Today on a normal navigation with firefox a fake popup said

"your firefox is infected with 2 virus"

then android ask me to give to firefox the "vibration access" of course i refuse. And then firefox ask me to going to google-play to download antivirus.

I deinstall firefox and reinstall..and the page with advice disappear.

I download then the "free antivirus" from google-play(not the antivirus wich firefox want to force me to download) and do a scan..no virus found.

But now with linux I do a nmap on android device..and port 554(rstp) tcp is open! Why is open?Is my device infected or what else?

  • 3
    Never believe adds that pretend your phone has been infected!
    – esQmo_
    Feb 11, 2017 at 2:29
  • Delete the browser cache and it probably will vanish as you discovered after re install. It does not mean that your device infected. You may like to run a scan using Malwarebytes app from play Store.
    – beeshyams
    Feb 11, 2017 at 3:06
  • He said 0 malaware
    – elbarna
    Feb 11, 2017 at 3:16
  • it can be their as the websites can exploit stagefright bug and infect it and antivirus might not know it
    – xeon zolt
    Feb 11, 2017 at 15:07
  • 554 or 5554 (port)?
    – user186920
    Feb 12, 2017 at 4:05

1 Answer 1


Solution found,there is something strange on my net because i see 554 port on every machine!

But if i did a telnet outside this machine..554 doesn't answer.

I investigate..meanwhile i'm happy my android is not infected,firefox probably take a fake virus.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .