Questions tagged [malware]
For questions regarding viruses, trojan horses, spyware, and other malicious software, especially in removing or preventing it.
-2
votes
0answers
16 views
Why are there two com.google.android.gm?
I find it weird that there would be another com.google.android.gm and can't tell which is the real one. Both regenerated (after I deleted both) after I opened Gmail and find it weird for there to be ...
0
votes
0answers
12 views
Why is there another Phone icon in my Apps?
This appeared a few minutes ago after I accepted the permissions of my Messaging app. It wasn't there earlier when I took look at the Apps which is weird. Also it looks different from the other Phone ...
4
votes
1answer
59 views
When Google removes malicious apps from their Play Store, are users notified?
This Check Point Research article describes over 200 malicious apps on the Google Play Store that were downloaded over 100 million times. Google has now removed the apps from their Play Store.
But ...
4
votes
1answer
97 views
For basic users - Any reason to install mobile security App?
For users that play it straight, never going to doubted sites, never enabling APK from non-play sources... (e.g typical seniors)
Any reason to install a mobile security app?
Because
Such users ...
0
votes
1answer
49 views
Apps whitelisted in AFWall+ without my knowledge
I've installed a firewall (AFWall+) on my phone, and I've manually whitelisted every app I wanted to allow accessing the Internet, including system apps. So everything is blocked by default, and I add ...
0
votes
0answers
45 views
How do I get rid of com.android.Pet.mediaproxy?
I found this on my phone on my Files after I woke up. I accidentally fell asleep and I have a housemate who likes messing with my things and decided to put something on my phone that is actually a ...
0
votes
1answer
26 views
File level changes by an Android app
How can I track the file level changes done by an application during execution on an Android device. Specifically I am interested in file level changes done by a malware - create, delete, save a file ...
0
votes
0answers
30 views
Android malware debugging
To understand a malware better when it is running on a device, I would like to get a view of what is happening in the background. For instance if a malware is loading a page using LoadUrl, I want to ...
0
votes
0answers
33 views
How to locate app which installed a potentially malicious certificate?
On my S8 (Oreo) today, I got the notification: There is a certificate installed that may or not monitor your internet traffic.
Did spyware install itself? Or is this normal?
I updated from 7.0 to 8....
1
vote
0answers
74 views
Factory reset did not remove malware problem on my ZTE zmax blade. What do I do at this point?
Surveillanceware or a worm of some sort has highjacked my Android and Facebook and email accounts. I'm unable to scan with my premium plus lookout account because the virus has disabled lookout and ...
0
votes
1answer
51 views
Can a malware compromise safe-mode of non-rooted device?
Was there any known malware running on Android (let's say since Nougat) which can compromise non-rooted Android device in a way that the malware is active also in the safe mode?
So when booting non-...
1
vote
1answer
172 views
Is GetApk Market application trustful?
Is "GetApk Market" application trustful or malicious? Will it affect one's smartphone or tablet?
I have checked via VirusTotal & it mostly detected as Android.Riskware.Downloader:
Can anyone ...
0
votes
1answer
107 views
How to remove a persistent malware that downloads unwanted apps?
Some months ago, I purchased an Azumi cell phone from an official store in a shopping mall in Mexico and subsequently discovered its firmware contains a ton of malware. The malware connects with a ...
1
vote
1answer
71 views
What kind of applications use internet on the background? [duplicate]
Viewed the list of applications that use Wi-FI and came across what is shown on the image below.
What it is? Virus? Instead of Google I use F-Droid. Root is there, but only Total Commander and ...
3
votes
0answers
99 views
How to remove a persistent malware?
My Samsung Note 8 has gotten very weird lately. I get programs I never have installed, and when I try to reboot/reset my device with no backup they still come up after I'm finished with the reboot.
I ...
1
vote
2answers
120 views
Vital signs of unfamiliar software are present in safe mode: TopBuzz in Galaxy Note8
In Device Maintenance system app on Samsung Galaxy Note8, there is a TopBuzz cache shown when caches are being cleaned. Also in the safe mode.
It reappears as a cleanup item every few minutes together ...
3
votes
0answers
62 views
How to uninstall an app which restarts the phone when uninstalling it?
This app named Handwriting Fonts for Samsung, Oppo and HTC phones is acting like a malware. Whenever I try to uninstall it, my phone restarts (or probably reboots) and the app doesn't get uninstalled. ...
