La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Android.Locker.17957

Aggiunto al database dei virus Dr.Web: 2024-03-18

La descrizione è stata aggiunta:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.1474.origin
Network activity:
Connects to:
  • UDP(DNS) <Google DNS>
  • UDP(DNS) 8####.8.4.4:53
  • TCP(HTTP/1.1) www.go####.com:80
  • TCP(HTTP/1.1) connect####.gst####.com:80
  • TCP(TLS/1.0) bat-bin####.a-####.a-ms####.net:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) con####.face####.net:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) and####.google####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) rr6---s####.g####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) a####.vk.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) gmscomp####.google####.com:443
  • TCP(TLS/1.0) cdn-pro####.oper####.com.####.net:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) st####.vk.com:443
  • TCP(TLS/1.0) googl####.g.doublec####.net:443
  • TCP(TLS/1.0) connect####.gst####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) sun####.use####.com:443
  • TCP(TLS/1.0) www.o####.com:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) analy####.go####.com:443
  • TCP(TLS/1.0) od.link####.edges####.net:443
  • TCP(TLS/1.0) l####.vk.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) u####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) st####.ho####.com:443
  • TCP(TLS/1.2) connect####.gst####.com:443
  • TCP(TLS/1.2) www.go####.com:443
  • TCP(TLS/1.2) gmscomp####.google####.com:443
  • UDP and####.google####.com:443
  • UDP rr2---s####.g####.com:443
  • UDP gmscomp####.google####.com:443
  • UDP www.gst####.com:443
DNS requests:
  • a####.vk.com
  • a####.vk.com
  • analy####.go####.com
  • and####.a####.go####.com
  • and####.google####.com
  • bat.b####.com
  • cdn-pro####.oper####.com
  • cdn1-sm####.ph####.com
  • con####.face####.net
  • connect####.gst####.com
  • ei.ph####.com
  • gmscomp####.google####.com
  • googl####.g.doublec####.net
  • h####.por####.com
  • i####.vk.com
  • l####.vk.com
  • m####.go####.com
  • m####.traffic####.net
  • o####.vk.com
  • pla####.google####.com
  • rr2---s####.g####.com
  • rr6---s####.g####.com
  • s####.g.doublec####.net
  • s####.l####.com
  • safebro####.google####.com
  • st####.ho####.com
  • st####.vk.com
  • st####.vk.com
  • sto####.google####.com
  • sun####.use####.com
  • sun####.use####.com
  • sun####.use####.com
  • u####.com
  • v####.com
  • www.go####.com
  • www.go####.ru
  • www.google####.com
  • www.google-####.com
  • www.googlet####.com
  • www.gst####.com
  • www.o####.com
  • www.por####.com
HTTP GET requests:
  • www.go####.com/gen_204
File system changes:
Creates the following files:
  • /data/data/####/0059d4c61ef7bea0_0
  • /data/data/####/0059d4c61ef7bea0_0 (deleted)
  • /data/data/####/00b8f7dd06b5077f_0
  • /data/data/####/02118e9e5f3130f0_0
  • /data/data/####/0625b6f0787af9a9_0
  • /data/data/####/07096c30daa2d01e_0
  • /data/data/####/09d16f81f7c417ba_0
  • /data/data/####/09e9f1397a9daf59_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a5479f1ea374cc5_0
  • /data/data/####/0aeb9b754598f199_0
  • /data/data/####/0bdb7fd61cf6a42a_0
  • /data/data/####/0c6532df165d5fbb_0
  • /data/data/####/0ce153fe0c38db33_0
  • /data/data/####/0d4f69907f45df99_0
  • /data/data/####/0dfa4a20444e25ea_0
  • /data/data/####/101f65c1b9265953_0
  • /data/data/####/11954de1c68a3aac_0
  • /data/data/####/11954de1c68a3aac_1
  • /data/data/####/11d75f4536d7ed49_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/12f19f5f34e14f18_0
  • /data/data/####/140091e78ced528d_0
  • /data/data/####/175b1b452710f14f_0
  • /data/data/####/183bc42e227e1b6c_0
  • /data/data/####/183bc42e227e1b6c_1
  • /data/data/####/1c51e192d205be56_0
  • /data/data/####/1c51e192d205be56_0 (deleted)
  • /data/data/####/1fda99d0c2eaf8cb_0
  • /data/data/####/1fda99d0c2eaf8cb_1
  • /data/data/####/21ce195dccfd36ec_0
  • /data/data/####/24b8bdfb7527c56b_0
  • /data/data/####/2505f1bdf1528e50_0
  • /data/data/####/25130c4b06ce937c_0
  • /data/data/####/25309ccf291f06fb_0
  • /data/data/####/253adf8c1e670d24_0
  • /data/data/####/25553bdabf0c6377_0
  • /data/data/####/27395953b2d9a75b_0
  • /data/data/####/279bdaca91ee9933_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/294621b53a1fa07e_0
  • /data/data/####/2a1ac2855cb07f3c_0
  • /data/data/####/2a89e85e375d3490_0
  • /data/data/####/2bfd9af5e52a32ac_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d692dc02629ecc1_0
  • /data/data/####/2d74b255afdf74ed_0
  • /data/data/####/2e0338517d730cd5_0
  • /data/data/####/2fc06c91053754df_0
  • /data/data/####/311409fad2bf808a_0
  • /data/data/####/31faa543c6b464a2_0
  • /data/data/####/326f2ddf65ff1ff0_0
  • /data/data/####/32b328044c298c77_0 (deleted)
  • /data/data/####/33792c0994c66578_0
  • /data/data/####/341bbe72e39bc67b_0
  • /data/data/####/359ce895677ea937_0
  • /data/data/####/35f3137a35efe120_0
  • /data/data/####/37d0c741637f97d4_0
  • /data/data/####/3825cd7b5f151bfc_0
  • /data/data/####/3b585071f7fa0da1_0
  • /data/data/####/3b596f27fa059cc0_0
  • /data/data/####/3bdd0607464a36e2_0
  • /data/data/####/3d9550ae7fefd7ee_0
  • /data/data/####/3db90b6ff1681f41_0
  • /data/data/####/3db90b6ff1681f41_1
  • /data/data/####/3e0246bb96309f4d_0 (deleted)
  • /data/data/####/3e1e50f1745bcca5_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3f5f1c2e17089449_0
  • /data/data/####/3fe24d3c9be4ecc5_0
  • /data/data/####/40be828656b03e28_0
  • /data/data/####/41e007fd4700d87e_0
  • /data/data/####/43d01cff72467a0d_0
  • /data/data/####/43d01cff72467a0d_0 (deleted)
  • /data/data/####/454a11e8855b60b1_0
  • /data/data/####/461b605a9f07e4d2_0
  • /data/data/####/46babf0a16dfff3d_0
  • /data/data/####/478c84f0c7cba2b7_0
  • /data/data/####/488fc84fd245f3fb_0
  • /data/data/####/4995e4a694a8c890_0
  • /data/data/####/49a4a4afaaa818e2_0
  • /data/data/####/49ecbe5fc2d3d68d_0
  • /data/data/####/49f5ba5b3357a1d6_0
  • /data/data/####/4abf16edba1b0233_0
  • /data/data/####/4b497c5c5056211f_0
  • /data/data/####/4baac7b2158954a0_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4dc8f62f1aa368b8_0
  • /data/data/####/4e42fba5936fafb1_0
  • /data/data/####/4e5118a710191441_0
  • /data/data/####/4ed0070704a56e97_0
  • /data/data/####/4f339779106045cf_0
  • /data/data/####/4f447ed6e6a1044e_0
  • /data/data/####/4f9e7cd02f0764ef_0 (deleted)
  • /data/data/####/4fc2d95b4eb846f4_0
  • /data/data/####/515b6e193c7bcc62_0
  • /data/data/####/529aaddcce8fa8f2_0
  • /data/data/####/52de6b2c22d44461_0
  • /data/data/####/52de6b2c22d44461_1
  • /data/data/####/53682777e92bfcab_0
  • /data/data/####/5375f5c2d05b7aa3_0
  • /data/data/####/53e336962895ac34_0
  • /data/data/####/53e336962895ac34_1
  • /data/data/####/53fc297d13b1b4b4_0
  • /data/data/####/53fc771990509335_0
  • /data/data/####/545e19fc42c1639b_0
  • /data/data/####/54d3dc86f454dbe4_0
  • /data/data/####/55fdbaa9389ca747_0
  • /data/data/####/5675426d887a623d_0
  • /data/data/####/58246537f2bb0f4e_0
  • /data/data/####/587c4c47ff8b9414_0
  • /data/data/####/5a4dc7acbe93e938_0
  • /data/data/####/5b8e498d769b2c74_0
  • /data/data/####/5c26398721a255fd_0
  • /data/data/####/5c5115349e131dfe_0
  • /data/data/####/5ccc31855ffdc121_0
  • /data/data/####/5ccc31855ffdc121_1
  • /data/data/####/5d5b468354af95ec_0
  • /data/data/####/5d63cf37dc8b906f_0 (deleted)
  • /data/data/####/5d7b4a35fbeb9cb5_0
  • /data/data/####/5f021f109ed1c1a2_0
  • /data/data/####/5fa35c56c4f1ca2d_0
  • /data/data/####/5fe0a1324e7c1980_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/658b57a62520e1a3_0
  • /data/data/####/65b593050384cae7_0
  • /data/data/####/66f53875ef135f74_0
  • /data/data/####/6750bde6e7c0df08_0
  • /data/data/####/6750bde6e7c0df08_1
  • /data/data/####/675ae8d024f14304_0
  • /data/data/####/67ff8242fd079f3b_0
  • /data/data/####/6880a512a489e26e_0
  • /data/data/####/6a53c98c55d580df_0
  • /data/data/####/6ba4655a25b0a99b_0
  • /data/data/####/6c5ab3d3b77d0df3_0
  • /data/data/####/6d2b1920660b91a3_0
  • /data/data/####/6da0ab2b7b0d1b14_0
  • /data/data/####/6e2da65c6a495e5f_0
  • /data/data/####/6e7afba5f213a003_0
  • /data/data/####/6ea6687ec6b96dce_0
  • /data/data/####/6ea6687ec6b96dce_0 (deleted)
  • /data/data/####/6ec18b6f8371118e_0
  • /data/data/####/6f0f66415d44999f_0
  • /data/data/####/700441978ec0336c_0
  • /data/data/####/70cdcdc860267edd_0
  • /data/data/####/70fc6d057ae6906b_0
  • /data/data/####/710af61858513837_0
  • /data/data/####/7224c23de60f6f63_0
  • /data/data/####/7224c23de60f6f63_1
  • /data/data/####/72f94cf6a77fbc0d_0
  • /data/data/####/72f94cf6a77fbc0d_1
  • /data/data/####/73ba3596e8214a71_0
  • /data/data/####/783003eb1e2b502a_0
  • /data/data/####/788cb1db5b971757_0
  • /data/data/####/78c221dccd0d7724_0
  • /data/data/####/794f1c82b5139bad_0
  • /data/data/####/79816e6443c0931b_0
  • /data/data/####/7abed74745d16bcd_0
  • /data/data/####/7b0aee4ac2c556c3_0
  • /data/data/####/7b0aee4ac2c556c3_1
  • /data/data/####/7dbd00ddfaced1f5_0
  • /data/data/####/7f4d0ba3debf8262_0
  • /data/data/####/7f67230712f25f00_0
  • /data/data/####/80e015b2a6cb7ae4_0
  • /data/data/####/81257716069d3eec_0
  • /data/data/####/813f35724d3409cc_0
  • /data/data/####/813f35724d3409cc_1
  • /data/data/####/85a618ee19b705c5_0
  • /data/data/####/873619e3b1917ad0_0
  • /data/data/####/88676f19d9770372_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/889a5a65c16aeeaa_0
