Meine Bibliothek
Meine Bibliothek

+ Zur Bibliothek hinzufügen

Support

Ihre Anfragen

Rufen Sie uns an

+7 (495) 789-45-86

Profil

Android.Locker.16737

Added to the Dr.Web virus database: 2023-05-26

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Threat detection based on machine learning.
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) rr13---####.g####.com:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) pt-sta####.js####.com:443
  • TCP(TLS/1.0) c####.liveja####.com:443
  • TCP(TLS/1.0) galle####.vcmd####.com:443
  • TCP(TLS/1.0) ei.ph####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) 2####.85.233.94:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.2) 2####.85.233.94:443
  • TCP(TLS/1.2) p####.google####.com:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • c####.liveja####.com
  • cdn1-sm####.ph####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.go####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • rr13---####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/002fb9cc78f82a55_0
  • /data/data/####/00a5ebd7bb03eb01_0
  • /data/data/####/014513153ddb2e19_0
  • /data/data/####/0149e2485409c75f_0
  • /data/data/####/0149e2485409c75f_1
  • /data/data/####/02edca73cfaa891e_0
  • /data/data/####/03bcfd0b25950bdc_0
  • /data/data/####/045fb5a4adc01df0_0
  • /data/data/####/05a326d54e9100c2_0
  • /data/data/####/06e0c57c53f0b634_0
  • /data/data/####/074efd25503e0c39_0
  • /data/data/####/07bb1aa03e6ab0a5_0
  • /data/data/####/086f26772c01bdcc_0
  • /data/data/####/087118d8a04f8ee9_0
  • /data/data/####/08790570ec795a2f_0
  • /data/data/####/08ce1c349c5e135a_0
  • /data/data/####/08f58059e293687c_0
  • /data/data/####/094186cc48fe3def_0 (deleted)
  • /data/data/####/09fb1e387a3e3922_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0ab0d8b98d74300c_0
  • /data/data/####/0ae6ef0b60193434_0
  • /data/data/####/0b5d6df7cf1842f7_0 (deleted)
  • /data/data/####/0b6c3bd569c0aff2_0
  • /data/data/####/0c2b8db3e975b42a_0
  • /data/data/####/0cd3445d4a620356_0
  • /data/data/####/0d00c2d9f90dc8ab_0
  • /data/data/####/0d633a62b797fe1d_0
  • /data/data/####/0dfb700435dcb891_0
  • /data/data/####/0e6021950d99d6c2_0
  • /data/data/####/0ec4b0429f806802_0
  • /data/data/####/0f26c200229407c4_0
  • /data/data/####/0fd8aa2987ca846d_0
  • /data/data/####/0fea3a1665aee354_0 (deleted)
  • /data/data/####/0ff056e46568e7c8_0
  • /data/data/####/108a35709f007ff3_0
  • /data/data/####/108e9001c48d8e49_0
  • /data/data/####/1116d8355d4012f3_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/1251c9deb44f08a1_0
  • /data/data/####/1251c9deb44f08a1_s
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/14a17878aa2d2b6f_0
  • /data/data/####/14a17878aa2d2b6f_1
  • /data/data/####/150d9162c48f5c2b_0
  • /data/data/####/150d9162c48f5c2b_1
  • /data/data/####/150e0e0c2b540753_0
  • /data/data/####/150e0e0c2b540753_s
  • /data/data/####/1621a659d0794ef9_0
  • /data/data/####/16fb6713d74aa947_0
  • /data/data/####/173d304ec3c5ff08_0
  • /data/data/####/18c4e50e91bfe9a4_0
  • /data/data/####/1ac5b96ee8e5db35_0
  • /data/data/####/1bbfb8906ea845a3_0
  • /data/data/####/1c173c20d3ea25ab_0
  • /data/data/####/1c173c20d3ea25ab_1
  • /data/data/####/1c3aae2ffc5a59d8_0
  • /data/data/####/1c9d0791f1810a50_0
  • /data/data/####/1f0d9008ba2d36e0_0
  • /data/data/####/1f3b11e29e0e2db2_0
  • /data/data/####/1f3b11e29e0e2db2_1
  • /data/data/####/1f811b9a0c092d81_0
  • /data/data/####/22560ac717f52d25_0
  • /data/data/####/22560ac717f52d25_1
  • /data/data/####/232337463cdc3598_0
  • /data/data/####/238d535a802c0681_0
  • /data/data/####/23bd6e7d4c479823_0
  • /data/data/####/23bd6e7d4c479823_1
  • /data/data/####/23ed19829be7e7dc_0
  • /data/data/####/24cc24ad06b07631_0
  • /data/data/####/251e1ef36bd19fd3_0
  • /data/data/####/2617aacb07703504_0
  • /data/data/####/274fd76f494519a4_0
  • /data/data/####/27a3953d0cd87aea_0
  • /data/data/####/2822c45fe895ea42_0
  • /data/data/####/290b7e51a0a18367_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/297a2acaaaa233d7_0
  • /data/data/####/29e88bb3eec77167_0
  • /data/data/####/2b00e1fec7690351_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d796f0d1237f2a8_0
  • /data/data/####/2dae205149747ba6_0
  • /data/data/####/2fb4885fff7bd002_0
  • /data/data/####/30d8abc1d9473e01_0
  • /data/data/####/31095393fa1573c9_0
  • /data/data/####/3109e4a6e401b5fd_0
  • /data/data/####/3109e4a6e401b5fd_1
  • /data/data/####/32981ffeb42e9657_0 (deleted)
  • /data/data/####/32e4e9d849d9386e_0
  • /data/data/####/32e4e9d849d9386e_s
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/334ac5455285f2d3_0
  • /data/data/####/334ac5455285f2d3_1
  • /data/data/####/35ff905280906f91_0
  • /data/data/####/35ff905280906f91_1
  • /data/data/####/36ac7e2d67dec583_0
  • /data/data/####/36cdb1adee788ae0_0
  • /data/data/####/37fba0becbc180a9_0 (deleted)
  • /data/data/####/3806f950a6cb9ef7_0
  • /data/data/####/38c33b2e286dff30_0
  • /data/data/####/38f4036fc51231b1_0
  • /data/data/####/39f49fa75b69fdd9_0
  • /data/data/####/3b2cd0f85392d15c_0
  • /data/data/####/3b396958ef9d2dbd_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3ec35c0154667546_0
  • /data/data/####/3f272aca370f27d2_0
  • /data/data/####/3ffbf0db623db390_0
  • /data/data/####/403280eeab588572_0
  • /data/data/####/403d9d74c79a5d42_0 (deleted)
  • /data/data/####/407f7ba7056c3f68_0
  • /data/data/####/407f7ba7056c3f68_1
  • /data/data/####/408d3a802a4a9708_0
  • /data/data/####/40cdbf12d63ff390_0
  • /data/data/####/41788e71d4efae19_0
  • /data/data/####/418b6f48c9a21cbd_0
  • /data/data/####/41bf9ce91dcebcbb_0
  • /data/data/####/43940fbb77163174_0
  • /data/data/####/45455b24b6ad3dad_0
  • /data/data/####/454eb3154cad5739_0
  • /data/data/####/454eb3154cad5739_1
  • /data/data/####/47013c9db4c8e037_0
  • /data/data/####/471de3dc473eeb69_0
  • /data/data/####/472e58c456998a58_0
  • /data/data/####/478f08e575eeedc1_0
  • /data/data/####/47c24af67efe8135_0
  • /data/data/####/4867748e5ab26002_0
  • /data/data/####/490b551cee1ae561_0
  • /data/data/####/4aed58c0801873b3_0
  • /data/data/####/4b634bb7a12b1fbf_0 (deleted)
  • /data/data/####/4c0ad65a1cbae15c_0
  • /data/data/####/4c10d6dc9c5c3392_0
  • /data/data/####/4c54432125694238_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4e059a3f4061d445_0
  • /data/data/####/4e66b49963aa9e2f_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/4f37abe332f0a2a4_0
  • /data/data/####/4f37abe332f0a2a4_1
  • /data/data/####/4fcb7283b32dc681_0
  • /data/data/####/4fffb28765d4b69c_0
  • /data/data/####/5005224befa4799d_0
  • /data/data/####/500e303f46dd632a_0
  • /data/data/####/508ef845dc7a5eea_0
  • /data/data/####/51bd3531025d6fac_0
  • /data/data/####/51e1ddeeca65893f_0
  • /data/data/####/51e1ddeeca65893f_1
  • /data/data/####/522376a9fc0b77f3_0
  • /data/data/####/5307d0ece0cb67fc_0
  • /data/data/####/53dd18dae744ef9b_0
  • /data/data/####/54182b2b6fc364d6_0
  • /data/data/####/545684dca0fc263d_0
  • /data/data/####/55834d744adb784d_0 (deleted)
  • /data/data/####/56270704fa8832bf_0
  • /data/data/####/5687786d1ab59bc2_0
  • /data/data/####/5687786d1ab59bc2_1
  • /data/data/####/56b00c3e6a235433_0
  • /data/data/####/574e07c5b74ba617_0
  • /data/data/####/59f8385b031ae421_0
  • /data/data/####/5a3ebfb203298532_0
  • /data/data/####/5a51c47ad5d4a778_0
  • /data/data/####/5a58e2b820b42bba_0
  • /data/data/####/5a9d00b014328b38_0 (deleted)
  • /data/data/####/5c753e04fcb38dae_0
  • /data/data/####/5cc1e43a8bfb1276_0
  • /data/data/####/5dd7d0ec1bb9fe34_0
  • /data/data/####/5f21bbcfb71de04b_0
  • /data/data/####/607fa6e3f53992d1_0
  • /data/data/####/60cac287be1a56cd_0
  • /data/data/####/6257848a513d1f5f_0
  • /data/data/####/62a04b82a48cd729_0
  • /data/data/####/62a04b82a48cd729_1
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/6328fe60245f54c1_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/647f54b0bbbfbd0c_0
  • /data/data/####/65f0c1a7a162fda3_0
  • /data/data/####/65f0c1a7a162fda3_1
  • /data/data/####/660c5e74cdb81fe9_0
  • /data/data/####/66a583e860c70865_0 (deleted)
  • /data/data/####/66b7595429d1879c_0
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/67b0a8f7427c44fd_0
  • /data/data/####/686b7d9a23bc1bc3_0
  • /data/data/####/6887c2426388e671_0
  • /data/data/####/6887c2426388e671_1
  • /data/data/####/690fd838ce6389e4_0
  • /data/data/####/690fd838ce6389e4_s
  • /data/data/####/691b4dbf35cc94eb_0
  • /data/data/####/69e8cd2dce229758_0
  • /data/data/####/6a9c61e11fbd3b73_0
  • /data/data/####/6b38e8ef9dd700d4_0 (deleted)
  • /data/data/####/6bcffe2a36969236_0
  • /data/data/####/6c8dadcd06436d47_0
  • /data/data/####/6d17d3fe29440860_0
  • /data/data/####/6d444989c36fe1b7_0
  • /data/data/####/6d444989c36fe1b7_1
  • /data/data/####/6dc427d540a3aa82_0
  • /data/data/####/6e180f3e53b300cf_0
  • /data/data/####/6e9fa5dc2faef67e_0
  • /data/data/####/6ec2e02776000610_0 (deleted)
  • /data/data/####/6ec7abfd0021f1a5_0
  • /data/data/####/7042d6b8d1e9ac45_0
  • /data/data/####/719e3c98d3487938_0
  • /data/data/####/734151022703a189_0
  • /data/data/####/7360bc72c3aa0a3b_0
  • /data/data/####/7375976d0298d9a8_0
  • /data/data/####/7411c9a388c2af41_0
  • /data/data/####/75281fc7b2ea3441_0
  • /data/data/####/7537d73a696881cf_0
  • /data/data/####/76de3ba3d5f2f644_0
  • /data/data/####/76de3ba3d5f2f644_1
  • /data/data/####/7767c8c9d98bbc5e_0
  • /data/data/####/78514b3283191164_0
  • /data/data/####/78ced019c17e3fc9_0
  • /data/data/####/7b18d78c043b68df_0
  • /data/data/####/7b1fd81dcdaf55ee_0
  • /data/data/####/7be1e6770f52a640_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c8d1c4e74746a38_0
  • /data/data/####/7c8d1c4e74746a38_1
  • /data/data/####/7d632781d55a8733_0
  • /data/data/####/7dcb61e15de2d57b_0
  • /data/data/####/7eb1ba78cfac9f0a_0
  • /data/data/####/7eb1ba78cfac9f0a_1
  • /data/data/####/7ec989bc84577fec_0
  • /data/data/####/7ee1fcc6ef46a1d0_0
  • /data/data/####/7f321e70b534c9c1_0
  • /data/data/####/7f7e8df9def3f19e_0
  • /data/data/####/7fe4f8749b31f1a7_0
  • /data/data/####/80f468ecf75b6b3f_0
  • /data/data/####/812ac40f1b896697_0
  • /data/data/####/8333fc791e7f8561_0
  • /data/data/####/8333fc791e7f8561_1
  • /data/data/####/85cc6aa5040ff08a_0
  • /data/data/####/871a66dda07aec25_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/88c4fa0a0ac6dd42_0
  • /data/data/####/891807cd26ba8414_0
  • /data/data/####/8aefeb973b659bb0_0
  • /data/data/####/8c19c5a803ae7091_0 (deleted)
  • /data/data/####/8ebe8f3fbd2b919a_0
  • /data/data/####/8f4376079b46171e_0 (deleted)
  • /data/data/####/8faed3c91094f976_0
  • /data/data/####/90499dbb83fb3cfb_0
  • /data/data/####/913f519559d44805_0
  • /data/data/####/91ec435d59b097ce_0
  • /data/data/####/927c81f49c686279_0
  • /data/data/####/92f87a7791750684_0
  • /data/data/####/933042830c3ea02a_0
  • /data/data/####/935ea5cf80b4f290_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/9423a93bb8ba0714_0
  • /data/data/####/94b1308dd771e560_0
  • /data/data/####/94bf555c6c6dcd29_0
  • /data/data/####/94bf555c6c6dcd29_1
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/97e39c5b12f2857e_0
  • /data/data/####/9889bd74a4f9f15f_0
  • /data/data/####/990afffd393f0b58_0
  • /data/data/####/9a303d2e39f707cc_0
  • /data/data/####/9a8c169f2936eaa1_0
  • /data/data/####/9b09d97a5a90a033_0
  • /data/data/####/9d1b44e2edf843d2_0
  • /data/data/####/9d66656fd3736836_0
  • /data/data/####/9e545eb8f89af2a4_0 (deleted)
  • /data/data/####/9ea2ec9c37c834bc_0
  • /data/data/####/9ea4b735086718a2_0
  • /data/data/####/9ef6af65c92b4e10_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/SoCeCGUf.dex
  • /data/data/####/SoCeCGUf.dex.flock (deleted)
  • /data/data/####/UGTEhHr.dex
  • /data/data/####/UGTEhHr.dex.flock (deleted)
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a1093587b16b9fc3_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a352394b471c3526_0
