Mi biblioteca
Mi biblioteca

+ Añadir a la biblioteca

Soporte
Soporte 24 horas | Normas de contactar

Sus solicitudes

Perfil

Android.Locker.17919

Added to the Dr.Web virus database: 2024-03-15

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.1472.origin
Network activity:
Connects to:
  • UDP(DNS) <Google DNS>
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) ss.ph####.com:443
  • TCP(TLS/1.0) analy####.go####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) u####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
DNS requests:
  • analy####.go####.com
  • cdn1-sm####.ph####.com
  • cdn1d-s####.ph####.com
  • ei.ph####.com
  • h####.por####.com
  • m####.traffic####.net
  • s####.g.doublec####.net
  • ss.ph####.com
  • sto####.google####.com
  • u####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/001b957c50b6e754_0
  • /data/data/####/00517210ebc94e8b_0
  • /data/data/####/0059d4c61ef7bea0_0
  • /data/data/####/00b114e0b3bf04d3_0 (deleted)
  • /data/data/####/016aa0e30f57065a_0
  • /data/data/####/02098fb2ac56d9ea_0
  • /data/data/####/02118e9e5f3130f0_0
  • /data/data/####/0264b47b5f9b7016_0
  • /data/data/####/02cf871dab51345a_0
  • /data/data/####/0788931a1a455b0b_0
  • /data/data/####/0788931a1a455b0b_0 (deleted)
  • /data/data/####/079be24d63217f57_0
  • /data/data/####/091770d4d798b659_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0bdb7fd61cf6a42a_0
  • /data/data/####/0c5471ca57887ceb_0
  • /data/data/####/0dfa4a20444e25ea_0
  • /data/data/####/0f19849c5027e3c2_0
  • /data/data/####/101f65c1b9265953_0
  • /data/data/####/11954de1c68a3aac_0
  • /data/data/####/11954de1c68a3aac_1
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_0 (deleted)
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/130175b338c649e0_0
  • /data/data/####/15eaffcbac21814b_0
  • /data/data/####/16979744e04315a4_0
  • /data/data/####/173683359efe6e25_0
  • /data/data/####/175b1b452710f14f_0
  • /data/data/####/183bc42e227e1b6c_0
  • /data/data/####/183bc42e227e1b6c_0 (deleted)
  • /data/data/####/183bc42e227e1b6c_1
  • /data/data/####/1952a72ff719c4a3_0
  • /data/data/####/1b366531acbf3a33_0
  • /data/data/####/1edf8f22f71ae995_0
  • /data/data/####/1f87871f090fb67a_0
  • /data/data/####/1fda99d0c2eaf8cb_0
  • /data/data/####/1fda99d0c2eaf8cb_1
  • /data/data/####/1ff722b3a38744ee_0
  • /data/data/####/2295deee12c5ae35_0
  • /data/data/####/230b1fc8a2a5a2ae_0
  • /data/data/####/236f38b36e6d20ac_0
  • /data/data/####/25309ccf291f06fb_0
  • /data/data/####/25553bdabf0c6377_0
  • /data/data/####/2665bb7a09130af6_0
  • /data/data/####/27e92386618f88bb_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/2987436855e49ef7_0
  • /data/data/####/2a9fab7afbb2b80f_0
  • /data/data/####/2ae31d1fd52af88a_0
  • /data/data/####/2be54bdf8c75a050_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d692dc02629ecc1_0
  • /data/data/####/2d692dc02629ecc1_0 (deleted)
  • /data/data/####/2e1db4164ee011b1_0
  • /data/data/####/2fb439d122ab28c1_0
  • /data/data/####/2fc06c91053754df_0
  • /data/data/####/32df37481f87cf70_0
  • /data/data/####/333ee13e493e37f3_0
  • /data/data/####/33792c0994c66578_0
  • /data/data/####/339be09d6eae5063_0
  • /data/data/####/339be09d6eae5063_1
  • /data/data/####/339cc1e44b109457_0
  • /data/data/####/37ae7220d07ab7e2_0
  • /data/data/####/392156288a93979e_0
  • /data/data/####/393440ba20ef03a3_0
  • /data/data/####/39634d701706e76c_0
  • /data/data/####/3a9de0a1afeb1142_0
  • /data/data/####/3b596f27fa059cc0_0
  • /data/data/####/3c49cb68fb15d445_0
  • /data/data/####/3db90b6ff1681f41_0
  • /data/data/####/3db90b6ff1681f41_1
  • /data/data/####/3df181d5ce5443da_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3f75bf2ed7afd99e_0
  • /data/data/####/40fddf9e2dee04c3_0
  • /data/data/####/43d1a489072d0953_0
  • /data/data/####/43e08446103061c4_0
  • /data/data/####/45b7540a94a5af93_0
  • /data/data/####/45fff3207eaf44d9_0
  • /data/data/####/46233012966c85b0_0
  • /data/data/####/49f5ba5b3357a1d6_0
  • /data/data/####/49f5ba5b3357a1d6_0 (deleted)
  • /data/data/####/4b497c5c5056211f_0
  • /data/data/####/4b759df5a6790202_0
  • /data/data/####/4baac7b2158954a0_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4eb62b3f5c015b57_0
  • /data/data/####/4ed0070704a56e97_0
  • /data/data/####/4f339779106045cf_0
  • /data/data/####/4fe7142e564642d6_0
  • /data/data/####/507dd8054e323dbc_0
  • /data/data/####/515b6e193c7bcc62_0
  • /data/data/####/515b6e193c7bcc62_0 (deleted)
  • /data/data/####/51601d3d55b76398_0
  • /data/data/####/51601d3d55b76398_0 (deleted)
  • /data/data/####/529aaddcce8fa8f2_0
  • /data/data/####/53e336962895ac34_0
  • /data/data/####/53e336962895ac34_1
  • /data/data/####/54d3dc86f454dbe4_0
  • /data/data/####/56d7f599dbdcf9e7_0
  • /data/data/####/57f4a27a1717aba3_0
  • /data/data/####/58246537f2bb0f4e_0
  • /data/data/####/5a6ec868f2ae9749_0
  • /data/data/####/5a6ec868f2ae9749_0 (deleted)
  • /data/data/####/5b8e498d769b2c74_0
  • /data/data/####/5ccc31855ffdc121_0
  • /data/data/####/5ccc31855ffdc121_1
  • /data/data/####/5deb8249a25a0270_0
  • /data/data/####/5f9d9f0c65e6e628_0
  • /data/data/####/5fe0a1324e7c1980_0
  • /data/data/####/61a537e0025801b5_0
  • /data/data/####/62278e3ff70c8d2d_0
  • /data/data/####/62aa343c6505d054_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/63d822453ce9f277_0
  • /data/data/####/6534c86e1248c9af_0
  • /data/data/####/6750bde6e7c0df08_0
  • /data/data/####/6750bde6e7c0df08_0 (deleted)
  • /data/data/####/6750bde6e7c0df08_1
  • /data/data/####/675ae8d024f14304_0
  • /data/data/####/67856bf047844605_0
  • /data/data/####/68726d7e2b68e3c5_0
  • /data/data/####/68c4dad70735f4e7_0
  • /data/data/####/6a53c98c55d580df_0
  • /data/data/####/6a85667ced1b8edf_0
  • /data/data/####/6b48ad315807c346_0
  • /data/data/####/6b995ed362e4b19c_0
  • /data/data/####/6d2b1920660b91a3_0
  • /data/data/####/6da0ab2b7b0d1b14_0
  • /data/data/####/6e6bf7f48bc88e62_0
  • /data/data/####/6e7afba5f213a003_0
  • /data/data/####/6ea6687ec6b96dce_0
  • /data/data/####/6fd16ef079dd91fa_0
  • /data/data/####/700441978ec0336c_0
  • /data/data/####/70cdcdc860267edd_0
  • /data/data/####/72c72e6e38b7d9c7_0
  • /data/data/####/72f94cf6a77fbc0d_0
  • /data/data/####/72f94cf6a77fbc0d_1
  • /data/data/####/734cfea64260fe56_0
  • /data/data/####/73ba3596e8214a71_0
  • /data/data/####/741f12d9dfe2e7df_0
  • /data/data/####/74831c8befe107a4_0
  • /data/data/####/794f1c82b5139bad_0
  • /data/data/####/7afd6e087a607cc8_0
  • /data/data/####/7b0aee4ac2c556c3_0
  • /data/data/####/7b0aee4ac2c556c3_0 (deleted)
  • /data/data/####/7b0aee4ac2c556c3_1
  • /data/data/####/7ce4f6c865d587e2_0 (deleted)
  • /data/data/####/7e1025f16c5eb2f2_0
  • /data/data/####/7e48091a74668621_0
  • /data/data/####/7f67230712f25f00_0
  • /data/data/####/81d85d7470a9f584_0
  • /data/data/####/81f9cf90d05ba8a0_0
  • /data/data/####/822affd92402d528_0
  • /data/data/####/82f936e379af290f_0
  • /data/data/####/866c8ffe073cabd1_0
  • /data/data/####/87e751fc28887f61_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/8c7215a9c322a981_0
  • /data/data/####/8cdf5a4d202f37bc_0
  • /data/data/####/8e81b8ce9036d9cd_0
  • /data/data/####/906b7fc912711eda_0
  • /data/data/####/907a792956688d8e_0
  • /data/data/####/914b4d546ef0b8b6_0
  • /data/data/####/93353b57ce493dfb_0
  • /data/data/####/938b18e8793bc3c7_0
  • /data/data/####/938b18e8793bc3c7_1
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/9402ef73a016ffbb_0 (deleted)
  • /data/data/####/95ae9ed3e20055c8_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/96020f1b4bd51f2b_0
  • /data/data/####/9698fec6ae308ab0_0
  • /data/data/####/97ba727754845fce_0
  • /data/data/####/97fb48011712d535_0
  • /data/data/####/989818e56496ef00_0
  • /data/data/####/9a4f7e456c284b3e_0
  • /data/data/####/9a69d52341ee6f91_0
  • /data/data/####/9afc16a6650352e0_0
  • /data/data/####/9afc16a6650352e0_1
  • /data/data/####/9b06f944d82f56bf_0
  • /data/data/####/9b06f944d82f56bf_1
  • /data/data/####/9b64de437880cd27_0
  • /data/data/####/9c7138a5f9990e4a_0
  • /data/data/####/9cf909f49c73101a_0
  • /data/data/####/9d05edef82ec5126_0
  • /data/data/####/9d20678f7bde3997_0
  • /data/data/####/9d2384dc46365927_0
  • /data/data/####/9d81be1b187197df_0
  • /data/data/####/9d91cd927a241ba9_0
  • /data/data/####/9debadc9b7b69ebf_0
  • /data/data/####/9eb401e684c4f15b_0
  • /data/data/####/9eb401e684c4f15b_1
  • /data/data/####/9f64eb8315008cd1_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/XZSqVki.dex
  • /data/data/####/XZSqVki.dex.flock (deleted)
  • /data/data/####/YkswtKzEmuv.dex
  • /data/data/####/YkswtKzEmuv.dex.flock (deleted)
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a26ff7ebf65711a2_0
  • /data/data/####/a4f91036793cc7fc_0
  • /data/data/####/a7338aa8029118f8_0
  • /data/data/####/a909e61377a722ff_0
  • /data/data/####/a9b2a86db302774a_0
  • /data/data/####/a9b2a86db302774a_1
  • /data/data/####/a9fb05ac05a9f2cb_0
  • /data/data/####/ab1da4acffeab970_0
  • /data/data/####/abf3dbc1e421c34c_0
  • /data/data/####/ac19a4d0b8e995cb_0
  • /data/data/####/ac612308a2081165_0
  • /data/data/####/ac612308a2081165_1
  • /data/data/####/ac63089cd2ba93e6_0
  • /data/data/####/ad582fdd06fb34fd_0
  • /data/data/####/ae10119d09f66682_0
  • /data/data/####/ae2b638a40b968e2_0
  • /data/data/####/ae780e890c5a9f7f_0
  • /data/data/####/ae780e890c5a9f7f_1
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_0 (deleted)
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/af0cb7e3c93e0dbb_0
  • /data/data/####/af0cb7e3c93e0dbb_0 (deleted)
  • /data/data/####/af689ec34e35d9c4_0
  • /data/data/####/b041e2d710998815_0
  • /data/data/####/b16cf5355e29eff8_0
  • /data/data/####/b1e18deaf12e42a1_0
  • /data/data/####/b35ec17b7804f676_0
  • /data/data/####/b35ec17b7804f676_0 (deleted)
  • /data/data/####/b3659f384da8d578_0 (deleted)
  • /data/data/####/b394d74a7a655599_0
  • /data/data/####/b39e4d293e1598c8_0
  • /data/data/####/b4a95f7b1eb71b13_0
  • /data/data/####/b61d3c3523e750fe_0
  • /data/data/####/b7bda711931af62b_0
  • /data/data/####/b8c938c1af88606b_0
  • /data/data/####/b97521682eb94942_0
  • /data/data/####/b97521682eb94942_0 (deleted)
  • /data/data/####/baea45a6c1a9d2c0_0
  • /data/data/####/bbcd80bd0870e7e8_0
  • /data/data/####/bd362a0f7502aeb2_0
  • /data/data/####/bd362a0f7502aeb2_1
  • /data/data/####/be97427b03d8575a_0
  • /data/data/####/bf2176f3c0e3c31d_0
  • /data/data/####/bf28076ee51ac5d9_0
  • /data/data/####/c17319c0aad67622_0
  • /data/data/####/c37564d32e5dd785_0
  • /data/data/####/c3ad037f6aa07275_0
  • /data/data/####/c3c20b2f00d23500_0
  • /data/data/####/c3e7bd2fc56a5ec9_0
  • /data/data/####/c57b6524763fe785_0
  • /data/data/####/c725426ba4d824d3_0
  • /data/data/####/c75152099e8c1e8a_0
  • /data/data/####/c75152099e8c1e8a_0 (deleted)
  • /data/data/####/c817c3815167318d_0
  • /data/data/####/c82e4966c962ebcd_0
  • /data/data/####/c87e6537167ec8c5_0
  • /data/data/####/c8aabd7e61462f3c_0
  • /data/data/####/c8c09187a4fb68ff_0
  • /data/data/####/c945c823ca9bc0d1_0 (deleted)
  • /data/data/####/c966280c2fcda712_0
  • /data/data/####/cac53c5666cab511_0
  • /data/data/####/cb9cde24f5b096f9_0
  • /data/data/####/cb9cde24f5b096f9_0 (deleted)
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/ccb6ae163afebfc0_0 (deleted)
  • /data/data/####/cd1860cc1264f113_0
  • /data/data/####/cd1860cc1264f113_0 (deleted)
  • /data/data/####/ce0828a8b7865632_0
  • /data/data/####/ce0828a8b7865632_0 (deleted)
  • /data/data/####/ce0828a8b7865632_1
  • /data/data/####/ce99954b54aff87b_0
  • /data/data/####/com.bpuznxkfe_preferences.xml
  • /data/data/####/d0940b08081d234a_0
  • /data/data/####/d0947dabc6013fba_0
  • /data/data/####/d2baa60f630fe41f_0
  • /data/data/####/d37343894a9d6cb6_0
  • /data/data/####/d3bb34d7a0c81781_0
  • /data/data/####/d4230c7c8cde309b_0