  • /data/data/####/8c58ab397f1abbcf_0
  • /data/data/####/8e1c501fb1f59544_0
  • /data/data/####/8e81b8ce9036d9cd_0
  • /data/data/####/8e81b8ce9036d9cd_0 (deleted)
  • /data/data/####/914b4d546ef0b8b6_0
  • /data/data/####/9333ff9157770714_0
  • /data/data/####/938b18e8793bc3c7_0
  • /data/data/####/938b18e8793bc3c7_1
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/9626465ae0f5d4ac_0
  • /data/data/####/97bc82aa40c34290_0
  • /data/data/####/99903998f5794a1b_0
  • /data/data/####/9a1bf0afe324c249_0
  • /data/data/####/9b06f944d82f56bf_0
  • /data/data/####/9b06f944d82f56bf_1
  • /data/data/####/9b2d4f4c5467624f_0 (deleted)
  • /data/data/####/9b64de437880cd27_0
  • /data/data/####/9be12fcb34d151d8_0
  • /data/data/####/9c0db22018fbcd51_0
  • /data/data/####/9c1d71eb1c1ff6aa_0
  • /data/data/####/9c658f13a69f8e65_0 (deleted)
  • /data/data/####/9cacddb9554d795f_0
  • /data/data/####/9debadc9b7b69ebf_0
  • /data/data/####/9e8c9b13f35c9012_0
  • /data/data/####/9eb401e684c4f15b_0
  • /data/data/####/9eb401e684c4f15b_1
  • /data/data/####/9f64eb8315008cd1_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a030bf3077534ffc_0
  • /data/data/####/a0443b4ae79caa06_0
  • /data/data/####/a08f9f821f3f349a_0
  • /data/data/####/a0c99d8f0df55d80_0
  • /data/data/####/a0cd52a956bfc498_0
  • /data/data/####/a0f345441cfcacba_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a25f47a610ca7823_0
  • /data/data/####/a26d4c92edb108c2_0
  • /data/data/####/a29edc4312d19735_0
  • /data/data/####/a317d8b09bea59df_0
  • /data/data/####/a325073f97e2c135_0
  • /data/data/####/a4f56c4d94aedb38_0
  • /data/data/####/a5b8cd378a90977a_0
  • /data/data/####/a5b8fdf7c2a62e52_0
  • /data/data/####/a64a829f83707bdc_0
  • /data/data/####/a6b04e0dd8ace7a4_0
  • /data/data/####/a74d45bbf11b0868_0
  • /data/data/####/a7ddbdbb5a09f2ee_0
  • /data/data/####/a803fbdc7fab7683_0
  • /data/data/####/a85cf506a1abe53b_0
  • /data/data/####/a97da596e5214df1_0
  • /data/data/####/a9b2a86db302774a_0
  • /data/data/####/a9b2a86db302774a_1
  • /data/data/####/a9edbc6439fc9282_0
  • /data/data/####/ac612308a2081165_0
  • /data/data/####/ac612308a2081165_1
  • /data/data/####/ac63089cd2ba93e6_0
  • /data/data/####/ad582fdd06fb34fd_0
  • /data/data/####/ad582fdd06fb34fd_0 (deleted)
  • /data/data/####/ae780e890c5a9f7f_0
  • /data/data/####/ae780e890c5a9f7f_1
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/aed0f28b4d303d6f_0
  • /data/data/####/af0cb7e3c93e0dbb_0
  • /data/data/####/b068ee251e8837c7_0
  • /data/data/####/b35ec17b7804f676_0
  • /data/data/####/b4663236228f60ad_0
  • /data/data/####/b5e0177f9859b25a_0
  • /data/data/####/b61d3c3523e750fe_0
  • /data/data/####/b61d3c3523e750fe_0 (deleted)
  • /data/data/####/b65bd9cc5588b496_0
  • /data/data/####/b67bd7dee369c854_0
  • /data/data/####/b6c075a829c493eb_0 (deleted)
  • /data/data/####/b78b316329df1543_0 (deleted)
  • /data/data/####/b7bda711931af62b_0
  • /data/data/####/b8c938c1af88606b_0
  • /data/data/####/b95b793a9822c305_0
  • /data/data/####/b97521682eb94942_0
  • /data/data/####/b9ade0b81b935c5b_0
  • /data/data/####/bc6c8f62abdf1a5c_0 (deleted)
  • /data/data/####/be97427b03d8575a_0
  • /data/data/####/bf28076ee51ac5d9_0
  • /data/data/####/c1550a90b4f036d4_0
  • /data/data/####/c36b4359f9a644b8_0
  • /data/data/####/c3ad037f6aa07275_0
  • /data/data/####/c3e3920d23c036cd_0
  • /data/data/####/c5399c9a756be08f_0
  • /data/data/####/c57b6524763fe785_0
  • /data/data/####/c63dbdded56d8ee4_0
  • /data/data/####/c75152099e8c1e8a_0
  • /data/data/####/c837e72ab3588e73_0
  • /data/data/####/c87e6537167ec8c5_0
  • /data/data/####/c9019ba2deaa53a8_0
  • /data/data/####/c9571618a156fdb7_0
  • /data/data/####/cb9cde24f5b096f9_0
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/cd1860cc1264f113_0
  • /data/data/####/cda5b7ba9a1d9bf9_0
  • /data/data/####/ce0828a8b7865632_0
  • /data/data/####/ce0828a8b7865632_1
  • /data/data/####/cf157fd6d70f08e5_0
  • /data/data/####/cf260ef6e66fbdb8_0
  • /data/data/####/cf2a268c9f3207e8_0
  • /data/data/####/cf90e2dba0fa8750_0
  • /data/data/####/com.xsmlcchyf_preferences.xml
  • /data/data/####/d00edb6132ba214e_0
  • /data/data/####/d16771b08ed7e74a_0 (deleted)
  • /data/data/####/d1ca85f5e2058fba_0
  • /data/data/####/d1e5b5a356777294_0
  • /data/data/####/d1f434f1206b95bd_0
  • /data/data/####/d22c112aab2ebb4f_0
  • /data/data/####/d40eec0b73a7befc_0
  • /data/data/####/d610f9697d06f6cd_0
  • /data/data/####/d63f51ef9e6f585e_0
  • /data/data/####/d6a7228229e4ca32_0
  • /data/data/####/d82435f16019a704_0
  • /data/data/####/d943e1bffc20bdfd_0
  • /data/data/####/d9b024363c1e32e6_0
  • /data/data/####/da656b5775b93a3c_0
  • /data/data/####/dd2a948a620c0ad9_0
  • /data/data/####/dd328df1c362d2c1_0
  • /data/data/####/de7ecc4f7019e0aa_0
  • /data/data/####/e02c45ad40286cba_0
  • /data/data/####/e02c45ad40286cba_1
  • /data/data/####/e04ecf0bca57320a_0
  • /data/data/####/e417daa654918a08_0
  • /data/data/####/e61b5d9eda642265_0
  • /data/data/####/e671fd2c0dadf5b3_0
  • /data/data/####/e7e1661d219a3c94_0
  • /data/data/####/eebc92aa862bb872_0
  • /data/data/####/eecbeadfb293df5f_0
  • /data/data/####/ef07203ffda029e2_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f0a09a63b11ba419_0
  • /data/data/####/f1a0696347a2a23c_0
  • /data/data/####/f2bf38939aa2c133_0
  • /data/data/####/f30f5b0a85ec9b2d_0
  • /data/data/####/f3e6b97fc1d18859_0
  • /data/data/####/f5fa9c6556e1c73b_0
  • /data/data/####/f5fa9c6556e1c73b_1
  • /data/data/####/f7500a8851274211_0
  • /data/data/####/f7d5f58055c15ec6_0
  • /data/data/####/f7f50188faf58335_0
  • /data/data/####/f8837464383b0097_0
  • /data/data/####/f8bf593d15b83f55_0
  • /data/data/####/fbd3ba0341e0b989_0
  • /data/data/####/fc902e8b62bbe43d_0
  • /data/data/####/fd9468a5f59dbadf_0
  • /data/data/####/fd9468a5f59dbadf_1
  • /data/data/####/fde72499d73a0b8a_0
  • /data/data/####/ffeb7fbba5f38915_0 (deleted)
  • /data/data/####/geJKxDcB.dex
  • /data/data/####/geJKxDcB.dex.flock (deleted)
  • /data/data/####/hrvXDvYsQeX.dex
  • /data/data/####/hrvXDvYsQeX.dex.flock (deleted)
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/olsHYsgZS.dex
  • /data/data/####/olsHYsgZS.dex.flock (deleted)
  • /data/data/####/the-real-index
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android