マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Android.Locker.18038

Added to the Dr.Web virus database: 2024-05-31

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.18030
Network activity:
Connects to:
  • UDP(DNS) <Google DNS>
  • TCP(HTTP/1.1) www-lin####.l-####.l-ms####.net:80
  • TCP(TLS/1.0) www.gst####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) p####.l.go####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) ssl.gst####.com:443
  • TCP(TLS/1.0) gmscomp####.google####.com:443
  • TCP(TLS/1.0) i.y####.com:443
  • TCP(TLS/1.0) f####.gst####.com:443
  • TCP(TLS/1.0) 1####.250.150.138:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) p####.go####.com:443
  • TCP(TLS/1.0) yt3.g####.com:443
  • TCP(TLS/1.0) scon####.clie####.go####.com:443
  • TCP(TLS/1.0) lh3.googleu####.com:443
  • TCP(TLS/1.0) clie####.go####.com:443
  • TCP(TLS/1.0) kst####.googleu####.com:443
  • TCP(TLS/1.0) youtub####.l.go####.com:443
  • TCP(TLS/1.0) googl####.g.doublec####.net:443
  • TCP(TLS/1.0) rr1---s####.googlev####.com:443
  • TCP(TLS/1.0) a####.google:443
  • TCP(TLS/1.0) st####.doublec####.net:443
  • TCP(TLS/1.0) rr1---s####.g####.com:443
  • TCP(TLS/1.0) a####.google####.com:443
  • TCP(TLS/1.2) 1####.177.14.99:443
  • TCP(TLS/1.2) gmscomp####.google####.com:443
  • TCP(TLS/1.2) 1####.250.150.138:443
  • TCP(TLS/1.2) clie####.go####.com:443
  • TCP(TLS/1.2) 74.1####.131.94:443
  • UDP rr2---s####.g####.com:443
  • UDP gmscomp####.google####.com:443
DNS requests:
  • a####.go####.com
  • a####.google
  • a####.google####.com
  • and####.google####.com
  • clie####.go####.com
  • f####.google####.com
  • f####.gst####.com
  • gmscomp####.google####.com
  • googl####.g.doublec####.net
  • i.y####.com
  • jn####.google####.com
  • kst####.googleu####.com
  • lh3.googleu####.com
  • p####.go####.com
  • rr1---s####.g####.com
  • rr1---s####.googlev####.com
  • rr2---s####.g####.com
  • s####.g.doublec####.net
  • scon####.clie####.go####.com
  • ssl.gst####.com
  • st####.doublec####.net
  • wellb####.google
  • www.go####.com
  • www.google-####.com
  • www.googlet####.com
  • www.gst####.com
  • www.link####.com
  • www.you####.com
  • yt3.g####.com
HTTP GET requests:
  • www-lin####.l-####.l-ms####.net/shareArticle?mini=true&url=https://about...
File system changes:
Creates the following files:
  • /data/data/####/000003.log
  • /data/data/####/000004.log
  • /data/data/####/000005.bak
  • /data/data/####/000005.ldb
  • /data/data/####/000006.log
  • /data/data/####/000009.log
  • /data/data/####/000010.bak
  • /data/data/####/000010.ldb
  • /data/data/####/000011.log
  • /data/data/####/000013.log
  • /data/data/####/000014.bak
  • /data/data/####/000014.ldb
  • /data/data/####/000017.bak
  • /data/data/####/000017.ldb
  • /data/data/####/02a6a515d8e9dfd9_0
  • /data/data/####/0438dc8034130bf8_0
  • /data/data/####/050703ca64266cfe_0
  • /data/data/####/059160e47f883c1f_0
  • /data/data/####/060646b1331177e9_0
