3

I have in my hands a Mpie M8 device (Android 5), The previous owner said it wasn't working properly and I suspected it had a virus. I factory reset it and now the phone wants desperately to install com.google.system.s every 5 seconds even though I press cancel and even though I have WiFi off. I install it and it said that it is about locking. The phone started restarting all the time. I downloaded 360 Security and it said this is malware.

I tried to uninstall it and it said that this app is deep in my phone. I finally uninstall it (with a lots of sweat). And I have the same problem again, every 5 seconds. What is this file? What should I do?

4
  • Based from this page, it seems it's removed as malware. However, I couldn't find any info about this malware...
    – Andrew T.
    Commented Nov 14, 2015 at 20:11
  • I couldn't find anything in internet either. I don't know what to do. I can't do anything. I can't use any app. This device has a non-removable launcher and all the time it says "loading launcher". When the launcher is loading the phone wants to install this and "launcher stopped working" and "play store stopped working" and "news365 stopped working" etc etc. This happends every some seconds..
    – user136786
    Commented Nov 14, 2015 at 20:25
  • I just found the VirusTotal report for this malware. Hopefully, it can give some more insight to nuke it.
    – Andrew T.
    Commented Mar 16, 2016 at 6:18
  • Related: android.stackexchange.com/questions/139768/… Commented Mar 16, 2016 at 12:19

2 Answers 2

2

From experience, flashing in any conventionally accepted way instantaneously bricks this Mpie M8. It takes a lot of efforts to unbrick it, too. So work with what you have, root it first so that the malware can be managed. When the auto-installation-without-permission starts, pull down notification and click on app info to see which system process is being hijacked and disable it immediately. As an example, mine shows Launcher and Android Service are involved. Have used a different launcher instead just to be on the safe side. Android Service, hiding in /system/priv-app as android_service_800000_0923_outsea.apk, appears the true culprit. Once deleted, the phone runs flawlessly. Of course your phone may have different malware in it depending on which malicious websites that you have visited. Good luck.

-1

Go to Settings → Security → Device Administrators and uncheck COM.GOOGLE.SYSTEM.S. Now you can uninstall it.

1
  • OP wrote: "I finally uninstall it (with a lots of sweat)" (sic) and then noted "I have the same problem again, every 5 seconds. What is this file? What should I do?". Your answer has not addressed the question correctly. Please revise it.
    – Firelord
    Commented Mar 4, 2016 at 18:27

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .