マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Android.Locker.17160

Added to the Dr.Web virus database: 2023-07-23

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) galle####.vcmd####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) and####.google####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) ei.ph####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) c####.liveja####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) pt-sta####.js####.com:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.2) p####.google####.com:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • and####.google####.com
  • c####.liveja####.com
  • cdn1-sm####.ph####.com
  • connect####.gst####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • gmscomp####.google####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/000001.dbtmp
  • /data/data/####/00238a8e51d77ab0_0
  • /data/data/####/011296c6de43a971_0
  • /data/data/####/01d499bc2f69c353_0
  • /data/data/####/020933333b5251ed_0
  • /data/data/####/048782789bb22c9f_0
  • /data/data/####/04e44d98a656d9fd_0
  • /data/data/####/05e6fbc11d17c9da_0
  • /data/data/####/06fbe21da53bcf46_0
  • /data/data/####/070423cfc5b3e95a_0
  • /data/data/####/07bb39f9c57b9545_0
  • /data/data/####/08917a0b88d0f142_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0a61312c3ce937bc_0
  • /data/data/####/0a61312c3ce937bc_s
  • /data/data/####/0ab4e31af72b8e3a_0
  • /data/data/####/0b041c0a9e10154c_0
  • /data/data/####/0bc24e998cb0ff8d_0
  • /data/data/####/10b540e81355b00f_0
  • /data/data/####/10bc5fde25b94ed1_0
  • /data/data/####/10bc5fde25b94ed1_1
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/121973d229ff2668_0
  • /data/data/####/1286386774e2c11f_0
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/13b7552804d4ef6a_0
  • /data/data/####/13d1b1587015c6b6_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/146d06d154de130f_0
  • /data/data/####/14cc6c83ebafddaf_0
  • /data/data/####/14ea6979bee6e5c7_0
  • /data/data/####/15bdf06e83e99b40_0
  • /data/data/####/15f8932287d876e2_0
  • /data/data/####/1684b520f7484cb4_0
  • /data/data/####/16b8c63a03399464_0
  • /data/data/####/16d186b3a3894127_0
  • /data/data/####/176e456ad06b8f5c_0
  • /data/data/####/18ac60a2f70217ff_0
  • /data/data/####/19ec2081e8aeb6c1_0
  • /data/data/####/1a03b3f7851e1578_0
  • /data/data/####/1a1ef120be058aab_0
  • /data/data/####/1ab263d1ff58a2a3_0
  • /data/data/####/1b045a55180f753a_0
  • /data/data/####/1c1bbf6f796987d8_0
  • /data/data/####/1d31681f96e3c8eb_0
  • /data/data/####/216b358f5e8353a5_0
  • /data/data/####/21986f86f2b2cca7_0
  • /data/data/####/2338abd69fde6486_0
  • /data/data/####/23673bc92c13fbe3_0
  • /data/data/####/24b2af68e0140a8b_0
  • /data/data/####/2507661abdcd1208_0
  • /data/data/####/25412f4cb6c2205f_0
  • /data/data/####/254433d1e71f246c_0
  • /data/data/####/25f3463e1c2b5718_0
  • /data/data/####/2650205273565435_0
  • /data/data/####/26869e0c35f1a120_0
  • /data/data/####/26869e0c35f1a120_1
  • /data/data/####/273cd67096ca9b71_0
  • /data/data/####/28ec2d8842be25b3_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/2a202ef2d5147989_0
  • /data/data/####/2b15b8a09788bd54_0
  • /data/data/####/2b5df817a62f29fd_0
  • /data/data/####/2c7e61fd2ea2adbc_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d2900ab256ce573_0
  • /data/data/####/2f31b58cca14b711_0
  • /data/data/####/30307017f43d2bf6_0
  • /data/data/####/30307017f43d2bf6_s
  • /data/data/####/304f973ca243aa3d_0
  • /data/data/####/3241a2abdc0d9e44_0
  • /data/data/####/32fa546ac56d409f_0
  • /data/data/####/3344a8c9776826ad_0
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/33a8d6426ad0400d_0
  • /data/data/####/33cab104fd3f33cd_0
  • /data/data/####/344262079301aca9_0
  • /data/data/####/34655dcc14c0978d_0
  • /data/data/####/34a522e70ffed0e5_0
  • /data/data/####/34a522e70ffed0e5_1
  • /data/data/####/355b84a63488b3d0_0
  • /data/data/####/37c4c8df92d952a6_0
  • /data/data/####/387bc38bc2f6db91_0
  • /data/data/####/38b3b93027851572_0
  • /data/data/####/38ff89180c8f8f8a_0 (deleted)
  • /data/data/####/3a140542c7237f9c_0
  • /data/data/####/3b10ccc4c338aadf_0
  • /data/data/####/3b1be2d497c0f0ca_0
  • /data/data/####/3c075fea5069ef81_0
  • /data/data/####/3c30617dd5d248d2_0
  • /data/data/####/3e8b1b96a74d2083_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3ee5d30f2cb607c0_0
  • /data/data/####/3f9c592d9f7efa22_0
  • /data/data/####/3ffb769005f85fce_0
  • /data/data/####/4049e4503d54601c_0
  • /data/data/####/404fca90fcc8b83f_0
  • /data/data/####/404fca90fcc8b83f_1
  • /data/data/####/411cc488e9122696_0
  • /data/data/####/41201213438aae6d_0
  • /data/data/####/42f6b661ebc929f4_0
  • /data/data/####/439e4b15dd3b77e9_0
  • /data/data/####/43add253d3196048_0
  • /data/data/####/43d585f5540e15ef_0 (deleted)
  • /data/data/####/4481699d00a5de94_0
  • /data/data/####/44817c1c10771430_0
  • /data/data/####/45898d87073d590c_0
  • /data/data/####/45f21be55d998367_0
  • /data/data/####/46002f6fe6e2f56e_0
  • /data/data/####/46419dfa9dc2dba6_0
  • /data/data/####/468e01c1fcb8bd71_0
  • /data/data/####/47b46aa342025d4e_0
  • /data/data/####/4879a86abe4e4f66_0
  • /data/data/####/48ae36a8f404fed4_0
  • /data/data/####/48ae36a8f404fed4_1
  • /data/data/####/4985820d52e58017_0
  • /data/data/####/4a31527e82dc072a_0
  • /data/data/####/4a89fdaf34446b94_0
  • /data/data/####/4c9a4a5c82be9e02_0 (deleted)
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4ce1ab0580d20077_0
  • /data/data/####/4ce1ab0580d20077_1
  • /data/data/####/4d2b30d41d101827_0
  • /data/data/####/4d3fe6c180fc5f11_0
  • /data/data/####/4dd25cb18609e6e0_0
  • /data/data/####/4e059e79a6804a89_0
  • /data/data/####/4e14579f4eb95522_0 (deleted)
  • /data/data/####/4e35f9de5a7c1eba_0
  • /data/data/####/4e4f62cc7d6175f4_0 (deleted)
  • /data/data/####/4ecf467cdb6fd081_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/4fb3a298d0046c99_0
  • /data/data/####/50e7bc92c18a17e0_0
  • /data/data/####/514e9e0b3402c746_0
  • /data/data/####/51c03a86af60e5c7_0
  • /data/data/####/51ca0064b95d273a_0
  • /data/data/####/5217f0ae8b36d15b_0
  • /data/data/####/5232bee9b4c1941d_0
  • /data/data/####/52847b1dd1f67213_0
  • /data/data/####/530083c80e4d0b1c_0
  • /data/data/####/530e1859aa657b7c_0
  • /data/data/####/535849720bc80cdf_0
  • /data/data/####/5571a526ba1a4974_0
  • /data/data/####/5614eb79a5b0e38e_0
  • /data/data/####/566e470e01f892d5_0
  • /data/data/####/578c66fc8e020407_0 (deleted)
  • /data/data/####/58033c0f8bb108e6_0
  • /data/data/####/583d828828d0fe63_0
  • /data/data/####/587e74e602cff877_0
  • /data/data/####/5a44e2418a965539_0
  • /data/data/####/5adba85a858ff0eb_0
  • /data/data/####/5b5c04bc724e77a9_0
  • /data/data/####/5bd9bb61c199c6c2_0
  • /data/data/####/5c599f4a04756482_0
  • /data/data/####/5c8124f6b842cc52_0
  • /data/data/####/5c8124f6b842cc52_1
  • /data/data/####/5cb6dfce41c3a318_0
  • /data/data/####/5cdc2048bff63a2e_0
  • /data/data/####/5ce577687323a903_0
  • /data/data/####/5cee73b9175ff7eb_0
  • /data/data/####/5d30e81a7cb19c62_0
  • /data/data/####/5d83ed12c1ba5484_0
  • /data/data/####/5dd78ea8f97a09c7_0
  • /data/data/####/5e8285f970616ba5_0
  • /data/data/####/5ef6cb363c3bbe2d_0
  • /data/data/####/60560c5a4803c975_0
  • /data/data/####/60639ce8b8e958a7_0
  • /data/data/####/6086f05f872a4072_0
  • /data/data/####/61f83d0b79bbd419_0
  • /data/data/####/629969b8324f8e54_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/637b76c631e083ed_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/65ca9e7b885b6026_0
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/671ce8fb6cecf26e_0
  • /data/data/####/675f7034f1b9533f_0
  • /data/data/####/685bef9421a93086_0
  • /data/data/####/69dbd3dbfd13959d_0
  • /data/data/####/69dbd3dbfd13959d_1
  • /data/data/####/69fcefa0219dbad7_0
  • /data/data/####/6abc317ab565b304_0
  • /data/data/####/6c98efda04df9170_0
  • /data/data/####/6ca8e75da5747077_0
  • /data/data/####/6cf40482e8e69783_0
  • /data/data/####/6d395d16e7c678a1_0
  • /data/data/####/6d658f0afb5f9d07_0
  • /data/data/####/6d6ae115068b0c8c_0
  • /data/data/####/6edc0726e108ad96_0
  • /data/data/####/6f7f1d5dff3c3b7c_0
  • /data/data/####/6fd1cc4e719ee8bc_0
  • /data/data/####/70206293812224ce_0
  • /data/data/####/70206293812224ce_s
  • /data/data/####/7090437bb7bb4bac_0 (deleted)
  • /data/data/####/70ff46eea6e74993_0 (deleted)
  • /data/data/####/71795e1fc4b0df1e_0
  • /data/data/####/71ccc6b959ad23c3_0
  • /data/data/####/723081c927855ab5_0
  • /data/data/####/723081c927855ab5_1
  • /data/data/####/72cd4501977cab30_0
  • /data/data/####/730f2df581f147ce_0
  • /data/data/####/731f4855cd62d098_0
  • /data/data/####/752b33c861a6824c_0
  • /data/data/####/75e46a93df8d7816_0
  • /data/data/####/75f462102affdde1_0
  • /data/data/####/75fff9f4906ad7b7_0
  • /data/data/####/7777c7d6494f0cbc_0 (deleted)
  • /data/data/####/788e2bd6919e51b1_0
  • /data/data/####/79b075f4bb0bfc53_0
  • /data/data/####/7aaf58be5f153874_0
  • /data/data/####/7ba3e9939538900c_0
  • /data/data/####/7c0c3670ce8c6ef4_0
  • /data/data/####/7c0c3670ce8c6ef4_s
  • /data/data/####/7c0ca9632c479332_0
  • /data/data/####/7c349865d642f199_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c5958a416dea722_0
  • /data/data/####/7c5958a416dea722_1
  • /data/data/####/7c840dcbab62e783_0
  • /data/data/####/7cf7f895ef00b94b_0
  • /data/data/####/7d20f1828d7b1cbe_0
  • /data/data/####/7d5452cfc1b2c8d3_0
  • /data/data/####/7dac69fb6abee99e_0
  • /data/data/####/7e23c3e7c659f263_0
  • /data/data/####/7e43e7e970114285_0
  • /data/data/####/7e5e2711735028aa_0
  • /data/data/####/7e75b8e8e17e5881_0
  • /data/data/####/7e75b8e8e17e5881_s
  • /data/data/####/7fed6622befd375e_0 (deleted)
  • /data/data/####/810e5cdf8e5d2d41_0
  • /data/data/####/820162625478f70c_0
  • /data/data/####/82b084d7f8fa10fc_0
  • /data/data/####/84129cc1e5e8bc06_0 (deleted)
  • /data/data/####/84ec62bc5d24c609_0
  • /data/data/####/855d7a104d58c708_0
  • /data/data/####/855d7a104d58c708_1
  • /data/data/####/86d3b46624781641_0
  • /data/data/####/86ff7e53922beeca_0
  • /data/data/####/878c550a4553fb85_0
  • /data/data/####/87b7a1b81f854640_0
  • /data/data/####/87cfe4b0f61a67ab_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/88af03779cec9b30_0
  • /data/data/####/88fa35acfc6ca020_0
  • /data/data/####/8942892aca09c28b_0
  • /data/data/####/898f4048f09cc6bd_0
  • /data/data/####/89a4e3cd2beb7d42_0
  • /data/data/####/89dd395762304990_0 (deleted)
  • /data/data/####/8a4f8ebcbacadc6b_0
  • /data/data/####/8a4f8ebcbacadc6b_1
  • /data/data/####/8a7b7cd8986b8d74_0
  • /data/data/####/8ac7579fd0e7bbe5_0
  • /data/data/####/8ac7579fd0e7bbe5_1
  • /data/data/####/8c18ead9017548c4_0
  • /data/data/####/8dfacc1be346c160_0
  • /data/data/####/8e745a5deaafb374_0
  • /data/data/####/8ec19d16881d90ca_0
  • /data/data/####/8ef391bca04077f9_0
  • /data/data/####/8f0467a8d9c1bdb6_0
  • /data/data/####/8f3ccab5941ac27f_0 (deleted)
  • /data/data/####/8f95402b800fd8e9_0
  • /data/data/####/8fd2f70bbfccfc6a_0
  • /data/data/####/913e556374075ac5_0
  • /data/data/####/917c0dc0b619ae04_0
  • /data/data/####/91b0c31e0be65530_0
  • /data/data/####/92cbe3eb92ad9266_0
  • /data/data/####/93a78e2022ab7c5f_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/94940f2301d41956_0
  • /data/data/####/950946f11acb41e1_0
  • /data/data/####/9540f5906bc33816_0
  • /data/data/####/95b77c950e22c7a6_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/970699dfcfb59ff1_0
  • /data/data/####/970a59239714521a_0
  • /data/data/####/97886369afec0b00_0
  • /data/data/####/981ce6cfe5d08504_0 (deleted)
  • /data/data/####/98dc4975d85f24aa_0
  • /data/data/####/9afc50d78b5a8ebe_0
  • /data/data/####/9b31fabf2cfe6407_0
  • /data/data/####/9ccd1997e16007cd_0
  • /data/data/####/9d0b2f1d5439c241_0
  • /data/data/####/9d385bbe5cb4b472_0
  • /data/data/####/9e635611ec969e75_0
  • /data/data/####/9ef6af65c92b4e10_0
  • /data/data/####/9f33480f50a9a71d_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/SKdTznPM.dex
  • /data/data/####/SKdTznPM.dex.flock (deleted)
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a045ebee85271d2b_0
  • /data/data/####/a0d85f3c51ddd3ec_0
  • /data/data/####/a140b584aa1c4b18_0
  • /data/data/####/a15dc15cabe658a8_0
  • /data/data/####/a1764250d7879f4a_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a1de6a4ab6f56e95_0
  • /data/data/####/a2b023ae7cf91c8f_0
  • /data/data/####/a32045a4d1825084_0
  • /data/data/####/a379c2bd45df84b9_0
  • /data/data/####/a39a6bba9829a61c_0
  • /data/data/####/a3f1ff315e7db11a_0
  • /data/data/####/a3f1ff315e7db11a_1
  • /data/data/####/a44922c962a8cae1_0
  • /data/data/####/a4a0896ae5dcb69b_0
  • /data/data/####/a56d5b7bbde45be6_0
  • /data/data/####/a67964a20977faa9_0 (deleted)
  • /data/data/####/a7c66b9e37d05aab_0
  • /data/data/####/a87b2cf7ed4d1182_0
  • /data/data/####/a9d496292d08c4e9_0 (deleted)
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/a9f0cfb98317b6c5_0
  • /data/data/####/a9f229848c1f9f23_0
  • /data/data/####/aa3e9c3bd180fddb_0
  • /data/data/####/ac13c387c466680d_0
  • /data/data/####/ac13c387c466680d_s
  • /data/data/####/acb5c109341c6901_0
  • /data/data/####/acb919fc0d3f9e02_0
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/af55b66b2853a8e2_0
  • /data/data/####/af55b66b2853a8e2_1
  • /data/data/####/afb2bb27eedeaccf_0
  • /data/data/####/b003b3d4d04019d6_0
  • /data/data/####/b0705fdc5a27d44f_0
  • /data/data/####/b0705fdc5a27d44f_1
  • /data/data/####/b0c60a04f4f952b9_0
  • /data/data/####/b0c674793c9525f1_0
  • /data/data/####/b12f47b824c35b76_0
  • /data/data/####/b15eb6c1ebdd2aa8_0
  • /data/data/####/b25bf13fce8e97ce_0
  • /data/data/####/b2aa80c2b0b7e00d_0
  • /data/data/####/b2b45069752caa03_0
  • /data/data/####/b32bda7bd06ff1e1_0
  • /data/data/####/b34d51f02d2dbc7a_0
  • /data/data/####/b42b30220d0d103b_0
  • /data/data/####/b4eef6df3a94cb48_0
  • /data/data/####/b4f84f75cccdcf71_0
  • /data/data/####/b6fb5cb10642266c_0
  • /data/data/####/b7d371afe19adec7_0
  • /data/data/####/b895d57e3460980c_0
  • /data/data/####/b8a3c4c73d0e8747_0
  • /data/data/####/b8b3ce37a6f55feb_0
  • /data/data/####/b8de74d958316c70_0
  • /data/data/####/b905ed819aa2234d_0
  • /data/data/####/b90b75d1f5746cb8_0
  • /data/data/####/b917e1bda1f88a7a_0
  • /data/data/####/b92e8f4ec0f95787_0
  • /data/data/####/b957ff640d7b461b_0
  • /data/data/####/baafc4ea1b0e3b5d_0
  • /data/data/####/bad36ec02516b867_0
  • /data/data/####/baf76aefe0b33694_0
  • /data/data/####/bb0902e668b94f28_0
  • /data/data/####/bb58f9422331d36f_0
  • /data/data/####/bb9b5423852ee814_0
  • /data/data/####/bbea203077ac6d2d_0
  • /data/data/####/bc157e730f3bd184_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/be12c253073e3b40_0
  • /data/data/####/be7f1454500497dc_0
  • /data/data/####/be845e8e383a2b78_0
  • /data/data/####/c0522cd90a4f40e3_0
  • /data/data/####/c05dbbd8067dce6b_0
  • /data/data/####/c102eca2c91ea0f6_0
  • /data/data/####/c13047df136d31a3_0
  • /data/data/####/c13b4b1dac5804dc_0
  • /data/data/####/c36352d7d8250758_0
  • /data/data/####/c39f497a261e4aa5_0
  • /data/data/####/c431cebf8d3021db_0
  • /data/data/####/c435155357560e7f_0
  • /data/data/####/c4c95a4a3476bfa9_0
  • /data/data/####/c4d7296ddb95928d_0
  • /data/data/####/c502bb41683a8999_0
  • /data/data/####/c5667f8908894281_0
  • /data/data/####/c571c0bbb1a856fb_0
  • /data/data/####/c6a1ff306393fa5d_0
  • /data/data/####/c6e848954fa4816b_0
  • /data/data/####/c7242a0617faada9_0
  • /data/data/####/c78cf62a88606672_0
  • /data/data/####/c7a0b6d51b29adbb_0 (deleted)
  • /data/data/####/c7e3d5e4c9762cd8_0
  • /data/data/####/ca8dfc3a853091da_0
  • /data/data/####/cb21163042d8660e_0
  • /data/data/####/cb21163042d8660e_s
  • /data/data/####/cb7c2ba667649b8d_0
  • /data/data/####/cb85a05460978c01_0
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/ccd4e659f352f663_0
  • /data/data/####/cdd3a7d2fb32249c_0
  • /data/data/####/ce24b48a4c43124d_0
  • /data/data/####/ce26f43ffb6b308e_0
  • /data/data/####/ce48ac326feff842_0
  • /data/data/####/ced59743599d65b3_0
  • /data/data/####/cf6065bce46db94f_0
  • /data/data/####/com.cqtjzlvd_preferences.xml
  • /data/data/####/d0a74471951bdf1d_0
  • /data/data/####/d1b24b1e189dd435_0
  • /data/data/####/d1da459e01307c49_0
  • /data/data/####/d208f23db518075f_0
  • /data/data/####/d33d5fd8de91fa7f_0
  • /data/data/####/d33d5fd8de91fa7f_s
  • /data/data/####/d3cc98f208258776_0
  • /data/data/####/d3f9c68e0b18830c_0
  • /data/data/####/d3f9c68e0b18830c_1
  • /data/data/####/d4a0f59d3ed06c50_0
  • /data/data/####/d62a6013ffaabc56_0
  • /data/data/####/d67f30d503ac8486_0
  • /data/data/####/d77d655ec40a4bfd_0
  • /data/data/####/d80feaa54722b061_0
  • /data/data/####/da03fcca7f754def_0
  • /data/data/####/da1a2d40a30f4e47_0
  • /data/data/####/da4af38e3b0901ac_0
  • /data/data/####/da96ff9599c8ad50_0
  • /data/data/####/db10a687dc779be0_0
  • /data/data/####/db10a687dc779be0_1
  • /data/data/####/db993b77586946c7_0
  • /data/data/####/dc8cd5528f116fe5_0
  • /data/data/####/de110a1fe93c2905_0
  • /data/data/####/df29368180c7b429_0
  • /data/data/####/e0bc45fcd726c23a_0
  • /data/data/####/e0d83eb4e6cd321a_0
  • /data/data/####/e1578edf24fb29d6_0
  • /data/data/####/e19dce5d170bf877_0
  • /data/data/####/e20fdce010e30d31_0
  • /data/data/####/e390105b29957971_0
  • /data/data/####/e45247409a1a612e_0
  • /data/data/####/e5b9038f7f1f2bd8_0
  • /data/data/####/e601314ff689d80c_0 (deleted)
  • /data/data/####/e65aedfb7e40afa9_0
  • /data/data/####/e70ae87929e07ac0_0
  • /data/data/####/e889ed8351d178fc_0 (deleted)
  • /data/data/####/e89b5a6ebffb94bc_0
  • /data/data/####/e9767c8b01d94457_0
  • /data/data/####/e98a297c76fd0bc0_0
  • /data/data/####/ea56da302845a9ef_0
  • /data/data/####/eac6770594f25937_0
  • /data/data/####/eb00d06a265ea773_0
  • /data/data/####/eb00d06a265ea773_1
  • /data/data/####/eb3a645e5b272c0c_0
  • /data/data/####/ec95d8566ebd3b5f_0
  • /data/data/####/ecacdb6b8749d885_0
  • /data/data/####/ecf19c2603560ad9_0
  • /data/data/####/ed10f93cc0815611_0
  • /data/data/####/ed1e59d6e3822b29_0
  • /data/data/####/ee2bbcb485f4b1a1_0
  • /data/data/####/ee49e188b9f930d9_0
  • /data/data/####/ee49e188b9f930d9_1
  • /data/data/####/eed091e9fc853d23_0
  • /data/data/####/eed091e9fc853d23_1
  • /data/data/####/efba7f119d0c2ad1_0
  • /data/data/####/efba7f119d0c2ad1_1
  • /data/data/####/effd37cf07a9b470_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f1a1da9db0c648eb_0
  • /data/data/####/f1cd06b84aeb5690_0
  • /data/data/####/f1cd06b84aeb5690_1
  • /data/data/####/f26704702001957a_0
  • /data/data/####/f421df9c55205ca0_0
  • /data/data/####/f4a7f662183dd5e5_0
  • /data/data/####/f51faf95e1da813c_0
  • /data/data/####/f545d422c10f0fe5_0
  • /data/data/####/f5cdd7f9391f9707_0
  • /data/data/####/f60c7249e7f33e40_0
  • /data/data/####/f9008af39836c1ad_0
  • /data/data/####/fWHBd.dex
  • /data/data/####/fa19819468e67010_0
  • /data/data/####/fa89d615c9399940_0
  • /data/data/####/fbd7086de4ae604f_0
  • /data/data/####/fcfca2e8189d7e66_0
  • /data/data/####/fddbcea3300fb530_0
  • /data/data/####/fe4e60b68b5fe984_0 (deleted)
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff03f34d351f9813_0
  • /data/data/####/ff2efaac62bf01c5_0
  • /data/data/####/index
  • /data/data/####/kJepMbdQH.dex
  • /data/data/####/kJepMbdQH.dex.flock (deleted)
  • /data/data/####/metrics_guid
  • /data/data/####/temp-index
  • /data/data/####/the-real-index
  • /data/data/####/xEuajixmc.dex
  • /data/data/####/xEuajixmc.dex.flock (deleted)
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android