Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Locker.17245

Added to the Dr.Web virus database: 2023-07-28

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) 1####.177.14.94:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) v.dy####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) i.cam####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) gmscomp####.google####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) c####.liveja####.com:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) galle####.vcmd####.com:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) pt-sta####.js####.com:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.2) gmscomp####.google####.com:443
  • TCP(TLS/1.2) 1####.177.14.94:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • c####.liveja####.com
  • cdn1-sm####.ph####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • gmscomp####.google####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.cam####.com
  • i.dy####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/007511b89826a750_0 (deleted)
  • /data/data/####/021adf50ec1e54dc_0
  • /data/data/####/02bd1db19a7b06e8_0
  • /data/data/####/041cb99e11651247_0
  • /data/data/####/04c977e1a6cbbd03_0
  • /data/data/####/050604f743a91806_0
  • /data/data/####/050604f743a91806_1
  • /data/data/####/0507f22726810148_0
  • /data/data/####/05199ca385aedeab_0
  • /data/data/####/054c785ab6ef1136_0
  • /data/data/####/05e6fbc11d17c9da_0
  • /data/data/####/0602dd1dbce6eaa9_0
  • /data/data/####/06372a2ff5458d7b_0
  • /data/data/####/065f0cba87f2ba12_0
  • /data/data/####/06b52b6cee4382f9_0
  • /data/data/####/071218f356f34560_0
  • /data/data/####/07f86521ba74540d_0
  • /data/data/####/087cde5c5d1d418f_0
  • /data/data/####/08dbe0661488c80a_0
  • /data/data/####/09732bd101765fb6_0
  • /data/data/####/09732bd101765fb6_1
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0afd200912865e0a_0
  • /data/data/####/0c81f89881d509aa_0
  • /data/data/####/0cb83a19a59f2cfb_0
  • /data/data/####/0cdcd79e2379b6d2_0 (deleted)
  • /data/data/####/0cebe27de571d78f_0
  • /data/data/####/0dc9c16e60477efc_0
  • /data/data/####/0ea9760a852f0fee_0
  • /data/data/####/0fa74e4fa8595082_0
  • /data/data/####/117725669bfdaa61_0
  • /data/data/####/1251c9deb44f08a1_0
  • /data/data/####/1251c9deb44f08a1_s
  • /data/data/####/12933b7606cf3595_0
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/12fb9b08ec3652ad_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/145134adff7b320f_0 (deleted)
  • /data/data/####/14acb7fbbc98f153_0
  • /data/data/####/14acb7fbbc98f153_1
  • /data/data/####/14cc6c83ebafddaf_0
  • /data/data/####/178d497239eb81b1_0
  • /data/data/####/1861f623c9c96050_0
  • /data/data/####/19790dfa0fb9d541_0
  • /data/data/####/19790dfa0fb9d541_s
  • /data/data/####/19b41c20310f10a7_0
  • /data/data/####/1a9bb6968f3b3bce_0
  • /data/data/####/1af66e86f6c32353_0
  • /data/data/####/1bbf3bb7420fcaac_0
  • /data/data/####/1cae5da6352415b8_0
  • /data/data/####/1d3cffe9179db8e6_0
  • /data/data/####/1d66eae5e5b59d45_0
  • /data/data/####/1d7ef95a2e83850a_0
  • /data/data/####/1d9b5e45d678ed57_0
  • /data/data/####/1e1ed9fce87c9d15_0
  • /data/data/####/1f33a3f5f33c048a_0
  • /data/data/####/1f7803a0937d6db4_0
  • /data/data/####/1ff48deb6764628a_0
  • /data/data/####/200cb6c5cdd39932_0 (deleted)
  • /data/data/####/20c5967b3da888c7_0
  • /data/data/####/23d0cd5b0bbc31f6_0 (deleted)
  • /data/data/####/2465c8d13499fa5c_0
  • /data/data/####/2488d260e5db01a6_0 (deleted)
  • /data/data/####/24b4cecebd3a490e_0
  • /data/data/####/273f949923941ebe_0
  • /data/data/####/27669ad753a964fa_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/2a3ef970600653d7_0
  • /data/data/####/2ad3f1606b0b34b7_0
  • /data/data/####/2c4d67212afa6ac2_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2ccb458a974270f6_0
  • /data/data/####/2d039b4fa1b20466_0
  • /data/data/####/2e5aacc64e4c970d_0
  • /data/data/####/30979d66a86dacfb_0
  • /data/data/####/3229f993cd2254be_0
  • /data/data/####/32d28afbde424478_0
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/338289c045459595_0
  • /data/data/####/34459b2740d4caf4_0
  • /data/data/####/34459b2740d4caf4_1
  • /data/data/####/345285701b3c74aa_0
  • /data/data/####/347bfb137425d2cc_0
  • /data/data/####/34a86f7635839b3b_0
  • /data/data/####/34b09b4571a6edfc_0
  • /data/data/####/35035e93de9b56c0_0
  • /data/data/####/355d88afd9f81add_0
  • /data/data/####/356be87274470a44_0
  • /data/data/####/362a9c87952c3f8c_0
  • /data/data/####/362a9c87952c3f8c_1
  • /data/data/####/3672c8db773eaadb_0
  • /data/data/####/367d0bffc9db3eaf_0
  • /data/data/####/383c4b5377cdab9f_0
  • /data/data/####/383c917897862aa0_0
  • /data/data/####/384530bed6628e63_0 (deleted)
  • /data/data/####/386a6861e0b64af1_0
  • /data/data/####/39b85b530dbc81f1_0
  • /data/data/####/39f9bf291869ab26_0
  • /data/data/####/3ab55d45b976a176_0
  • /data/data/####/3b76abc141343ec4_0
  • /data/data/####/3bd614b9b1f21684_0
  • /data/data/####/3c04ededa4007b96_0
  • /data/data/####/3c70f0eadb6ee2ac_0
  • /data/data/####/3d0815391e679d64_0
  • /data/data/####/3d7d757aa5c8fb1e_0
  • /data/data/####/3d7d757aa5c8fb1e_1
  • /data/data/####/3d8ae358444e70f9_0
  • /data/data/####/3dc50cc4b9a329c2_0
  • /data/data/####/3e08f300e0bcc971_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3ea97e05058ce673_0
  • /data/data/####/3f517de0fe147b39_0
  • /data/data/####/3fc4f417f7e716e3_0
  • /data/data/####/3ff9bb5d5f3c7b7d_0
  • /data/data/####/401ab2fc47b947a8_0
  • /data/data/####/40b43a60855dc858_0
  • /data/data/####/40b4c416892634f5_0
  • /data/data/####/43380b82b5ffddc1_0
  • /data/data/####/44479bd327d7ea23_0
  • /data/data/####/45440df98dd6e1a5_0
  • /data/data/####/45e44712f5abd67c_0
  • /data/data/####/47f29cca7ceb83ed_0
  • /data/data/####/47f29cca7ceb83ed_1
  • /data/data/####/486295e4677799b6_0
  • /data/data/####/48b64acbbe70a54a_0
  • /data/data/####/48cd995cebf44754_0
  • /data/data/####/48cd995cebf44754_1
  • /data/data/####/4955c5df5edd6212_0
  • /data/data/####/49fd3d11b19afba8_0
  • /data/data/####/4a765428432e128d_0
  • /data/data/####/4b4755f58803c3e8_0
  • /data/data/####/4beaa1a3cc9943b7_0
  • /data/data/####/4c90eec08641e688_0
  • /data/data/####/4ca647d261704679_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4df9b66c7c05361a_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/4fbdc275b4479546_0
  • /data/data/####/500a6cabf873b59a_0
  • /data/data/####/502b5fe46b8c8eda_0 (deleted)
  • /data/data/####/508b4b47008035e1_0
  • /data/data/####/50b5584252890638_0
  • /data/data/####/514352aa293c56b8_0
  • /data/data/####/5308995aae9ad2b4_0
  • /data/data/####/536c5f6e24b60b74_0
  • /data/data/####/53fed62e3a766062_0
  • /data/data/####/55ad35aeff363db8_0
  • /data/data/####/561bab11678cffa7_0
  • /data/data/####/563ae8fccfa4862e_0
  • /data/data/####/57db4853d20c9ccb_0
  • /data/data/####/585ca069dc8ada66_0
  • /data/data/####/58f887b0f2b85507_0
  • /data/data/####/5a0aafc532b1ffbd_0 (deleted)
  • /data/data/####/5a9a3e4049b3cfb1_0
  • /data/data/####/5aad641a04c25277_0
  • /data/data/####/5b4abc2bedee19e8_0
  • /data/data/####/5bc528c031d33342_0
  • /data/data/####/5c3b1f3b55250bde_0
  • /data/data/####/5c67f1d8b93d175a_0
  • /data/data/####/5ca939c7deedcb34_0
  • /data/data/####/5ce734ac1d5f6520_0
  • /data/data/####/5e09b1cbf6c9eed7_0
  • /data/data/####/5e3d8f8f18e3ef42_0
  • /data/data/####/6007fa171938b538_0
  • /data/data/####/6008e523a27d0e38_0
  • /data/data/####/60560c5a4803c975_0
  • /data/data/####/60606a7dbba6ca27_0
  • /data/data/####/60e6331c0dcfa968_0
  • /data/data/####/60ee609796db35a4_0
  • /data/data/####/61a1b58fbe187bbf_0
  • /data/data/####/61e92a81e5990326_0
  • /data/data/####/621cd5af4dae4a6b_0
  • /data/data/####/626d91809c23dc3e_0
  • /data/data/####/6289b1754b60732b_0 (deleted)
  • /data/data/####/628fd421166019ae_0
  • /data/data/####/628fd421166019ae_s
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/63dc50d01357a923_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/64bd479c901d40a0_0
  • /data/data/####/65420e613012fee5_0
  • /data/data/####/6564723d1c5d6942_0
  • /data/data/####/6631fcd46ab76c8c_0
  • /data/data/####/66a517e9325151a2_0
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/69741e843cad0afa_0
  • /data/data/####/698d8bb0b3119a94_0
  • /data/data/####/698d8bb0b3119a94_s
  • /data/data/####/69b38e49ea2f3ee4_0
  • /data/data/####/6c21d59dfb04dbfa_0
  • /data/data/####/6c33f72fe5193130_0
  • /data/data/####/6c753f388aaf72e0_0
  • /data/data/####/6c8ccd8b0e65707c_0
  • /data/data/####/6d89e6d77db7efc6_0
  • /data/data/####/6e356ed9ce03f38a_0
  • /data/data/####/6e60402d447fdb05_0
  • /data/data/####/6f1d6d73aa4178e3_0
  • /data/data/####/6f73e7230cff0d5c_0
  • /data/data/####/6fa7c94b04abf43b_0
  • /data/data/####/6ff3dc8a830c4a9b_0
  • /data/data/####/70184bfaa10813bb_0
