Meine Bibliothek
Meine Bibliothek

+ Zur Bibliothek hinzufügen

Support

Ihre Anfragen

Rufen Sie uns an

+7 (495) 789-45-86

Profil

Android.Locker.17992

Added to the Dr.Web virus database: 2024-04-02

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.17522
Network activity:
Connects to:
  • UDP(DNS) <Google DNS>
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) www.google####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) u####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) 74.1####.131.138:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) bend-me####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) analy####.go####.com:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) connect####.gst####.com:443
  • TCP(TLS/1.2) gmscomp####.google####.com:443
  • TCP(TLS/1.2) 64.2####.164.102:443
  • TCP(TLS/1.2) www.google####.com:443
  • UDP p####.google####.com:443
DNS requests:
  • ads.traffic####.net
  • analy####.go####.com
  • bend-me####.com
  • cdn1-sm####.ph####.com
  • cdn1d-s####.ph####.com
  • connect####.gst####.com
  • ei.ph####.com
  • ei.php####.com
  • f####.google####.com
  • gmscomp####.google####.com
  • h####.por####.com
  • m####.traffic####.net
  • p####.google####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • ss.ph####.com
  • sto####.google####.com
  • u####.com
  • www.go####.com
  • www.go####.ru
  • www.google####.com
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/0059d4c61ef7bea0_0
  • /data/data/####/011992c1d3586590_0
  • /data/data/####/011992c1d3586590_1
  • /data/data/####/026ae1c72c73ccbe_0
  • /data/data/####/03375bd239629b85_0
  • /data/data/####/0381e936a2ac8f76_0
  • /data/data/####/0649555f38067a39_0
  • /data/data/####/0788931a1a455b0b_0
  • /data/data/####/07d9212ce982f4f9_0
  • /data/data/####/08067955b2bf17d0_0
  • /data/data/####/08067955b2bf17d0_1
  • /data/data/####/0a0bb371deefc8c9_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0b300795ce8ff691_0
  • /data/data/####/0baea7948606e3b1_0
  • /data/data/####/0c2416b1449261f6_0
  • /data/data/####/0de2a9f5d1c1fc1a_0 (deleted)
  • /data/data/####/0e7185f288cf1c2c_0
  • /data/data/####/0e8f995a9ac4e8ee_0
  • /data/data/####/0fb4d7ec514ed335_0
  • /data/data/####/0fcf2478b2fbe300_0
  • /data/data/####/0fcf2478b2fbe300_1
  • /data/data/####/10e63e46a740de2a_0
  • /data/data/####/10e63e46a740de2a_0 (deleted)
  • /data/data/####/11ab6487a594115c_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_0 (deleted)
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/12252ccbf675b53a_0
  • /data/data/####/13b53e57478e4448_0 (deleted)
  • /data/data/####/15f8932287d876e2_0
  • /data/data/####/15f8932287d876e2_0 (deleted)
  • /data/data/####/161d9053e51eac57_0
  • /data/data/####/163567cc20e931d4_0
  • /data/data/####/163567cc20e931d4_1
  • /data/data/####/16c5745ec4784767_0
  • /data/data/####/1761732a4fc66a92_0
  • /data/data/####/183c86f4a18b67ae_0
  • /data/data/####/186691c5ea226cc7_0
  • /data/data/####/1cca0e9c3180ffea_0
  • /data/data/####/1df8d70055c65058_0
  • /data/data/####/1e21e19363d61770_0
  • /data/data/####/1e3b77baae7964e9_0
  • /data/data/####/1eecdf9f734db3fb_0
  • /data/data/####/1fda99d0c2eaf8cb_0
  • /data/data/####/1fda99d0c2eaf8cb_1
  • /data/data/####/1ff722b3a38744ee_0
  • /data/data/####/2027d0f868605718_0
  • /data/data/####/2027d0f868605718_0 (deleted)
  • /data/data/####/2027d0f868605718_1
