La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Android.Locker.17996

Aggiunto al database dei virus Dr.Web: 2024-04-04

La descrizione è stata aggiunta:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.1477.origin
Network activity:
Connects to:
  • UDP(DNS) <Google DNS>
  • TCP(TLS/1.0) 74.1####.131.101:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) el.ph####.com:443
  • TCP(TLS/1.0) cdn1d-s####.ph####.com:443
  • TCP(TLS/1.0) www.google####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) connect####.gst####.com:443
  • TCP(TLS/1.0) u####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) analy####.go####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) gmscomp####.google####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.2) www.google####.com:443
  • TCP(TLS/1.2) 64.2####.165.113:443
  • TCP(TLS/1.2) gmscomp####.google####.com:443
  • UDP www.google####.com:443
DNS requests:
  • analy####.go####.com
  • cdn1-sm####.ph####.com
  • cdn1d-s####.ph####.com
  • connect####.gst####.com
  • ei.ph####.com
  • el.ph####.com
  • gmscomp####.google####.com
  • m####.traffic####.net
  • p####.google####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • ss.ph####.com
  • sto####.google####.com
  • u####.com
  • www.go####.com
  • www.go####.ru
  • www.google####.com
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/000001.dbtmp
  • /data/data/####/00187486c05c06e3_0
  • /data/data/####/0294c669d762c8f2_0
  • /data/data/####/03350a3d9434aa8c_0
  • /data/data/####/0381e936a2ac8f76_0
  • /data/data/####/057b2438a40da20e_0
  • /data/data/####/080228616cfef3d1_0
  • /data/data/####/091770d4d798b659_0
  • /data/data/####/0a0fafc5f6d168c0_0
  • /data/data/####/0a0fafc5f6d168c0_1
  • /data/data/####/0b307bb2d0965b10_0
  • /data/data/####/0b307bb2d0965b10_1
  • /data/data/####/0c2416b1449261f6_0
  • /data/data/####/0e8f995a9ac4e8ee_0
  • /data/data/####/100149c7c220d927_0
  • /data/data/####/10ba6a50c9f1f70f_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/1235772150d8a78d_0
  • /data/data/####/1292e213a9140314_0
  • /data/data/####/1292e213a9140314_1
  • /data/data/####/1329a642da2f1bfb_0
  • /data/data/####/13ef06af0160dc86_0
  • /data/data/####/16c516373911efef_0
  • /data/data/####/16d7388be195e510_0
  • /data/data/####/16ee0b492620500e_0
  • /data/data/####/170d80d9cc414c24_0
  • /data/data/####/191a4ee9cddc7b36_0
  • /data/data/####/191a4ee9cddc7b36_1
  • /data/data/####/1b32d37626ca1ce2_0
  • /data/data/####/1b397839ddfc5955_0
  • /data/data/####/1c7cd6f372c85efc_0
  • /data/data/####/1c7cd6f372c85efc_1
  • /data/data/####/1cee7b83026de50d_0
  • /data/data/####/1e3b77baae7964e9_0
  • /data/data/####/1e7139b7e75001a9_0
  • /data/data/####/1e7139b7e75001a9_1
  • /data/data/####/1ece4a1e17bd846d_0
  • /data/data/####/1fda99d0c2eaf8cb_0
  • /data/data/####/1fda99d0c2eaf8cb_1
  • /data/data/####/2092a31eec4da58e_0
  • /data/data/####/24449f8686913b34_0
  • /data/data/####/2624e9eb0eacabe4_0
  • /data/data/####/2624e9eb0eacabe4_1
  • /data/data/####/26364f982fd1c620_0
  • /data/data/####/26364f982fd1c620_1
  • /data/data/####/268a8b1b7ce69060_0
  • /data/data/####/281e730570a52b73_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/29f3003d38343837_0
  • /data/data/####/2a1ac2855cb07f3c_0
  • /data/data/####/2b8510bff1290f8c_0
  • /data/data/####/2c899d20b3cdbdb4_0