  • /data/data/####/a5aad13febc6a967_0
  • /data/data/####/a6198e49276ff811_0
  • /data/data/####/a6314202e4524cf0_0
  • /data/data/####/a73495d8f4eed396_0
  • /data/data/####/a75fdb11d5785716_0
  • /data/data/####/a887e14cda142498_0
  • /data/data/####/a92baec8d8c33f1c_0
  • /data/data/####/a9beb2a4ce4cef7c_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/aaeb18e12d8da21e_0
  • /data/data/####/ac250ec7ea192dae_0
  • /data/data/####/ac250ec7ea192dae_1
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/aec5b5f07b0f77ad_0
  • /data/data/####/af1a20785fceb7d5_0
  • /data/data/####/af1a20785fceb7d5_1
  • /data/data/####/af56d7241ce9d435_0
  • /data/data/####/afee997890cc7029_0
  • /data/data/####/b088c912433d5779_0
  • /data/data/####/b099e26ffc5e4c90_0
  • /data/data/####/b099e26ffc5e4c90_1
  • /data/data/####/b1693ed68b7d1617_0
  • /data/data/####/b16ff14b58084226_0
  • /data/data/####/b1746c7a7748450c_0
  • /data/data/####/b3ef8bb1645fc7c4_0
  • /data/data/####/b4df51fc6c13d1c5_0
  • /data/data/####/b5248d0773595223_0
  • /data/data/####/b534cdab968733b1_0
  • /data/data/####/b536592e24999ea6_0 (deleted)
  • /data/data/####/b6173819225b3405_0 (deleted)
  • /data/data/####/b65efbbd4b359604_0
  • /data/data/####/b6d4f4442f9c523d_0
  • /data/data/####/b7a45ae6277bdd0b_0
  • /data/data/####/b8139235d6600615_0
  • /data/data/####/b82c8dc1cf9a7e4a_0
  • /data/data/####/b905ed819aa2234d_0
  • /data/data/####/ba3145df04d10ced_0
  • /data/data/####/ba9369e8a270e3d5_0
  • /data/data/####/bc73f8734c001a33_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bdaa1c47560ecdfd_0
  • /data/data/####/bdpUnp.dex
  • /data/data/####/bdpUnp.dex.flock (deleted)
  • /data/data/####/be08a3cdd135a8f9_0
  • /data/data/####/be32adee8b879f17_0
  • /data/data/####/bf882280db4bae07_0
  • /data/data/####/c00c39458d85fcd8_0
  • /data/data/####/c08f10363fecd3e5_0
  • /data/data/####/c15e0f60bb18a110_0
  • /data/data/####/c2c2c4d94ecee1f5_0
  • /data/data/####/c3b7f75ab229848e_0
  • /data/data/####/c424b6a6bfa16c9e_0
  • /data/data/####/c424b6a6bfa16c9e_1
  • /data/data/####/c4420e5520ee7d4b_0
  • /data/data/####/c451cf81c01502b7_0
  • /data/data/####/c4c837d661dca67d_0
  • /data/data/####/c4c837d661dca67d_s
  • /data/data/####/c50b08aa93d3394a_0
  • /data/data/####/c982dcf4b02dbd8c_0
  • /data/data/####/cb082ab40e623475_0
  • /data/data/####/cb21163042d8660e_0
  • /data/data/####/cb21163042d8660e_s
  • /data/data/####/cb2513a0c19cd02f_0 (deleted)
  • /data/data/####/cb80aeeacb66ab24_0
  • /data/data/####/cbb11b192f7dc00f_0
  • /data/data/####/cbdbca0830988ca4_0
  • /data/data/####/cc91c7982f1b8780_0
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/cd9ae6e50aa5fb61_0
  • /data/data/####/cff92c661aa46add_0
  • /data/data/####/com.vwyhxa_preferences.xml
  • /data/data/####/d0a9d1b7166d1746_0
  • /data/data/####/d17a55b56e238e34_0
  • /data/data/####/d19df50f0415cc03_0
