La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Android.Locker.17896

Aggiunto al database dei virus Dr.Web: 2024-02-26

La descrizione è stata aggiunta:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.1474.origin
Network activity:
Connects to:
  • UDP(DNS) <Google DNS>
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) 64.2####.162.101:443
  • TCP(TLS/1.0) rr2---s####.g####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) rr18---####.g####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) ei.ph####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) u####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) and####.google####.com:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) connect####.gst####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.2) p####.google####.com:443
  • UDP p####.google####.com:443
DNS requests:
  • analy####.go####.com
  • and####.a####.go####.com
  • and####.google####.com
  • cdn1-sm####.ph####.com
  • cdn1d-s####.ph####.com
  • connect####.gst####.com
  • ei.ph####.com
  • gmscomp####.google####.com
  • h####.por####.com
  • m####.traffic####.net
  • p####.google####.com
  • rr18---####.g####.com
  • rr2---s####.g####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • ss.ph####.com
  • sto####.google####.com
  • u####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/004e675bd922c684_0
  • /data/data/####/004e675bd922c684_1
  • /data/data/####/00bba791c2959bb8_0
  • /data/data/####/01c4d65899b16a21_0
  • /data/data/####/01c7164db0450c75_0
  • /data/data/####/01c7164db0450c75_1
  • /data/data/####/02118e9e5f3130f0_0
  • /data/data/####/0249d5dfe0407bae_0
  • /data/data/####/0249d5dfe0407bae_1
  • /data/data/####/037a4ee51e30925c_0
  • /data/data/####/0380711e60c735da_0
  • /data/data/####/0513f1a744bb9155_0
  • /data/data/####/0564fe0abcf9cfb4_0
  • /data/data/####/0611f6638588fa22_0
  • /data/data/####/0739a5996e5197b5_0
  • /data/data/####/091770d4d798b659_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0ad694a8f651acb9_0
  • /data/data/####/0aed9c16f3629801_0
  • /data/data/####/0beaa793be39225a_0
  • /data/data/####/1043e2d122ceef47_0
  • /data/data/####/109fb5aa1c2aeb63_0
  • /data/data/####/10c7cf8e369279cf_0
  • /data/data/####/115aca1ef4fa8e4c_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/12955e0edc8ea8ef_0
  • /data/data/####/12955e0edc8ea8ef_1
  • /data/data/####/12d65980f6427640_0
  • /data/data/####/12d65980f6427640_1
  • /data/data/####/143f8d1599d96c5a_0
  • /data/data/####/1575267bfede8df6_0
  • /data/data/####/15b5420f9fc6e24f_0
  • /data/data/####/18c77bda692a3513_0
  • /data/data/####/1bbce5d45ed5fe5a_0
  • /data/data/####/1fda99d0c2eaf8cb_0
  • /data/data/####/1fda99d0c2eaf8cb_1
  • /data/data/####/212c0f1c29ce3ec2_0
  • /data/data/####/21ca660c5be7b891_0
  • /data/data/####/23a3cefaaa3334eb_0
  • /data/data/####/2505f1bdf1528e50_0
  • /data/data/####/25553bdabf0c6377_0
  • /data/data/####/266de686bd22d4b7_0
  • /data/data/####/28b03359107e5449_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/2be54bdf8c75a050_0
  • /data/data/####/2c5257544019a561_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d109263bae84b67_0
  • /data/data/####/2ddb6fe948a6a9bf_0
  • /data/data/####/2ddb6fe948a6a9bf_1
  • /data/data/####/2e1db4164ee011b1_0
  • /data/data/####/2ed4068a7d325522_0
  • /data/data/####/2ee0996544e39829_0
  • /data/data/####/2f9bdeec87ceb36d_0
  • /data/data/####/30b0b20d26dabdd1_0
  • /data/data/####/31ac2a9bfd57ab89_0
  • /data/data/####/3309cdb0b9a1566b_0 (deleted)
  • /data/data/####/33527aa092fd8ca8_0
  • /data/data/####/34a02d9adec4e23a_0
  • /data/data/####/34a02d9adec4e23a_1
  • /data/data/####/364a73326704d328_0
  • /data/data/####/3925ecd083066232_0
  • /data/data/####/39a155dd4e6fb6a0_0
  • /data/data/####/39bc83969d9b21f3_0
  • /data/data/####/3d92b2214856f91f_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3fe220fcb989b0cd_0
  • /data/data/####/3fe220fcb989b0cd_1
  • /data/data/####/41c45d422c44b57f_0
  • /data/data/####/434e989373eda1f0_0
  • /data/data/####/44c041a666eba939_0
  • /data/data/####/4691779abb269a8c_0
  • /data/data/####/46ec7bd4389abac5_0
  • /data/data/####/484cbfc2acf20a56_0
  • /data/data/####/4964f155836b7037_0
  • /data/data/####/4bff818002da8b8e_0
  • /data/data/####/4bffa1aad376a439_0
  • /data/data/####/4c22f538a4569582_0
  • /data/data/####/4c22f538a4569582_1
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4cd6c2356c9363e2_0
  • /data/data/####/4d99301168d90277_0
  • /data/data/####/4d99301168d90277_1
  • /data/data/####/4dec2ee240c75beb_0
  • /data/data/####/4ed0070704a56e97_0
  • /data/data/####/4f9f0a4818f2e226_0
  • /data/data/####/508132a2c6db4bda_0
  • /data/data/####/50eeaf1dce64976f_0
  • /data/data/####/5107d8b8b3e1fd3c_0
  • /data/data/####/51601d3d55b76398_0
  • /data/data/####/51aab144fd4c72aa_0
  • /data/data/####/521c0051f70b2629_0
  • /data/data/####/52bace70495cd8db_0
  • /data/data/####/52f2120d541786d8_0
  • /data/data/####/53fa88b826c84f86_0
  • /data/data/####/54f26f48eab0d5fc_0
  • /data/data/####/56c5d77ae254a86f_0
  • /data/data/####/58cf99f11ed048c7_0
  • /data/data/####/58d73f264c5b99da_0
  • /data/data/####/597f8fd167a089a5_0
  • /data/data/####/5b86313417ca7d85_0
  • /data/data/####/5b9766733cac3a11_0
  • /data/data/####/5e3da55ba71e9ed0_0
  • /data/data/####/5f161c2ab3edf031_0
  • /data/data/####/5f9d9f0c65e6e628_0
  • /data/data/####/5fd7b2682d32925b_0
  • /data/data/####/602da745c0b6e717_0
  • /data/data/####/602da745c0b6e717_1
  • /data/data/####/6061fbc40bbb7eee_0
  • /data/data/####/61a537e0025801b5_0
  • /data/data/####/621d0e64af6d9a1b_0
  • /data/data/####/62693f7d82f519ba_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/62f41d8a03f269ec_0
  • /data/data/####/6372f1f3023957f9_0
  • /data/data/####/64daf476db30ac03_0
  • /data/data/####/66ca8a2645ffc445_0
  • /data/data/####/66f53875ef135f74_0
  • /data/data/####/68cbcc5b09412808_0
  • /data/data/####/6953cd2c2747dc1b_0
  • /data/data/####/6a03141ec1263869_0
  • /data/data/####/6a67806c46a36be4_0
  • /data/data/####/6a75ce0b2c176985_0
  • /data/data/####/6c831d3e05fd7f29_0
  • /data/data/####/6d33f22e7b739599_0
  • /data/data/####/6d369e2e467b5dac_0
  • /data/data/####/6d46f79b3de65d20_0
  • /data/data/####/6e0ea6b514619b5a_0 (deleted)
  • /data/data/####/7017ebf5f59c1990_0
  • /data/data/####/70fc6d057ae6906b_0
  • /data/data/####/72044259cd2efd5b_0
  • /data/data/####/72044259cd2efd5b_1
  • /data/data/####/72e71971d3147d35_0
  • /data/data/####/7414e66718811fd7_0
  • /data/data/####/7414e66718811fd7_1
  • /data/data/####/758f3c0b872f714f_0
  • /data/data/####/75a05935847841b4_0
  • /data/data/####/75c4edcb3376a036_0
  • /data/data/####/76647192323304fb_0
  • /data/data/####/76eba22798b2e78a_0
  • /data/data/####/77fb946ca887bd2a_0
  • /data/data/####/78ee25e9121cbd82_0
  • /data/data/####/794928905c481d14_0
  • /data/data/####/794f1c82b5139bad_0
  • /data/data/####/7a8bcadd4a4f807d_0
  • /data/data/####/7aa0d99bd18aca2d_0
  • /data/data/####/7b82102ba87cd64c_0
  • /data/data/####/7bb49e073c2345df_0
  • /data/data/####/7bcd6e74b8990135_0
  • /data/data/####/7d94162fef58f220_0
  • /data/data/####/7f9eb70c414fa483_0
  • /data/data/####/8109c0886ad668e8_0
  • /data/data/####/8135aef07ebd21b6_0
  • /data/data/####/823ec43d09ffbaa8_0
  • /data/data/####/823ec43d09ffbaa8_1
  • /data/data/####/82496e96e12f7c77_0
  • /data/data/####/85346bc5f687cc98_0
  • /data/data/####/85346bc5f687cc98_1
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/88cea5572b7f1572_0
  • /data/data/####/89d1da467325b146_0
  • /data/data/####/8a794ccd061f9622_0
  • /data/data/####/8b056049e0131c3f_0
  • /data/data/####/8cd8e4a797253285_0
  • /data/data/####/8d2cffca04c38bb3_0
  • /data/data/####/8e6afa1bdc7dd037_0
  • /data/data/####/8f6bbf48e820a82d_0
  • /data/data/####/8f6bbf48e820a82d_1
  • /data/data/####/8ff611eecd0ee8ed_0
  • /data/data/####/90223b6125162412_0
  • /data/data/####/90223b6125162412_1
  • /data/data/####/90b0f49c0d4717ef_0
  • /data/data/####/90bfaea21ee135d7_0
  • /data/data/####/93353b57ce493dfb_0
  • /data/data/####/93eac0c3d8589c95_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/943510c981dc74f5_0
  • /data/data/####/948798435310148f_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/967719f92c653589_0
  • /data/data/####/96aa4ea5447c61f1_0
  • /data/data/####/97d9df6c1cfa462c_0
  • /data/data/####/97d9df6c1cfa462c_1
  • /data/data/####/9836dd1f8af26991_0 (deleted)
  • /data/data/####/995dd8d54db177fc_0
  • /data/data/####/9a2f3af352599440_0
  • /data/data/####/9afc16a6650352e0_0
  • /data/data/####/9afc16a6650352e0_1
  • /data/data/####/9ca084b9174daede_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/ZofRgYht.dex
  • /data/data/####/ZofRgYht.dex.flock (deleted)
  • /data/data/####/a0aa09cb6b27c55f_0 (deleted)
  • /data/data/####/a0e74eb383175e8e_0
  • /data/data/####/a0e74eb383175e8e_1
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a2576d99e002deb0_0
  • /data/data/####/a29edc4312d19735_0
  • /data/data/####/a407375092d88fa0_0
  • /data/data/####/a5b8cd378a90977a_0
  • /data/data/####/a6c6874e847465c4_0
  • /data/data/####/a6e9eb1eafc29e5a_0
  • /data/data/####/a7099cbe2e57906c_0
  • /data/data/####/a7a2dada67948d90_0
  • /data/data/####/a86cf56cf7fb06e4_0
  • /data/data/####/a90192e7ee75031a_0
  • /data/data/####/a985a62634a7ca4d_0
  • /data/data/####/a9b2465ae15fa130_0
  • /data/data/####/a9fb05ac05a9f2cb_0
  • /data/data/####/aae01f6997899c58_0
  • /data/data/####/ac4c2e8e7ec6e2bb_0
  • /data/data/####/ac6a40d2bacb5bc3_0
  • /data/data/####/ac8de0de82bd8182_0
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/af0b669fe5ccd210_0
  • /data/data/####/afea143af4d1ae5c_0
  • /data/data/####/b3ba74ab65321260_0
  • /data/data/####/b4b9d41aabc22b7f_0
  • /data/data/####/b5e380ca1c47569b_0
  • /data/data/####/b7a3e2b9230303fb_0
  • /data/data/####/b7af9de04809a4a9_0
  • /data/data/####/b829cc8a445f8422_0
  • /data/data/####/b84166d516baa7d5_0
  • /data/data/####/b8572c679a29c4e7_0
  • /data/data/####/b8c397bb60807c89_0
  • /data/data/####/b8c4826c3641bb0f_0
  • /data/data/####/b8e472dfebc7fc35_0
  • /data/data/####/b9b0415a23d54b66_0
  • /data/data/####/bbd6d5ac368c8163_0
  • /data/data/####/be959a5c42fc974b_0
  • /data/data/####/be97427b03d8575a_0
  • /data/data/####/bec771de805a97e6_0
  • /data/data/####/c2be62fd34dfc13c_0
  • /data/data/####/c2be62fd34dfc13c_1
  • /data/data/####/c3d4706e2502936b_0
  • /data/data/####/c57b6524763fe785_0
  • /data/data/####/c7a971052e54361e_0
  • /data/data/####/c9571618a156fdb7_0
  • /data/data/####/ca32b528a09f2d94_0
  • /data/data/####/ca32b528a09f2d94_1
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/cd39c87239f8ac44_0
  • /data/data/####/ce0df7f8a25c35ba_0 (deleted)
  • /data/data/####/com.owtojbk_preferences.xml
  • /data/data/####/d20e7f14f25b7f12_0
  • /data/data/####/d3a1f9d569d994b0_0
  • /data/data/####/d587bb1fac7e5fc2_0
  • /data/data/####/d5aa9eaba80eb1d4_0
  • /data/data/####/d5aa9eaba80eb1d4_1
  • /data/data/####/d64de2a0b3cdf4c0_0
  • /data/data/####/d714449600278257_0
  • /data/data/####/d7673a05a71dc314_0
  • /data/data/####/d88815942cd67deb_0
  • /data/data/####/d8950531c3492fac_0
  • /data/data/####/d8950531c3492fac_1
  • /data/data/####/d8aec044cd8f7d03_0
  • /data/data/####/d8aec044cd8f7d03_1
  • /data/data/####/d8f97691c879e78a_0
  • /data/data/####/dc7b71b8d85535fe_0
  • /data/data/####/dc7d8fe07dc16c7d_0
  • /data/data/####/df6a48c23e1e8c4d_0
  • /data/data/####/df837f2a8629b3fe_0
  • /data/data/####/e08e4be21eeb9d45_0
  • /data/data/####/e3b2c7b8e047d004_0
  • /data/data/####/e3b2c7b8e047d004_1
  • /data/data/####/e4b49b3ffa5a92e7_0
  • /data/data/####/e4b49b3ffa5a92e7_1
  • /data/data/####/e4d53220e91a686a_0
  • /data/data/####/e715d6619518944a_0
  • /data/data/####/e75ee6311d793ddd_0
  • /data/data/####/e7ca06989917cca0_0 (deleted)
  • /data/data/####/e889fba4f304de2e_0
  • /data/data/####/e94f3017bf0fef1b_0
  • /data/data/####/ead1207c20779a24_0
  • /data/data/####/eadae18d9ba174c9_0
  • /data/data/####/ed4299ffc327bbb8_0
  • /data/data/####/ee00b75f1e6b65ca_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f02069e5d4e57980_0
  • /data/data/####/f0ae46162720beba_0
  • /data/data/####/f1a0696347a2a23c_0
  • /data/data/####/f25a577ee83f6209_0
  • /data/data/####/f28884e0244ccf3f_0
  • /data/data/####/f3bbf91fb256f2e1_0
  • /data/data/####/f5fa9c6556e1c73b_0
  • /data/data/####/f5fa9c6556e1c73b_1
  • /data/data/####/f66190232104951a_0
  • /data/data/####/f66190232104951a_1
  • /data/data/####/f8837464383b0097_0
  • /data/data/####/fa51c012682ec1e9_0
  • /data/data/####/fb46ac2857e200d3_0
  • /data/data/####/fb96428bb13e5ab5_0 (deleted)
  • /data/data/####/fbac7ed2036aeb97_0
  • /data/data/####/fd16679f42f9c828_0
  • /data/data/####/fd26c2a8b4be1aab_0
  • /data/data/####/fd6f88466b3ac2f0_0
  • /data/data/####/fd847fd951b25225_0
  • /data/data/####/fd847fd951b25225_1
  • /data/data/####/fde45b627ba6e05c_0
  • /data/data/####/fdf2089037f0ada2_0 (deleted)
  • /data/data/####/fe3d2121f5b3c8b1_0 (deleted)
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/gHeKrngYDrpEL.dex
  • /data/data/####/gHeKrngYDrpEL.dex.flock (deleted)
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/oukWCXK.dex
  • /data/data/####/oukWCXK.dex.flock (deleted)
  • /data/data/####/the-real-index
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android