  • /data/data/####/2c8ab5fabb614ca3_0
  • /data/data/####/2c8ab5fabb614ca3_1
  • /data/data/####/2cadd1c74a5ed801_0
  • /data/data/####/2cc6e69adb153e05_0
  • /data/data/####/2cc6e69adb153e05_1
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2ce70f616a50f5c4_0
  • /data/data/####/2ce70f616a50f5c4_1
  • /data/data/####/30248286d5b1deca_0
  • /data/data/####/307bf8d17a297df7_0
  • /data/data/####/30d27ef1585470ac_0 (deleted)
  • /data/data/####/31a0aa6c3a16b075_0
  • /data/data/####/31b42fab07a0a649_0
  • /data/data/####/34b6f1f858d86647_0
  • /data/data/####/381a71f994e83a61_0
  • /data/data/####/39fb31ec9ab879f9_0
  • /data/data/####/3aa696ea632e9b2d_0
  • /data/data/####/3e9599b4d7b816ff_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3ebf402d69629be6_0
  • /data/data/####/3fe060681b94bb40_0
  • /data/data/####/41352f374cda773b_0
  • /data/data/####/42dd515d0a2b1ae8_0
  • /data/data/####/43f88b5860fdae2f_0
  • /data/data/####/4456fb05b8b11bf3_0
  • /data/data/####/45fb07438e976516_0
  • /data/data/####/472e58c456998a58_0
  • /data/data/####/4964f155836b7037_0
  • /data/data/####/4992188ac9bc1f7e_0
  • /data/data/####/4a6d0735747b10b1_0
  • /data/data/####/4b9aed2e91f59179_0
  • /data/data/####/4c54951df378d91f_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4d2595568ac100f2_0
  • /data/data/####/4ed0070704a56e97_0
  • /data/data/####/5107d8b8b3e1fd3c_0
  • /data/data/####/538828344bc2e103_0
  • /data/data/####/540ec379d219d622_0
  • /data/data/####/540ec379d219d622_1
  • /data/data/####/5441557da14cb42e_0
  • /data/data/####/549706ee95156bc9_0
  • /data/data/####/5675426d887a623d_0
  • /data/data/####/58246537f2bb0f4e_0
  • /data/data/####/585a99a97f54440c_0
  • /data/data/####/587228ffc862e001_0
  • /data/data/####/58b30bc08e758eae_0
  • /data/data/####/58f90c22716753df_0
  • /data/data/####/59292f56f55df2ab_0
  • /data/data/####/59292f56f55df2ab_1
  • /data/data/####/59994183382f1805_0
  • /data/data/####/5a9c808a1cb49d2e_0
  • /data/data/####/5ab24d9749437941_0
  • /data/data/####/5ad9b363b1affdff_0
  • /data/data/####/5b8e498d769b2c74_0
  • /data/data/####/5c721249efb29f8b_0
  • /data/data/####/5f6855c1efcfda9d_0
  • /data/data/####/5f6855c1efcfda9d_1
  • /data/data/####/5ffc57a1dfddc0cb_0
  • /data/data/####/601f98d205444d2f_0
  • /data/data/####/61566885d84fda31_0
  • /data/data/####/61566885d84fda31_1
  • /data/data/####/61a537e0025801b5_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/63c30cd570fcdc7b_0
  • /data/data/####/6428a991da1b63da_0
  • /data/data/####/646d22b04ae8557e_0
  • /data/data/####/64cf3de1ccdc8cc7_0
  • /data/data/####/65a047ee7e380e7a_0
  • /data/data/####/69cd85911c1c8c71_0
  • /data/data/####/6a183740cfc79df8_0
  • /data/data/####/6af37a6cb2dfdc28_0
  • /data/data/####/6b762af762457d02_0
  • /data/data/####/6b8b5e0624fbff0d_0
  • /data/data/####/6d2b1920660b91a3_0
  • /data/data/####/6d8a3fe508152144_0
  • /data/data/####/6da0ab2b7b0d1b14_0
  • /data/data/####/6f4a3edef7377ab7_0
  • /data/data/####/70844bf27b990cbc_0
  • /data/data/####/70984ff4c93b7e59_0
  • /data/data/####/70984ff4c93b7e59_1
  • /data/data/####/70d6abeebf6f2da5_0 (deleted)
  • /data/data/####/70fc6d057ae6906b_0
  • /data/data/####/734ee181d7e90f92_0
  • /data/data/####/74317f94aa15fca0_0
  • /data/data/####/76535a735a42d620_0
  • /data/data/####/7688ad4166151327_0
  • /data/data/####/76b0ab012a71eee5_0
  • /data/data/####/787b48242c509da4_0
  • /data/data/####/788c96c0b7e0eeab_0
  • /data/data/####/7b13364cfbb87544_0
  • /data/data/####/7ec425bb22bdf64b_0
  • /data/data/####/7ef6f6525932c01f_0
  • /data/data/####/7f406572474261b2_0
  • /data/data/####/7f406572474261b2_1
  • /data/data/####/82ab38f3fdc03709_0
  • /data/data/####/833f886132ad23e9_0
  • /data/data/####/833f886132ad23e9_1
  • /data/data/####/837eb9b3d2b9cbe8_0
  • /data/data/####/86749cea5de6da04_0
  • /data/data/####/87e73870f08024a0_0
  • /data/data/####/88307e7db2b3f410_0
  • /data/data/####/88318bf7f83fb0a5_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/88e1cf92084a2d1e_0
  • /data/data/####/88fd62bc1f62503f_0
  • /data/data/####/8a0ea50cc3a7f238_0
  • /data/data/####/8bb79ff1990d7f92_0
  • /data/data/####/8c7af6cc9d01dad8_0
  • /data/data/####/8d0348dab3d26146_0
  • /data/data/####/8e6622e91ba9e657_0
  • /data/data/####/8e81b8ce9036d9cd_0
  • /data/data/####/9108717da30fae4b_0
  • /data/data/####/93b289e14440ed98_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/96145e55af38c07c_0
  • /data/data/####/9645545aee22cc3e_0 (deleted)
  • /data/data/####/97324636f30e9ce0_0
  • /data/data/####/97d8928f5a8e8521_0
  • /data/data/####/992a790b86229dd1_0
  • /data/data/####/9956b75db49a5bf5_0 (deleted)
  • /data/data/####/9a1bf0afe324c249_0
  • /data/data/####/9a29cfaee1da2c65_0
  • /data/data/####/9a29cfaee1da2c65_1
  • /data/data/####/9b8b8356be03d1e8_0
  • /data/data/####/9c0b6cf9b01f42c1_0
  • /data/data/####/9c0b6cf9b01f42c1_1
  • /data/data/####/9c2982024583bfe6_0
  • /data/data/####/9c32f12ca1dacc6a_0
  • /data/data/####/9c3d04d65c3a7266_0
  • /data/data/####/9c3d04d65c3a7266_1
  • /data/data/####/9c69027e25fc542c_0
  • /data/data/####/9ed80db94e551edc_0
  • /data/data/####/9f373fdc63d9084a_0
  • /data/data/####/9f9a156edf6785fe_0
  • /data/data/####/9fee0448286141e3_0
  • /data/data/####/AvQPPUmPxK.dex
  • /data/data/####/AvQPPUmPxK.dex.flock (deleted)
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/DmyPR.dex
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/YDdtSBjiJ.dex
  • /data/data/####/YDdtSBjiJ.dex.flock (deleted)
  • /data/data/####/Zaxvew.dex
  • /data/data/####/Zaxvew.dex.flock (deleted)
  • /data/data/####/a11e5db5badf1f11_0
  • /data/data/####/a136c191bf55ac3e_0
  • /data/data/####/a141221fcc16c95f_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a37b38fae3a3eecf_0
  • /data/data/####/a37fe645f98dea5b_0
  • /data/data/####/a3d53bc905fc1daf_0
  • /data/data/####/a51785f840e9f0c4_0
  • /data/data/####/a55313f7781ba2d3_0
  • /data/data/####/a55313f7781ba2d3_1
  • /data/data/####/a5ccb23e5603a0cf_0
  • /data/data/####/a60225814277e8fe_0
  • /data/data/####/a6eb50552dc91e8b_0
  • /data/data/####/a8b3e62d331ba7cd_0
  • /data/data/####/a991c8dcfd66cc1b_0
  • /data/data/####/a9c3fdb0dbe80f7a_0
  • /data/data/####/aa88e9253c4c929a_0
  • /data/data/####/aca2dd426caf1d36_0
  • /data/data/####/ace59b3e04c55acb_0
  • /data/data/####/ad4ff05aec6d989b_0
  • /data/data/####/adb7de66b1146fb6_0
  • /data/data/####/ae46defb7934cc9e_0
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/b2753d486b4b0c49_0
  • /data/data/####/b345400bd4745de8_0
  • /data/data/####/b35ec17b7804f676_0
  • /data/data/####/b64f79ed125698b9_0
  • /data/data/####/b754b97b3d41710a_0
  • /data/data/####/b7bda711931af62b_0
  • /data/data/####/b863a9b15afe72df_0
  • /data/data/####/b8fc8136dbe01967_0
  • /data/data/####/bcca51ef547aa83a_0
  • /data/data/####/bdf3ad2ec34e71d2_0
  • /data/data/####/be97427b03d8575a_0
  • /data/data/####/bf30049d5aeb27c4_0
  • /data/data/####/bf4343bf9c2135ec_0
  • /data/data/####/c0b3a98a37384442_0
  • /data/data/####/c1342ddef36eb86f_0
  • /data/data/####/c1b34f212f26feba_0
  • /data/data/####/c1e9d7cd162720f5_0
  • /data/data/####/c21051760a599957_0
  • /data/data/####/c21051760a599957_1
  • /data/data/####/c2d5f34c7bdeaf79_0
  • /data/data/####/c315beb82b54897e_0
  • /data/data/####/c3ad037f6aa07275_0
  • /data/data/####/c52f115b6c0d420e_0
  • /data/data/####/c57b6524763fe785_0
  • /data/data/####/c648e4e976fb0dc1_0
  • /data/data/####/c66cbcaaca3423e2_0
  • /data/data/####/c81f9fbe640ddcb3_0
  • /data/data/####/c81f9fbe640ddcb3_1
  • /data/data/####/c8efeb5863309bea_0
  • /data/data/####/ca7d520125763a9a_0
  • /data/data/####/ca81abc6757c617e_0
  • /data/data/####/ca91f8ff866857c3_0
  • /data/data/####/cb25c89dda830d30_0
  • /data/data/####/cb25c89dda830d30_1
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/cdeb738857f5357f_0
  • /data/data/####/cf0713ab85facae5_0
  • /data/data/####/cf49f66da0442e71_0
  • /data/data/####/com.oefgtauf_preferences.xml
  • /data/data/####/d0670f1d8c99bd12_0
  • /data/data/####/d12729d6a4feb1ce_0
  • /data/data/####/d1c164340c5af8f8_0
  • /data/data/####/d46e4f2156bc727a_0
  • /data/data/####/d4d596326f486615_0
  • /data/data/####/d8dbd033c6fd20fe_0
  • /data/data/####/da2515af362d0e7e_0
  • /data/data/####/ddd659c9e52b3d3b_0
  • /data/data/####/de05f9ffc2df9b08_0
  • /data/data/####/de361cd5c995a71f_0
  • /data/data/####/e0bc0485b8baee67_0
  • /data/data/####/e0dcaec44a8ac14d_0
  • /data/data/####/e21ff0d1ae0b6d9f_0
  • /data/data/####/e335a106c094e7c1_0
  • /data/data/####/e3f48607bc00f654_0
  • /data/data/####/e46b66839dd42587_0
  • /data/data/####/e5af8aefe7b8c11e_0
  • /data/data/####/e833af0d5d78ae38_0
  • /data/data/####/e8373c5a493c21a3_0
  • /data/data/####/e83d76d753989e76_0
  • /data/data/####/e96956d50ad6242b_0
  • /data/data/####/eaf651a3da0d3561_0
  • /data/data/####/ebec18fc89194fbd_0
  • /data/data/####/eca1af0460d813ce_0 (deleted)
  • /data/data/####/ece8a33c1359b06c_0
  • /data/data/####/ed9740e982709b5f_0
  • /data/data/####/eec4f9c88df1d88c_0 (deleted)
  • /data/data/####/eee481eeafc618a0_0
  • /data/data/####/eee481eeafc618a0_1
  • /data/data/####/efd21f4913ed5ca6_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f04e1aeef97d5a68_0
  • /data/data/####/f43b2d36aec03413_0
  • /data/data/####/f5fa9c6556e1c73b_0
  • /data/data/####/f5fa9c6556e1c73b_1
  • /data/data/####/f66190232104951a_0
  • /data/data/####/f66190232104951a_1
  • /data/data/####/f90a7b448f8745e3_0
  • /data/data/####/fbd3ba0341e0b989_0
  • /data/data/####/fc471fc37ab64ba3_0
  • /data/data/####/fcc5e227db79f995_0
  • /data/data/####/fcc5e227db79f995_1
  • /data/data/####/fcedf8341b32699f_0
  • /data/data/####/fcf080fe10f43814_0
  • /data/data/####/fd6ef18541176348_0
  • /data/data/####/fe675af91fec73af_0
  • /data/data/####/febd2b802291505d_0
  • /data/data/####/fffcf600ca8d6b65_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/the-real-index
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android