  • /data/data/####/d23e350a29a3ecf4_0 (deleted)
  • /data/data/####/d268c57d6d7fab3a_0
  • /data/data/####/d26e7ea5458a253b_0
  • /data/data/####/d2f0b41a238b9d13_0
  • /data/data/####/d2fede76df72a882_0
  • /data/data/####/d2fede76df72a882_1
  • /data/data/####/d37d2fcb4446f350_0
  • /data/data/####/d3f9c68e0b18830c_0
  • /data/data/####/d3f9c68e0b18830c_1
  • /data/data/####/d49281a647c57da6_0
  • /data/data/####/d4e63e6902feb759_0
  • /data/data/####/d56357c3a0c5b16d_0
  • /data/data/####/d5c75480b58f6e9b_0
  • /data/data/####/d6486da8dadd152e_0
  • /data/data/####/d757f9f32b5eaab1_0
  • /data/data/####/d79837f3b1d601d4_0
  • /data/data/####/d81f4a55c717935a_0
  • /data/data/####/d820f12cd4a9465c_0
  • /data/data/####/d8d132c8d513da9d_0
  • /data/data/####/d8fda58431a7c52e_0
  • /data/data/####/d922f9740d4ce710_0
  • /data/data/####/d97006d02351659c_0 (deleted)
  • /data/data/####/da6d4a8043a5955a_0
  • /data/data/####/da6d4a8043a5955a_1
  • /data/data/####/db7aed9237363e91_0
  • /data/data/####/df131b04a01130ba_0
  • /data/data/####/dff29db6807a2a3a_0
  • /data/data/####/e06e2b9891100227_0
  • /data/data/####/e19c0a87b2388b76_0
  • /data/data/####/e19c0a87b2388b76_1
  • /data/data/####/e1bef2952a0af525_0 (deleted)
  • /data/data/####/e1d4568218a4235e_0
  • /data/data/####/e29789bfe242c98e_0
  • /data/data/####/e47c46e30a5ef0dd_0
  • /data/data/####/e649f129b0ec9805_0
  • /data/data/####/e67676db8a969e50_0
  • /data/data/####/e6fe05eee09b598a_0
  • /data/data/####/e808317641af3485_0
  • /data/data/####/e8295dbd46a5946a_0
  • /data/data/####/e991fbfedba2aab9_0
  • /data/data/####/ea420e2d7e655b78_0
  • /data/data/####/ea5a6f44c8eaf6f7_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f0a2c3709bd802fe_0
  • /data/data/####/f2021ff34f881b15_0
  • /data/data/####/f20f383709205048_0
  • /data/data/####/f240ad85a9dbeaaa_0
  • /data/data/####/f242e90453eb54eb_0
  • /data/data/####/f242e90453eb54eb_1
  • /data/data/####/f362012a033b8a5f_0
  • /data/data/####/f362012a033b8a5f_1
  • /data/data/####/f48eb9e482a08b01_0
  • /data/data/####/f4afafd304a078c8_0 (deleted)
  • /data/data/####/f5e8fdf50d5296ab_0
  • /data/data/####/f5e8fdf50d5296ab_1
  • /data/data/####/f5fa9c6556e1c73b_0
  • /data/data/####/f5fa9c6556e1c73b_1
  • /data/data/####/f75b3f6afb775623_0
  • /data/data/####/faf91a30708c0410_0
  • /data/data/####/faf91a30708c0410_1
  • /data/data/####/fb0a062839608aed_0
  • /data/data/####/fd02c8abe537839c_0
  • /data/data/####/fda34bc32fdee1c6_0
  • /data/data/####/fdc323ec8c565ca0_0
  • /data/data/####/fee0b42316616e88_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff889b32b3df0497_0
  • /data/data/####/ff913dd4f5b48aaf_0
  • /data/data/####/ff97ef09f80a2388_0
  • /data/data/####/ffba08018735c5d0_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/the-real-index
  • /data/data/####/zAKaL.dex
  • /data/data/####/zAKaL.dex.flock (deleted)
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android