Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Locker.17195

Added to the Dr.Web virus database: 2023-07-23

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) md####.google####.com:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) ht-####.a####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) connect####.gst####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) pt-sta####.js####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.0) c####.liveja####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) galle####.vcmd####.com:443
  • TCP(TLS/1.2) connect####.gst####.com:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • c####.liveja####.com
  • cdn1-sm####.ph####.com
  • connect####.gst####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.go####.com
  • m####.traffic####.net
  • md####.google####.com
  • pla####.google####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google####.com
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/00238a8e51d77ab0_0
  • /data/data/####/004a4a7b47e3654b_0
  • /data/data/####/00da7ed3191ff439_0
  • /data/data/####/01aaf367de29828f_0 (deleted)
  • /data/data/####/01d499bc2f69c353_0
  • /data/data/####/06fbe21da53bcf46_0
  • /data/data/####/07e7f495ec7d85ce_0
  • /data/data/####/08432c035e27f3f3_0
  • /data/data/####/08459e286f7829ab_0
  • /data/data/####/0853930e9074e020_0
  • /data/data/####/08803c7f485c59d7_0
  • /data/data/####/097321bc543faaf4_0
  • /data/data/####/0a3419ee0a9b6c25_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0a61312c3ce937bc_0
  • /data/data/####/0a61312c3ce937bc_s
  • /data/data/####/0acffe7085c651bd_0
  • /data/data/####/0b041c0a9e10154c_0
  • /data/data/####/0c47f56c5099d93a_0
  • /data/data/####/0e75b2d412bb60a6_0
  • /data/data/####/122d6e207a96b00a_0
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/1388d2ea9854cd70_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/140417af-95d0-4329-aebe-d0e3c5d5e9ff.dex
  • /data/data/####/140417af-95d0-4329-aebe-d0e3c5d5e9ff.dex.flock (deleted)
  • /data/data/####/146d06d154de130f_0
  • /data/data/####/14cc6c83ebafddaf_0
  • /data/data/####/15bdf06e83e99b40_0
  • /data/data/####/15ff67d7f790617c_0
  • /data/data/####/1756e6fdc0b163e8_0
  • /data/data/####/1764cd2851fb8fde_0 (deleted)
  • /data/data/####/18b2224d6116098d_0
  • /data/data/####/18c0b3059e9a2cd3_0
  • /data/data/####/19b41c20310f10a7_0
  • /data/data/####/19ec2081e8aeb6c1_0
  • /data/data/####/19ed54bad5f1ee12_0
  • /data/data/####/1b6a6df9215c5f72_0
  • /data/data/####/1b6dac6fb3b41413_0
  • /data/data/####/1c60a9bf13a2f848_0
  • /data/data/####/1d77b9086c9c7808_0
  • /data/data/####/1f03c858cd5c189b_0
  • /data/data/####/1fa97666e84d62df_0
  • /data/data/####/20284fccf2f0cd6e_0
  • /data/data/####/222645c30bd832d9_0
  • /data/data/####/23673bc92c13fbe3_0
  • /data/data/####/23e7dbaa94cf027b_0
  • /data/data/####/2497f49c05de0938_0
  • /data/data/####/255c6f2da743cdc0_0
  • /data/data/####/2650205273565435_0
  • /data/data/####/26761c35dedaece3_0 (deleted)
  • /data/data/####/26869e0c35f1a120_0
  • /data/data/####/26869e0c35f1a120_1
  • /data/data/####/273cd67096ca9b71_0
  • /data/data/####/273f949923941ebe_0
  • /data/data/####/28108a05fbb7d573_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/29a7c599521f84a6_0
  • /data/data/####/2b200b6806fa405e_0
  • /data/data/####/2cc452fc45c619ec_0 (deleted)