0
votes
1answer
128 views
How can I identify the cache if I see its name? One name is suspicious
If Device maintenance app is launched in Samsung S8, after pressing Clean Now button, storage cleanup briefly shows different apps, storage space of which is being cleaned:
System cache
OneNote
...
1
vote
2answers
89 views
Malicious software runs on the background of Android phone, but I cannot see it - how to find and remove it?
I know that a malicious malware/spyware has been installed on my Samsung Galaxy S3 phone and I constantly get the message to close apps not in use because they drain my battery. But I do not have ...
-5
votes
1answer
126 views
How do I disinfect my device infected with a malware?
In the process of trying to resolve the infection, I kept hitting major, dangerous hurdles. I had a pretty good guess as to what had led to the infection, but hit hurdle after hurdle as I tried to ...
2
votes
2answers
122 views
Problems with the DNS Network part (or maybe virus/malware-related) on Android 6.0 Marshmallow (Alcatel Vendor)
I've been experiencing some strange problems maybe that be related with the DNS Network part in Android 6.0 Marshmallow, and could mention these two origins as the main likely sources of problems:
• ...
1
vote
0answers
47 views
Audio file opened by itself?
This morning I woke up to the alarm on my phone, as I snoozed it I noticed that the Total Commander player had a notification open, with an audio file open but on hold.
When I tapped on play I got ...
2
votes
0answers
1k views
Finding out what App causes unwanted new tabs in firefox on Android [duplicate]
Recently some app started opening new firefox tabs with the adress 'livemobilesearch.com'. I uninstalled the most recentently installed apps, but the problem still persists. I assume the pages get ...
1
vote
2answers
403 views
How to know what is causing a weird lock screen with ads to show up?
I have a Samsung Galaxy J7 that just started displaying this as the lock screen. Sometimes, it displays my regular lock screen, but if I let my phone sit long enough, it will display this screen. It ...
1
vote
1answer
36 views
Is possible to invoke an Android API without declaring the related permissions but with root access?
While reversing some malware, I have realized that despite they use an exploit that gives them root access, such malware declares a lot of permissions in the manifest.
Because (AFAIK) "normal" apps ...
1
vote
0answers
45 views
Detecting a Bad File
I have an LG STYLUS 3 phone and suspect that it may be remotely controlled or linked to another person. What do I look for to know whats up?
0
votes
2answers
370 views
How do I remove Trojan horse virus from my android smartphone?
There is a virus in my android phone named com.wgjvp.idck and I tried every possible solution to remove it but couldn't find any solution.
What I did:
I hard-reset(factory-reset) my phone twice but ...
0
votes
0answers
53 views
How to get rid of malware rootkit?
I wanted to root my tablet and installed a rootkit. Soon thereafter I realized that besides giving me root access, the rootkit was also uploading all my files and settings to some unknown place.
To ...
1
vote
0answers
42 views
Popups with promotion
Sometimes, I'm getting popups on my Samsung S8 with promotions. Especially it is annoying during navigation with Google Maps. How to disable popups? How to know which application is responsible on ...
0
votes
1answer
683 views
How to remove adware popups from notifications in S8?
So I visited a torrent site (not sure if it's the cause 100% though) on my S8 last night & since then have been getting the popups shown in the screenshot. I downloaded & ran Malwarebytes, ...
1
vote
1answer
90 views
What is the scope of Google Play Protect's scanning?
Even though I don't recommend relying on it (because it is not very effective), I know quite a few people who only use Google Play Protect.
Does Google Play Protect only scan apps installed via the ...
0
votes
0answers
27 views
What are the possible security issues when you're rooted? (not for apps but while browsing) [duplicate]
when flashing a good custom rom, will you have more security issues? in what way?? does this mean that lets say you had a pixel or a galaxy and you browsed a site with pornographic content or an ...
1
vote
0answers
56 views
WIndows Antivirus reports Arp Cache Poisoning Attack by Android device
A Windows computer running ESET reports Arp Cache Poisoning Attack by the IP of my android phone.
It's Redmi Note 4,
MIUI 9 Global Stable,
Android 7.0.
I scanned it with Avast, Malwarebytes, MIUI ...
-1
votes
1answer
232 views
What is the best practice to deal with suspected malware infections in Lineage/Android?
