Questions tagged [malware]
For questions regarding viruses, trojan horses, spyware, and other malicious software, especially in removing or preventing it.
404
questions
0
votes
0
answers
125
views
Android stalkerware abilities
I have a Xiaomi Redmi 4 (4X). I just unlocked the bootloader and cleaned all flashed my phone because the stalkerware my friend installed wasn't going away by a factory reset.
After some days from ...
- 11
0
votes
0
answers
136
views
Android spyware detection
I installed an APK which my friend sent through a link through instagram and as soon as I donwloaded and installed it, it disappeared into the background
And she told me to unlock my oem before ...
4
votes
1
answer
809
views
How can Phones such as Oppo be vulnerable to Privilege escalation exploits
Oppo (to my knowledge) makes it basically impossible to root, due to locking the boot loader and removing fast boot. So I'm wondering if this changes anything in regards to Privilege escalation ...
- 41
0
votes
0
answers
155
views
Android malware opens browser tabs with spec. URL
I got Android malware on my Redmi 9 smartphone which open numerous tabs on my browser with the URL https://jaavnacsdw.com/GAS/GAS.php?c=1797742&c1=VAR. One time, I had 133 tabs.
Does anyone know ...
- 1
1
vote
0
answers
337
views
How to determine if an Android device is compromised with a rootkit?
How would you go about checking your smartphone for root level malware, including rootkits, if you cannot get direct access to smartphone partitions?
There's news almost monthly how cheap Android ...
1
vote
0
answers
50
views
How can I find and remove the source of "full screen" ads when I can't locate it in any of my apps?
There is a site/app that takes up my whole screen (LG V30 Pie) several times a day. The top part, in the blue area, is always the same. The rest can be scrolled.
None of my apps allow "draw over&...
- 11
4
votes
2
answers
1k
views
Can APK cause any harm on open (without installing)?
We downloaded some APK files and attempted to open them only to encounter the "There was a problem parsing the package" error. So it didn't even make through to the Install screen. However, ...
- 173
1
vote
0
answers
48
views
android automatically download bad apps
as you can see in the following picture
there are apps such as "Solitaire", "Ball Sort", "Count Masters", "Galaxy Attack" and many others that keep ...
- 111
3
votes
0
answers
565
views
Two Android System apps after AVG/Avast flagged it as false positive. Normal?
I have a Samsung s22. Yesterday AVG flagged an "Android system" app as malware with no ability to disable it. Appears it happened to many people. AVG looked into it and declared it to be a ...
- 31
0
votes
0
answers
155
views
Can virus (spy) apps install custom firmware (custom ROM) in a rooted Android phone?
I heard spy apps can root Android phones. If the phone is rooted and spy apps are installed, can spy apps install a custom ROM in that Android phone?
- 67
1
vote
0
answers
66
views
Debugging Firefox on Android
I had the following: on Firefox on Android, some links in a facebook post behaved this way: I got a pop-up window that there's no Internet and I should try again, and then the following screen ...
- 133
1
vote
0
answers
386
views
Verizon Software Keeps Re-Installing itself
i have a Pixel 4XL,
baseband version g8150-00123-220402-B-8399852
i think its American , but i have installed the Australian Firmware on the device , after a Factory Reset , and installation of ...
- 11
7
votes
1
answer
5k
views
I keep seeing a popup in Android: "Install now to control when your device updates" - is my phone compromised?
I am seeing this popup displayed occasionally over more than one app (in this image, it is appearing over my calendar app).
This appeared on a Google Pixel 6 Pro, which is updated to the latest ...
- 171
2
votes
1
answer
890
views
Can a hacker unlock the bootloader of an android device remotely?
Is it true that you can not unlock the bootloader of an android device remotely and the only way you can infect the firmware or bootloader is to have physical access to the device.
What about rooting? ...
- 31
2
votes
1
answer
230
views
Three different APK file sizes for the same version/build app?
I'm getting three different APK file sizes for supposedly the same version/build app:
Version
1
from Evozi: 22.485.694 bytes
Version
2
from Apkpure: 22.766.408 bytes
Version 3 from Aptoide:
18.641....
- 267
2
votes
1
answer
720
views
How to verify Samsung/Android firmware files - has Samsung published MD5/SHA256 hashes?
I've soft-bricked my Samsung Galaxy A40FN running Android 9.0 Pie while attempting to disable bloatware via ADB and I'm currently searching for a solution to recover my data and get the system back ...
- 267
0
votes
0
answers
4k
views
"Android Keychain" pop-up .... malware?
I have noticed a system screen pop-up a couple times now. It reads "Android Keychain".
The pop-up appears for only a fraction of a second.
The second time it happened I had just opened a web ...
- 1
1
vote
0
answers
121
views
What to do if malware not gone after complete factory reset?
I have a virus in my Samsung galaxy s21a, and even after a complete factory reset phone doesn't recover. What would be other solutions to fix it?
- 11
1
vote
0
answers
67
views
Are these random UID applications spywares?
It's been a year since I am ignoring all these Applications using my data and battery. At first, I thought they could be apps that I uninstalled a while ago. But, no, every third day they were showing ...
- 11
1
vote
0
answers
1k
views
Unknown files inside the root folder, filename starting with ".reaper"
I previewed (not downloaded) by mistake today a malicious PDF on the Gmail app with Adobe Reader app, and I already inspected the phone for malware, uninstalled the Adobe Reader app in case it was ...
- 11
0
votes
0
answers
177
views
How to find hidden malware on Android?
Today, while watching a YouTube video on my Samsung Galaxy S20 FE 5G, the left half of the video portion was covered with a pinkish/orangish screen with the words "MICROWAVE SPY CAMERA 1.XXXX&...
2
votes
2
answers
2k
views
What is this weird app on the homescreen of ColorOS 11? Is this a malware?
My device is an Oppo F11 Pro that I bought in 2019 and it has ColorOS 11.1 / Android 11.
Recently, this weird app popped out on my phone.
I tried to remove it, but when I tap on it, it says that it ...
- 123
1
vote
1
answer
1k
views
What is this unknown app on Oppo running Android 11? [duplicate]
This app just popped up on my Oppo A74 running Android version 11 and I can't open it, and it doesn't have a name.
I haven't downloaded anything today, and this app only came a few hours ago, so ...
0
votes
1
answer
289
views
A malicious file keeps appearing on my phone even if I have formatted it (1_unit_15x15_3_goldenFmt)
Some days ago, a keylogger was put in my phone by a hacker, and my phone got infected. After having formatted the phone, there is a file that keeps appearing on my phone and has not been deleted. The ...
- 3
0
votes
0
answers
98
views
Built-in Trojan?
So I bought this tablet from a little-known company called iGet. The tablet was brand new and all the apps you see on the following screen came with the tablet or were installed from the Play store (...
1
vote
1
answer
151
views
I connected my phone with usb debugging to an infected computer
I have a computer that used to have malware. During the time it had malware, I connected my phone to it with usb debugging (was unaware of the malware). I have no signs of malware but I'm still ...
1
vote
0
answers
119
views
Can an ADB backdoor persist after factory reset
Recently I started playing with automations in my Android device. Specifically, I used Automate, Tasker and MacroDroid. I also downloaded some Tasker plugins, and some ADB connectors for these apps.
A ...
- 111
0
votes
0
answers
132
views
Malware propgating through usb debugging
Summary:
Computer probably had malware. Didn't know. Connected phone to use as midi. Could have turned on usb debugging or usb tethering to see if that helped without knowing what it does as I was an ...
user362700
1
vote
0
answers
167
views
Are these apps with package name and random numbers malware?
Did a factory reset on my phone late last month and noticed a strange app/process in data usage the last few days titled "com.sec.mimage.uid.retouching:10076", low filesize but enough to ...
- 11
1
vote
0
answers
91
views
Can any virus be removed easily on non-rooted phones?
I know that all android devices are hackable whether they are rooted or not. I have general idea of protecting an android phone (or staying safe with android device) from any viruses. What I want to ...
- 13
1
vote
0
answers
55
views
My phone starts downloading an app which is named 'Google Play' but is not the actual google play
My phone starts downloading an app which is named 'Google Play' when I press it's dialogue for a second it shows 'Download Manager' as the app which is downloading it. But I don't have any download ...
1
vote
0
answers
547
views
Remove multiple viruses on Samsung A50
On my Samsung A50, it detects:
Android/Generic.S.7F619A!tr
Android/Generic.S.6C6770!tr
Android/Faketoken.SNT!tr
Trojan.Dropper.AndroidOS.Hqwar.bb
Android Generic.S.11954!tr
No antivirus or anti-...
- 11
1
vote
0
answers
162
views
Inspecting firmware integrity on Android
How do I inspect the integrity of the firmware on my Android device? For instance, if a Remote Access Trojan is present, what steps should I take to detect and remove them?
0
votes
0
answers
99
views
Mysterious grey rectangles on notification panel
Got a new Nokia 5.4 that has just recently been updated to Android 11 with no 3rd-party apps installed except Kaspersky. However, I've been noticing a rather strange behaviour where there seems to be ...
Dot Lee
1
vote
1
answer
5k
views
"Unable to get VPN permissions, you may need to reboot device and try again"
On my Play Store-included Chinese Android phone (Xiaomi Poco X3 NFC), I recently encountered an issue where I had to re-accept permissions for all of my apps. My VPN app failed, and I began getting ...
- 639
1
vote
0
answers
318
views
Doogee S88 pro Malware + install custom rom
I purchased the Doogee s88 Pro a year ago, and it is the perfect phone for my rugged lifestyle, except of the uncertainty of them installing malware / adware in their devices.
I'm trying to install a ...
- 11
3
votes
0
answers
36
views
Inexplicable possible automated event
I'd like to understand the cause of this:
I put the smartphone on airplane mode
After some hours I turn off the airplane mode, and activate internet connection
Suddenly, after having lowered the ...
- 165
3
votes
0
answers
254
views
How can I check if my Android device is infected with Pegasus Spyware?
I am referring to this Spyware which as been on the news lately:
https://en.wikipedia.org/wiki/Pegasus_(spyware)
How can I check an Android device for it? I would prefer step-by-step instructions, ...
- 131
0
votes
0
answers
226
views
How to determine exact package/application which cause undetected traffic consumption (only UID are known)
The situation
Some time ago I am started to locate data traffic leakage by the some packages, which listed in traffic listings as a numeric UID (five digits long). In both selection - by the cellular ...
- 111
1
vote
0
answers
41
views
Downloaded a phising application, what steps should I take next?
My dad accidentally downloaded a fishy DHL tracking application. The application was downloaded through a SMS he received.
I immediately noticed that the application wasn't accessible through the apps ...
- 11
1
vote
0
answers
205
views
Name and type of virus on Android which is attacking file system and storage drives
There's a virus on my Android phone which is attacking the file systems and storage drives attached to my device.
I need help identifying the virus, so that I may further my research and come up with ...
1
vote
0
answers
143
views
How to remove or find details about malicious "unknown" app that causes suspicious DNS requests
Using RethinkDNS firewall, I observe suspicious requests for the router IP 192.168.2.1 that is labelled by RethinkDNS as comming from an "Unknown" app (whereas RethinkDNS displays the proper ...
- 111
1
vote
0
answers
32
views
What's the best way to protect my rooted Android 7 from malware and hacking?
Considering I have to use cellular data and being not connected to the internet is not an option, what measures can I take or tools I can use to keep myself protected from prying eyes?
My first step ...
- 401
0
votes
0
answers
8k
views
What is the application PlayAutoInstalls
I just updated my device (Xiaomi Mi Lite 10) and found an app with a name that concerned me.
The app name is "PlayAutoInstalls", seems a system app that I never used or installed, but I can'...
- 101
0
votes
2
answers
210
views
Suspicious link on android
I accidentaly clicked on http://127.0.0.1:5555 this link on my android phone what should i do? i don't know anything about coding so please write with simple words to me
1
vote
0
answers
77
views
Which files do malware reside in after visiting a malicious site
I've been really on edge about accidently visiting a malicious site in the the past month, so please excuse how badly explained this question may be.
About twenty minutes ago I was visiting a site to ...
- 51
1
vote
0
answers
176
views
Finding which process writing to storage
I suspect my phone being infected by malware. Every now and then, there's a folder named LSF_PUSH in internal storage, containing APK from app called SnackVideo and other random pictures from its ...
- 111
6
votes
1
answer
1k
views
Finding and removing Android adware that opens Chrome tabs when unlocking the lockscreen
I'm battling an adware on multiple Android devices which none of the Malware removal tools I tried (Kaspersky, Avast, and Norton IIRC) can find.
Behaviour
While the phone is locked, new Chrome tabs (...
- 231
4
votes
0
answers
128
views
Worried about possible malware
I'm hoping someone can help me here. Yesterday I was doing some research for an essay when I clicked a website (very dumb of me, who never clicks suspicious websites or links) that redirected me. I ...
1
vote
1
answer
254
views
Is it possible for a phone to still be compromised/infected by malware or spyware even after a factory reset?
If yes then how can one ensure that its %100 wiped clean?
Android 7 | rooted
EDIT: Same question but how about when rom is flashed
?
- 401