マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Android.Hidden.2706

Added to the Dr.Web virus database: 2017-05-12

Virus description added:

Technical information

Malicious functions:
Removes its shortcut from the home screen.
Network activity:
Connecting to:
  • ct####.####.net
  • a8d333c####.####.net
  • syndica####.####.com
  • w####.link
  • sc####.####.com
  • s####.####.com
  • each####.club
  • i####.####.com
  • por####.com
  • deli####.####.com
  • f####.####.com
  • m####.####.com
  • st####.####.com
  • i####.####.link
  • b####.####.link
  • nub####.pw
  • a####.####.ru
  • watchmy####.tv
  • se####.####.com
  • cloudfr####.####.com
  • c####.####.com
  • por####.####.com
  • gadh####.####.info
HTTP GET requests:
  • each####.club/wp-content/uploads/2017/04/homemade-mouthfuck-31-240x135.jpg
  • por####.####.com/mt/nz/1365269.jpg
  • por####.####.com/mt/rw/1213659.jpg
  • nub####.pw/wp-content/uploads/2017/03/typical-life-of-a-sex-slave.jpg
  • por####.####.com/mt/tZ/2723736.jpg
  • gadh####.####.info/rkgang.php
  • por####.####.com/mt/Av/1170167.jpg
  • nub####.pw/wp-content/uploads/2017/03/skyla-paris-teenage-delinquents.jpg
  • por####.####.com/mt/dD/1563454.jpg
  • nub####.pw/wp-content/uploads/2017/03/gloryholeswallow-maryjane-johnson5...
  • por####.####.com/mt/ex/1252294.jpg
  • por####.####.com/mt/dz/1355463.jpg
  • por####.####.com/mt/hw/1203392.jpg
  • por####.com/mt/lx/1259615.jpg
  • c####.####.com/ak/watchmygirlfriend/videothumbs/02.jpg
  • por####.com/?source=####&promo=####&subid=####
  • c####.####.com/ak/watchmygirlfriend/videothumbs/07.jpg
  • w####.link/click?c=####&tracker=####&ptrack=####
  • nub####.pw/wp-content/uploads/2017/03/hot-pumping-the-plump-brunette.jpg
  • por####.com/mt/Rx/1291554.jpg
  • m####.####.com/images/logo.png?v=####
  • por####.####.com/mt/Mw/1234168.jpg
  • c####.####.com/ak/watchmygirlfriend/t2/js/bootstrap.min.js
  • nub####.pw/wp-content/uploads/2017/03/she-sucks-your-big-cock.jpg
  • syndica####.####.com/ads-iframe-display.php?idzone=####&type=####&p=####...
  • por####.####.com/mt/yE/1636740.jpg
  • por####.####.com/mt/wy/1322806.jpg
  • por####.com/mt/jE/1621933.jpg
  • each####.club/wp-content/themes/popcorn/popcorn/awpt/css/trans.css
  • por####.com/mt/rN/2097313.jpg
  • each####.club/wp-content/uploads/2017/04/anal-slut-but-fucked-and-face-f...
  • nub####.pw/wp-content/uploads/2017/03/beauty-smoking.jpg
  • c####.####.com/ak/watchmygirlfriend/t2/images/overlay.png
  • i####.####.link/in/p555_ntv_a/?zone=####&site=####&idzone=####&w=####&h=...
  • each####.club/wp-content/uploads/2017/04/katin-takes-it-every-way-240x13...
  • por####.com/mt/Uz/1398257.jpg
  • gadh####.####.info/rkgang.php?islem=####
  • por####.com/mt/Rx/1291053.jpg
  • m####.####.com/assets/mobile/bundle.min.js?v=####
  • b####.####.link/a/555exo.html?idzone=####&w=####&h=####&ad_sub=####&ad_t...
  • m####.####.com/ads/ad.js
  • c####.####.com/ak/watchmygirlfriend/videothumbs/12.gif
  • s####.####.com/in?site=####&source=####&subid=####&session=####
  • por####.####.com/mt/PD/1601877.jpg
  • each####.club/wp-content/uploads/2017/04/homemade-mouthfuck-32-240x135.jpg
  • por####.com/mt/nZ/2717173.jpg
  • por####.####.com/mt/vw/1217677.jpg
  • c####.####.com/ak/watchmygirlfriend/videothumbs/04.jpg
  • por####.com/mt/YD/1610413.jpg
  • nub####.pw/
  • each####.club/wp-content/uploads/2017/04/amateur-masturbation-gk1000-240...
  • each####.club/wp-content/uploads/2017/04/homemade-mouthfuck-30-240x135.jpg
  • por####.com/mt/dx/1251227.jpg
  • each####.club/wp-content/uploads/2017/04/krystal-and-courtney-share-a-gu...
  • c####.####.com/ak/watchmygirlfriend/videothumbs/19.jpg
  • c####.####.com/ak/watchmygirlfriend/videothumbs/14.jpg
  • nub####.pw/wp-content/themes/detube/js/jquery.min.js?ver=####
  • por####.####.com/mt/ss/1006549.jpg
  • watchmy####.tv/t/js/jquery.lazyload.js
  • por####.com/mt/aD/1560738.jpg
  • syndica####.####.com/splash.php?cat=####&idzone=####&type=####&p=####&su...
  • por####.####.com/mt/CE/1640829.jpg
  • por####.com/mt/CS/2368333.jpg
  • st####.####.com/6a97888ec52c042c679a36e919843cca/banners/322388/17316131...
  • se####.####.com/sites/?cat=####&camp=####&categoryid=####&conv=####
  • por####.com/mt/Iw/1230723.jpg
  • c####.####.com/ak/watchmygirlfriend/videothumbs/05.jpg
  • por####.com/mt/Qw/1238840.jpg
  • nub####.pw/wp-content/uploads/2017/03/muscled-hunks-office-anal-fucking....
  • por####.####.com/mt/tv/1163271.jpg
  • nub####.pw/wp-content/uploads/2017/03/sexy-afro-big-furious-ass-booty-gh...
  • each####.club/wp-content/themes/popcorn/popcorn/awpt/css/style.css
  • por####.####.com/mt/tw/1215750.jpg
  • nub####.pw/wp-content/themes/detube/js/modernizr.min.js?ver=####
  • each####.club/
  • por####.####.com/mt/Us/1034231.jpg
  • por####.####.com/mt/Tv/1189114.jpg
  • por####.com/mt/pC/1523665.jpg
  • cloudfr####.####.com/x.png
  • por####.com/mt/kD/1570993.jpg
  • c####.####.com/ak/watchmygirlfriend/videothumbs/13.jpg
  • por####.com/mt/Ex/1278843.jpg
  • por####.com/mt/kD/1570451.jpg
  • nub####.pw/wp-content/themes/detube/images/nav-sep.png
  • por####.com/mt/Xv/1193646.jpg
  • por####.####.com/mt/yy/1324295.jpg
  • nub####.pw/wp-content/uploads/2017/03/spy-camera-bathing-suit-change-roo...
  • por####.####.com/mt/WB/1504296.jpg
  • nub####.pw/wp-content/uploads/2017/03/ghetto-pussy-exposed-and-eaten.jpg
  • por####.####.com/mt/vA/1425834.jpg
  • por####.com/mt/qx/1264077.jpg
  • c####.####.com/ak/watchmygirlfriend/videothumbs/21.jpg
  • nub####.pw/wp-content/uploads/2017/03/tan-renforced-toes-outside.jpg
  • por####.####.com/mt/Bz/1379950.jpg
  • por####.####.com/mt/Gw/1228571.jpg
  • each####.club/wp-content/uploads/2017/04/hillary-hot-blonde-slut-gets-pu...
  • por####.com/mt/Hz/1385801.jpg
  • por####.####.com/mt/eC/1512296.jpg
  • nub####.pw/wp-includes/js/jquery/jquery.js?ver=####
  • por####.com/mt/nC/1521195.jpg
  • each####.club/wp-content/uploads/2017/04/caught-hentai-drilled-all-hole-...
  • nub####.pw/wp-content/themes/detube/images/icon-plus-24.png
  • nub####.pw/wp-includes/js/masonry.min.js?ver=####
  • each####.club/wp-content/uploads/2017/04/playing-yummy-big-dick-live-240...
  • por####.com/mt/Di/497270.jpg
  • st####.####.com/6a97888ec52c042c679a36e919843cca/banners/41682/174111424...
  • c####.####.com/ak/watchmygirlfriend/videothumbs/thumb-ads.jpg
  • por####.####.com/mt/XC/1557194.jpg
  • por####.####.com/mt/Wn/776219.jpg
  • por####.com/mt/CE/1640593.jpg
  • por####.####.com/mt/wC/1530216.jpg
  • each####.club/wp-content/uploads/2017/04/sandra-romain-doubled-ripped-24...
  • por####.####.com/mt/zv/1169910.jpg
  • nub####.pw/wp-includes/js/wp-embed.min.js?ver=####
  • por####.com/mt/lC/1519824.jpg
  • each####.club/wp-content/themes/popcorn/popcorn/awpt/css/playicon.css
  • por####.####.com/mt/do/783337.jpg
  • c####.####.com/ak/watchmygirlfriend/videothumbs/18.jpg
  • por####.####.com/mt/Nn/767974.jpg
  • por####.com/mt/OC/1548937.jpg
  • por####.com/mt/JG/1751106.jpg
  • por####.com/mt/vZ/2725634.jpg
  • por####.com/mt/fr/941892.jpg
  • each####.club/wp-content/uploads/2017/04/ebony-shackin-that-azz-240x135....
  • nub####.pw/wp-content/themes/detube/images/s2.png
  • each####.club/wp-content/uploads/2017/04/milk-squirting-boys-2-2-240x135...
  • nub####.pw/wp-content/uploads/2017/03/vintage-creampie-dildo-fucking-etc...
  • each####.club/wp-content/uploads/2017/04/amber-peach-black-cock-anal-ass...
  • por####.####.com/mt/Po/821518.jpg
  • nub####.pw/wp-content/uploads/2017/03/kayla-paige-can.jpg
  • each####.club/wp-content/uploads/2017/04/curly-blonde-gets-fluids-on-her...
  • nub####.pw/wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=####
  • por####.com/mt/kv/1154886.jpg
  • por####.####.com/mt/Kx/1284269.jpg
  • por####.com/mt/ny/1313411.jpg
  • syndica####.####.com/tag.php?goal=####
  • c####.####.com/ak/watchmygirlfriend/videothumbs/100.gif
  • each####.club/wp-content/uploads/2017/04/janet-jacme-shaking-her-money-m...
  • por####.####.com/mt/oA/1418154.jpg
  • s####.####.com/js/300/addthis_widget.js
  • por####.com/mt/Fz/1383245.jpg
  • por####.####.com/mt/GB/1488838.jpg
  • nub####.pw/wp-content/themes/detube/responsive.css?ver=####
  • c####.####.com/ak/watchmygirlfriend/videothumbs/01.jpg
  • por####.com/mt/wA/1426171.jpg
  • por####.####.com/mt/Sx/1292362.jpg
  • por####.####.com/mt/rz/1369789.jpg
  • nub####.pw/wp-content/themes/detube/images/bg-grad.png
  • c####.####.com/ak/watchmygirlfriend/videothumbs/03.jpg
  • por####.com/mt/wi/490337.jpg
  • c####.####.com/ak/watchmygirlfriend/videothumbs/17.jpg
  • por####.####.com/mt/KA/1440998.jpg
  • por####.com/mt/Fx/1279704.jpg
  • each####.club/wp-content/uploads/2017/04/intro-to-glamorous-porno-240x13...
  • por####.####.com/mt/wi/490462.jpg
  • por####.com/mt/zn/753284.jpg
  • f####.####.com/css?family=####&ver=####
  • por####.com/mt/vA/1425739.jpg
  • por####.com/mt/si/486697.jpg
  • por####.com/mt/sC/1526595.jpg
  • por####.com/mt/Us/1034536.jpg
  • nub####.pw/wp-content/themes/detube/images/bg-pattern.png
  • por####.####.com/mt/qC/1524494.jpg
  • por####.####.com/mt/ii/476859.jpg
  • por####.####.com/mt/HG/1749603.jpg
  • por####.com/mt/kx/1258784.jpg
  • por####.com/mt/wi/490980.jpg
  • nub####.pw/wp-content/themes/detube/js/theme.js?ver=####
  • por####.####.com/mt/WE/1660796.jpg
  • c####.####.com/ak/watchmygirlfriend/videothumbs/22.jpg
  • por####.com/mt/iE/1620676.jpg
  • por####.####.com/mt/Tv/1189861.jpg
  • por####.####.com/mt/Mv/1182993.jpg
  • por####.com/mt/MD/1598791.jpg
  • syndica####.####.com/splash.php?idzone=####
  • nub####.pw/wp-includes/js/wp-emoji-release.min.js?ver=####
  • nub####.pw/wp-content/uploads/2017/03/lesbians-sharing-realy-big-vibrato...
  • por####.com/mt/Vw/1243278.jpg
  • a8d333c####.####.net/test.png
  • por####.com/mt/ND/1599506.jpg
  • por####.####.com/mt/Ar/962626.jpg
  • por####.com/mt/Yv/1194749.jpg
  • nub####.pw/wp-content/uploads/2017/03/volumptous-amateur-part1.jpg
  • sc####.####.com/js/our_all_pjs.js?v=####
  • nub####.pw/wp-content/uploads/2017/03/this-girl-likes-everything-sex-wit...
  • nub####.pw/wp-content/themes/detube/images/bg-pattern-nav.png
  • each####.club/wp-content/uploads/2017/04/busty-woman-gives-her-man-a-foo...
