I have a Nexus 5 phone running Android 6.0.1 (security patch level 1 Jun 2016).

It appears that over the past few days it has become infected with malware.

Periodically (every 10-15 minutes) a transparent notification appears near the bottom of the screen that looks like this (the numbers will change, and possibly the non-English text).

enter image description here

Here's what I have tried so far:

  • Installed Malwarebytes and ran a scan but it couldn't detect it.
  • Installed a few Antivirus programs (AVG, 360 Security) and it didn't find anything out of the ordinary.
  • Installed OS Monitor to see if there are any suspicious processes running or network connections open but nothing stands out.
  • Closed all running apps
  • Rebooted the phone

The notifications keep popping up. I'm a bit stuck here - this definitely looks like malware, but not sure where to go from here. Obviously a factory reset is an option, but I'd like to expore other options first.

Any recommendations about how to proceed?



After 2 days, uninstalling ES File Explorer seemed to do the trick - I'm not seeing these pop-ups anymore.

After further research this appears to be caused by an update to ES File Explorer (see this question). I have now uninstalled that app.

  • +1 for uninstall. If this is truly ES File Explorer-based, please update your answer after a few days to confirm. This would be strike 2 vs. ES File Explorer in a short time period, after their lock-screen advert incursion. Greater dispersion of this information is warranted in that case.
    – wbogacz
    Jul 10 '16 at 23:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.