I have reason to believe that my Lineage OS (14.1-20180620 nightly build) may be infected with malware. How should I deal with this?
Other questions recommend running Malwarebytes. A question asking ...
1
vote
1answer
62 views
How to stop Wi-Fi from using all my mobile data?
My phone all of a sudden is consuming huge amounts of mobile data ; apps usage report shows that 'Wi-fi' is causing this: from less than 500Mb per month is has consumed 2GB in a day , and it continues ...
0
votes
0answers
49 views
How to stop “keeps stopping” pop up
I've tried using malware detecting software, clearing app caches, and disabling notifications for most apps, but I still get this popping up every few seconds.
I've tried searching, but I couldn't ...
0
votes
1answer
38 views
Samsung phone charges poorly, periodically
My Samsung S8+ has started having periods when it does not keep up 100% charging when connected and in simple editing usage. If I leave it idle it charges slowly and the "charger beep" occasionally ...
0
votes
1answer
46 views
Where are LineageOS nightlies compiled & Who has commit rights to the codebase?
A] Where are LineageOS nightlies compiled?
1) Are they compiled on maintainer's machines
2) On a project controlled build farm?
3) Pool of contributed (random) machines?
B] Who has commit rights to ...
0
votes
1answer
213 views
Is there Malware on LineageOS that causes to receive SMS Spam
I never get SMS text spam on my phone. Installed Lineage OS on a Samsung Galaxy S4 mini phone. I installed TWRP and LOS both from official website (not various links on google or XDA). Installed F-...
1
vote
0answers
298 views
How to stop apps from self installing
I have a problem for quite some time now. An app called xeroxservice which does not have any icon except that of apps like Google framework etc keeps downloading and installing itself without ...
1
vote
0answers
1k views
How can I remove com.android.service, launcher3, Medias and Shell?
I own a cheap Chinese android phone which I use for my everyday tasks and I am having issues with what I understand is malware.
Frequently, Google Play informs me to
Disable harmful app "com....
0
votes
0answers
113 views
What's this file libAppDataSearchExt_armeabi_v7a.v7.so downloaded from *.gvt1.com on my device?
I was checking the traffic of my Android 5.1 tablet, and I've found that some files are downloaded discretely like this one:
GET /edgedl/android/appdatasearch/libAppDataSearchExt_armeabi_v7a.v7.so
...
0
votes
3answers
544 views
cannot disable OEM app
My new Jasper phone has a persistent app from the original manufacture which keeps popping up. Without rooting the phone, how can I disable or remove this app? Dragging it to "remove" doesn't ...
-2
votes
2answers
75 views
How to uninstall app that seems to be an adds?? *The app that I accidentally install is not an apk but in the form of system app and I forgot the name
This is the picture
It's really nice to have some one helping..
Thanks
-1
votes
2answers
448 views
How can I remove adware that I can't uninstall, without resetting my phone?
My device has Android 7.0. I believe my device is affected with some malware.
Symptoms:
Pop up ads in the middle of the screen. When I click on the close button, it starts downloading random apps.
...
0
votes
0answers
541 views
Androidrbx and Swak News
I have an BLU Advance 5, and of course I already have the same problem than other users have around the Androidrbx and Swak News. I still have no answer about how to stop vicious routine of ...
3
votes
2answers
140 views
Persistent malware despite factory resets
I'd love your thoughts on this. Several months ago I mistakenly clicked a popup on a website, and since then have been getting intermittant popups says "your sim card is infected...etc" and it tries ...
-1
votes
1answer
292 views
The application tag in android manifest XML file
Today I downloaded a fun app named Rubika and extracted its apk file in android studio and noticed a very strange part in its android manifest.
<application
android:theme="@ref/0x7f110170"
...
4
votes
0answers
1k views
Virus keeps downloading “Female for Portuguese” TTS file while hijacking Chrome
Device: Samsung Galaxy S4 mini [SCH-I435]
OS: Android 4.4.2
Problem:
When I try to open my browser (Chrome) it auto redirects to us.councilors425qd.top/.... and starts auto downloading "Female for ...
1
vote
0answers
20 views
I have a weather window that keeps popping up
I have a weather window that keeps popping up. It occurs randomly & wants permission to install. Problem is, it looks me out of doing anything but installing. Only way to not install is restart ...