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d6421de-1d5b-422f-ab0f-bebc6ff79f0e.dex
  • /data/data/####/2d6421de-1d5b-422f-ab0f-bebc6ff79f0e.dex.flock (deleted)
  • /data/data/####/2f32b3b367ee054c_0
  • /data/data/####/30307017f43d2bf6_0
  • /data/data/####/30307017f43d2bf6_s
  • /data/data/####/305382d411b18e9f_0 (deleted)
  • /data/data/####/30ba0059f9ae61f1_0
  • /data/data/####/32107d13bd3f33f4_0
  • /data/data/####/3241a2abdc0d9e44_0
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/338289c045459595_0
  • /data/data/####/343c65bcd4dddd5b_0
  • /data/data/####/34493d46f1a79f7d_0
  • /data/data/####/345285701b3c74aa_0
  • /data/data/####/34655dcc14c0978d_0
  • /data/data/####/34a522e70ffed0e5_0
  • /data/data/####/34a522e70ffed0e5_1
  • /data/data/####/34cdf702a0308a61_0
  • /data/data/####/355b84a63488b3d0_0
  • /data/data/####/3610e95e29d16a1e_0
  • /data/data/####/3639dfcdb38fa620_0
  • /data/data/####/37c4c8df92d952a6_0
  • /data/data/####/39f0f5b33b71b709_0
  • /data/data/####/3a140542c7237f9c_0
  • /data/data/####/3b1be2d497c0f0ca_0
  • /data/data/####/3c30617dd5d248d2_0
  • /data/data/####/3d03bed5d4a317a8_0
  • /data/data/####/3d73325b5750b8bb_0
  • /data/data/####/3e1ea3d156e7ed30_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3ee5d30f2cb607c0_0
  • /data/data/####/3f272aca370f27d2_0
  • /data/data/####/3f967df08659f70e_0 (deleted)
  • /data/data/####/3ffb769005f85fce_0
  • /data/data/####/404fca90fcc8b83f_0
  • /data/data/####/404fca90fcc8b83f_1
  • /data/data/####/412890d806b3fd49_0 (deleted)
  • /data/data/####/415fe4f85fa3add3_0
  • /data/data/####/42f6b661ebc929f4_0
  • /data/data/####/44d3b03422e61821_0
  • /data/data/####/45440df98dd6e1a5_0
  • /data/data/####/46afe3fc15e0d283_0 (deleted)
  • /data/data/####/486e493b8faebe47_0
  • /data/data/####/48767bd50f96f619_0
  • /data/data/####/4879a86abe4e4f66_0
  • /data/data/####/48ae36a8f404fed4_0
  • /data/data/####/48ae36a8f404fed4_1
  • /data/data/####/4a357a4ae2ed8d38_0
  • /data/data/####/4a7d5b2e8e252c57_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4ce1ab0580d20077_0
  • /data/data/####/4ce1ab0580d20077_1
  • /data/data/####/4dd25cb18609e6e0_0
  • /data/data/####/4e35f9de5a7c1eba_0
  • /data/data/####/4e6d00427e2c2853_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/4fb3a298d0046c99_0
  • /data/data/####/514e9e0b3402c746_0
  • /data/data/####/51828a8553edbd39_0
  • /data/data/####/51f31a08a14bf511_0
  • /data/data/####/5308995aae9ad2b4_0
  • /data/data/####/5308fc06883deae3_0 (deleted)
  • /data/data/####/543aa90281cb0de4_0 (deleted)
  • /data/data/####/552d70f771232473_0
  • /data/data/####/5571a526ba1a4974_0
  • /data/data/####/5573ee31530b6e1c_0 (deleted)
  • /data/data/####/573672c6662a75e9_0
  • /data/data/####/588056b1f3e10161_0
  • /data/data/####/58e051b2d22a4145_0
  • /data/data/####/597c7504dfdf291b_0
  • /data/data/####/5ab9e5f955f63757_0
  • /data/data/####/5b05853de8cc0b03_0
  • /data/data/####/5b5c04bc724e77a9_0
  • /data/data/####/5bd9bb61c199c6c2_0
  • /data/data/####/5c8124f6b842cc52_0
  • /data/data/####/5c8124f6b842cc52_1
  • /data/data/####/5cb6dfce41c3a318_0
  • /data/data/####/5d348ec727e6d982_0
  • /data/data/####/5ffb259b6f8a3d2a_0
  • /data/data/####/609cd5bff0a7875d_0
  • /data/data/####/61a1b58fbe187bbf_0
  • /data/data/####/61c2682f0e78587a_0
  • /data/data/####/6257cbddbf683496_0
  • /data/data/####/628bc57dc6522ec1_0
  • /data/data/####/629969b8324f8e54_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/65415f216dad930a_0
  • /data/data/####/65ca9e7b885b6026_0
  • /data/data/####/65e899f2c60321f0_0
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/67db6dbe96324848_0
  • /data/data/####/67ee89322a4e404e_0
  • /data/data/####/6853ba00aac0ac95_0
  • /data/data/####/68986941fc82c5b4_0
  • /data/data/####/6900f6f3c0f78c07_0
  • /data/data/####/69dbd3dbfd13959d_0
  • /data/data/####/69dbd3dbfd13959d_1
  • /data/data/####/6abb2e31e24eb472_0
  • /data/data/####/6c33f72fe5193130_0
  • /data/data/####/6d25435efb7a5a39_0
  • /data/data/####/6d658f0afb5f9d07_0
  • /data/data/####/6d6ae115068b0c8c_0
  • /data/data/####/6dbd08cace7f10df_0
  • /data/data/####/70206293812224ce_0
  • /data/data/####/70206293812224ce_s
  • /data/data/####/70267826fe94ff09_0
  • /data/data/####/7054b56eb5326142_0
  • /data/data/####/7147df6c4bfeee2e_0
  • /data/data/####/71795e1fc4b0df1e_0
  • /data/data/####/719cb27bbbe7b499_0
  • /data/data/####/71bd67dd93c31f6a_0
  • /data/data/####/71ccc6b959ad23c3_0
  • /data/data/####/72cd4501977cab30_0
  • /data/data/####/731c6a868b1d78d7_0
  • /data/data/####/731f4855cd62d098_0
  • /data/data/####/735b5e776fbd4df2_0
  • /data/data/####/73f63c25a8b37a4d_0
  • /data/data/####/7510f56d4291bfce_0
  • /data/data/####/752b33c861a6824c_0
  • /data/data/####/76ecb11e8a057094_0 (deleted)
  • /data/data/####/776c5f86f28d2dae_0
  • /data/data/####/77cf9e7b4be00ae6_0
  • /data/data/####/7857e1f70dfdf631_0
  • /data/data/####/788e2bd6919e51b1_0
  • /data/data/####/7c0ca9632c479332_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c5958a416dea722_0
  • /data/data/####/7c5958a416dea722_1
  • /data/data/####/7c840dcbab62e783_0
  • /data/data/####/7cf7f895ef00b94b_0
  • /data/data/####/7d20f1828d7b1cbe_0
  • /data/data/####/7d5452cfc1b2c8d3_0
  • /data/data/####/7e5e2711735028aa_0
  • /data/data/####/7e75b8e8e17e5881_0
  • /data/data/####/7e75b8e8e17e5881_s
  • /data/data/####/7e93923c44b5b8d0_0
  • /data/data/####/7eb391f34ee923c8_0
  • /data/data/####/80f87beaadff2bbf_0 (deleted)
  • /data/data/####/82d205c8f83ecf8e_0
  • /data/data/####/845fe227232915fc_0
  • /data/data/####/855d7a104d58c708_0
  • /data/data/####/855d7a104d58c708_1
  • /data/data/####/85678c6df50718b8_0
  • /data/data/####/878c550a4553fb85_0
  • /data/data/####/87cfe4b0f61a67ab_0
  • /data/data/####/87e880bb8311eff1_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/88b9b52660b8ff22_0
  • /data/data/####/8a4f8ebcbacadc6b_0
  • /data/data/####/8a4f8ebcbacadc6b_1
  • /data/data/####/8a5d930b1c81ed82_0
  • /data/data/####/8a7b7cd8986b8d74_0
  • /data/data/####/8c2ae296c491af3f_0
  • /data/data/####/8d15a5e6c9fc7d0a_0
  • /data/data/####/8d3f7901fa10db79_0
  • /data/data/####/8db8ef6f042ea924_0
  • /data/data/####/8ec19d16881d90ca_0
  • /data/data/####/8fcc900296f7d6a3_0
  • /data/data/####/902d53591b160041_0
  • /data/data/####/906e73bf9e2f2a4b_0
  • /data/data/####/92981146dce670c9_0
  • /data/data/####/92cbe3eb92ad9266_0
  • /data/data/####/932daaf3131a8313_0
  • /data/data/####/9340cd1ed50bcc68_0
  • /data/data/####/938b550a9a81879e_0
  • /data/data/####/93baa7f1463ae081_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/9456bb86132a42e7_0
  • /data/data/####/950946f11acb41e1_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/961bdbab5be55ede_0
  • /data/data/####/969f4aff55d97727_0
  • /data/data/####/96bb49608ee544ee_0
  • /data/data/####/97886369afec0b00_0
  • /data/data/####/98035feb8dc60e2b_0
  • /data/data/####/983d931d7a653552_0
  • /data/data/####/98ae2e60fbdbc101_0
  • /data/data/####/9900ebb5a452e8f3_0
  • /data/data/####/991311957b842bdf_0
  • /data/data/####/993ef5e96d789e71_0
  • /data/data/####/99e1d7f70792b254_0
  • /data/data/####/9aa94c6f444426b7_0
  • /data/data/####/9afc50d78b5a8ebe_0
  • /data/data/####/9c1cb9f3fe3f10da_0
  • /data/data/####/9dbff11187e8108c_0
  • /data/data/####/9e34b6b74befeb40_0
  • /data/data/####/9f075ac9f9197c52_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/EybbYqr.dex
  • /data/data/####/EybbYqr.dex.flock (deleted)
  • /data/data/####/GQjlrExI.dex
  • /data/data/####/GQjlrExI.dex.flock (deleted)
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a0e3f4e8c2461ae8_0
  • /data/data/####/a136137dcc3a33f7_0
  • /data/data/####/a140b584aa1c4b18_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a1c50fb91d9cc9f7_0
  • /data/data/####/a2775fffb6a35622_0
  • /data/data/####/a32045a4d1825084_0
  • /data/data/####/a3f1ff315e7db11a_0
  • /data/data/####/a3f1ff315e7db11a_1
  • /data/data/####/a4156aa71168bfae_0
  • /data/data/####/a44922c962a8cae1_0
  • /data/data/####/a5cfaa2fcfa81a06_0
  • /data/data/####/a75878b84cd9dbbb_0 (deleted)
  • /data/data/####/a825aaedd7956434_0
  • /data/data/####/a951b5669d9b2ccc_0
  • /data/data/####/a98946623ac47b5d_0 (deleted)
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/aa164e2b7cfa8203_0
  • /data/data/####/aad4be480424f9bb_0
  • /data/data/####/aae1b750c2766f73_0
  • /data/data/####/ac13c387c466680d_0
  • /data/data/####/ac13c387c466680d_s
  • /data/data/####/ac973ee7b6d8febe_0
  • /data/data/####/acb5c109341c6901_0
  • /data/data/####/adeb655733e8ed37_0
  • /data/data/####/af732ebdc6f86ef7_0
  • /data/data/####/b003b3d4d04019d6_0
  • /data/data/####/b03acc385ffbeaf8_0
  • /data/data/####/b0705fdc5a27d44f_0
  • /data/data/####/b0705fdc5a27d44f_1
  • /data/data/####/b0c60a04f4f952b9_0
  • /data/data/####/b14808a180c50e2e_0
  • /data/data/####/b2575f6ecf380ef9_0
  • /data/data/####/b25bf13fce8e97ce_0
  • /data/data/####/b25e5346d9938a44_0
  • /data/data/####/b337fc22439c2dbf_0
  • /data/data/####/b4d55937d2b947cd_0
  • /data/data/####/b4eef6df3a94cb48_0
  • /data/data/####/b5515e8d05a1959c_0
  • /data/data/####/b5d571bcf26b1598_0
  • /data/data/####/b6873d5e91db1a82_0
  • /data/data/####/b7d371afe19adec7_0
  • /data/data/####/b84eab1fcd57fa91_0
  • /data/data/####/b8a3c4c73d0e8747_0
  • /data/data/####/b8de74d958316c70_0
  • /data/data/####/ba5f6f5ea88be7f7_0
  • /data/data/####/baafc4ea1b0e3b5d_0
  • /data/data/####/bad36ec02516b867_0
  • /data/data/####/bb0902e668b94f28_0
  • /data/data/####/bcaad22cd8953116_0
  • /data/data/####/bcd7f4aa549bf8d9_0 (deleted)
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bda6d8b9d1d5892a_0
  • /data/data/####/be845e8e383a2b78_0
  • /data/data/####/bf3c59600da39618_0
  • /data/data/####/bf70cc938786ec6d_0
  • /data/data/####/bfaf50e6f033f6ed_0 (deleted)
  • /data/data/####/bfe7d92b5b3c726a_0
  • /data/data/####/c08258d5f57f6942_0
  • /data/data/####/c0dd57aa85e05435_0
  • /data/data/####/c14ca00c05ad58f4_0
  • /data/data/####/c247644613c2cf1a_0
  • /data/data/####/c4a27f43ba3860ac_0
  • /data/data/####/c4c95a4a3476bfa9_0
  • /data/data/####/c51bc10d692408af_0 (deleted)
  • /data/data/####/c571c0bbb1a856fb_0
  • /data/data/####/c57d3e084ce75478_0
  • /data/data/####/c5851a94d583aef5_0
  • /data/data/####/c5b7e46790a09f66_0
  • /data/data/####/c704fe4e6415e91a_0
  • /data/data/####/c78cf62a88606672_0
  • /data/data/####/c78cf62a88606672_1
  • /data/data/####/c7a704cb-5f5a-4af4-85d7-3407ccfd34a9.dex
  • /data/data/####/c944fe1d4f596022_0
  • /data/data/####/ca8dfc3a853091da_0
  • /data/data/####/cb093560e6812446_0
  • /data/data/####/cb85a05460978c01_0
  • /data/data/####/cc2fccb77b6dd2fc_0
  • /data/data/####/ce06f62cedb24bb8_0
  • /data/data/####/ce26f43ffb6b308e_0
  • /data/data/####/ce4842dd5125338e_0
  • /data/data/####/cf6c71653bc00398_0
  • /data/data/####/cfc694f5cffc84d7_0
  • /data/data/####/com.veh_preferences.xml
  • /data/data/####/d1da459e01307c49_0
  • /data/data/####/d208f23db518075f_0
  • /data/data/####/d2164544b99d4d7d_0
  • /data/data/####/d3593c30fe553d7e_0
  • /data/data/####/d3cc98f208258776_0
  • /data/data/####/d3f9c68e0b18830c_0
  • /data/data/####/d3f9c68e0b18830c_1
  • /data/data/####/d4ff65941fd192a3_0
  • /data/data/####/d5d654b69620d846_0
  • /data/data/####/d67f30d503ac8486_0
  • /data/data/####/d80feaa54722b061_0
  • /data/data/####/d855c0427586488b_0
  • /data/data/####/d8c1eb455e64cdce_0
  • /data/data/####/d90b7d83b28f7b1b_0
  • /data/data/####/da03fcca7f754def_0
  • /data/data/####/da4d91f503c78e63_0
  • /data/data/####/dabe60a5c84018ee_0
  • /data/data/####/db10a687dc779be0_0
  • /data/data/####/db10a687dc779be0_1
  • /data/data/####/db49680b955394b5_0
  • /data/data/####/de110a1fe93c2905_0
  • /data/data/####/df29368180c7b429_0
  • /data/data/####/e0a6b4d3db4a6e1d_0 (deleted)
  • /data/data/####/e283fc333e90e276_0
  • /data/data/####/e28be8accc9b9a64_0
  • /data/data/####/e74026a43bc75cbe_0
  • /data/data/####/e98a297c76fd0bc0_0
  • /data/data/####/ea086e2a4e6e4caf_0
  • /data/data/####/eb00d06a265ea773_0
  • /data/data/####/eb00d06a265ea773_1
  • /data/data/####/ec1c637aad288ee9_0
  • /data/data/####/ecf19c2603560ad9_0
  • /data/data/####/ee2e424456d65313_0
  • /data/data/####/ee49e188b9f930d9_0
  • /data/data/####/ee49e188b9f930d9_1
  • /data/data/####/eed091e9fc853d23_0
  • /data/data/####/eed091e9fc853d23_1
  • /data/data/####/efba7f119d0c2ad1_0
  • /data/data/####/efba7f119d0c2ad1_1
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f08e5f88d682a4c5_0
  • /data/data/####/f1cd06b84aeb5690_0
  • /data/data/####/f1cd06b84aeb5690_1
  • /data/data/####/f28346ea19d3daab_0
  • /data/data/####/f2ab4059d4bd03c9_0
  • /data/data/####/f2ad077e1b95174f_0
  • /data/data/####/f47f1ce80ed6abfb_0 (deleted)
  • /data/data/####/f5eaa762420328be_0
  • /data/data/####/f60af6ce45522b89_0
  • /data/data/####/f637f7550f35ccf1_0
  • /data/data/####/f94cf0ef6620e077_0
  • /data/data/####/fa19819468e67010_0
  • /data/data/####/faf95043d1de6e49_0
  • /data/data/####/fbdb585f7a85d784_0
  • /data/data/####/fcfca2e8189d7e66_0
  • /data/data/####/fd0dc7f4fb4b9836_0
  • /data/data/####/fd4b7f2fa77de915_0
  • /data/data/####/fd7716a1a63d9dc7_0
  • /data/data/####/fd9b8611100ca8c7_0
  • /data/data/####/fe424b794bd9d633_0
  • /data/data/####/fe787f66f79a454c_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff81bbc51563e841_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/temp-index
  • /data/data/####/the-real-index
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android