マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Android.Siggen.8458

Added to the Dr.Web virus database: 2018-10-23

Virus description added:

Technical information

Malicious functions:
Gains access to the ITelephony private interface.
Network activity:
Connecting to:
  • UDP(DNS) <Google DNS>
  • TCP(HTTP/1.1) z.c####.com:80
  • TCP(HTTP/1.1) www.yin####.cc:80
  • TCP(HTTP/1.1) a####.exc.mob.com:80
  • TCP(HTTP/1.1) c.c####.com:80
  • TCP(HTTP/1.1) api.s####.mob.com:80
  • TCP(TLS/1.0) 1####.217.17.46:443
DNS requests:
  • a####.exc.mob.com
  • api.s####.mob.com
  • c.c####.com
  • www.yin####.cc
  • z13.c####.com
HTTP GET requests:
  • c.c####.com/wapstat.php?siteid=1259841125&r=http://www.yinbian.cc/offici...
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05775585668666260.png
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05775589165345369.png
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05775594190572402.png
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05779017289712060.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05779026765962488.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05779029915245935.png
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05780744467948714.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05780744981284604.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05821278514084579.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05821418174975907.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05821418306482077.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05821418593323109.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05821418745843729.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05848191404111330.png
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05848191449695145.png
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05853154762572562.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05858529107071022.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05858529208064395.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05858529287025627.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05858529355038682.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05860327915962653.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05860329028011034.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05860335071551405.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05860335530432697.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05860353477495342.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05860354947275980.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05862882654252761.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05863458816139300.png
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05863690950919358.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05863691272696370.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05863691691376376.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05863691768348349.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05863691848755604.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05863751001446836.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05864317901679532.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05870526179632892.png
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05886975347210742.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05887098474053498.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05887676328937239.png
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05892828664887415.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05892828734661905.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05892828862813699.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05892828921654589.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05899144988327145.png
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05901485003024913.png
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05906062380311526.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05906062903250633.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05906063018732596.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05913820437518516.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05915519119559565.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05923992710377837.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05931777528341408.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05931778165287227.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05931778290099523.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05931778528691945.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05931778674927643.jpg
  • www.yin####.cc/data/upload/mobile/special/L1/L1_05931867212371496.jpg
  • www.yin####.cc/official_rel/Common/getVerifyMathCode.html
  • www.yin####.cc/official_rel/Login/index2.html
  • www.yin####.cc/official_rel/Public/aes/aes.min.js?v=####
  • www.yin####.cc/official_rel/Public/aes/pad-zeropadding.min.js?v=####
  • www.yin####.cc/official_rel/Public/css/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/images/blank.png
  • www.yin####.cc/official_rel/Public/images/design/home.png
  • www.yin####.cc/official_rel/Public/images/design/share.png
  • www.yin####.cc/official_rel/Public/images/index/index/sw_bottom.png
  • www.yin####.cc/official_rel/Public/images/index/index/top-search.png
  • www.yin####.cc/official_rel/Public/images/index/mine/V.png
  • www.yin####.cc/official_rel/Public/images/index/mine/certification.png
  • www.yin####.cc/official_rel/Public/images/index/tab-cart.png
  • www.yin####.cc/official_rel/Public/images/index/tab-custom-active.png
  • www.yin####.cc/official_rel/Public/images/index/tab-custom.png
  • www.yin####.cc/official_rel/Public/images/index/tab-design-active.png
  • www.yin####.cc/official_rel/Public/images/index/tab-design.png
  • www.yin####.cc/official_rel/Public/images/index/tab-figure-active.png
  • www.yin####.cc/official_rel/Public/images/index/tab-figure.png
  • www.yin####.cc/official_rel/Public/images/index/tab-home-active.png
  • www.yin####.cc/official_rel/Public/images/index/tab-home.png
  • www.yin####.cc/official_rel/Public/images/index/tab-mine-active.png
  • www.yin####.cc/official_rel/Public/images/index/tab-mine.png
  • www.yin####.cc/official_rel/Public/images/login/LOGO.png
  • www.yin####.cc/official_rel/Public/images/login/icon_math_code.png
  • www.yin####.cc/official_rel/Public/images/login/icon_msg.png
  • www.yin####.cc/official_rel/Public/images/login/icon_phone.png
  • www.yin####.cc/official_rel/Public/images/login/icon_weixin.png
  • www.yin####.cc/official_rel/Public/images/login/mb-bg.png
  • www.yin####.cc/official_rel/Public/images/login/wx-bg.png
  • www.yin####.cc/official_rel/Public/images/modal_gllery.png
  • www.yin####.cc/official_rel/Public/images/modal_photograph.png
  • www.yin####.cc/official_rel/Public/images/news/collect-active.png
  • www.yin####.cc/official_rel/Public/images/news/collect.png
  • www.yin####.cc/official_rel/Public/images/news/good-active.png
  • www.yin####.cc/official_rel/Public/images/news/good.png
  • www.yin####.cc/official_rel/Public/images/payment/check.png
  • www.yin####.cc/official_rel/Public/images/payment/check_active.png
  • www.yin####.cc/official_rel/Public/images/product_details/collect-active...
  • www.yin####.cc/official_rel/Public/images/product_details/collect.png
  • www.yin####.cc/official_rel/Public/images/product_details/more-home.png
  • www.yin####.cc/official_rel/Public/images/product_details/more-share.png
  • www.yin####.cc/official_rel/Public/images/public/download_app_bg.png
  • www.yin####.cc/official_rel/Public/images/public/modal/share/clipboard.png
  • www.yin####.cc/official_rel/Public/images/public/modal/share/qq_friend.png
  • www.yin####.cc/official_rel/Public/images/public/modal/share/qq_space.png
  • www.yin####.cc/official_rel/Public/images/public/modal/share/wx_friend.png
  • www.yin####.cc/official_rel/Public/images/public/modal/share/wx_space.png
  • www.yin####.cc/official_rel/Public/images/store/store-element-active.png
  • www.yin####.cc/official_rel/Public/images/store/store-element.png
  • www.yin####.cc/official_rel/Public/images/store/store-home-active.png
  • www.yin####.cc/official_rel/Public/images/store/store-home.png
  • www.yin####.cc/official_rel/Public/images/store/store-ip-active.png
  • www.yin####.cc/official_rel/Public/images/store/store-ip.png
  • www.yin####.cc/official_rel/Public/images/store/store-new-active.png
  • www.yin####.cc/official_rel/Public/images/store/store-new.png
  • www.yin####.cc/official_rel/Public/images/store/store-type-active.png
  • www.yin####.cc/official_rel/Public/images/store/store-type.png
  • www.yin####.cc/official_rel/Public/images/top.png
  • www.yin####.cc/official_rel/Public/js/app.min.js?v=####
  • www.yin####.cc/official_rel/Public/js/config.min.js?v=####
  • www.yin####.cc/official_rel/Public/js/library.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Address/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Address/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Anniversary/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Anniversary/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Blessing/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Blessing/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/BoundAlipay/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/BoundAlipay/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/BoundRealNameByBank/event.min....
  • www.yin####.cc/official_rel/Public/module/BoundRealNameByBank/style.min....
  • www.yin####.cc/official_rel/Public/module/BoundTel/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/BoundTel/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Climate/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Climate/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/CmsArticle/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/CmsArticle/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/ConfirmOrder/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/ConfirmOrder/style.min.css?v=#...
  • www.yin####.cc/official_rel/Public/module/Contract/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Contract/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Copyright/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Copyright/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Design/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Design/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/DesignFee/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/DesignFee/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/DesignerJoin/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/DesignerJoin/style.min.css?v=#...
  • www.yin####.cc/official_rel/Public/module/Discuss/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Discuss/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Draw/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Draw/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Evaluate/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Evaluate/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Examine/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Examine/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Examine2/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Examine2/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Examine3/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Examine3/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Extend/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Extend/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Festival/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Festival/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Figure/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Figure/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/GoodThing/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/GoodThing/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/HomeLink/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/HomeLink/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Index/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Index/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Login/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Login/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Lucky/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Lucky/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/MarchAbout/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/MarchAbout/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/MyAddress/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/MyAddress/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/MyCollect/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/MyCollect/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/MyOrder/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/MyOrder/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/MyProfile/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/MyProfile/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/MyWallet/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/MyWallet/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/NewRed/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/NewRed/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Newbie/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Newbie/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Newbie2/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Newbie2/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Payment/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Payment/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Personal/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Personal/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Poster/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Poster/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/ProductDetails/event.min.js?v=...
  • www.yin####.cc/official_rel/Public/module/ProductDetails/style.min.css?v...
  • www.yin####.cc/official_rel/Public/module/RecommendStudio/event.min.js?v...
  • www.yin####.cc/official_rel/Public/module/RecommendStudio/style.min.css?...
  • www.yin####.cc/official_rel/Public/module/Search/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Search/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Store/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Store/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Studio/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Studio/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/StudioOriginality/event.min.js...
  • www.yin####.cc/official_rel/Public/module/StudioOriginality/style.min.cs...
  • www.yin####.cc/official_rel/Public/module/Talks/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Talks/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Talks2/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Talks2/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Test/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Test/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/module/Thanksgiving/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Thanksgiving/style.min.css?v=#...
  • www.yin####.cc/official_rel/Public/module/Welfare/event.min.js?v=####
  • www.yin####.cc/official_rel/Public/module/Welfare/style.min.css?v=####
  • www.yin####.cc/official_rel/Public/ui/css/ui-ext.min.css?v=####
  • www.yin####.cc/official_rel/Public/ui/css/ui.min.css?v=####
  • www.yin####.cc/official_rel/Public/ui/js/ui-ext.min.js?v=####
  • www.yin####.cc/official_rel/Public/ui/js/ui.min.js?v=####
  • www.yin####.cc/official_rel/Public/velocity/velocity.min.js?v=####
  • www.yin####.cc/official_rel/Public/zepto/zepto.min.js?v=####
  • www.yin####.cc/official_rel/index/index.html?&v=####&zfb=####&client=###...
  • z.c####.com/stat.htm?id=1259841125&r=http://www.yinbian.cc/official_rel/...
HTTP POST requests:
  • a####.exc.mob.com/errconf
  • api.s####.mob.com/conf5
  • api.s####.mob.com/conn
  • api.s####.mob.com/data2
  • api.s####.mob.com/snsconf
  • www.yin####.cc/official_rel/Common/cnzzTrackPageView.html
  • www.yin####.cc/official_rel/Index/getIndexContent.html
Modified file system:
Creates the following files:
  • /data/data/####/.lock
  • /data/data/####/.statistics
  • /data/data/####/MainM3x_AND.swf
  • /data/data/####/ThrowalbeLog.db-journal
  • /data/data/####/air.net.taijiandan.shejixiumobile.AIRSharedPref.xml
  • /data/data/####/application.xml
  • /data/data/####/curl-ca-bundle.crt
  • /data/data/####/data_0
  • /data/data/####/data_1
  • /data/data/####/data_2
  • /data/data/####/data_3
  • /data/data/####/extension.xml
  • /data/data/####/f_000001
  • /data/data/####/f_000002
  • /data/data/####/f_000003
  • /data/data/####/f_000004
  • /data/data/####/f_000005
  • /data/data/####/f_000006
  • /data/data/####/f_000007
  • /data/data/####/f_000008
  • /data/data/####/f_000009
  • /data/data/####/f_00000a
  • /data/data/####/f_00000b
  • /data/data/####/f_00000c
  • /data/data/####/f_00000d
  • /data/data/####/f_00000e
  • /data/data/####/f_00000f
  • /data/data/####/f_000010
  • /data/data/####/f_000011
  • /data/data/####/f_000012
  • /data/data/####/f_000013
  • /data/data/####/f_000014
  • /data/data/####/f_000015
  • /data/data/####/f_000016
  • /data/data/####/f_000017
  • /data/data/####/f_000018
  • /data/data/####/f_000019
  • /data/data/####/f_00001a
  • /data/data/####/f_00001b
  • /data/data/####/f_00001c
  • /data/data/####/f_00001d
  • /data/data/####/f_00001e
  • /data/data/####/f_00001f
  • /data/data/####/f_000020
  • /data/data/####/f_000021
  • /data/data/####/f_000022
  • /data/data/####/f_000023
  • /data/data/####/f_000024
  • /data/data/####/f_000025
  • /data/data/####/f_000026
  • /data/data/####/f_000027
  • /data/data/####/f_000028
  • /data/data/####/f_000029
  • /data/data/####/f_00002a
  • /data/data/####/f_00002b
  • /data/data/####/f_00002c
  • /data/data/####/f_00002d
  • /data/data/####/f_00002e
  • /data/data/####/f_00002f
  • /data/data/####/f_000030
  • /data/data/####/f_000031
  • /data/data/####/f_000032
  • /data/data/####/f_000033
  • /data/data/####/f_000034
  • /data/data/####/f_000035
  • /data/data/####/f_000036
  • /data/data/####/index
  • /data/data/####/javaTrustStore.tmp
  • /data/data/####/library.swf
  • /data/data/####/mob_sdk_exception_1.xml
  • /data/data/####/resource_package_v2_0.json
  • /data/data/####/share_sdk_1.xml
  • /data/data/####/share_sdk_1.xml.bak
  • /data/data/####/sharesdk.db-journal
  • /data/data/####/webview.db-journal
  • /data/data/####/webviewCookiesChromium.db-journal
  • /data/media/####/.ba
  • /data/media/####/.dk
Miscellaneous:
Executes next shell scripts:
  • /system/bin/cat /proc/cpuinfo
  • /system/bin/cat /proc/meminfo
  • /system/bin/cat /sys/devices/system/cpu/present
Loads the following dynamic libraries:
  • libCore
  • libc++_shared
  • neh
Uses the following algorithms to encrypt data:
  • AES-ECB-PKCS7Padding
Gains access to geolocation.
Gains access to telephone information (number, imei, etc.).
Gains access to information about installed applications.
Displays its own windows over windows of other applications.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android