  • /data/data/####/202b2eb2abb9fadf_0
  • /data/data/####/20fa18c4d66d488b_0
  • /data/data/####/24449f8686913b34_0
  • /data/data/####/2506fdc035ba4dcc_0
  • /data/data/####/26b8228e9166fbc8_0
  • /data/data/####/26b86d013b30fc34_0
  • /data/data/####/27627cae165c874c_0
  • /data/data/####/284f6a59375fe661_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/294298e7d77c7686_0
  • /data/data/####/294298e7d77c7686_0 (deleted)
  • /data/data/####/29ff2adec073b02d_0
  • /data/data/####/2c2e7ad71eedc63c_0 (deleted)
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2cfe08fbdd0012dd_0
  • /data/data/####/3288a190c1dacea1_0
  • /data/data/####/331f90a99c54505f_0
  • /data/data/####/36dcad1d606425b8_0
  • /data/data/####/37ce05590819aaa8_0
  • /data/data/####/3855fce19bb86cb8_0
  • /data/data/####/3aa696ea632e9b2d_0
  • /data/data/####/3c29dd75778be664_0
  • /data/data/####/3d3b6b85a2a666c1_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3f509043cf4ea7eb_0
  • /data/data/####/403d3d7292e33bf1_0
  • /data/data/####/41eb7bc870b1379d_0
  • /data/data/####/46b5bb3fbf79b37a_0
  • /data/data/####/47c7e584dba44ffb_0
  • /data/data/####/491a42e71fcf3dd5_0
  • /data/data/####/491a42e71fcf3dd5_0 (deleted)
  • /data/data/####/494e6ebfa772ec6b_0
  • /data/data/####/4964f155836b7037_0
  • /data/data/####/4a62e14f56eee015_0
  • /data/data/####/4a6d0735747b10b1_0
  • /data/data/####/4bcf36bf0a12f2f8_0 (deleted)
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4ed0070704a56e97_0
  • /data/data/####/4f035b30d9cb0cd6_0
  • /data/data/####/4f035b30d9cb0cd6_0 (deleted)
  • /data/data/####/4f98ab84f44a89eb_0
  • /data/data/####/4f98ab84f44a89eb_1
  • /data/data/####/4fc2d95b4eb846f4_0
  • /data/data/####/50eeaf1dce64976f_0
  • /data/data/####/5107d8b8b3e1fd3c_0
  • /data/data/####/5182bb62f90f43be_0
  • /data/data/####/55f49beb43d008e7_0
  • /data/data/####/5615dd71d5d94728_0
  • /data/data/####/5675426d887a623d_0
  • /data/data/####/56cf0ab3a8fe9083_0
  • /data/data/####/56cf0ab3a8fe9083_1
  • /data/data/####/56fdcc506bef6f69_0 (deleted)
  • /data/data/####/58246537f2bb0f4e_0
  • /data/data/####/58b30bc08e758eae_0
  • /data/data/####/59096682021f5077_0
  • /data/data/####/5928ce927de08914_0
  • /data/data/####/599f87f1a01f515a_0
  • /data/data/####/5a166cd56cc02749_0
  • /data/data/####/5a362d9b0a420c23_0
  • /data/data/####/5a6ec868f2ae9749_0
  • /data/data/####/5aca6fcb785afe29_0 (deleted)
  • /data/data/####/5acfc04dfc4f507a_0
  • /data/data/####/5b8e498d769b2c74_0
  • /data/data/####/5c146d1abfa1868e_0
  • /data/data/####/5cdf79a1bbfdca83_0
  • /data/data/####/5d6d8716fb4365fb_0
  • /data/data/####/5e6d51c72016a562_0
  • /data/data/####/5e7cf102bdf4bbbf_0
  • /data/data/####/5eb040c0e5b189be_0
  • /data/data/####/5eb040c0e5b189be_1
  • /data/data/####/5f04b13c5344b767_0
  • /data/data/####/5fa35c56c4f1ca2d_0
  • /data/data/####/601f98d205444d2f_0
  • /data/data/####/607f454941a0a6dc_0
  • /data/data/####/609fb67e0d20142f_0
  • /data/data/####/6185b3af40662b44_0
  • /data/data/####/61a537e0025801b5_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/64cf3de1ccdc8cc7_0
  • /data/data/####/65ba2b4303bbc0a1_0
  • /data/data/####/67e41f32d811e447_0
  • /data/data/####/67e41f32d811e447_1
  • /data/data/####/684880aecad95b2c_0
  • /data/data/####/684880aecad95b2c_1
  • /data/data/####/695c257f7004a6b3_0
  • /data/data/####/6a40fe248bfafcab_0
  • /data/data/####/6c98818deed0dd3b_0
  • /data/data/####/6da0ab2b7b0d1b14_0
  • /data/data/####/6fc7d1bc368a133d_0
  • /data/data/####/70fc6d057ae6906b_0
  • /data/data/####/734ee181d7e90f92_0
  • /data/data/####/74317f94aa15fca0_0
  • /data/data/####/7467fa33c8f1860b_0
  • /data/data/####/7688ad4166151327_0
  • /data/data/####/772fc9dc4945f953_0
  • /data/data/####/7765887b1a19369b_0
  • /data/data/####/7765887b1a19369b_1
  • /data/data/####/77c113926fff5056_0
  • /data/data/####/79047a0613c08b22_0
  • /data/data/####/7a1b8c734cae8732_0
  • /data/data/####/7b13364cfbb87544_0
  • /data/data/####/7b69e576d4662f5a_0
  • /data/data/####/7d7051002dd78645_0
  • /data/data/####/7e35f14ff2e45447_0
  • /data/data/####/7e35f14ff2e45447_1
  • /data/data/####/7ecf456649164a77_0
  • /data/data/####/7fde19e25bbc4bb5_0
  • /data/data/####/805b5b05773a4e3e_0
  • /data/data/####/814600392d8a0836_0
  • /data/data/####/82ee900ab922455d_0
  • /data/data/####/852af076282c34b7_0
  • /data/data/####/8555d33f05907af2_0
  • /data/data/####/87848e7bb3b66ca6_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_0 (deleted)
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/8a8c11d8b5a980c9_0
  • /data/data/####/8c7af6cc9d01dad8_0
  • /data/data/####/90adc30852a19022_0
  • /data/data/####/93b289e14440ed98_0
  • /data/data/####/93b5a724a89d7854_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/9402ef73a016ffbb_0 (deleted)
  • /data/data/####/95a4c068f1e6d1d1_0
  • /data/data/####/95a4c068f1e6d1d1_1
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/96b10ef137b95940_0
  • /data/data/####/97d8928f5a8e8521_0
  • /data/data/####/9a54d55e7bdd3237_0
  • /data/data/####/9a54d55e7bdd3237_1
  • /data/data/####/9b8b8356be03d1e8_0
  • /data/data/####/9c69027e25fc542c_0
  • /data/data/####/9dbf0d867844e3e7_0
  • /data/data/####/9ed80db94e551edc_0
  • /data/data/####/9f01ff6f2c95fbe5_0
  • /data/data/####/9f373fdc63d9084a_0
  • /data/data/####/9f3a683f78705003_0
  • /data/data/####/9fee0448286141e3_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/IBXMOFm.dex
  • /data/data/####/IBXMOFm.dex.flock (deleted)
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a1af947b462f9074_0
  • /data/data/####/a37b38fae3a3eecf_0
  • /data/data/####/a3f7d5123862771d_0
  • /data/data/####/a4a194c13031a516_0
  • /data/data/####/a51785f840e9f0c4_0
  • /data/data/####/a55313f7781ba2d3_0
  • /data/data/####/a55313f7781ba2d3_1
  • /data/data/####/a5c5ba9dcc3a8669_0
  • /data/data/####/a7bd271ce276d4f8_0
  • /data/data/####/a8e691010af893f7_0
  • /data/data/####/aa53b64b85fa5123_0
  • /data/data/####/aa59622260402538_0
  • /data/data/####/ae5a02ae29c6f042_0
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_0 (deleted)
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/b0392531bd52d474_0
  • /data/data/####/b099db1dc70868a0_0
  • /data/data/####/b099db1dc70868a0_1
  • /data/data/####/b2753d486b4b0c49_0
  • /data/data/####/b2b3617238101ca4_0
  • /data/data/####/b2b3617238101ca4_1
  • /data/data/####/b35ec17b7804f676_0
  • /data/data/####/b4a4939442015151_0
  • /data/data/####/b4a95f7b1eb71b13_0
  • /data/data/####/b6005ed34a8f2253_0
  • /data/data/####/b6266cec66250094_0
  • /data/data/####/b6db987fe46343cf_0
  • /data/data/####/b97521682eb94942_0
  • /data/data/####/baeb383bc878dc6f_0
  • /data/data/####/bb1c9f9d9cf343e4_0
  • /data/data/####/bbd0141b2c3ceb36_0
  • /data/data/####/be97427b03d8575a_0
  • /data/data/####/bf4343bf9c2135ec_0
  • /data/data/####/c058e1740f010c56_0 (deleted)
  • /data/data/####/c1342ddef36eb86f_0
  • /data/data/####/c18171e00743b733_0
  • /data/data/####/c1e9d7cd162720f5_0
  • /data/data/####/c2d5f34c7bdeaf79_0
  • /data/data/####/c4867747ba6e752b_0
  • /data/data/####/c5399c9a756be08f_0
  • /data/data/####/c57b6524763fe785_0
  • /data/data/####/c648e4e976fb0dc1_0
  • /data/data/####/c74534ad9dc761cb_0
  • /data/data/####/c74534ad9dc761cb_1
  • /data/data/####/c75152099e8c1e8a_0
  • /data/data/####/c783aca47ec6f9f8_0
  • /data/data/####/c8f6212fe1b49323_0
  • /data/data/####/c9618690289479a8_0
  • /data/data/####/ca7d520125763a9a_0
  • /data/data/####/ca81abc6757c617e_0
  • /data/data/####/cb91cafcdff37b76_0
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/cd065c6af2ac1144_0
  • /data/data/####/cda19b1942db32ae_0
  • /data/data/####/cde664db867df131_0
  • /data/data/####/ce926d7d15a75ba1_0
  • /data/data/####/ce926d7d15a75ba1_0 (deleted)
  • /data/data/####/cec6e4eb4e101024_0
  • /data/data/####/cec6e4eb4e101024_1
  • /data/data/####/cefef5e7094a86e3_0
  • /data/data/####/com.eaqfeqbqq_preferences.xml
  • /data/data/####/d0117354a0c6919d_0
  • /data/data/####/d104c487c79d1ca3_0 (deleted)
  • /data/data/####/d29673bd8211b08b_0
  • /data/data/####/d2f3a85910b515e0_0
  • /data/data/####/d2ff97f345cbdeeb_0
  • /data/data/####/d68eb9092044d220_0
  • /data/data/####/d6c8878f90b962d7_0
  • /data/data/####/d9802fab5c752e78_0
  • /data/data/####/d9802fab5c752e78_1
  • /data/data/####/d9c1a6e0a483db35_0
  • /data/data/####/d9ec5e0e2587b3d7_0 (deleted)
  • /data/data/####/da517d0e0ef1875c_0
  • /data/data/####/de05f9ffc2df9b08_0
  • /data/data/####/e2456485c63f7ec4_0
  • /data/data/####/e335a106c094e7c1_0
  • /data/data/####/e3c938f040d34829_0
  • /data/data/####/e5af8aefe7b8c11e_0
  • /data/data/####/e626718779220788_0
  • /data/data/####/e90255758840387d_0
  • /data/data/####/e952c73061d3d892_0
  • /data/data/####/e952c73061d3d892_1
  • /data/data/####/eafeab17688597c9_0
  • /data/data/####/eafeab17688597c9_1
  • /data/data/####/ec2d14039ee624a6_0
  • /data/data/####/ecaadf166bf6d571_0
  • /data/data/####/ece8a33c1359b06c_0
  • /data/data/####/ed9740e982709b5f_0
  • /data/data/####/edb7ba5bc06d40b8_0
  • /data/data/####/effd37cf07a9b470_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f010e0940ebcb50c_0
  • /data/data/####/f0ed3b679ed3ea85_0 (deleted)
  • /data/data/####/f1043ca9175200f1_0
  • /data/data/####/f1898b8df7bfc0d4_0
  • /data/data/####/f1a0696347a2a23c_0
  • /data/data/####/f5fa9c6556e1c73b_0
  • /data/data/####/f5fa9c6556e1c73b_1
  • /data/data/####/f60a54d2c943bf22_0
  • /data/data/####/f66190232104951a_0
  • /data/data/####/f66190232104951a_1
  • /data/data/####/f7c2c77cae515c79_0
  • /data/data/####/f7c2c77cae515c79_1
  • /data/data/####/f806efa72835dac1_0
  • /data/data/####/fc475aae8d1bda4c_0
  • /data/data/####/fc8003c6a55587d9_0
  • /data/data/####/fced4bb0dce5732f_0
  • /data/data/####/fd5dc2b7eae46f1c_0
  • /data/data/####/fd5dc2b7eae46f1c_0 (deleted)
  • /data/data/####/fdf107292074fa2b_0
  • /data/data/####/fffcf600ca8d6b65_0
  • /data/data/####/index
  • /data/data/####/jXxskbU.dex
  • /data/data/####/jXxskbU.dex.flock (deleted)
  • /data/data/####/metrics_guid
  • /data/data/####/the-real-index
  • /data/data/####/viiVUVExxUQKYe.dex
  • /data/data/####/viiVUVExxUQKYe.dex.flock (deleted)
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android