1

In short I think I may have a slight chance of having dropped Malware on my phone via an infected ad (redirect was to rdr.harbwire). Am just keen to ascertain the risk given some of the things I have on the phone. I think I am likely OK but would be greatful for a second opinion.

What I was doing;

  1. Was surfing a wiki of a TV Show using the standard Android internet browser (on a Samsung). Java Script was on, Cookies were off.
  2. Get re-directed to a pop ad over the browsing screen where you could only click OK (address was something like rdr.harbwire). Had seen these on PC's so knew not to click OK. Tried clicking back which didn't work - as I couldn't see how to close the pop up (tried to load in a new screen but re-directed me back to the ad).
  3. Quit the browser, used History Eraser & went back in - and it is still there.
  4. Found Internet in App.Manager (why did they have to hide it somewhat?) & cleared all data and cache.
  5. Went back & it is now gone. Have then switched off all Java Script & Cookies etc.
  6. Ran Avast Mobile Security a couple of times (which only seems to scan apps now?) which came back clear.
  7. Looked at the internet which seemed to suggest nobody else is panicing (the fact I clicked back bothers me - one of the screens that tried to load in seemed to suggest Malware may have infected or tried to infect my phone).
  8. Think I am OK - phone seems OK but I am slightly OCD about these things.

In short is there a way of telling whether I am in the clear or not? I don't do much with the phone but just want to know I am OK. I'm just concerned about the possible risk of a drive-by style download approach from the ad.

Thanks in advance for any suggestions.

  • 1
    Sounds like you're in the clear. Remember that OEM web browsers are vulnerable to password sniffing, address spoofing, and XSS sniffing on Android 4.3 Jellybean and below. More info pt. 1 // More info pt. 2 – Aaron Gillion Mar 27 '16 at 21:45
  • Cheers. Am on 4.4.4 - was aware that everything has risks, so it's why I am about the only one of my friends that actually went with a virus checker above what was installed on the phone. Is there a way of knowing if I am 100% clear? Have asked this elsewhere & have had a similar response. Think I am OK. Was just concerned about the risk of an auto install & run. – user8812 Mar 27 '16 at 22:02
  • You've kept a clean head in that situation – right steps. I'd say you've been in the clear at step 5 already (I don't think much of those AV apps). – Izzy Mar 27 '16 at 22:09
  • 1
    Hmm. I don't trust Android AVs, at least not those wo/ an heuristic engine. You avoid responding to the popup, so you managed to not authorizing anything hidden below it. Good job. – Death Mask Salesman Mar 27 '16 at 23:32
  • 1
    @DeathMaskSalesman - I agree. Without root, an AV app can't do a thorough scanning job. – Android Dev Mar 28 '16 at 0:41

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.