  • each####.club/wp-content/uploads/2017/04/sf-imo-krn-240x135.jpg
  • por####.com/mt/SA/1448831.jpg
  • c####.####.com/ak/watchmygirlfriend/videothumbs/06.jpg
  • st####.####.com/6a97888ec52c042c679a36e919843cca/banners/322388/16112116...
  • por####.com/mt/Nv/1183655.jpg
  • por####.####.com/mt/wD/1582094.jpg
  • por####.####.com/mt/lD/1571565.jpg
  • por####.com/mt/Bw/1223875.jpg
  • por####.####.com/mt/tr/955607.jpg
  • por####.com/mt/xi/491771.jpg
  • m####.####.com/?source=####&promo=####&subid=####
  • por####.com/mt/yy/1324203.jpg
  • c####.####.com/ak/watchmygirlfriend/t2/images/btm-header.jpg
  • por####.com/mt/dx/1251552.jpg
  • nub####.pw/wp-content/themes/detube/js/jquery.fitvids.js?ver=####
  • each####.club/wp-content/uploads/2017/04/ride-my-dick-girlie-240x135.jpg
  • m####.####.com/assets/mobile/vendor.min.js?v=####
  • por####.com/mt/Zl/675881.jpg
  • por####.com/mt/TA/1449037.jpg
  • watchmy####.tv/t/?tracker=####&clickid=####&ref=####&c=####
  • c####.####.com/ak/watchmygirlfriend/t2/images/logo.png
  • por####.com/mt/QC/1550757.jpg
  • por####.####.com/mt/Zv/1195867.jpg
  • each####.club/wp-content/themes/popcorn/popcorn/awpt/js/ajaxcomments.js?...
  • nub####.pw/wp-includes/js/jquery/jquery-migrate.min.js?ver=####
  • c####.####.com/ak/watchmygirlfriend/videothumbs/20.jpg
  • syndica####.####.com/splash.php?idzone=####&type=####&capping=####&sub=#...
  • each####.club/wp-content/uploads/2017/04/i-am-crazy-about-my-holes-240x1...
  • por####.com/mt/gl/630881.jpg
  • nub####.pw/wp-content/uploads/2017/03/her-first-time-on-webcam.jpg
  • por####.####.com/mt/Ei/498107.jpg
  • por####.####.com/mt/Ss/1032371.jpg
  • each####.club/wp-content/uploads/2017/04/do-you-like-horny-bunnys-240x13...
  • por####.####.com/mt/wA/1426434.jpg
  • st####.####.com/close.png
  • each####.club/wp-content/uploads/2017/04/milf-is-addicted-to-sucking-coc...
  • i####.####.com/in/tcc/?promo=####&mc=####&dc=####&tc=####&subid=####
  • nub####.pw/wp-includes/js/imagesloaded.min.js?ver=####
  • por####.com/mt/gy/1306924.jpg
  • por####.####.com/mt/rl/641719.jpg
  • each####.club/wp-content/plugins/EXTERNAL/www/eachporn.club/wp-content/t...
  • c####.####.com/ak/watchmygirlfriend/videothumbs/97n.gif
  • nub####.pw/wp-content/uploads/2017/03/sexy-nylon-feet-tease.jpg
  • por####.####.com/mt/ex/1252375.jpg
  • deli####.####.com/retargeting.php?id=####
  • por####.####.com/mt/RC/1551580.jpg
  • por####.####.com/mt/zx/1273187.jpg
  • c####.####.com/ak/watchmygirlfriend/videothumbs/09.jpg
  • por####.com/mt/iw/1204063.jpg
  • c####.####.com/ak/watchmygirlfriend/videothumbs/23.jpg
  • por####.com/mt/Ex/1278803.jpg
  • por####.####.com/mt/Zy/1351838.jpg
  • por####.####.com/mt/uv/1164245.jpg
  • por####.####.com/mt/HA/1437478.jpg
  • por####.com/mt/Jy/1335925.jpg
  • nub####.pw/wp-includes/js/jquery/jquery.masonry.min.js?ver=####
  • por####.####.com/mt/cy/1302243.jpg
  • por####.####.com/mt/oC/1522519.jpg
  • each####.club/wp-includes/js/wp-emoji-release.min.js?ver=####
  • nub####.pw/wp-content/themes/detube/style.css?ver=####
  • por####.com/mt/Zw/1247590.jpg
  • nub####.pw/wp-content/uploads/2017/03/tony-lee-and-renzo-mazime-ripped-b...
  • por####.####.com/mt/Bu/1119810.jpg
  • por####.com/mt/rk/589212.jpg
  • por####.com/mt/UC/1554104.jpg
  • each####.club/wp-content/themes/popcorn/popcorn/awpt/js/jquery.js?ver=####
  • por####.com/mt/vy/1321519.jpg
  • c####.####.com/ak/watchmygirlfriend/videothumbs/08.jpg
  • i####.####.link/in/p555_ntv_c/?zone=####&site=####&idzone=####&w=####&h=...
  • nub####.pw/wp-content/uploads/2017/03/girl-gets-her-pussy-lips-swollen-p...
  • por####.####.com/mt/BE/1639129.jpg
  • por####.####.com/mt/Zk/623048.jpg
  • por####.com/mt/Gx/1280246.jpg
  • each####.club/wp-content/uploads/2017/04/maya-in-the-tib-being-ass-fucke...
  • por####.####.com/mt/Py/1341494.jpg
  • por####.com/mt/iw/1204026.jpg
  • nub####.pw/wp-content/uploads/2017/03/robin-mcleavy-in-the-loved-ones.jpg
  • por####.####.com/mt/Qy/1342114.jpg
  • nub####.pw/wp-content/uploads/2017/03/threesome-after-school.jpg
  • por####.com/mt/jv/1153360.jpg
  • por####.####.com/mt/Mz/1390099.jpg
  • a####.####.ru/click?id=####&ts=####&hash=####&jsuid=####
  • each####.club/wp-includes/js/wp-embed.min.js?ver=####
  • por####.com/mt/VE/1659876.jpg
  • por####.com/mt/eD/1564892.jpg
  • nub####.pw/wp-content/uploads/2017/03/gypsy-amateur-jura-villa-from-hamm...
  • m####.####.com/assets/mobile/bundle.min.css?v=####
  • por####.com/mt/Jy/1335090.jpg
  • c####.####.com/ak/watchmygirlfriend/t2/css/bootstrap.min.css
  • ct####.####.net/ctrack?action=####&type=####&id=####&context=####&cookie...
  • each####.club/wp-content/uploads/2017/04/fantastic-facial-240x135.jpg
  • each####.club/wp-content/uploads/2017/04/hentai-teens-fuck-in-park-240x1...
  • por####.com/mt/wB/1478504.jpg
  • nub####.pw/wp-content/uploads/2017/03/sexy-real-asian-tsubasa-okina-love...
  • nub####.pw/wp-content/uploads/2017/03/afro-hoe-sucking-big-white-cock.jpg
  • por####.com/mt/Ai/494766.jpg
  • c####.####.com/cdn/wmgtv/stylet2.css
  • por####.com/mt/Kl/660168.jpg
  • por####.com/mt/wz/1374114.jpg
  • each####.club/wp-content/uploads/2017/04/cute-afternoon-twink-rub-240x13...
  • each####.club/wp-content/uploads/2017/04/each.png
  • por####.####.com/mt/zC/1533209.jpg
  • por####.com/mt/xE/1635439.jpg
  • c####.####.com/ak/watchmygirlfriend/videothumbs/15.jpg
  • c####.####.com/ak/watchmygirlfriend/videothumbs/10.jpg
  • por####.####.com/mt/py/1315185.jpg
  • por####.com/mt/NC/1547134.jpg
  • nub####.pw/wp-content/themes/detube/js/jquery.plugins.min.js?ver=####
  • por####.com/mt/Jx/1283780.jpg
  • each####.club/wp-content/uploads/2017/04/rita-gives-the-hottest-blowjob-...
  • m####.####.com/images/240x180_2.gif
  • each####.club/wp-content/uploads/2017/04/faye-regan-red-sofa-240x135.jpg
  • por####.####.com/mt/ID/1594823.jpg
  • nub####.pw/wp-content/uploads/2017/03/lesbian-squirting-fest.jpg
  • nub####.pw/wp-content/uploads/2017/03/kelly-kline-and-brooke-banner-ffm....
  • por####.com/mt/pv/1159409.jpg
  • por####.####.com/mt/aD/1560063.jpg
  • por####.####.com/mt/CB/1484388.jpg
  • por####.####.com/mt/Cx/1276691.jpg
  • por####.com/mt/GD/1592838.jpg
  • i####.####.link/in/p555_ntv_b/?zone=####&site=####&idzone=####&w=####&h=...
  • nub####.pw/wp-content/themes/detube/images/s.png
  • each####.club/wp-content/uploads/2017/04/self-facial-shemale-porn-shemal...
  • nub####.pw/wp-content/themes/detube/patterns/diamond_upholstery.png
  • por####.com/mt/zz/1377744.jpg
  • each####.club/wp-content/themes/popcorn/popcorn/awpt/css/awpt/css/images...
  • por####.####.com/mt/ui/488049.jpg
  • por####.####.com/mt/Aw/1222963.jpg
  • each####.club/wp-content/themes/popcorn/popcorn/awpt/css/media.css
  • each####.club/wp-content/uploads/2017/04/moy-1-240x135.jpg
  • f####.####.com/s/opensans/v13/MTP_ySUJH_bn48VBG8sNSpS3E-kSBmtLoNJPDtbj2P...
  • f####.####.com/s/opensans/v13/k3k702ZOKiLJc3WVjuplzJS3E-kSBmtLoNJPDtbj2P...
Modified file system:
Creates the following files:
  • /data/data/####/cache/webviewCacheChromium/f_00002f
  • /data/data/####/cache/webviewCacheChromium/f_00002e
  • /data/data/####/cache/webviewCacheChromium/f_00002d
  • /data/data/####/cache/webviewCacheChromium/f_00002c
  • /data/data/####/cache/webviewCacheChromium/f_00002b
  • /data/data/####/cache/webviewCacheChromium/f_00002a
  • /data/data/####/cache/webviewCacheChromium/f_000052
  • /data/data/####/cache/webviewCacheChromium/f_000053
  • /data/data/####/cache/webviewCacheChromium/f_000050
  • /data/data/####/cache/webviewCacheChromium/f_000051
  • /data/data/####/cache/webviewCacheChromium/f_000056
  • /data/data/####/cache/webviewCacheChromium/f_000057
  • /data/data/####/cache/webviewCacheChromium/f_000054
  • /data/data/####/cache/webviewCacheChromium/f_000055
  • /data/data/####/cache/webviewCacheChromium/data_3
  • /data/data/####/cache/webviewCacheChromium/data_2
  • /data/data/####/cache/webviewCacheChromium/f_000058
  • /data/data/####/cache/webviewCacheChromium/data_0
  • /data/data/####/databases/webviewCookiesChromium.db-journal
  • /data/data/####/cache/webviewCacheChromium/f_00006c
  • /data/data/####/cache/webviewCacheChromium/f_00005b
  • /data/data/####/cache/webviewCacheChromium/f_00005c
  • /data/data/####/cache/webviewCacheChromium/f_00005a
  • /data/data/####/cache/webviewCacheChromium/f_00005f
  • /data/data/####/cache/webviewCacheChromium/f_00005d
  • /data/data/####/cache/webviewCacheChromium/f_00005e
  • /data/data/####/cache/webviewCacheChromium/f_000067
  • /data/data/####/cache/webviewCacheChromium/f_00006b
  • /data/data/####/cache/webviewCacheChromium/f_000027
  • /data/data/####/cache/webviewCacheChromium/f_000026
  • /data/data/####/cache/webviewCacheChromium/f_000025
  • /data/data/####/cache/webviewCacheChromium/f_000024
  • /data/data/####/cache/webviewCacheChromium/f_000023
  • /data/data/####/cache/webviewCacheChromium/f_000022
  • /data/data/####/cache/webviewCacheChromium/f_000021
  • /data/data/####/cache/webviewCacheChromium/f_000020
  • /data/data/####/cache/webviewCacheChromium/f_000029
  • /data/data/####/cache/webviewCacheChromium/f_000028
  • /data/data/####/cache/webviewCacheChromium/f_000066
  • /data/data/####/cache/webviewCacheChromium/f_00006a
  • /data/data/####/cache/webviewCacheChromium/index
  • /data/data/####/cache/webviewCacheChromium/f_000081
  • /data/data/####/cache/webviewCacheChromium/f_000080
  • /data/data/####/cache/webviewCacheChromium/f_00000a
  • /data/data/####/cache/webviewCacheChromium/f_00000c
  • /data/data/####/cache/webviewCacheChromium/f_00000b
  • /data/data/####/cache/webviewCacheChromium/f_00000e
  • /data/data/####/cache/webviewCacheChromium/f_00000d
  • /data/data/####/cache/webviewCacheChromium/f_00000f
  • /data/data/####/cache/webviewCacheChromium/f_000034
  • /data/data/####/cache/webviewCacheChromium/f_000035
  • /data/data/####/cache/webviewCacheChromium/f_000036
  • /data/data/####/cache/webviewCacheChromium/f_00008b
  • /data/data/####/cache/webviewCacheChromium/f_000030
  • /data/data/####/cache/webviewCacheChromium/f_00008d
  • /data/data/####/cache/webviewCacheChromium/f_000032
  • /data/data/####/cache/webviewCacheChromium/f_000033
  • /data/data/####/cache/webviewCacheChromium/f_000038
  • /data/data/####/cache/webviewCacheChromium/data_1
  • /data/data/####/cache/webviewCacheChromium/f_00003a
  • /data/data/####/cache/webviewCacheChromium/f_000064
  • /data/data/####/cache/webviewCacheChromium/f_000059
  • /data/data/####/cache/webviewCacheChromium/f_000087
  • /data/data/####/cache/webviewCacheChromium/f_000086
  • /data/data/####/cache/webviewCacheChromium/f_00006f
  • /data/data/####/cache/webviewCacheChromium/f_00006e
  • /data/data/####/cache/webviewCacheChromium/f_00006d
  • /data/data/####/cache/webviewCacheChromium/f_00003d
  • /data/data/####/cache/webviewCacheChromium/f_00003e
  • /data/data/####/cache/webviewCacheChromium/f_00003f
  • /data/data/####/cache/webviewCacheChromium/f_000082
  • /data/data/####/cache/webviewCacheChromium/f_000085
  • /data/data/####/cache/webviewCacheChromium/f_000084
  • /data/data/####/cache/webviewCacheChromium/f_00003b
  • /data/data/####/cache/webviewCacheChromium/f_00003c
  • /data/data/####/cache/webviewCacheChromium/f_000089
  • /data/data/####/cache/webviewCacheChromium/f_000088
  • /data/data/####/cache/webviewCacheChromium/f_000009
  • /data/data/####/cache/webviewCacheChromium/f_000008
  • /data/data/####/cache/webviewCacheChromium/f_000083
  • /data/data/####/cache/webviewCacheChromium/f_000001
  • /data/data/####/cache/webviewCacheChromium/f_000003
  • /data/data/####/cache/webviewCacheChromium/f_000002
  • /data/data/####/cache/webviewCacheChromium/f_000005
  • /data/data/####/cache/webviewCacheChromium/f_000004
  • /data/data/####/cache/webviewCacheChromium/f_000007
  • /data/data/####/cache/webviewCacheChromium/f_000006
  • /data/data/####/cache/webviewCacheChromium/f_0000b5
  • /data/data/####/cache/webviewCacheChromium/f_0000b4
  • /data/data/####/cache/webviewCacheChromium/f_0000b3
  • /data/data/####/cache/webviewCacheChromium/f_0000b2
  • /data/data/####/cache/webviewCacheChromium/f_0000b1
  • /data/data/####/cache/webviewCacheChromium/f_0000b0
  • /data/data/####/cache/webviewCacheChromium/f_000096
  • /data/data/####/cache/webviewCacheChromium/f_000097
  • /data/data/####/cache/webviewCacheChromium/f_000094
  • /data/data/####/cache/webviewCacheChromium/f_000095
  • /data/data/####/cache/webviewCacheChromium/f_000092
  • /data/data/####/cache/webviewCacheChromium/f_000093
  • /data/data/####/cache/webviewCacheChromium/f_000090
  • /data/data/####/cache/webviewCacheChromium/f_000091
  • /data/data/####/cache/webviewCacheChromium/f_000098
  • /data/data/####/cache/webviewCacheChromium/f_000099
  • /data/data/####/cache/webviewCacheChromium/f_000018
  • /data/data/####/cache/webviewCacheChromium/f_000019
  • /data/data/####/cache/webviewCacheChromium/f_000016
  • /data/data/####/cache/webviewCacheChromium/f_000017
  • /data/data/####/cache/webviewCacheChromium/f_000014
  • /data/data/####/cache/webviewCacheChromium/f_000015
  • /data/data/####/cache/webviewCacheChromium/f_000012
  • /data/data/####/cache/webviewCacheChromium/f_000013
  • /data/data/####/cache/webviewCacheChromium/f_000010
  • /data/data/####/cache/webviewCacheChromium/f_000011
  • /data/data/####/cache/webviewCacheChromium/f_000069
  • /data/data/####/cache/webviewCacheChromium/f_0000a1
  • /data/data/####/cache/webviewCacheChromium/f_00001f
  • /data/data/####/cache/webviewCacheChromium/f_000062
  • /data/data/####/cache/webviewCacheChromium/f_00001d
  • /data/data/####/cache/webviewCacheChromium/f_00001e
  • /data/data/####/cache/webviewCacheChromium/f_00001b
  • /data/data/####/cache/webviewCacheChromium/f_00001c
  • /data/data/####/cache/webviewCacheChromium/f_000065
  • /data/data/####/cache/webviewCacheChromium/f_00001a
  • /data/data/####/cache/webviewCacheChromium/f_00009f
  • /data/data/####/cache/webviewCacheChromium/f_00009d
  • /data/data/####/cache/webviewCacheChromium/f_00009e
  • /data/data/####/cache/webviewCacheChromium/f_00009b
  • /data/data/####/cache/webviewCacheChromium/f_00009c
  • /data/data/####/cache/webviewCacheChromium/f_00009a
  • /data/data/####/cache/webviewCacheChromium/f_00008a
  • /data/data/####/databases/webviewCookiesChromiumPrivate.db-journal
  • /data/data/####/cache/webviewCacheChromium/f_00008c
  • /data/data/####/cache/webviewCacheChromium/f_000037
  • /data/data/####/cache/webviewCacheChromium/f_00008e
  • /data/data/####/cache/webviewCacheChromium/f_000031
  • /data/data/####/cache/webviewCacheChromium/f_000078
  • /data/data/####/cache/webviewCacheChromium/f_000079
  • /data/data/####/cache/webviewCacheChromium/f_000070
  • /data/data/####/cache/webviewCacheChromium/f_000071
  • /data/data/####/cache/webviewCacheChromium/f_000072
  • /data/data/####/cache/webviewCacheChromium/f_00008f
  • /data/data/####/shared_prefs/####_preferences.xml
  • /data/data/####/cache/webviewCacheChromium/f_000075
  • /data/data/####/cache/webviewCacheChromium/f_000076
  • /data/data/####/cache/webviewCacheChromium/f_000077
  • /data/data/####/cache/webviewCacheChromium/f_000074
  • /data/data/####/cache/webviewCacheChromium/f_000068
  • /data/data/####/cache/webviewCacheChromium/f_00004e
  • /data/data/####/cache/webviewCacheChromium/f_00004d
  • /data/data/####/cache/webviewCacheChromium/f_00004f
  • /data/data/####/cache/webviewCacheChromium/f_00004a
  • /data/data/####/cache/webviewCacheChromium/f_00004c
  • /data/data/####/cache/webviewCacheChromium/f_00004b
  • /data/data/####/cache/webviewCacheChromium/f_0000a8
  • /data/data/####/cache/webviewCacheChromium/f_0000a9
  • /data/data/####/cache/webviewCacheChromium/f_0000a6
  • /data/data/####/cache/webviewCacheChromium/f_0000a7
  • /data/data/####/cache/webviewCacheChromium/f_0000a4
  • /data/data/####/cache/webviewCacheChromium/f_0000a5
  • /data/data/####/cache/webviewCacheChromium/f_0000a2
  • /data/data/####/cache/webviewCacheChromium/f_0000a3
  • /data/data/####/cache/webviewCacheChromium/f_0000a0
  • /data/data/####/cache/webviewCacheChromium/f_000039
  • /data/data/####/cache/webviewCacheChromium/f_000063
  • /data/data/####/cache/webviewCacheChromium/f_000073
  • /data/data/####/cache/webviewCacheChromium/f_000061
  • /data/data/####/databases/TurtlePlayer-journal
  • /data/data/####/cache/webviewCacheChromium/f_000060
  • /data/data/####/cache/webviewCacheChromium/f_000049
  • /data/data/####/cache/webviewCacheChromium/f_000048
  • /data/data/####/cache/webviewCacheChromium/f_000045
  • /data/data/####/cache/webviewCacheChromium/f_000044
  • /data/data/####/cache/webviewCacheChromium/f_000047
  • /data/data/####/cache/webviewCacheChromium/f_000046
  • /data/data/####/cache/webviewCacheChromium/f_000041
  • /data/data/####/cache/webviewCacheChromium/f_000040
  • /data/data/####/cache/webviewCacheChromium/f_000043
  • /data/data/####/cache/webviewCacheChromium/f_000042
  • /data/data/####/cache/webviewCacheChromium/f_00007a
  • /data/data/####/cache/webviewCacheChromium/f_00007b
  • /data/data/####/cache/webviewCacheChromium/f_00007c
  • /data/data/####/cache/webviewCacheChromium/f_00007d
  • /data/data/####/cache/webviewCacheChromium/f_00007e
  • /data/data/####/cache/webviewCacheChromium/f_00007f
  • /data/data/####/databases/webview.db-journal
  • /data/data/####/cache/webviewCacheChromium/f_0000af
  • /data/data/####/cache/webviewCacheChromium/f_0000ad
  • /data/data/####/cache/webviewCacheChromium/f_0000ae
  • /data/data/####/cache/webviewCacheChromium/f_0000ab
  • /data/data/####/cache/webviewCacheChromium/f_0000ac
  • /data/data/####/cache/webviewCacheChromium/f_0000aa
Miscellaneous:
Executes next shell scripts:
  • ls -R /storage/emulated/0
Contains functionality to send SMS messages automatically.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android