マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Android.Locker.17147

Added to the Dr.Web virus database: 2023-07-23

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) ht-####.a####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) 1####.194.163.27:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) pt-sta####.js####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.0) c####.liveja####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) galle####.vcmd####.com:443
  • TCP(TLS/1.0) www.google####.com:443
  • TCP(TLS/1.2) 64.2####.161.102:443
  • TCP(TLS/1.2) www.go####.ru:443
  • UDP www.google####.com:443
DNS requests:
  • ads.traffic####.net
  • c####.liveja####.com
  • cdn1-sm####.ph####.com
  • connect####.gst####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.go####.com
  • m####.traffic####.net
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google####.com
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/0015d056bdd18816_0
  • /data/data/####/00238a8e51d77ab0_0
  • /data/data/####/0117c4d4627d2769_0
  • /data/data/####/0130f9e0aa994de6_0 (deleted)
  • /data/data/####/024657b2eafa53a1_0
  • /data/data/####/0328d609653911a0_0
  • /data/data/####/0507f22726810148_0
  • /data/data/####/05b5f9a52765cee8_0
  • /data/data/####/060127b63d7b9ec9_0 (deleted)
  • /data/data/####/065f0cba87f2ba12_0
  • /data/data/####/087cde5c5d1d418f_0
  • /data/data/####/09f2d9cad8ca7868_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0a61312c3ce937bc_0
  • /data/data/####/0a61312c3ce937bc_s
  • /data/data/####/0a9cfb0b863dc94c_0
  • /data/data/####/0ab4e31af72b8e3a_0
  • /data/data/####/0aea6a37067faebc_0 (deleted)
  • /data/data/####/0cb83a19a59f2cfb_0
  • /data/data/####/0cebe27de571d78f_0
  • /data/data/####/0ef4c9ace5ea1060_0
  • /data/data/####/10b540e81355b00f_0
  • /data/data/####/10e176cd74982ddb_0
  • /data/data/####/10e5f51bbc6c8cec_0
  • /data/data/####/117725669bfdaa61_0
  • /data/data/####/127427304d623ebe_0
  • /data/data/####/12933b7606cf3595_0
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/12fb9b08ec3652ad_0
  • /data/data/####/13b7552804d4ef6a_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/144a4fc60fc7bfb0_0
  • /data/data/####/146d06d154de130f_0
  • /data/data/####/14ea6979bee6e5c7_0
  • /data/data/####/1684b520f7484cb4_0
  • /data/data/####/182ce6cac5651960_0
  • /data/data/####/1a9bb6968f3b3bce_0
  • /data/data/####/1acb6b2b469b772d_0
  • /data/data/####/1b045a55180f753a_0
  • /data/data/####/1d66d9f63899adb9_0
  • /data/data/####/1d7ef95a2e83850a_0
  • /data/data/####/1f89a4680fe98ce0_0
  • /data/data/####/1ff48deb6764628a_0
  • /data/data/####/23db4dc426b90f3c_0
  • /data/data/####/244b25bc48bb2a53_0 (deleted)
  • /data/data/####/24b20b0e69d901ee_0
  • /data/data/####/24b2af68e0140a8b_0
  • /data/data/####/2507661abdcd1208_0
  • /data/data/####/253db71cfe15d4bd_0
  • /data/data/####/26869e0c35f1a120_0
  • /data/data/####/26869e0c35f1a120_1
  • /data/data/####/27669ad753a964fa_0
  • /data/data/####/2779a5f0fee69e65_0
  • /data/data/####/28ec2d8842be25b3_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/29bf5707f6f5e718_0
  • /data/data/####/2ad3f1606b0b34b7_0
  • /data/data/####/2b15b8a09788bd54_0
  • /data/data/####/2be54bdf8c75a050_0
  • /data/data/####/2c0edae7be837739_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d039b4fa1b20466_0
  • /data/data/####/2dff00fc12aa5296_0
  • /data/data/####/2e5aacc64e4c970d_0
  • /data/data/####/2e840d0afc0b7a87_0 (deleted)
  • /data/data/####/2ea9a5e5ff1efba9_0 (deleted)
  • /data/data/####/2f9f6d47e06ae7a8_0
  • /data/data/####/30307017f43d2bf6_0
  • /data/data/####/30307017f43d2bf6_s
  • /data/data/####/3241a2abdc0d9e44_0
  • /data/data/####/3270211283ee525b_0
  • /data/data/####/32805683980df83f_0
  • /data/data/####/32fa546ac56d409f_0
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/33cab104fd3f33cd_0
  • /data/data/####/344262079301aca9_0
  • /data/data/####/345285701b3c74aa_0
  • /data/data/####/347c49bb360e51e8_0 (deleted)
  • /data/data/####/34a522e70ffed0e5_0
  • /data/data/####/34a522e70ffed0e5_1
  • /data/data/####/34b09b4571a6edfc_0
  • /data/data/####/353b27e0a17a260e_0
  • /data/data/####/355b84a63488b3d0_0
  • /data/data/####/36fb9c25e6bd8a37_0
  • /data/data/####/373b91ec79792ecc_0
  • /data/data/####/378a2afc2732d74f_0
  • /data/data/####/37b286b9cf319263_0
  • /data/data/####/37c4c8df92d952a6_0
  • /data/data/####/387bc38bc2f6db91_0
  • /data/data/####/39798ea98ce8f4c8_0
  • /data/data/####/3a140542c7237f9c_0
  • /data/data/####/3c1d9424cb905ba4_0
  • /data/data/####/3c54bea2-5309-4440-b855-95a85dbefbd0.dex
  • /data/data/####/3c54bea2-5309-4440-b855-95a85dbefbd0.dex.flock (deleted)
  • /data/data/####/3d244073c8634bca_0
  • /data/data/####/3d772c103e0dc867_0
  • /data/data/####/3dd7155d93a1fed9_0
  • /data/data/####/3e31a9718ba1e04f_0 (deleted)
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3f94d95af61d6870_0
  • /data/data/####/3ff9bb5d5f3c7b7d_0
  • /data/data/####/3ffb769005f85fce_0
  • /data/data/####/4049e4503d54601c_0
  • /data/data/####/404fca90fcc8b83f_0
  • /data/data/####/404fca90fcc8b83f_1
  • /data/data/####/419f91e18fadd82d_0
  • /data/data/####/41e91095cd7e4f9f_0
  • /data/data/####/42f6b661ebc929f4_0
  • /data/data/####/439e4b15dd3b77e9_0
  • /data/data/####/44817c1c10771430_0
  • /data/data/####/448a1373a92e3548_0
  • /data/data/####/45440df98dd6e1a5_0
  • /data/data/####/4562b51c561a0cdf_0 (deleted)
  • /data/data/####/46419dfa9dc2dba6_0
  • /data/data/####/47b46aa342025d4e_0
  • /data/data/####/48ae36a8f404fed4_0
  • /data/data/####/48ae36a8f404fed4_1
  • /data/data/####/4a31527e82dc072a_0
  • /data/data/####/4afd97f81e073633_0
  • /data/data/####/4b396c1e52a787ff_0
  • /data/data/####/4b3a96b82fef9510_0 (deleted)
  • /data/data/####/4c439dbb1f8e102a_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4ce1ab0580d20077_0
  • /data/data/####/4ce1ab0580d20077_1
  • /data/data/####/4d2b30d41d101827_0
  • /data/data/####/4d3fe6c180fc5f11_0
  • /data/data/####/4df9b66c7c05361a_0
  • /data/data/####/4ecf467cdb6fd081_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/4fb3a298d0046c99_0
  • /data/data/####/4fbdc275b4479546_0
  • /data/data/####/507fb3328c67378d_0
  • /data/data/####/50f182e1c3d7352b_0
  • /data/data/####/514e9e0b3402c746_0
  • /data/data/####/51ca0064b95d273a_0
  • /data/data/####/5217f0ae8b36d15b_0
  • /data/data/####/5232bee9b4c1941d_0
  • /data/data/####/52847b1dd1f67213_0
  • /data/data/####/5308995aae9ad2b4_0
  • /data/data/####/535849720bc80cdf_0
  • /data/data/####/536c5f6e24b60b74_0
  • /data/data/####/5571a526ba1a4974_0
  • /data/data/####/56a9695c7365b681_0
  • /data/data/####/56f802f343ffe37a_0
  • /data/data/####/56fcdd90b12e74fc_0
  • /data/data/####/57db4853d20c9ccb_0
  • /data/data/####/58033c0f8bb108e6_0
  • /data/data/####/583d828828d0fe63_0
  • /data/data/####/5a9a3e4049b3cfb1_0
  • /data/data/####/5aad641a04c25277_0
  • /data/data/####/5ad5155de91cec36_0
  • /data/data/####/5adba85a858ff0eb_0
  • /data/data/####/5b4abc2bedee19e8_0
  • /data/data/####/5bd9bb61c199c6c2_0
  • /data/data/####/5c3b1f3b55250bde_0
  • /data/data/####/5c76e5e9dd7b1d7b_0
  • /data/data/####/5c8124f6b842cc52_0
  • /data/data/####/5c8124f6b842cc52_1
  • /data/data/####/5ca939c7deedcb34_0
  • /data/data/####/5cee73b9175ff7eb_0
  • /data/data/####/5d029deb1c34a90e_0
  • /data/data/####/5d137964c27ac6d7_0 (deleted)
  • /data/data/####/5d30e81a7cb19c62_0
  • /data/data/####/5d683db1ce5d24c3_0
  • /data/data/####/5dd78ea8f97a09c7_0
  • /data/data/####/5f161570-2300-4d4a-b049-975c505b44a0.dex
  • /data/data/####/5f161570-2300-4d4a-b049-975c505b44a0.dex.flock (deleted)
  • /data/data/####/5f6bdd293d4350c7_0
  • /data/data/####/5fd248593718c676_0
  • /data/data/####/6007fa171938b538_0
  • /data/data/####/6008e523a27d0e38_0
  • /data/data/####/604266e7d788468d_0
  • /data/data/####/629969b8324f8e54_0
  • /data/data/####/62c69ebb7f61ba2e_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/6328d3131f2a06de_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/649593d660cdf359_0 (deleted)
  • /data/data/####/6495ac9722e24b59_0
  • /data/data/####/64bd479c901d40a0_0
  • /data/data/####/64ec5af7-284e-444e-a2d7-30656683ae71.dex
  • /data/data/####/64ec5af7-284e-444e-a2d7-30656683ae71.dex.flock (deleted)
  • /data/data/####/65ca9e7b885b6026_0
  • /data/data/####/65e899f2c60321f0_0
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/671ce8fb6cecf26e_0
  • /data/data/####/676d8eeb07d0e07b_0
  • /data/data/####/685bef9421a93086_0
  • /data/data/####/68cdf8b5982e7f72_0
  • /data/data/####/693446326105833f_0
  • /data/data/####/69b38e49ea2f3ee4_0
  • /data/data/####/69dbd3dbfd13959d_0
  • /data/data/####/69dbd3dbfd13959d_1
  • /data/data/####/6b59acc0f40cfab1_0