  • /data/data/####/707cc4aff9d87ef8_0
  • /data/data/####/710f4cd27a2a3cff_0
  • /data/data/####/71c2183068bec3ee_0
  • /data/data/####/71d6e1821e2a5b72_0
  • /data/data/####/735b1ba42c3380e0_0
  • /data/data/####/7381c0b1c3000528_0 (deleted)
  • /data/data/####/74df6687d05cd653_0
  • /data/data/####/762def82091d42bf_0
  • /data/data/####/77231764581b5aa7_0
  • /data/data/####/77a0bd444f198fe6_0
  • /data/data/####/77ad687968b4f726_0
  • /data/data/####/77d6d679a7caf9dd_0
  • /data/data/####/782a39b2942e2ec6_0
  • /data/data/####/789c297f73be70ed_0
  • /data/data/####/789c297f73be70ed_1
  • /data/data/####/7b1ecb553ea8243f_0
  • /data/data/####/7bdba67f6a9a8ba6_0
  • /data/data/####/7bfecc43592a5a75_0
  • /data/data/####/7c127aa3e2948cb3_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c3df9f65ed5afc2_0
  • /data/data/####/7dc13dd3bebbdfbc_0
  • /data/data/####/7e3ba111a76c6415_0
  • /data/data/####/7e75b8e8e17e5881_0
  • /data/data/####/7e75b8e8e17e5881_s
  • /data/data/####/7eb044f234dd2aba_0
  • /data/data/####/802f03674d0eea32_0
  • /data/data/####/8076aef712b8232e_0
  • /data/data/####/8087de1fe735f515_0
  • /data/data/####/80e44630fd4e14f9_0
  • /data/data/####/81297a439c774582_0
  • /data/data/####/81482195605035ee_0
  • /data/data/####/81e23e6eaad0191a_0
  • /data/data/####/820483acd33ae95f_0
  • /data/data/####/8270bd3a1e4c095d_0
  • /data/data/####/834be64ecc5fe148_0
  • /data/data/####/83f657c4759b9a30_0
  • /data/data/####/84e6fab5d5bc1334_0
  • /data/data/####/855d4806184d2e0a_0
  • /data/data/####/868cc0432d0fbd62_0
  • /data/data/####/86d3b46624781641_0
  • /data/data/####/87365b80932d7dff_0 (deleted)
  • /data/data/####/8753fa2389d0efa0_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/89963bd91632dae4_0
  • /data/data/####/8af1507bf8aebf11_0
  • /data/data/####/8c6808fdec4e948c_0
  • /data/data/####/8c9586589a6865cd_0
  • /data/data/####/8ced9904ab99cc7f_0
  • /data/data/####/8d7f1ef5af5ccb73_0
  • /data/data/####/8f53b467a2e97d28_0
  • /data/data/####/8fd150d4659c270e_0
  • /data/data/####/901f76aaef85a6d4_0
  • /data/data/####/90458e8e4b800672_0
  • /data/data/####/90eb6d837373ec61_0
  • /data/data/####/916fb92dc02dea23_0
  • /data/data/####/91f53ad66c977381_0 (deleted)
  • /data/data/####/926d0bfa1e20b844_0
  • /data/data/####/92a0e20fff614adb_0
  • /data/data/####/92b74dc6571d53c6_0
  • /data/data/####/930c2e9ac9cba6bd_0
  • /data/data/####/939f6d227ca44aa0_0
  • /data/data/####/93d0c1e0d19d991b_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/9453999690a964cd_0
  • /data/data/####/952c770ea4d62dff_0
  • /data/data/####/952c770ea4d62dff_1
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/96113b8fa9b71e39_0
  • /data/data/####/96f24fd55a51a866_0
  • /data/data/####/970d5b60b8e3b86c_0
  • /data/data/####/973072b78aaa9b77_0
  • /data/data/####/981278de69f36b5a_0
  • /data/data/####/9846f5d2d5492b02_0
  • /data/data/####/987229c4eae5319e_0
  • /data/data/####/9a0d821f0892a4ca_0
  • /data/data/####/9a29b26e3147f9de_0
  • /data/data/####/9ae1ed240112f4c8_0
  • /data/data/####/9c14995d3d8e71d9_0
  • /data/data/####/9c38126309ea3aa1_0
  • /data/data/####/9cea2fb24a0a2833_0
  • /data/data/####/9dd13d1c4ee2872d_0
  • /data/data/####/9e25005e74923480_0
  • /data/data/####/9eb1a5351ef3ca18_0
  • /data/data/####/9f6e2d24f8c41517_0
  • /data/data/####/AhzlwwO.dex
  • /data/data/####/AhzlwwO.dex.flock (deleted)
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/IUmfgyR.dex
  • /data/data/####/IUmfgyR.dex.flock (deleted)
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a050780ad9a0b4e3_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a2ff0d5f66643517_0 (deleted)
  • /data/data/####/a3aaf74ac789b9f1_0
  • /data/data/####/a3f034ad7ca95f7c_0
  • /data/data/####/a408a65d578da851_0
  • /data/data/####/a4a86499d9012f9b_0
  • /data/data/####/a55c30def9b9a97b_0
  • /data/data/####/a5b29f029aea6bb7_0
  • /data/data/####/a678b742007dfe1e_0
  • /data/data/####/a678b742007dfe1e_1
  • /data/data/####/a7d67aa51945df8c_0
  • /data/data/####/a7e12c1d94b45b6b_0
  • /data/data/####/a8c9c9bad24abe07_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/ab88128ab69b3d44_0
  • /data/data/####/ac4ec5590867e035_0
  • /data/data/####/acb3b8e4428ede57_0
  • /data/data/####/ad0ab0a3846e9ea6_0
  • /data/data/####/ada50a2f6b89a4a7_0
  • /data/data/####/ae83765ed6dd09e2_0
  • /data/data/####/aea00573b58051a4_0
  • /data/data/####/aea00573b58051a4_1
  • /data/data/####/afb3eb2fef7c13b8_0
  • /data/data/####/afcc10aba53829f8_0
  • /data/data/####/b003b3d4d04019d6_0
  • /data/data/####/b0154b804818d960_0
  • /data/data/####/b0d0ccd1f92c3da2_0
  • /data/data/####/b1b52ea82a322369_0
  • /data/data/####/b3626d79b819ff69_0
  • /data/data/####/b389392cdd6c3d17_0
  • /data/data/####/b418fc573d83e63d_0
  • /data/data/####/b5be872091cbcda8_0
  • /data/data/####/b6134e4c1bd5589d_0 (deleted)
  • /data/data/####/b6184a6cb5692ece_0
  • /data/data/####/b71d1b2157203466_0
  • /data/data/####/b7a2794621acf38d_0
  • /data/data/####/b7cff73925c3a79e_0
  • /data/data/####/b7f0b8af329d36f5_0
  • /data/data/####/b895d57e3460980c_0
  • /data/data/####/b89b8516382976d9_0
  • /data/data/####/b942dccf9dd26477_0
  • /data/data/####/ba3145df04d10ced_0
  • /data/data/####/ba8b0d7bb1a836c5_0 (deleted)
  • /data/data/####/bb10749c9fe1d23d_0
  • /data/data/####/bbdac1e2addb36bd_0
  • /data/data/####/bcf796c81f6d8345_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bdbc3662be309e88_0
  • /data/data/####/beb2d60130bca92e_0
  • /data/data/####/bebdb1609879b36b_0
  • /data/data/####/bf93ec309865b001_0
  • /data/data/####/bfb4cff3537cb932_0
  • /data/data/####/bfb4cff3537cb932_1
  • /data/data/####/bff6dcdc72ad5d41_0
  • /data/data/####/c02b71381bc09a4e_0
  • /data/data/####/c04962c4c73af5f2_0
  • /data/data/####/c09b11e30f2a8d6e_0
  • /data/data/####/c0a5ba2d33b289a2_0
  • /data/data/####/c13ec049aa6ea914_0 (deleted)
  • /data/data/####/c1b985a4462fdeb7_0
  • /data/data/####/c21386b63bbe02c1_0
  • /data/data/####/c29a6ee15665a880_0
  • /data/data/####/c2f21f3d41747605_0
  • /data/data/####/c414a8bac4a95724_0
  • /data/data/####/c4ddfa0460d481be_0
  • /data/data/####/c4ef1361e90122a4_0
  • /data/data/####/c54ee5c118c5000b_0
  • /data/data/####/c58c2afeb9c6caae_0 (deleted)
  • /data/data/####/c5b7e46790a09f66_0
  • /data/data/####/c689e8193f73de10_0
  • /data/data/####/c6f01cc9d7c38aed_0 (deleted)
  • /data/data/####/c76a5c1b3cc7aa9c_0
  • /data/data/####/c806ca32eb77156c_0
  • /data/data/####/c83e72ff43f7160f_0
  • /data/data/####/c87c03fa2b476e19_0
  • /data/data/####/cEJmpSZl.dex
  • /data/data/####/cEJmpSZl.dex.flock (deleted)
  • /data/data/####/ca4bcc1f31b6ce62_0
  • /data/data/####/cbdbca0830988ca4_0
  • /data/data/####/cc77a71d1e6cdae1_0
  • /data/data/####/ccd4e659f352f663_0
  • /data/data/####/ccd5c9f9637dbaca_0
  • /data/data/####/ce525b36a5a3a948_0 (deleted)
  • /data/data/####/cefe8b30135e530d_0
  • /data/data/####/cf6061fcea8c36ba_0
  • /data/data/####/cf8d2febce4497cd_0
  • /data/data/####/cfc182382710ae70_0
  • /data/data/####/cfd19362685c2c49_0 (deleted)
  • /data/data/####/cff16a92e5db6c51_0
  • /data/data/####/com.wtnhhg_preferences.xml
  • /data/data/####/d0e654a0b346d8cc_0
  • /data/data/####/d11ab2a640112800_0
  • /data/data/####/d176547e4e80a764_0
  • /data/data/####/d18448241a9699fc_0
  • /data/data/####/d1cdbf44e8fee7d2_0
  • /data/data/####/d298261e7625dd06_0
  • /data/data/####/d30bf4ab4b1cf8ff_0
  • /data/data/####/d33d5fd8de91fa7f_0
  • /data/data/####/d33d5fd8de91fa7f_s
  • /data/data/####/d3f9c68e0b18830c_0
  • /data/data/####/d3f9c68e0b18830c_1
  • /data/data/####/d3fb1480804a0837_0
  • /data/data/####/d402d30542144a16_0
  • /data/data/####/d43b8ad7a8817370_0
  • /data/data/####/d50d42d12eaf166f_0
  • /data/data/####/d53b3e6c767746c5_0
  • /data/data/####/d5eed6a4131f8ddf_0
  • /data/data/####/d65588eedfb1d0b0_0
  • /data/data/####/d700c4874ef30549_0
  • /data/data/####/d74ae5176699bf22_0
  • /data/data/####/d75daf5321c28799_0
  • /data/data/####/d77d655ec40a4bfd_0
  • /data/data/####/d81ab99c87abe37e_0
  • /data/data/####/d81ab99c87abe37e_1
  • /data/data/####/d89c621233f08263_0
  • /data/data/####/d8f79924ef12a451_0
  • /data/data/####/d97687764f00595a_0
  • /data/data/####/d9d408bc58b2d5f5_0
  • /data/data/####/da5398a3c682dc4f_0
  • /data/data/####/dafcdac2aef95795_0
  • /data/data/####/db4b3e902d941b81_0
  • /data/data/####/dbb5fb3e0b32cb5d_0
  • /data/data/####/dbbc023b55db1093_0
  • /data/data/####/dc144477264c4f2c_0
  • /data/data/####/dc17956fec9ba63f_0
  • /data/data/####/dc2509af90653fb9_0
  • /data/data/####/dc5a7861a40bb8b0_0
  • /data/data/####/dcb4131abede4280_0
  • /data/data/####/dcb4131abede4280_1
  • /data/data/####/dcf9723c0a0c1215_0
  • /data/data/####/dd08969630e1b74b_0
  • /data/data/####/dd149c78219daa71_0
  • /data/data/####/dd27c3a86af5b22f_0
  • /data/data/####/dd3e5fb6b6aef45b_0
