マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Android.Locker.17043

Added to the Dr.Web virus database: 2023-07-08

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Threat detection based on machine learning.
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) ei.ph####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.0) and####.google####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) galle####.vcmd####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) 64.2####.165.94:443
  • TCP(TLS/1.0) c####.liveja####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) pt-sta####.js####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.2) and####.google####.com:443
  • TCP(TLS/1.2) 64.2####.165.94:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • and####.google####.com
  • c####.liveja####.com
  • cdn1-sm####.ph####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/0015d056bdd18816_0
  • /data/data/####/00da7ed3191ff439_0
  • /data/data/####/01ef457cc51b794c_0
  • /data/data/####/01ef457cc51b794c_1
  • /data/data/####/022a1c254e794b95_0
  • /data/data/####/02d766bf67f30a6b_0 (deleted)
  • /data/data/####/0362dda274cfd94c_0
  • /data/data/####/0507f22726810148_0
  • /data/data/####/05b5f9a52765cee8_0
  • /data/data/####/069f6b2f696df326_0
  • /data/data/####/070ba0eef77f76b4_0
  • /data/data/####/070ba0eef77f76b4_1
  • /data/data/####/079ac922da69b969_0
  • /data/data/####/07bb39f9c57b9545_0
  • /data/data/####/07e7f495ec7d85ce_0
  • /data/data/####/081326baf0f7877d_0
  • /data/data/####/08169231101efe9a_0
  • /data/data/####/097321bc543faaf4_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0a5e59e4e4b1669b_0
  • /data/data/####/0a61312c3ce937bc_0
  • /data/data/####/0a61312c3ce937bc_s
  • /data/data/####/0a97bc168accc90f_0
  • /data/data/####/0ab4e31af72b8e3a_0
  • /data/data/####/0af5286aae7d08cc_0 (deleted)
  • /data/data/####/0bd3e3820fbaae66_0
  • /data/data/####/0cfd0a4960091da1_0
  • /data/data/####/0e75b2d412bb60a6_0
  • /data/data/####/0ee2e9f24e9b191d_0
  • /data/data/####/0ee2e9f24e9b191d_1
  • /data/data/####/0f7434909abeafcf_0
  • /data/data/####/0fe783381b6044bf_0
  • /data/data/####/0fe783381b6044bf_1
  • /data/data/####/10e5f51bbc6c8cec_0
  • /data/data/####/1251c9deb44f08a1_0
  • /data/data/####/1251c9deb44f08a1_s
  • /data/data/####/126756f5a75642b6_0
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/1316e232ca9cf0df_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/143348a1098bfe3a_0
  • /data/data/####/146d06d154de130f_0
  • /data/data/####/14968192596e74cb_0
  • /data/data/####/14ea6979bee6e5c7_0
  • /data/data/####/1684b520f7484cb4_0
  • /data/data/####/18b2224d6116098d_0
  • /data/data/####/18c0b3059e9a2cd3_0
  • /data/data/####/192d762436afa93d_0
  • /data/data/####/19f9ff1ed8ce0861_0
  • /data/data/####/1ae1b07ad20fda35_0
  • /data/data/####/1b6a6df9215c5f72_0
  • /data/data/####/1c30738559d2d01d_0
  • /data/data/####/1c60a9bf13a2f848_0
  • /data/data/####/1c7454875650b11f_0
  • /data/data/####/1d36ebc8ef630c5d_0
  • /data/data/####/1f03c858cd5c189b_0
  • /data/data/####/1f665b6d62064fab_0
  • /data/data/####/1f89a4680fe98ce0_0
  • /data/data/####/1fa41812901e6661_0
  • /data/data/####/201bbdfb572f8663_0
  • /data/data/####/201bbdfb572f8663_1
  • /data/data/####/20284fccf2f0cd6e_0
  • /data/data/####/20e0c7eec8151772_0
  • /data/data/####/2272fc7b820f75f4_0 (deleted)
  • /data/data/####/23db4dc426b90f3c_0
  • /data/data/####/243cb84fea2fa738_0
  • /data/data/####/24b20b0e69d901ee_0
  • /data/data/####/24b2af68e0140a8b_0
  • /data/data/####/2507661abdcd1208_0
  • /data/data/####/253db71cfe15d4bd_0
  • /data/data/####/255c6f2da743cdc0_0
  • /data/data/####/25e904f2700669a1_0
  • /data/data/####/28b91cfbb39c0b9a_0
  • /data/data/####/28e3207ba5a12900_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/29bcc7926c893dc0_0 (deleted)
  • /data/data/####/29c10794e74550ee_0 (deleted)
  • /data/data/####/2ab8a16f0fd9319f_0
  • /data/data/####/2bb864b96105fbd1_0
  • /data/data/####/2c96eb3d64662e2f_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d3caee04918ba4c_0
  • /data/data/####/2d4b2972a9caee53_0
  • /data/data/####/2dc795f9d23ccef0_0
  • /data/data/####/2e5041ca8ac7bd4a_0
  • /data/data/####/2e7ce99a73a3e1e1_0
  • /data/data/####/2ee95df18bd05b6d_0
  • /data/data/####/2f121d50afcca045_0
  • /data/data/####/2fa2c025a6ec93aa_0
  • /data/data/####/2fbc09cd4dd6175e_0
  • /data/data/####/30307017f43d2bf6_0
  • /data/data/####/30307017f43d2bf6_s
  • /data/data/####/3055001a405e3997_0
  • /data/data/####/32107d13bd3f33f4_0
  • /data/data/####/326632c68268352e_0
  • /data/data/####/3267bb3a8d7380ae_0
  • /data/data/####/32c4e026696d3d3a_0
  • /data/data/####/32d5fd0cb6bc7ee1_0
  • /data/data/####/32d6dcb5f98be0cf_0
  • /data/data/####/32e2ae6847c4d6ce_0
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/33cab104fd3f33cd_0
  • /data/data/####/33d22a55eb156a22_0
  • /data/data/####/343c65bcd4dddd5b_0
  • /data/data/####/353b27e0a17a260e_0
  • /data/data/####/3610e95e29d16a1e_0
  • /data/data/####/3610faef661bac85_0
  • /data/data/####/3639dfcdb38fa620_0
  • /data/data/####/3679dcafa04d2b25_0
  • /data/data/####/378a2afc2732d74f_0
  • /data/data/####/37d678240811a67f_0
  • /data/data/####/387bc38bc2f6db91_0
  • /data/data/####/38ce5c977593cdc1_0
  • /data/data/####/39dbbaa3cb922bde_0
  • /data/data/####/39dbbaa3cb922bde_1
  • /data/data/####/3a94579d-a7b4-4f81-a96c-f39e1d0dde25.dex
  • /data/data/####/3a94579d-a7b4-4f81-a96c-f39e1d0dde25.dex.flock (deleted)
  • /data/data/####/3b01a177a666d377_0 (deleted)
  • /data/data/####/3d73325b5750b8bb_0
  • /data/data/####/3dd7155d93a1fed9_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3f272aca370f27d2_0
  • /data/data/####/41070d07993e8839_0
  • /data/data/####/412010e2527cc4d0_0
  • /data/data/####/412010e2527cc4d0_1
  • /data/data/####/41bf9ce91dcebcbb_0
  • /data/data/####/439e4b15dd3b77e9_0
  • /data/data/####/43a6c65303fda2a0_0
  • /data/data/####/440928a284d77e2e_0
  • /data/data/####/4475564a55b922c5_0
  • /data/data/####/44817c1c10771430_0
  • /data/data/####/448a1373a92e3548_0
  • /data/data/####/45440df98dd6e1a5_0
  • /data/data/####/4581b7ad95edf1df_0 (deleted)
  • /data/data/####/46419dfa9dc2dba6_0
  • /data/data/####/483c98240cab9370_0
  • /data/data/####/48767bd50f96f619_0
  • /data/data/####/4877f9184b94bf06_0
  • /data/data/####/48b259e17269a066_0
  • /data/data/####/48b259e17269a066_1
  • /data/data/####/4a357a4ae2ed8d38_0
  • /data/data/####/4afd97f81e073633_0
  • /data/data/####/4c1039a95dc39bdf_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4d2b30d41d101827_0
  • /data/data/####/4ecf467cdb6fd081_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/506c25e468df488e_0
  • /data/data/####/50f182e1c3d7352b_0
  • /data/data/####/51828a8553edbd39_0
  • /data/data/####/51948bdbf09687fc_0
  • /data/data/####/522376a9fc0b77f3_0
  • /data/data/####/5262f1598dd1767f_0
  • /data/data/####/52847b1dd1f67213_0
  • /data/data/####/52faf0fa88dd9daf_0
  • /data/data/####/53145305cc1857b7_0
  • /data/data/####/548a1bf4af87e60a_0
  • /data/data/####/54f0166c9ffeab51_0
  • /data/data/####/55d8d008f247c198_0
  • /data/data/####/586bc772a44f5bf5_0 (deleted)
  • /data/data/####/588056b1f3e10161_0
  • /data/data/####/597c7504dfdf291b_0
  • /data/data/####/5a97bb43119c16f9_0
  • /data/data/####/5ab28e9e373d4cd5_0
  • /data/data/####/5adba85a858ff0eb_0
  • /data/data/####/5b8c709b82eeb67d_0
  • /data/data/####/5c76e5e9dd7b1d7b_0
  • /data/data/####/5ca07a511bea4ecf_0
  • /data/data/####/5cee73b9175ff7eb_0
  • /data/data/####/5dd78ea8f97a09c7_0
  • /data/data/####/5f93bae1bcd04246_0
  • /data/data/####/604e1bad46899397_0
  • /data/data/####/60560c5a4803c975_0
  • /data/data/####/607e40ab2f6551e7_0
  • /data/data/####/609cd5bff0a7875d_0
  • /data/data/####/61a1b58fbe187bbf_0
  • /data/data/####/621d0e64af6d9a1b_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/6476a476b0d49d09_0
  • /data/data/####/65415f216dad930a_0
  • /data/data/####/665ed991923a23ae_0
  • /data/data/####/66be2ee39eac0f35_0
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/678e35ab77f03e17_0
  • /data/data/####/67ee89322a4e404e_0
  • /data/data/####/68986941fc82c5b4_0
  • /data/data/####/69cb6b890aa89684_0
  • /data/data/####/6a36f04b449428ca_0 (deleted)
  • /data/data/####/6abc317ab565b304_0
  • /data/data/####/6d6007f7b72c654c_0
  • /data/data/####/6ec03d6b95fe058e_0
  • /data/data/####/6fccdbd2b3b10adb_0
  • /data/data/####/7054b56eb5326142_0
  • /data/data/####/7147df6c4bfeee2e_0
  • /data/data/####/7262016a0d4dbcc4_0
  • /data/data/####/730f2df581f147ce_0
  • /data/data/####/735b5e776fbd4df2_0
  • /data/data/####/74a6c043ba92cff8_0
  • /data/data/####/74aa7b82e2ad1017_0
  • /data/data/####/75f462102affdde1_0
  • /data/data/####/765d680c200c2967_0
  • /data/data/####/7857e1f70dfdf631_0
  • /data/data/####/791b595d90514fdd_0
  • /data/data/####/796b6583296abcaa_0
  • /data/data/####/7bd66c27e8ca5f88_0
  • /data/data/####/7c0c3670ce8c6ef4_0
  • /data/data/####/7c0c3670ce8c6ef4_s
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c5ddeea4b309c2c_0
  • /data/data/####/7c840dcbab62e783_0
  • /data/data/####/7d59656b674ff3b5_0
  • /data/data/####/7d8c51d71b585bd1_0 (deleted)
  • /data/data/####/7e43e7e970114285_0
  • /data/data/####/7f31355d5709d4d7_0
  • /data/data/####/7f790f13008bf171_0 (deleted)
  • /data/data/####/7f9286492105f07a_0
  • /data/data/####/7f9286492105f07a_1
  • /data/data/####/7f98e3dffa4a8661_0
  • /data/data/####/816edab88afc770f_0
  • /data/data/####/82b084d7f8fa10fc_0
  • /data/data/####/82ba0398de1589b3_0
  • /data/data/####/8482abca35386642_0
  • /data/data/####/848f584eb2980526_0
  • /data/data/####/84ec62bc5d24c609_0
  • /data/data/####/85678c6df50718b8_0
  • /data/data/####/858c207950dca36e_0 (deleted)
  • /data/data/####/85d685f0adcc59de_0
  • /data/data/####/869ae8a2a55067e0_0
  • /data/data/####/869ae8a2a55067e0_s
  • /data/data/####/86fa628d5a83c4a1_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/898f4048f09cc6bd_0
  • /data/data/####/89d2fb97cd5ac431_0
  • /data/data/####/8a5d930b1c81ed82_0
  • /data/data/####/8b7b060da2a656f3_0
  • /data/data/####/8bd197ff6922a42d_0
  • /data/data/####/8c20e0b1d6ed5a74_0
  • /data/data/####/8c2ae296c491af3f_0
  • /data/data/####/8c2b045b2e446455_0
  • /data/data/####/8cf97e98ffc6ff67_0
  • /data/data/####/8d1bc29eb3834a5e_0
  • /data/data/####/8d3a54608a3f26c7_0
  • /data/data/####/8db8ef6f042ea924_0
  • /data/data/####/8fcc900296f7d6a3_0
  • /data/data/####/906e73bf9e2f2a4b_0
  • /data/data/####/927c81f49c686279_0
  • /data/data/####/92981146dce670c9_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/94d403a2df285ab4_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/961bdbab5be55ede_0
  • /data/data/####/969f4aff55d97727_0
  • /data/data/####/96ba6042ff8ff827_0
  • /data/data/####/97b10677c2e04a23_0
  • /data/data/####/98035feb8dc60e2b_0
  • /data/data/####/983d931d7a653552_0
  • /data/data/####/986a5bf8adb40402_0 (deleted)
  • /data/data/####/991311957b842bdf_0
  • /data/data/####/993ef5e96d789e71_0
  • /data/data/####/99e1d7f70792b254_0
  • /data/data/####/99f7c61cb702a7c0_0
  • /data/data/####/9aa94c6f444426b7_0
  • /data/data/####/9ae90431d736d10a_0
  • /data/data/####/9c9aa26549875ea0_0
  • /data/data/####/9cba1dd8501e1983_0 (deleted)
  • /data/data/####/9d0b2f1d5439c241_0
  • /data/data/####/9dbff11187e8108c_0
  • /data/data/####/9e1c39eea2574ed1_0
  • /data/data/####/9e4b83e367498ad9_0
  • /data/data/####/9eb4e10b3b8a7243_0
  • /data/data/####/9f0be32c9da25c3f_0
  • /data/data/####/9f33480f50a9a71d_0
  • /data/data/####/9fc3ff3b8445fe1d_0
  • /data/data/####/9fec03cce8e8f8cf_0
  • /data/data/####/9ffab2f1bd640305_0
  • /data/data/####/9ffab2f1bd640305_1
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Cookies-journal (deleted)
  • /data/data/####/Databases.db-journal
  • /data/data/####/KQwmb.dex
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QaRZGLK.dex
  • /data/data/####/QaRZGLK.dex.flock (deleted)
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/YiTUHghs.dex
  • /data/data/####/YiTUHghs.dex.flock (deleted)
  • /data/data/####/a016515926470611_0
  • /data/data/####/a0d85f3c51ddd3ec_0
  • /data/data/####/a0e3f4e8c2461ae8_0
  • /data/data/####/a0f2226241294254_0
  • /data/data/####/a136137dcc3a33f7_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a1c50fb91d9cc9f7_0
  • /data/data/####/a1d8e33cbf64f6ba_0
  • /data/data/####/a2775fffb6a35622_0
  • /data/data/####/a2cab14360c41f27_0
  • /data/data/####/a2cab14360c41f27_1
  • /data/data/####/a2d0a4729b872d83_0
  • /data/data/####/a3b195842bb58a24_0
  • /data/data/####/a4156aa71168bfae_0
  • /data/data/####/a5e1e1869a9fc4c7_0
  • /data/data/####/a5e5c9bc56ae6760_0
  • /data/data/####/a5e5c9bc56ae6760_1
  • /data/data/####/a706aa8e77134cf1_0
  • /data/data/####/a7785c193efc70ce_0
  • /data/data/####/a7d28f177d61332d_0
  • /data/data/####/a8367b0baff899c3_0
  • /data/data/####/a845b97074b9dc56_0
  • /data/data/####/a964c902f1f31db2_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/aa164e2b7cfa8203_0
  • /data/data/####/aa3291c7b2a74ed8_0
  • /data/data/####/aa3ba6e88bbc09f8_0
  • /data/data/####/aa809e580b5a6538_0
  • /data/data/####/aafa430f985740c4_0
  • /data/data/####/ab0e05760903ae30_0
  • /data/data/####/ab287c06ce62a545_0
  • /data/data/####/ac05ee461cbe57ce_0
  • /data/data/####/ac13c387c466680d_0
  • /data/data/####/ac13c387c466680d_s
  • /data/data/####/ac973ee7b6d8febe_0
  • /data/data/####/acac0bc7443eeb43_0
  • /data/data/####/adb0161b1a8010b0_0
  • /data/data/####/addcd47d04ff7243_0
  • /data/data/####/ae3f99f41255397b_0
  • /data/data/####/af2c1538909ebbc6_0
  • /data/data/####/af6e7c637a6be554_0
  • /data/data/####/afc5aa4124d5b42f_0
  • /data/data/####/b03acc385ffbeaf8_0
  • /data/data/####/b12f47b824c35b76_0
  • /data/data/####/b14808a180c50e2e_0
  • /data/data/####/b235f3fe5c0461d0_0
  • /data/data/####/b2575f6ecf380ef9_0
  • /data/data/####/b269dfb8b1b62cba_0
  • /data/data/####/b4d55937d2b947cd_0
  • /data/data/####/b4f84f75cccdcf71_0
  • /data/data/####/b51cc2aeecc2da3e_0
  • /data/data/####/b5d571bcf26b1598_0
  • /data/data/####/b66435cabac5daae_0
  • /data/data/####/b6cba36601b4ff3d_0
  • /data/data/####/b7a7dd547f37d1e5_0
  • /data/data/####/b7a7dd547f37d1e5_s
  • /data/data/####/b7eab6a1bf0a1b98_0
  • /data/data/####/b7eab6a1bf0a1b98_1
  • /data/data/####/b80ffb1664d45d3e_0
  • /data/data/####/b84eab1fcd57fa91_0
  • /data/data/####/b944c4c4192ec264_0
  • /data/data/####/b978a973d373c6f6_0
  • /data/data/####/ba3145df04d10ced_0
  • /data/data/####/bbf93d80e0b6123d_0
  • /data/data/####/bbf93d80e0b6123d_1
  • /data/data/####/bc1ab1ee2c686f9a_0
  • /data/data/####/bcaad22cd8953116_0
  • /data/data/####/bcacdbcca2506799_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bda6d8b9d1d5892a_0
  • /data/data/####/bec5eafc9af51afe_0
  • /data/data/####/bf3c59600da39618_0
  • /data/data/####/bf70cc938786ec6d_0
  • /data/data/####/c0dd57aa85e05435_0
  • /data/data/####/c14ca00c05ad58f4_0
  • /data/data/####/c2c818104e63a95a_0
  • /data/data/####/c357ec67b8c4f214_0
  • /data/data/####/c36f7718439e4bba_0
  • /data/data/####/c483bb5c110dcb06_0
  • /data/data/####/c4a5fcb85d71a657_0
  • /data/data/####/c704fe4e6415e91a_0
  • /data/data/####/c7e3d5e4c9762cd8_0
  • /data/data/####/c823f96331fe4a85_0
  • /data/data/####/c82f8b0dc715c27a_0
  • /data/data/####/c82f8b0dc715c27a_1
  • /data/data/####/c85e98db9a9bd774_0
  • /data/data/####/c97e15e25f96c502_0
  • /data/data/####/c9a326f62ae58475_0
  • /data/data/####/cb85a05460978c01_0
  • /data/data/####/cbdbca0830988ca4_0
  • /data/data/####/cc507114381d8738_0
  • /data/data/####/ccd87caebeca968f_0
  • /data/data/####/cf48f1c8a1d52bd4_0
  • /data/data/####/cf6065bce46db94f_0
  • /data/data/####/cf75ccfee9ae306a_0
  • /data/data/####/com.riwe_preferences.xml
  • /data/data/####/d0bd9d4459ce0ea3_0
  • /data/data/####/d10b3e818e533bbd_0
  • /data/data/####/d146c218d1d5f099_0
  • /data/data/####/d26a8f758e250dc6_0
  • /data/data/####/d3f9c68e0b18830c_0
  • /data/data/####/d3f9c68e0b18830c_1
  • /data/data/####/d46e74f3214fc7ec_0
  • /data/data/####/d4ff65941fd192a3_0
  • /data/data/####/d50e60f8c1e710a3_0
  • /data/data/####/d5691f82a4dc4db7_0
  • /data/data/####/d5a246c3e225dc96_0
  • /data/data/####/d5d654b69620d846_0
  • /data/data/####/d6aca34181a75c3e_0
  • /data/data/####/d6e45931cfff50df_0
  • /data/data/####/d7451026cf0a5e6f_0
  • /data/data/####/d77d655ec40a4bfd_0
  • /data/data/####/d88583e5a868d5d7_0
  • /data/data/####/d8aae916530968ae_0
  • /data/data/####/d8aae916530968ae_1
  • /data/data/####/d957a2264bd7b882_0
  • /data/data/####/d97687764f00595a_0
  • /data/data/####/d9961cf4867cfead_0 (deleted)
  • /data/data/####/d9d408bc58b2d5f5_0
  • /data/data/####/dcd37a536dff139b_0
  • /data/data/####/de179d03083ded78_0
  • /data/data/####/de6fcbc6a2de0973_0 (deleted)
  • /data/data/####/df8797ac0b475a05_0
  • /data/data/####/e130c2ec12bdf103_0
  • /data/data/####/e1f894107c3f2b02_0
  • /data/data/####/e21ea840-c104-42cc-bfca-269d1c843b82.dex
  • /data/data/####/e21ea840-c104-42cc-bfca-269d1c843b82.dex.flock (deleted)
  • /data/data/####/e2dd10de6f143820_0
  • /data/data/####/e369e1303da1bc13_0
  • /data/data/####/e531e242b5b73e91_0
  • /data/data/####/e5bc5778d9d5e8a1_0 (deleted)
  • /data/data/####/e5fe8b083ab58a26_0
  • /data/data/####/e676c97f3d191831_0
  • /data/data/####/e74026a43bc75cbe_0
  • /data/data/####/e89a866587ac4710_0
  • /data/data/####/e8a11e2f9455d902_0 (deleted)
  • /data/data/####/e8eb80236ce3b384_0
  • /data/data/####/e9b458dae1ee7b65_0
  • /data/data/####/ed1244a9b284897e_0
  • /data/data/####/ed2fe8eed05e5c1f_0
  • /data/data/####/ed41ea8d0b831ec2_0
  • /data/data/####/ee4a4b91c8186a83_0
  • /data/data/####/efbe7cfbd30bc239_0
  • /data/data/####/efbe7cfbd30bc239_1
  • /data/data/####/efe125cd42463ffe_0 (deleted)
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f0b22c1f660a8971_0
  • /data/data/####/f0ecfbff-5c66-4497-88a9-60ddeff4cfe2.dex
  • /data/data/####/f0ecfbff-5c66-4497-88a9-60ddeff4cfe2.dex.flock (deleted)
  • /data/data/####/f20d792725487e89_0
  • /data/data/####/f2703691fbaa92bc_0
  • /data/data/####/f28346ea19d3daab_0
  • /data/data/####/f2ab4059d4bd03c9_0
  • /data/data/####/f60af6ce45522b89_0
  • /data/data/####/f60c7249e7f33e40_0
  • /data/data/####/f6ad96105449dbca_0
  • /data/data/####/f94cf0ef6620e077_0
  • /data/data/####/f9daf2828a71dba2_0 (deleted)
  • /data/data/####/faf95043d1de6e49_0
  • /data/data/####/fbf8a40b307f3e53_0
  • /data/data/####/fbf8a40b307f3e53_1
  • /data/data/####/fc0ccd04a21bee74_0
  • /data/data/####/fc31a9fdbbddc1f6_0
  • /data/data/####/fc5e1bcf121e95b9_0
  • /data/data/####/fc79d7e61b559820_0
  • /data/data/####/fd0dc7f4fb4b9836_0
  • /data/data/####/fd9b8611100ca8c7_0
  • /data/data/####/fddbcea3300fb530_0
  • /data/data/####/fe424b794bd9d633_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/fffeb8b818f415c3_0
  • /data/data/####/fffeb8b818f415c3_1
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/the-real-index
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android