  • /data/data/####/6c33f72fe5193130_0
  • /data/data/####/6d07df1197fe438b_0
  • /data/data/####/6de9a29248088c84_0
  • /data/data/####/6e4bca30e71b89e8_0
  • /data/data/####/6e60402d447fdb05_0
  • /data/data/####/6f7f1d5dff3c3b7c_0
  • /data/data/####/6fa7c94b04abf43b_0
  • /data/data/####/6fccdbd2b3b10adb_0
  • /data/data/####/710f4cd27a2a3cff_0
  • /data/data/####/7138e072cabef774_0
  • /data/data/####/719511f96d521c07_0
  • /data/data/####/71ccc6b959ad23c3_0
  • /data/data/####/730f2df581f147ce_0
  • /data/data/####/731f4855cd62d098_0
  • /data/data/####/75f462102affdde1_0
  • /data/data/####/765d680c200c2967_0
  • /data/data/####/77a0bd444f198fe6_0
  • /data/data/####/7bd66c27e8ca5f88_0
  • /data/data/####/7c0c3670ce8c6ef4_0
  • /data/data/####/7c0c3670ce8c6ef4_s
  • /data/data/####/7c127aa3e2948cb3_0
  • /data/data/####/7c2123e6b4c0ca44_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c5958a416dea722_0
  • /data/data/####/7c5958a416dea722_1
  • /data/data/####/7c5d27073f907073_0
  • /data/data/####/7c5ddeea4b309c2c_0
  • /data/data/####/7cf7f895ef00b94b_0
  • /data/data/####/7d20f1828d7b1cbe_0
  • /data/data/####/7e23c3e7c659f263_0
  • /data/data/####/7e43e7e970114285_0
  • /data/data/####/7eb391f34ee923c8_0
  • /data/data/####/802f03674d0eea32_0
  • /data/data/####/81297a439c774582_0
  • /data/data/####/820162625478f70c_0
  • /data/data/####/8270bd3a1e4c095d_0
  • /data/data/####/82b084d7f8fa10fc_0
  • /data/data/####/834be64ecc5fe148_0
  • /data/data/####/845fe227232915fc_0
  • /data/data/####/84e6fab5d5bc1334_0
  • /data/data/####/84ec62bc5d24c609_0
  • /data/data/####/855d4806184d2e0a_0
  • /data/data/####/855d7a104d58c708_0
  • /data/data/####/855d7a104d58c708_1
  • /data/data/####/860ec19e381dceb2_0
  • /data/data/####/86d63e10618a7167_0
  • /data/data/####/86ff7e53922beeca_0
  • /data/data/####/8753fa2389d0efa0_0
  • /data/data/####/878c550a4553fb85_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/898f4048f09cc6bd_0
  • /data/data/####/89964467ed2a6283_0
  • /data/data/####/8a4f672baffa4c03_0
  • /data/data/####/8a4f8ebcbacadc6b_0
  • /data/data/####/8a4f8ebcbacadc6b_1
  • /data/data/####/8a7b7cd8986b8d74_0
  • /data/data/####/8c4b981c4ca0f3d9_0
  • /data/data/####/8c72bdab7d01bc3a_0
  • /data/data/####/8ced9904ab99cc7f_0
  • /data/data/####/8cf97e98ffc6ff67_0
  • /data/data/####/8d763ffb38fb9acd_0
  • /data/data/####/8dfacc1be346c160_0
  • /data/data/####/8e6ec62e7106c9b5_0
  • /data/data/####/8ec19d16881d90ca_0
  • /data/data/####/8f0467a8d9c1bdb6_0
  • /data/data/####/8f53b467a2e97d28_0
  • /data/data/####/901f76aaef85a6d4_0
  • /data/data/####/916fb92dc02dea23_0
  • /data/data/####/92b74dc6571d53c6_0
  • /data/data/####/92cbe3eb92ad9266_0
  • /data/data/####/93240e811fc3997e_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/950946f11acb41e1_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/9662ac23c7f2a32e_0
  • /data/data/####/973072b78aaa9b77_0
  • /data/data/####/97886369afec0b00_0
  • /data/data/####/98dc4975d85f24aa_0
  • /data/data/####/99f8202d5a1c0319_0
  • /data/data/####/9a29b26e3147f9de_0
  • /data/data/####/9ae1ed240112f4c8_0
  • /data/data/####/9afc50d78b5a8ebe_0
  • /data/data/####/9c32d203c7deccbb_0 (deleted)
  • /data/data/####/9ccd1997e16007cd_0
  • /data/data/####/9d0b2f1d5439c241_0
  • /data/data/####/9d385bbe5cb4b472_0
  • /data/data/####/9e173ca99acff2f1_0 (deleted)
  • /data/data/####/9eb1a5351ef3ca18_0
  • /data/data/####/9ef6af65c92b4e10_0
  • /data/data/####/9f33480f50a9a71d_0
  • /data/data/####/9faf69d944e61c05_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/KHGfqgMM.dex
  • /data/data/####/KHGfqgMM.dex.flock (deleted)
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/XTkQg.dex
  • /data/data/####/XTkQg.dex.flock (deleted)
  • /data/data/####/a045ebee85271d2b_0
  • /data/data/####/a050780ad9a0b4e3_0
  • /data/data/####/a0d85f3c51ddd3ec_0
  • /data/data/####/a0e85ce8e3c036c4_0 (deleted)
  • /data/data/####/a0f2226241294254_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a2775fffb6a35622_0
  • /data/data/####/a2d0a4729b872d83_0
  • /data/data/####/a379c2bd45df84b9_0
  • /data/data/####/a3f1ff315e7db11a_0
  • /data/data/####/a3f1ff315e7db11a_1
  • /data/data/####/a44922c962a8cae1_0
  • /data/data/####/a4a0896ae5dcb69b_0
  • /data/data/####/a4a86499d9012f9b_0
  • /data/data/####/a55c30def9b9a97b_0
  • /data/data/####/a56d5b7bbde45be6_0
  • /data/data/####/a7c66b9e37d05aab_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/a9f0cfb98317b6c5_0
  • /data/data/####/aa3e9c3bd180fddb_0
  • /data/data/####/aad4be480424f9bb_0
  • /data/data/####/acac0bc7443eeb43_0
  • /data/data/####/acb3b8e4428ede57_0
  • /data/data/####/acb5c109341c6901_0
  • /data/data/####/ad0ab0a3846e9ea6_0
  • /data/data/####/ada50a2f6b89a4a7_0
  • /data/data/####/adb0161b1a8010b0_0
  • /data/data/####/adeb655733e8ed37_0
  • /data/data/####/adf1bd21787c96cf_0
  • /data/data/####/af3ecb04eb139bd8_0
  • /data/data/####/af41344b4fb6d5b6_0 (deleted)
  • /data/data/####/af732ebdc6f86ef7_0
  • /data/data/####/afb2bb27eedeaccf_0
  • /data/data/####/afcc10aba53829f8_0
  • /data/data/####/b003b3d4d04019d6_0
  • /data/data/####/b012f052e5c8655e_0
  • /data/data/####/b0705fdc5a27d44f_0
  • /data/data/####/b0705fdc5a27d44f_1
  • /data/data/####/b0c60a04f4f952b9_0
  • /data/data/####/b0d0ccd1f92c3da2_0
  • /data/data/####/b12f47b824c35b76_0
  • /data/data/####/b13a05f164c96302_0
  • /data/data/####/b2575f6ecf380ef9_0
  • /data/data/####/b2b8782541ec9875_0
  • /data/data/####/b337fc22439c2dbf_0
  • /data/data/####/b3901079ea1077ec_0
  • /data/data/####/b3ef8bb1645fc7c4_0
  • /data/data/####/b418fc573d83e63d_0
  • /data/data/####/b4eef6df3a94cb48_0
  • /data/data/####/b4f84f75cccdcf71_0
  • /data/data/####/b5be872091cbcda8_0
  • /data/data/####/b6184a6cb5692ece_0
  • /data/data/####/b6f52f2db23cd866_0
  • /data/data/####/b7a2794621acf38d_0
  • /data/data/####/b8de74d958316c70_0
  • /data/data/####/b905ed819aa2234d_0
  • /data/data/####/b92e8f4ec0f95787_0
  • /data/data/####/b957ff640d7b461b_0
  • /data/data/####/b964166932e576a4_0
  • /data/data/####/ba3145df04d10ced_0
  • /data/data/####/ba5f6f5ea88be7f7_0
  • /data/data/####/baafc4ea1b0e3b5d_0
  • /data/data/####/bad36ec02516b867_0
  • /data/data/####/bb10749c9fe1d23d_0
  • /data/data/####/bbe9e39d03164f2a_0
  • /data/data/####/bcf796c81f6d8345_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bda0f3c13207ba15_0 (deleted)
  • /data/data/####/bf93ec309865b001_0
  • /data/data/####/bff6dcdc72ad5d41_0
  • /data/data/####/c04962c4c73af5f2_0
  • /data/data/####/c0522cd90a4f40e3_0
  • /data/data/####/c09b11e30f2a8d6e_0
  • /data/data/####/c09b92e57bd2fe2c_0
  • /data/data/####/c0a5ba2d33b289a2_0
  • /data/data/####/c1f29515af696cd3_0
  • /data/data/####/c2e330528887df5e_0
  • /data/data/####/c36f7718439e4bba_0
  • /data/data/####/c39f497a261e4aa5_0
  • /data/data/####/c435155357560e7f_0
  • /data/data/####/c4c95a4a3476bfa9_0
  • /data/data/####/c4ddfa0460d481be_0
  • /data/data/####/c502bb41683a8999_0
  • /data/data/####/c54cde5672f8b7f3_0
  • /data/data/####/c54ee5c118c5000b_0
  • /data/data/####/c56d25793023c081_0 (deleted)
  • /data/data/####/c7242a0617faada9_0
  • /data/data/####/c76a5c1b3cc7aa9c_0
  • /data/data/####/c78cf62a88606672_0
  • /data/data/####/c78cf62a88606672_1
  • /data/data/####/c79eff18c547cd87_0
  • /data/data/####/c7e3d5e4c9762cd8_0
  • /data/data/####/c83e75d9202d2bd2_0
  • /data/data/####/c87c03fa2b476e19_0
  • /data/data/####/cb21163042d8660e_0
  • /data/data/####/cb21163042d8660e_s
  • /data/data/####/cb7c2ba667649b8d_0
  • /data/data/####/cb85a05460978c01_0
  • /data/data/####/ccd4e659f352f663_0
  • /data/data/####/ccdc5c52035e7b54_0
  • /data/data/####/ce26f43ffb6b308e_0
  • /data/data/####/ce4842dd5125338e_0
  • /data/data/####/ce48ac326feff842_0
  • /data/data/####/cf6065bce46db94f_0
  • /data/data/####/cff16a92e5db6c51_0
  • /data/data/####/com.ckhe_preferences.xml
  • /data/data/####/d10b3e818e533bbd_0
  • /data/data/####/d11ab2a640112800_0
  • /data/data/####/d1da459e01307c49_0
  • /data/data/####/d234e383cd45462b_0
  • /data/data/####/d298261e7625dd06_0
  • /data/data/####/d2cabb943f1abb50_0
  • /data/data/####/d2f5e6eed58e2d6d_0
  • /data/data/####/d33d5fd8de91fa7f_0
  • /data/data/####/d33d5fd8de91fa7f_s
  • /data/data/####/d3cc98f208258776_0
  • /data/data/####/d3f9c68e0b18830c_0
  • /data/data/####/d3f9c68e0b18830c_1
  • /data/data/####/d3fb1480804a0837_0
  • /data/data/####/d43b8ad7a8817370_0
  • /data/data/####/d50d42d12eaf166f_0
  • /data/data/####/d5691f82a4dc4db7_0
  • /data/data/####/d5eed6a4131f8ddf_0
  • /data/data/####/d74ae5176699bf22_0
  • /data/data/####/d77d655ec40a4bfd_0
  • /data/data/####/d7a3899ca7df3241_0
  • /data/data/####/d80feaa54722b061_0
  • /data/data/####/d89c621233f08263_0
  • /data/data/####/d97465e6f8f908b1_0
  • /data/data/####/d9c6bb1b9db06796_0 (deleted)
  • /data/data/####/da0ae5f82920d2dc_0
  • /data/data/####/dafcdac2aef95795_0
  • /data/data/####/db10a687dc779be0_0
  • /data/data/####/db10a687dc779be0_1
  • /data/data/####/dc17956fec9ba63f_0
  • /data/data/####/dc2509af90653fb9_0
  • /data/data/####/dcd37a536dff139b_0
  • /data/data/####/dcf9723c0a0c1215_0
  • /data/data/####/dd3e5fb6b6aef45b_0
  • /data/data/####/df29368180c7b429_0
  • /data/data/####/dfb5b1f42679d329_0
  • /data/data/####/dfca5c66340a07d4_0
  • /data/data/####/e030f0d4e3bcc82b_0
  • /data/data/####/e04ecf0bca57320a_0
  • /data/data/####/e0fdf7d86f9d81c4_0
  • /data/data/####/e19dce5d170bf877_0
  • /data/data/####/e20fdce010e30d31_0
  • /data/data/####/e2176d97d57f5049_0
  • /data/data/####/e26395c59895ca28_0
  • /data/data/####/e2abbf2406c9c61a_0
  • /data/data/####/e2dd10de6f143820_0
  • /data/data/####/e35bf22ec48a3094_0
  • /data/data/####/e369e1303da1bc13_0
  • /data/data/####/e45247409a1a612e_0
  • /data/data/####/e68d96b8bb6f7073_0
  • /data/data/####/e693da1c07596457_0
  • /data/data/####/e88a19bbac029a41_0
  • /data/data/####/e896b0f1fc1b6438_0
  • /data/data/####/e89f8e53b515e306_0
  • /data/data/####/e90552391dc62079_0
  • /data/data/####/e9a0dfe405912f2e_0
  • /data/data/####/eb00d06a265ea773_0
  • /data/data/####/eb00d06a265ea773_1
  • /data/data/####/ec3008cc1cd1334e_0
  • /data/data/####/ec9b2aa6c608c702_0
  • /data/data/####/ed10f93cc0815611_0
  • /data/data/####/ed5d6d9ae06b6206_0
  • /data/data/####/ee49e188b9f930d9_0
  • /data/data/####/ee49e188b9f930d9_1
  • /data/data/####/eecfc1d1e7ea7cb0_0
  • /data/data/####/eed091e9fc853d23_0
  • /data/data/####/eed091e9fc853d23_1
  • /data/data/####/ef22c68f3a5f77fd_0
  • /data/data/####/ef7455bff21cea6f_0
  • /data/data/####/ef84b7c19441018c_0
  • /data/data/####/efba7f119d0c2ad1_0
  • /data/data/####/efba7f119d0c2ad1_1
  • /data/data/####/efca0f5fae8e9209_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f1cd06b84aeb5690_0
  • /data/data/####/f1cd06b84aeb5690_1
  • /data/data/####/f2ad077e1b95174f_0
  • /data/data/####/f4c18c6294a07176_0
  • /data/data/####/f51faf95e1da813c_0
  • /data/data/####/f5cdd7f9391f9707_0
  • /data/data/####/f5eaa762420328be_0
  • /data/data/####/f60c7249e7f33e40_0
  • /data/data/####/f6da48230a478421_0 (deleted)
  • /data/data/####/f7c9f819cbb323b3_0
  • /data/data/####/f9008af39836c1ad_0
  • /data/data/####/f94034ebc039a021_0
  • /data/data/####/fbd7086de4ae604f_0
  • /data/data/####/fc31a9fdbbddc1f6_0
  • /data/data/####/fc79d7e61b559820_0
  • /data/data/####/fd2ed5dc79a11bd7_0
  • /data/data/####/fddbcea3300fb530_0
  • /data/data/####/fdfa4ada70a64df5_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/temp-index
  • /data/data/####/the-real-index
  • /data/data/####/wcQYzpLmv.dex
  • /data/data/####/wcQYzpLmv.dex.flock (deleted)
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android