  • /data/data/####/d610f9697d06f6cd_0
  • /data/data/####/d63f51ef9e6f585e_0
  • /data/data/####/d646c4e5a2117ec8_0
  • /data/data/####/d6941a812087e075_0
  • /data/data/####/d76cdc394fae8bbc_0
  • /data/data/####/d82435f16019a704_0
  • /data/data/####/d862004351d13fba_0
  • /data/data/####/d943e1bffc20bdfd_0
  • /data/data/####/d943e1bffc20bdfd_0 (deleted)
  • /data/data/####/d98d8fd7508da8b9_0
  • /data/data/####/d9946eaeaa6c244b_0
  • /data/data/####/d9946eaeaa6c244b_1
  • /data/data/####/da4fa71c6dd5a772_0
  • /data/data/####/da656b5775b93a3c_0
  • /data/data/####/da656b5775b93a3c_0 (deleted)
  • /data/data/####/da98d8db91c1a165_0
  • /data/data/####/dd2a948a620c0ad9_0
  • /data/data/####/dda9c1be62dcb303_0
  • /data/data/####/e02c45ad40286cba_0
  • /data/data/####/e02c45ad40286cba_1
  • /data/data/####/e04ecf0bca57320a_0
  • /data/data/####/e40f3584d4bc63b2_0
  • /data/data/####/e417daa654918a08_0
  • /data/data/####/e417daa654918a08_0 (deleted)
  • /data/data/####/e41c378e78c5b3b2_0
  • /data/data/####/e4c032c4874cdd8a_0
  • /data/data/####/e58eedaa54f96659_0
  • /data/data/####/e5af8aefe7b8c11e_0
  • /data/data/####/e6b717c1d46b1700_0
  • /data/data/####/e7bbb2bb724d18b9_0
  • /data/data/####/e7d681362061db02_0
  • /data/data/####/e8774cd282de8040_0
  • /data/data/####/e8b82c2a59abb6a0_0
  • /data/data/####/e93cd3d8bcdfbbfc_0
  • /data/data/####/e985c81596532420_0
  • /data/data/####/ebef35fb2b0f0bf4_0
  • /data/data/####/ed79ffc53be5ded6_0
  • /data/data/####/ed9904a320dfd4d9_0
  • /data/data/####/ee00b75f1e6b65ca_0
  • /data/data/####/eec01e95e8fc1bf9_0
  • /data/data/####/ef07203ffda029e2_0
  • /data/data/####/efa969a17f07e2b5_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f129322a1f937265_0
  • /data/data/####/f2291bd31bc94bdc_0
  • /data/data/####/f2bf38939aa2c133_0
  • /data/data/####/f30f5b0a85ec9b2d_0
  • /data/data/####/f400f1465bd5e650_0
  • /data/data/####/f4cdeabc8b841447_0 (deleted)
  • /data/data/####/f5cfd60b862a4db8_0
  • /data/data/####/f5fa9c6556e1c73b_0
  • /data/data/####/f5fa9c6556e1c73b_1
  • /data/data/####/f66190232104951a_0
  • /data/data/####/f66190232104951a_1
  • /data/data/####/f70ad20488973a39_0
  • /data/data/####/f7dd3533cfed2581_0
  • /data/data/####/f7f50188faf58335_0
  • /data/data/####/f83c604e1e4adbe4_0
  • /data/data/####/f8837464383b0097_0
  • /data/data/####/f9bb1a73efc8ea19_0
  • /data/data/####/fRvBk.dex
  • /data/data/####/fRvBk.dex.flock (deleted)
  • /data/data/####/fa0dfe2adbb7d5cf_0
  • /data/data/####/fb4ae735958c1d99_0
  • /data/data/####/fbd3ba0341e0b989_0
  • /data/data/####/fd3f0251418f23d3_0
  • /data/data/####/fd6f88466b3ac2f0_0
  • /data/data/####/fd9468a5f59dbadf_0
  • /data/data/####/fd9468a5f59dbadf_1
  • /data/data/####/fe3294c476804221_0
  • /data/data/####/fe67caf060346994_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/temp-index
  • /data/data/####/the-real-index
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android