data/####/e33fb3355013e44a_0
  • /data/data/####/e3b3401a64eb5803_0
  • /data/data/####/e5435cda768dcecf_0
  • /data/data/####/e65a4572cddb52cf_0
  • /data/data/####/e6b6e86a7c9ccc3f_0
  • /data/data/####/e727c4b8f582b78b_0
  • /data/data/####/e74026a43bc75cbe_0
  • /data/data/####/e7795bba4c293ac0_0
  • /data/data/####/e7b5754ed668de7e_0
  • /data/data/####/e7f1db409f55d10b_0
  • /data/data/####/e8d75ad78669bd02_0
  • /data/data/####/e8dea98c37bce5a8_0
  • /data/data/####/e901a8b1d3f4b0bf_0
  • /data/data/####/e991fbfedba2aab9_0
  • /data/data/####/ea0c7ed70355b665_0
  • /data/data/####/ea420e2d7e655b78_0
  • /data/data/####/ea4767eaf9d51405_0
  • /data/data/####/ec273ca1d808304d_0
  • /data/data/####/ef38f17ca3a93976_0
  • /data/data/####/ef808b91b8f6b8e5_0
  • /data/data/####/efd308539a596bc6_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/efff44b68eaaaeca_0
  • /data/data/####/f0b920685a39e863_0
  • /data/data/####/f143a2116cd34b30_0
  • /data/data/####/f240ad85a9dbeaaa_0
  • /data/data/####/f28346ea19d3daab_0
  • /data/data/####/f2ab4059d4bd03c9_0
  • /data/data/####/f4a71d5e8f60db3c_0
  • /data/data/####/f4fc897731843d6f_0 (deleted)
  • /data/data/####/f508d6449c414d07_0
  • /data/data/####/f54b31e3f36ed283_0
  • /data/data/####/f587c58ba33e02c1_0 (deleted)
  • /data/data/####/f60af6ce45522b89_0
  • /data/data/####/f6576ef7214591f7_0
  • /data/data/####/f684a021f93b4e0b_0
  • /data/data/####/f68635843452f9f4_0
  • /data/data/####/f75b3f6afb775623_0
  • /data/data/####/f94cf0ef6620e077_0
  • /data/data/####/f9f6fc8723b81ea3_0
  • /data/data/####/fa2d63a81f0719f7_0
  • /data/data/####/fa2d63a81f0719f7_1
  • /data/data/####/faa3080003c91bbf_0
  • /data/data/####/faf95043d1de6e49_0
  • /data/data/####/fb62890d875b217e_0
  • /data/data/####/fb8792c3067fe6b6_0
  • /data/data/####/fbd5a4be96d7606c_0
  • /data/data/####/fc720ee8111ff640_0
  • /data/data/####/fd0dc7f4fb4b9836_0
  • /data/data/####/fd9b8611100ca8c7_0
  • /data/data/####/fddfeb87b3831729_0
  • /data/data/####/fe424b794bd9d633_0
  • /data/data/####/fe4275ab4babaefe_0 (deleted)
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff57deac1eff72ec_0
  • /data/data/####/ff5a9e2cbb08395c_0
  • /data/data/####/ff890e53896ed482_0
  • /data/data/####/ff913dd4f5b48aaf_0
  • /data/data/####/ffcbff16af48e2d4_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/temp-index
  • /data/data/####/the-real-index
  • /data/data/####/vVtNyPMz.dex
  • /data/data/####/vVtNyPMz.dex.flock (deleted)
  • /data/data/####/yVwmkNf.dex
  • /data/data/####/yVwmkNf.dex.flock (deleted)
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android