  • /data/data/####/0622f1525097288a_0
  • /data/data/####/064fd63bc87a3d8c_0
  • /data/data/####/067956194b270ba2_0
  • /data/data/####/06c52283a832b165_0
  • /data/data/####/07b40b7e00f8d008_0
  • /data/data/####/0899dedeadece862_0
  • /data/data/####/08ed9484a696fc1c_0
  • /data/data/####/08ed9484a696fc1c_1
  • /data/data/####/08f03c4fd18ef4ce_0
  • /data/data/####/092ad7cc7e03bf64_0
  • /data/data/####/093799d7a5e53eed_0
  • /data/data/####/09d60e713a29f07a_0
  • /data/data/####/0afc59c9b7d439c3_0
  • /data/data/####/0c77ecdce423d4fc_0
  • /data/data/####/0e21e1e1cad67465_0
  • /data/data/####/0e89f1f385507d60_0
  • /data/data/####/0e92320bc7e2aec4_0
  • /data/data/####/0f063cf661c62446_0 (deleted)
  • /data/data/####/0f16e414c5d08744_0
  • /data/data/####/0f7302da6edab38f_0
  • /data/data/####/0f76cbefc6de7c24_0
  • /data/data/####/0f999c4493afa59d_0 (deleted)
  • /data/data/####/100f392b03d2710e_0 (deleted)
  • /data/data/####/10afdffa5702a6ab_0
  • /data/data/####/1156eab61c968149_0
  • /data/data/####/1206a62f37cd7c02_0
  • /data/data/####/124cd6761ec11401_0
  • /data/data/####/12901e44255a8494_0
  • /data/data/####/133df7de954f1e74_0
  • /data/data/####/134a78328beeb562_0
  • /data/data/####/134a78328beeb562_1
  • /data/data/####/1374fd842d30de5e_0
  • /data/data/####/13e5fa6eb2d25a61_0
  • /data/data/####/13f865f3e0a76bef_0
  • /data/data/####/147015865a6fe5fb_0
  • /data/data/####/14b8322c355e4693_0
  • /data/data/####/154a1a64e97db766_0
  • /data/data/####/15edae58e0ba460d_0
  • /data/data/####/1636ac751c417c0a_0
  • /data/data/####/1636ac751c417c0a_1
  • /data/data/####/1677f5dd833d93f6_0
  • /data/data/####/16845251c8565cf3_0
  • /data/data/####/17fdb4ec61c8a9a4_0
  • /data/data/####/190447d68a555ffb_0
  • /data/data/####/190447d68a555ffb_1
  • /data/data/####/1a567d22308a81ab_0
  • /data/data/####/1b43d08388140f48_0 (deleted)
  • /data/data/####/1b6c88978700d620_0
  • /data/data/####/1c3e307c550c18d2_0
  • /data/data/####/1dd105e7e6a485de_0
  • /data/data/####/1e54a267acbd0182_0
  • /data/data/####/1e63e99843fc27b6_0
  • /data/data/####/1e934468d59c455d_0
  • /data/data/####/1efda48ea8362af9_0
  • /data/data/####/1fdeeb5982458906_0
  • /data/data/####/1fdeeb5982458906_1
  • /data/data/####/206f557884bd6646_0
  • /data/data/####/208332b3a5b199c0_0
  • /data/data/####/208332b3a5b199c0_1
  • /data/data/####/2187aa55c3f1dd1f_0
  • /data/data/####/21ea5284060dd1d7_0 (deleted)
  • /data/data/####/2292265cfb7a373c_0
  • /data/data/####/2348c6141d294a0c_0
  • /data/data/####/2431561159572015_0
  • /data/data/####/24eb1c811597add6_0
  • /data/data/####/251721d7b63a8a47_0
  • /data/data/####/25624313fc1f3ce7_0
  • /data/data/####/26e55f24f9a94d58_0
  • /data/data/####/27a07621e49729c3_0
  • /data/data/####/2838e4849056cfc1_0
  • /data/data/####/2939b9b9c00d9c90_0
  • /data/data/####/2939b9b9c00d9c90_1
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/2998106126ee823f_0
  • /data/data/####/29bf72e5c6dcd302_0
  • /data/data/####/29bf72e5c6dcd302_1
  • /data/data/####/29df3afee25a37bc_0
  • /data/data/####/29f46f54f9ace4e5_0
  • /data/data/####/29f46f54f9ace4e5_1
  • /data/data/####/2a0150ca8ba7a341_0
  • /data/data/####/2c61016ab938a262_0
  • /data/data/####/2d47d20c7b716088_0
  • /data/data/####/2d64fbfe0138de74_0 (deleted)
  • /data/data/####/2eef6534472bdd5c_0 (deleted)
  • /data/data/####/2fb85417961003ae_0
  • /data/data/####/3149417730f0fa1b_0
  • /data/data/####/31b48d3b8e619070_0
  • /data/data/####/31b48d3b8e619070_1
  • /data/data/####/327dd25e31887add_0
  • /data/data/####/32d5a0e8f29e0554_0
  • /data/data/####/33ca1a8c0dc96113_0
  • /data/data/####/33ca1a8c0dc96113_1
  • /data/data/####/35bead04b10b3680_0
  • /data/data/####/3693f3dbc068c8d9_0
  • /data/data/####/36b4f936dd9198df_0
  • /data/data/####/36d866fbf8cb2fbd_0
  • /data/data/####/3756a2a498d02024_0 (deleted)
  • /data/data/####/3a9cc9158ca8c0e1_0
  • /data/data/####/3b07662598d9fe8c_0
  • /data/data/####/3b852079fcec248e_0
  • /data/data/####/3cb5fbdd980c9d2d_0
  • /data/data/####/3cb5fbdd980c9d2d_1
  • /data/data/####/3ddae7978bb01617_0
  • /data/data/####/3e0032d3ecdf1d46_0
  • /data/data/####/3e4386d82a37841c_0
  • /data/data/####/3f2698a5d1ccfed5_0
  • /data/data/####/3faa48728f5b5113_0 (deleted)
  • /data/data/####/40054fc8d46766d2_0
  • /data/data/####/429edb9a4e99ff18_0
  • /data/data/####/445b8865f153418f_0
  • /data/data/####/445b8865f153418f_1
  • /data/data/####/4463b63e108294b3_0
  • /data/data/####/4476d81b47490284_0
  • /data/data/####/45a458bdcbe3f941_0
  • /data/data/####/464577081090b9c7_0
  • /data/data/####/4841bf92d278e88e_0
  • /data/data/####/491885bedc4c7d37_0
  • /data/data/####/4a92fc5f98763de8_0
  • /data/data/####/4bfafc3213f8a565_0
  • /data/data/####/4c0c7a79e0191f49_0
  • /data/data/####/4c69883ed20daae5_0
  • /data/data/####/4d45d87518e706dc_0
  • /data/data/####/4e1a6b30bc5cc955_0
  • /data/data/####/4e57c7ed55b6abea_0
  • /data/data/####/4e57c7ed55b6abea_1
  • /data/data/####/4ed9a16c398a4b82_0 (deleted)
  • /data/data/####/4f4e4aae28bdd2e5_0
  • /data/data/####/50e48f74277c66a3_0
  • /data/data/####/50e8bb5577ea26f3_0
  • /data/data/####/521b9989624d62af_0
  • /data/data/####/525c40264d0fc031_0
  • /data/data/####/525c40264d0fc031_1
  • /data/data/####/526fa33409b2a63c_0
  • /data/data/####/52b023cfb543f128_0
  • /data/data/####/551d5c9749ba38b3_0
  • /data/data/####/555caf4bfc2bc819_0
  • /data/data/####/55cf3a7285de66bf_0
  • /data/data/####/55d85fe51e165f48_0 (deleted)
  • /data/data/####/5697abe82b14aa4e_0
  • /data/data/####/5810318dc3816061_0
  • /data/data/####/596abda23a780c3c_0
  • /data/data/####/59b6230d3d7bec91_0
  • /data/data/####/59ce208b4840be03_0
  • /data/data/####/5a1aee59239c0df3_0
  • /data/data/####/5a9b59b417a94945_0
  • /data/data/####/5b5e1ba5b324d210_0
  • /data/data/####/5bc7ef1cd4b353d6_0
  • /data/data/####/5bfd49808a8265aa_0
  • /data/data/####/5c7e8383f155cb5d_0 (deleted)
  • /data/data/####/5ca50924ce3c5c59_0
  • /data/data/####/5ca50924ce3c5c59_0 (deleted)
  • /data/data/####/5d0dc7e642237297_0
  • /data/data/####/5d47fa1529d16f5a_0
  • /data/data/####/5f8e70b2ebfa335b_0
  • /data/data/####/61a477cb1832f305_0
  • /data/data/####/61a477cb1832f305_1
  • /data/data/####/6433a2d3a83fe7d1_0 (deleted)
  • /data/data/####/64571a88f432787b_0
  • /data/data/####/657d255eeb04d0df_0 (deleted)
  • /data/data/####/659835d25fb11dc2_0
  • /data/data/####/65b9fc9b6b7c84a8_0 (deleted)
  • /data/data/####/68a0d2a50c958fc0_0
  • /data/data/####/692d87d232c177d1_0
  • /data/data/####/692d87d232c177d1_1
  • /data/data/####/6a32c8b36b37885f_0
  • /data/data/####/6aa3757c77e4ec58_0
  • /data/data/####/6aa3757c77e4ec58_1
  • /data/data/####/6bed255edf1b0978_0
  • /data/data/####/6c61df2e3dcb2dc2_0
  • /data/data/####/6cf12676ad638724_0
  • /data/data/####/6d52f36b29c9ce6c_0
  • /data/data/####/6d7e033903e1f31d_0
  • /data/data/####/6d8f3d682f1797a6_0
  • /data/data/####/6d8f3d682f1797a6_1
  • /data/data/####/6ded43e0fac58a64_0 (deleted)
  • /data/data/####/6e1eb4413b92cee0_0
  • /data/data/####/70ea0e8d3ef2ff46_0
  • /data/data/####/713f92efd2339266_0
  • /data/data/####/71468ea31f5a7be1_0
  • /data/data/####/71d3fd9134d88535_0
  • /data/data/####/7423f7fb11695bf4_0
  • /data/data/####/74363b0dac0020cd_0
  • /data/data/####/743d68c99fa82299_0
  • /data/data/####/74e3392ddaa2d6ec_0
  • /data/data/####/75a78f9b2ba06212_0
  • /data/data/####/75b0f1836a91d759_0
  • /data/data/####/7635f652ee2fd265_0
  • /data/data/####/7635f652ee2fd265_1
  • /data/data/####/76a8e302c01b1b6e_0
  • /data/data/####/76b0770fc0758676_0
  • /data/data/####/78532ba342d58720_0 (deleted)
  • /data/data/####/78bdd0decee68567_0
  • /data/data/####/78bdd0decee68567_1
  • /data/data/####/78d1903fb1ba9814_0
  • /data/data/####/79fdf3e945ab72d3_0
  • /data/data/####/7afc6b8022653abf_0
  • /data/data/####/7ca61730beb4c36c_0
  • /data/data/####/7ca61730beb4c36c_1
  • /data/data/####/7d383b6ca7dd9b9c_0
  • /data/data/####/7d383b6ca7dd9b9c_1
  • /data/data/####/7d6e457ac8f3358f_0
  • /data/data/####/7d6e457ac8f3358f_1
  • /data/data/####/7fd09ab67efe1d9a_0
  • /data/data/####/7fec5f9248bfaad5_0
  • /data/data/####/7ff37de2e284c18d_0
  • /data/data/####/8294e5d62154c0da_0
  • /data/data/####/8298946aa3d66868_0
  • /data/data/####/82ad331e64cb9060_0
  • /data/data/####/834edec0fff6715e_0
  • /data/data/####/84f1ee9d60d2ca77_0
  • /data/data/####/85038a9b1250321b_0
  • /data/data/####/85f09431f516d2bc_0
  • /data/data/####/860b5d1c0fbe783e_0
  • /data/data/####/864c12aedf31ea33_0
  • /data/data/####/86509fd424110655_0
  • /data/data/####/86509fd424110655_1
  • /data/data/####/87a27e6aa8d8cf15_0
  • /data/data/####/89a80e39b6fab4c9_0
  • /data/data/####/8a067f6e2fed118f_0
  • /data/data/####/8a067f6e2fed118f_1
  • /data/data/####/8a5f98859410dcb0_0
  • /data/data/####/8b128e57b5f1d6ac_0
  • /data/data/####/8caea0161a9b3e39_0 (deleted)
  • /data/data/####/8f1ea0d6567710f9_0
  • /data/data/####/901ddc3bbe5ae563_0 (deleted)
  • /data/data/####/903154dc72756bc2_0
  • /data/data/####/903154dc72756bc2_1
  • /data/data/####/917b413db9baf440_0
  • /data/data/####/91b420ae5c503401_0
  • /data/data/####/91b420ae5c503401_1
  • /data/data/####/93754b2cd16b0cec_0
  • /data/data/####/93a4e6f8868af855_0
  • /data/data/####/954b9483f146bd87_0
  • /data/data/####/968688e95de7c0e0_0
  • /data/data/####/9742f2914b6a5efa_0
  • /data/data/####/977fb959dfa1e506_0
  • /data/data/####/97f2f8e7bb074ab9_0
  • /data/data/####/991225024b0d3ff9_0
  • /data/data/####/9925f88fec3ee75c_0
  • /data/data/####/995164280ba0eb27_0
  • /data/data/####/9986275cd8c6c8b8_0
  • /data/data/####/99d818f58dcae934_0
  • /data/data/####/9aaf41e9b8fbb75f_0
  • /data/data/####/9ac7456e81e4ad59_0 (deleted)
  • /data/data/####/9ac74679c8dcc728_0
  • /data/data/####/9af17b21109c1789_0
  • /data/data/####/9b2b9d164d695d9b_0
  • /data/data/####/9b2ecf42b9ad13c9_0
  • /data/data/####/9b93882585fd9968_0
  • /data/data/####/9c9ed09507c68a65_0
  • /data/data/####/9e4b2b0c85713ced_0
  • /data/data/####/9ea707a5514672c8_0
  • /data/data/####/9ea707a5514672c8_1
  • /data/data/####/9f2bce2bbb228bcb_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/LOCK
  • /data/data/####/LOG
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/SDJjYyNGwhzo.dex
  • /data/data/####/SDJjYyNGwhzo.dex.flock (deleted)
  • /data/data/####/TddvcWYItLPo.dex
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/YDPbAkVdptBD.dex
  • /data/data/####/YDPbAkVdptBD.dex.flock (deleted)
  • /data/data/####/a13f5b09b8da10ab_0
  • /data/data/####/a13f5b09b8da10ab_1
  • /data/data/####/a2a45b07ff11420b_0
  • /data/data/####/a2a45b07ff11420b_1
  • /data/data/####/a3bcda27c384c6d8_0
  • /data/data/####/a5901c88c8c90cb5_0
  • /data/data/####/a5901c88c8c90cb5_1
  • /data/data/####/a5e2dade886c7bb9_0
  • /data/data/####/a629e1031ef10344_0
  • /data/data/####/a6a0b916b3fc550c_0
  • /data/data/####/a75c85616d45e482_0
  • /data/data/####/a8e293138c86d3a9_0
  • /data/data/####/a93d07db9120eedb_0
  • /data/data/####/a9874269c59e96db_0
  • /data/data/####/a9f37e253ce40ad5_0
  • /data/data/####/aa9ee0ecdb5917b9_0
  • /data/data/####/ac39c93be40342f2_0
  • /data/data/####/ac952f81ac50ea31_0
  • /data/data/####/ad4a94fbce9123db_0
  • /data/data/####/ae551790951027ad_0
  • /data/data/####/ae84ffddedad0492_0 (deleted)
  • /data/data/####/aeaf7ddc9f843672_0
  • /data/data/####/aeaf7ddc9f843672_1
  • /data/data/####/afa0effe6a59f4f5_0
  • /data/data/####/afa74b61f9b225ff_0
  • /data/data/####/b1a539049581e685_0
  • /data/data/####/b21f450b9920a5aa_0 (deleted)
  • /data/data/####/b23d09e4a7917a8e_0
  • /data/data/####/b2e67cb839132ba1_0
  • /data/data/####/b368d3fe34a39c37_0
  • /data/data/####/b36d743e6650d0c0_0
  • /data/data/####/b40e211a8a7c14bb_0
  • /data/data/####/b40e211a8a7c14bb_1
  • /data/data/####/b431fa62658efcbc_0
  • /data/data/####/b486e139001e67f8_0 (deleted)
  • /data/data/####/b58ff8b6d12300b3_0
  • /data/data/####/b6bf2814c987d2c2_0
  • /data/data/####/b6d55c1ac4b2dca1_0 (deleted)
  • /data/data/####/b737dc9cc500b197_0
  • /data/data/####/b737dc9cc500b197_1
  • /data/data/####/b79ee2769598fa01_0
  • /data/data/####/b7f3ef52b5b9a54d_0
  • /data/data/####/b806bf6174d57822_0
  • /data/data/####/b92c5b3098a37a27_0
  • /data/data/####/b93ed6b3169dde21_0
  • /data/data/####/bb0b67d7a7a33f9a_0
  • /data/data/####/bb0c2898cb9495e2_0
  • /data/data/####/bbad85655a0dc6ef_0
  • /data/data/####/bbe7a0abb0bc0c8c_0
  • /data/data/####/bbe7a0abb0bc0c8c_1
  • /data/data/####/bc2118e9b2048046_0 (deleted)
  • /data/data/####/bd20a1f3237fc950_0
  • /data/data/####/bd6c6888d7676cf7_0
  • /data/data/####/bd6c6888d7676cf7_1
  • /data/data/####/bf96d2420960bf8e_0
  • /data/data/####/bfcd1a0bdba292c4_0
  • /data/data/####/c18d47e1dcf5b3c3_0
  • /data/data/####/c2154ec375e9bbe6_0
  • /data/data/####/c269f499860f1d26_0
  • /data/data/####/c2a0affe02b43a6a_0
  • /data/data/####/c3a38a64ae9fb43c_0
  • /data/data/####/c3a38a64ae9fb43c_1
  • /data/data/####/c4704c7dbdc0631f_0 (deleted)
  • /data/data/####/c71fb6a1c0a3d737_0
  • /data/data/####/c7f0aac2b9fcc355_0 (deleted)
  • /data/data/####/c8cb69338f620616_0
  • /data/data/####/c91ec75626ffb902_0
  • /data/data/####/ca2102aa87e9c16d_0 (deleted)
  • /data/data/####/cb6bfe10e458291b_0
  • /data/data/####/cb8def0bff89fb5c_0
  • /data/data/####/cbe4186090e48953_0
  • /data/data/####/cca3c0c0071e61d6_0
  • /data/data/####/cd1cd194917eff1f_0
  • /data/data/####/cdd9ef40770b85bf_0
  • /data/data/####/ce7b623221c35f9b_0
  • /data/data/####/ce7b623221c35f9b_1
  • /data/data/####/cece94bfe1e6f24d_0
  • /data/data/####/com.unnki_preferences.xml
  • /data/data/####/d09c3c2dd6ad8c0c_0
  • /data/data/####/d0f7429aa305b9af_0 (deleted)
  • /data/data/####/d11081d7701b0335_0
  • /data/data/####/d3081016549c26da_0
  • /data/data/####/d37e087cee62137b_0
  • /data/data/####/d37e087cee62137b_1
  • /data/data/####/d400a2d5c463331d_0
  • /data/data/####/d400a2d5c463331d_1
  • /data/data/####/d470a76019d02831_0
  • /data/data/####/d47abf4e99759411_0
  • /data/data/####/d4ae4b052f54fa98_0
  • /data/data/####/d4b894033292c1d4_0
  • /data/data/####/d62dee892e1ce64c_0
  • /data/data/####/d6cca4c27721a2ee_0
  • /data/data/####/d7c0384a8cb555ce_0 (deleted)
  • /data/data/####/d848c457b31c120a_0
  • /data/data/####/d870b82407a9aa0b_0
  • /data/data/####/d8c40f11dd01cd8c_0
  • /data/data/####/d960bafde34340b9_0
  • /data/data/####/d988ab0a8897c4fc_0
  • /data/data/####/da434f9a2d3b4c0f_0
  • /data/data/####/dbc830e9e52cc82c_0
  • /data/data/####/dc17c17ebf13fa04_0
  • /data/data/####/dc3048012855e925_0
  • /data/data/####/dd2204104b65b5fa_0
  • /data/data/####/dd2204104b65b5fa_1
  • /data/data/####/dd2ab8d4cc898e27_0
  • /data/data/####/deb3f825253784b4_0 (deleted)
  • /data/data/####/df00135d8daf9cb2_0
  • /data/data/####/df2c18ffd96e2a09_0
  • /data/data/####/dfa8b9b7f74bbb5a_0
  • /data/data/####/dfb04b550f94b669_0
  • /data/data/####/dfc60765e71a3ee2_0
  • /data/data/####/dfc60765e71a3ee2_1
  • /data/data/####/e07383a698e8ef27_0
  • /data/data/####/e07383a698e8ef27_1
  • /data/data/####/e0d2e1ffb983055e_0
  • /data/data/####/e0e247355435470a_0
  • /data/data/####/e11144d140ffc80b_0 (deleted)
  • /data/data/####/e2338aa768c3cd0c_0
  • /data/data/####/e326d2ed8cb7c59c_0
  • /data/data/####/e3af845fc5549e24_0
  • /data/data/####/e49b73494151f26d_0
  • /data/data/####/e7c1a43c8b0cf194_0
  • /data/data/####/e7c1a43c8b0cf194_1
  • /data/data/####/e84cc1b64283a3ac_0
  • /data/data/####/e8dcff6ed69d49ac_0
  • /data/data/####/e9c3d835592e77e0_0
  • /data/data/####/e9c3d835592e77e0_1
  • /data/data/####/ea2138bde052115b_0
  • /data/data/####/ea3b7a79868cbbf9_0
  • /data/data/####/ea62d841caf0e58e_0
  • /data/data/####/ea62d841caf0e58e_1
  • /data/data/####/eaccc6145eebc91d_0
  • /data/data/####/eaccc6145eebc91d_1
  • /data/data/####/ec1c212c7961c584_0
  • /data/data/####/ec5eb732ae541a09_0
  • /data/data/####/ec5eb732ae541a09_1
  • /data/data/####/ed114dfdc02b467d_0
  • /data/data/####/ede7ca38fc8cc6d7_0
  • /data/data/####/edf062f3c642b5e3_0
  • /data/data/####/ee25fb9821106699_0 (deleted)
  • /data/data/####/eeb708cca97aff59_0 (deleted)
  • /data/data/####/eedfb4311029b345_0
  • /data/data/####/eeedee85a1cc61ac_0 (deleted)
  • /data/data/####/eefd47c2f94bb1f6_0
  • /data/data/####/ef0813fa91f034ae_0
  • /data/data/####/f07c219b17cb5f0c_0
  • /data/data/####/f07c219b17cb5f0c_1
  • /data/data/####/f13d26ff9186d8c7_0
  • /data/data/####/f13d26ff9186d8c7_1
  • /data/data/####/f19ffcdee733b5b5_0
  • /data/data/####/f27185831114c858_0
  • /data/data/####/f3329f06499ce4f8_0 (deleted)
  • /data/data/####/f554859bc5ce3d24_0
  • /data/data/####/f554859bc5ce3d24_1
  • /data/data/####/f68c7de2bee7612b_0
  • /data/data/####/f6a4ac604bbb310f_0
  • /data/data/####/f75bb25b20d58db7_0
  • /data/data/####/f79e91556a7f1c46_0
  • /data/data/####/f79e91556a7f1c46_1
  • /data/data/####/f9b5d7e534896597_0
  • /data/data/####/fa35d9c60d510f17_0
  • /data/data/####/fa35d9c60d510f17_1
  • /data/data/####/fa37276f9f2dbccb_0
  • /data/data/####/fab806e0afe4c9b6_0
  • /data/data/####/fbef686b272361f6_0
  • /data/data/####/fc235a1d8d8f4b57_0
  • /data/data/####/fc2c177aa86ae74a_0 (deleted)
  • /data/data/####/fe1233d98d4e3af7_0
  • /data/data/####/ff39a7d95aa28a8b_0 (deleted)
  • /data/data/####/ff3e8a0f99e38a58_0
  • /data/data/####/ff3e8a0f99e38a58_1
  • /data/data/####/ff61ee39c6ceb40f_0
  • /data/data/####/index
  • /data/data/####/index (deleted)
  • /data/data/####/index.txt
  • /data/data/####/isQhkxG.dex
  • /data/data/####/isQhkxG.dex.flock (deleted)
  • /data/data/####/metrics_guid
  • /data/data/####/the-real-index
  • /data/data/####/the-real-index (deleted)
  • /data/misc/####/primary.prof
Miscellaneous:
Accesses camera interface.
Gets information about network.
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android