  • /data/data/####/de3b2a9ea571f75e_0
  • /data/data/####/de5ac8431072f219_0
  • /data/data/####/de5ac8431072f219_1
  • /data/data/####/df0093ecf60867db_0
  • /data/data/####/df3b8b3e4889150e_0
  • /data/data/####/dfca5c66340a07d4_0
  • /data/data/####/e030f0d4e3bcc82b_0
  • /data/data/####/e09d44f20deddb8f_0
  • /data/data/####/e0d83eb4e6cd321a_0
  • /data/data/####/e0fdf7d86f9d81c4_0
  • /data/data/####/e104543fbc8a4b9f_0
  • /data/data/####/e13c5e3bcaddcc25_0
  • /data/data/####/e16f38951d89befa_0
  • /data/data/####/e2611683706b1ba7_0
  • /data/data/####/e26395c59895ca28_0
  • /data/data/####/e294c3d7499992f4_0
  • /data/data/####/e35bf22ec48a3094_0
  • /data/data/####/e3791df4ace10a3f_0
  • /data/data/####/e41db450e2973e20_0
  • /data/data/####/e466578ab3dbaf93_0
  • /data/data/####/e497bd9aae6ac084_0
  • /data/data/####/e4a877fc13af311d_0
  • /data/data/####/e616a85fe1c18460_0
  • /data/data/####/e68d96b8bb6f7073_0
  • /data/data/####/e7ad8cfb10ce6872_0
  • /data/data/####/e825b77a62af6ded_0
  • /data/data/####/e86aebcdda2c0e7b_0
  • /data/data/####/e88a19bbac029a41_0
  • /data/data/####/e896b0f1fc1b6438_0
  • /data/data/####/e8eb80236ce3b384_0
  • /data/data/####/e8f8311cd3af4bd0_0
  • /data/data/####/e90552391dc62079_0
  • /data/data/####/e968e70577b08170_0
  • /data/data/####/e968e70577b08170_1
  • /data/data/####/ea6172e08d2ad1d8_0
  • /data/data/####/ea6a11675b196c3a_0
  • /data/data/####/eb35019136b9df66_0
  • /data/data/####/eb41035d9d71b83f_0
  • /data/data/####/ec3008cc1cd1334e_0
  • /data/data/####/ec9b2aa6c608c702_0
  • /data/data/####/ecb2234ada905b7d_0
  • /data/data/####/ecbbc3e97414cdb3_0
  • /data/data/####/ed5d6d9ae06b6206_0
  • /data/data/####/edf292f624515dc6_0
  • /data/data/####/ee5ad1b9789b26ab_0
  • /data/data/####/eecfc1d1e7ea7cb0_0
  • /data/data/####/ef7455bff21cea6f_0
  • /data/data/####/ef84b7c19441018c_0
  • /data/data/####/eff835d284593fbb_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f09c029d53f8a3ee_0
  • /data/data/####/f1056fdf405aaf1d_0
  • /data/data/####/f1a1da9db0c648eb_0
  • /data/data/####/f339e0b081948019_0
  • /data/data/####/f65fd29bbb5b3169_0
  • /data/data/####/f677f433f90f8759_0
  • /data/data/####/f79cf8f032ece7bd_0
  • /data/data/####/f79cf8f032ece7bd_1
  • /data/data/####/f82e5a730a59d64a_0
  • /data/data/####/f865636ad8f8d756_0
  • /data/data/####/f8dc574918582933_0
  • /data/data/####/fa6194fbadaeea6e_0
  • /data/data/####/fbb9ec685bb58fa1_0
  • /data/data/####/fbb9ec685bb58fa1_1
  • /data/data/####/fbbe728c5bcf8916_0
  • /data/data/####/fd2ed5dc79a11bd7_0
  • /data/data/####/fd966a10735fef2b_0
  • /data/data/####/fdfa4ada70a64df5_0
  • /data/data/####/fea3cd024645363a_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ffa381aa0133e16e_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/the-real-index
  • /data/data/####/zVeZISapS.dex
  • /data/data/####/zVeZISapS.dex.flock (deleted)
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android