Questions tagged [malware]
For questions regarding viruses, trojan horses, spyware, and other malicious software, especially in removing or preventing it.
375
questions
2
votes
0answers
67 views
How can I check if my Android device is infected with Pegasus Spyware?
I am referring to this Spyware which as been on the news lately:
https://en.wikipedia.org/wiki/Pegasus_(spyware)
How can I check an Android device for it? I would prefer step-by-step instructions, ...
0
votes
0answers
40 views
How to totally remove a virus with adb tools? [closed]
How can I delete a virus with ADB tools if when trying to uninstall it it says "Failure: package is non-disable", I tried to uninstall the virus with the mobile version of avast and with ...
0
votes
0answers
78 views
How to determine exact package/application which cause undetected traffic consumption (only UID are known)
The situation
Some time ago I am started to locate data traffic leakage by the some packages, which listed in traffic listings as a numeric UID (five digits long). In both selection - by the cellular ...
1
vote
0answers
29 views
Downloaded a phising application, what steps should I take next?
My dad accidentally downloaded a fishy DHL tracking application. The application was downloaded through a SMS he received.
I immediately noticed that the application wasn't accessible through the apps ...
1
vote
0answers
45 views
Name and type of virus on Android which is attacking file system and storage drives
There's a virus on my Android phone which is attacking the file systems and storage drives attached to my device.
I need help identifying the virus, so that I may further my research and come up with ...
0
votes
0answers
21 views
File modification remotely
I am working on a project which requires the capabilities of remotely modifying files in android. Is there any way to do that? In fact, any malware with a similar goal will also suffice?
1
vote
0answers
35 views
How to remove or find details about malicious “unknown” app that causes suspicious DNS requests
Using RethinkDNS firewall, I observe suspicious requests for the router IP 192.168.2.1 that is labelled by RethinkDNS as comming from an "Unknown" app (whereas RethinkDNS displays the proper ...
1
vote
0answers
24 views
What's the best way to protect my rooted Android 7 from malware and hacking?
Considering I have to use cellular data and being not connected to the internet is not an option, what measures can I take or tools I can use to keep myself protected from prying eyes?
My first step ...
0
votes
0answers
466 views
What is the application PlayAutoInstalls
I just updated my device (Xiaomi Mi Lite 10) and found an app with a name that concerned me.
The app name is "PlayAutoInstalls", seems a system app that I never used or installed, but I can'...
0
votes
2answers
45 views
Suspicious link on android
I accidentaly clicked on http://127.0.0.1:5555 this link on my android phone what should i do? i don't know anything about coding so please write with simple words to me
1
vote
0answers
52 views
Which files do malware reside in after visiting a malicious site
I've been really on edge about accidently visiting a malicious site in the the past month, so please excuse how badly explained this question may be.
About twenty minutes ago I was visiting a site to ...
1
vote
0answers
58 views
Finding which process writing to storage
I suspect my phone being infected by malware. Every now and then, there's a folder named LSF_PUSH in internal storage, containing APK from app called SnackVideo and other random pictures from its ...
6
votes
1answer
762 views
Finding and removing Android adware that opens Chrome tabs when unlocking the lockscreen
I'm battling an adware on multiple Android devices which none of the Malware removal tools I tried (Kaspersky, Avast, and Norton IIRC) can find.
Behaviour
While the phone is locked, new Chrome tabs (...
3
votes
0answers
101 views
Worried about possible malware
I'm hoping someone can help me here. Yesterday I was doing some research for an essay when I clicked a website (very dumb of me, who never clicks suspicious websites or links) that redirected me. I ...
1
vote
1answer
107 views
Is it possible for a phone to still be compromised/infected by malware or spyware even after a factory reset?
If yes then how can one ensure that its %100 wiped clean?
Android 7 | rooted
EDIT: Same question but how about when rom is flashed
?
1
vote
0answers
24 views
Why does my phone battery die at 0% then it has more battery when I turn it on again?
So after dying at 0% when I turn it on again, it can have more battery like 26%. Why does this happen?
Does this mean my phone has a virus?
0
votes
1answer
125 views
How to get rid of spying app (rooted)
My android phone is installed with spyware (spying app). This can be a breach for my business leaking out passwords.
How to clean wipe android OS and freshly install Android OS again cleanly.
My ...
0
votes
1answer
32 views
Why do I see a screenshot of something that I was doing in the background on my smartphone?
When I take a screenshot it does not appear on it, it is like seeing through a drawn glass, It can only be seen from the outside, it's hard to explain.
Is it some kind of malware? The screenshot looks ...
4
votes
1answer
599 views
Why am I getting Google Drive notifications about strangers' documents?
Screenshot:
Is this just a new form of spam or phishing technique, basically betting that I'll click on the notification and look at the document? I haven't looked at any of them yet, but it seems ...
0
votes
0answers
63 views
Unable to permanently deleted broken files automatically appearing in “recently deleted” in photo gallery
I have this problem since few weeks now. I am Unable to permanently deleted unknown broken files (2 videos) automatically reappearing in "recently deleted" files in photos gallery app (Oreo ...
0
votes
0answers
52 views
So, I have an app called “ww_easteur001”, never installed it, and it behaves… weird I would say. Need help with it
So, I never installed this app, it just appeared at some point on my phone. I didn't do anything at first, thought it was something related to android because it has an android icon.
The problem is ...
1
vote
0answers
28 views
What are the chances of a malware being persistent if I dd to write system.img and userdata.img from twrp
If I had a malware on my phone, say malware like xhelper, or strandhogg or something even critical than that, what are the chances of it being persistent even after using dd to write the system.img ...
2
votes
0answers
451 views
Is mtk-su safe? Is it actually temporary?
mtk-su which helps mediatek mtk-65** based phone owners to basically gain a "temporary" root. My question is, if it was actually temporary as it claims, and if it actually doesn't persist ...
9
votes
1answer
3k views
Suspected malware on stock apps in a Mediatek mtk65* based phone
I have an old(2016) Mediatek mtk6580 chipset phone(non rooted/stock). Couple days back, I downloaded an app called "Apk extractor" from play store, and extracted the system apps to the ...
1
vote
0answers
27 views
Is this “app” malicious or is it a bug? [duplicate]
I was examining my battery usage and noticed this:
I don't know what this "-5" app is supposed to be. Could it be malicious or is it just a bug?
I own an OnePlus 6 with Android 10 (OxygenOS ...
0
votes
0answers
484 views
IP blacklisted - unusual traffic - possible malware?
Over the past month I've had about 5 or so occasions where Google force me to do a capture on a normal search, saying that there is unusual traffic from my device.
Recently, past few days, I've had a ...
0
votes
1answer
148 views
how to identify on command line terminal emulator apps and packages that have active network connections [duplicate]
I tried this using an app and I am able to identify most apps and their network connections however there are certain apps listed as '?' so apparently it is not able to identify a package name I ...
0
votes
0answers
26 views
Do rooting applications read as malware?
I DLed a root application at XDA-Developers and my Malwarebytes and Virus Total say it's malware. I suspect this is normal given what it does, but what I've read of rooting, never has it said, 'your ...
0
votes
0answers
33 views
Does cell service provider has ability to display ads over other apps?
I came to realize that in rare occasions when using the Android phone, Cell service provider (Mobile Network provider) shows some popup advertisements. Regardless of the app, screen I was in it always ...
1
vote
1answer
857 views
How do I identify and remove this spammy malware “Suggestion” app?
Recently these spam ads have started showing up on my phone from an app calling itself "Suggestions". I never installed this thing itself and I don't see it on the apps list.
It runs ...
-1
votes
1answer
106 views
a sketchy person has my phone for half an hour. what should i look for? [closed]
Summary: what sketchy things, could someone do if they get your phone for half an hour. And could you do to find it out and protect yourself.
Luckily, nothing happened for me.
0
votes
0answers
48 views
High battery usage (no wifi no apps no wireless)?
I've noticed that I lose about 20% battery each hour while my phone is unattended and offline. I check the battery settings and find that no apps are running.
The phone is rooted, and I'm wondering ...
0
votes
0answers
37 views
Is there risk of bricking in attempting to install a custom recovery on adevice that has been compromised and has sstem level malware apps on it?
My phone has been compromised and has malware system apps that have persisted after factory reset. I'd like to install a custom recovery so that I can at least get it back to functional if I brick it ...
0
votes
1answer
346 views
Is Google Voice susceptible to hacking like regular MMS or Whatsapp messages?
I have been using Google voice in a public facing way so as to reduce the chance of receiving malware messages over SMS/MMS or Whatsapp.
But is it just as susceptible for someone to be able to sneak ...
0
votes
0answers
54 views
Automatic downloads
I've noticed in several occasions that on mobile browsers (I suppose it happens also on desktop ones) downloads can be forced without user consent. I've studied the matter and I've learnt that this is ...
2
votes
1answer
59 views
Will this Remove a Permission from an App?
So I downloaded an app from the web today, but it had some permissions I was uncomfortable with granting. So, I used APKTool to decompile the APK, removed the suspicious permission from the manifest, ...
3
votes
0answers
132 views
Replacing Malware System Apps with Clean Versions of Apps
I have many times found devices or ROMs that have malware installed as system apps. This thread is intended to define a recurring problem and discuss and determine solutions.
Background:
In many ...
0
votes
0answers
66 views
Malware downloads APK
Some app is repeatedly downloading APK files in my Lenovo Android phone.
How can I find which program is doing this ?
I have installed all my apps from Google Play store.
0
votes
1answer
96 views
Today, my phone out of nowhere started opening random spam/scam sites. What can I do to make it stop [duplicate]
I have an Huawei mate 10 lite, and today it started randomly opening my browser and showing me scam sites. I have tried some anti-virus apps, but after a full scan they didn't find anything. I also ...
0
votes
1answer
1k views
What is “GPUwatch Interceptor app”
I was going through my settings today and I clicked on privacy then checked my special access and noticed something I've never seen before. An app called watch GPU interceptor it had full access ...
0
votes
0answers
128 views
If I buy a used and infected android phone, will flashing a new custom recovery and custom ROM make it safe to use?
If I buy a used and infected phone with a expensive spyware on it that the antivirus does not detect or is unable to remove than will flashing a new custom recovery and custom ROM make it safe to use?
...
2
votes
0answers
224 views
Is appgallery.cloud.huawei.com a Huawei site or kind of malware?
I started to receive notifications urging to install the official Huawei app store, kind of alternative to Google Play Store. I would be glad, but the app immediately requires to give about all ...
3
votes
1answer
503 views
Malware automatically installing unless I disable the play store
So I have been working on my brother's Elite 6.0l+ Sky device. This poor thing has been struck by the xhelper virus which auto installs firedoor, firemyn and an app that likes to hide itself by ...
0
votes
0answers
61 views
Will a hard reset remove any malicious software/viruses/malware from my Experia X?
I suspect my phone is compromised, and if a simple hard reset will fix all potential problems, I'll do that. Will that solve all potential problems? I'm concerned that the guy who just replaced my ...
1
vote
1answer
685 views
how to *really* kill adware app
the BLU Dash X2, Android 6.0, has a known adware app shown as Preinstall Data2 in the Settings | Apps list, and I finally figured out this is the same as com.android.packages.oseasapps shown in pm ...
4
votes
1answer
71 views
Should warnings about not charging your phone at airport/public usb ports be taken seriously?
There are many articles on the internet saying that charging at the usb ports available at the airport and public places can cause your phone to get hacked.
Is there any any truth behind this?
If ...
0
votes
1answer
301 views
How can I check that my Samsung phone is original and hasn't been modified?
How can I check that the mobile device that I am using has not been altered after leaving the factory?
By this I mean no changes whatsoever have been made to the device. Whether it's the whole OS (...
-2
votes
2answers
218 views
Does the use of Android One remove the risk of OEM spying?
China is forcing tourists to install text-stealing malware at its border.
Also, U.S. intelligence officials imply that Huawei, ZTE devices aren't safe for consumers (even in the West).
Some ...
0
votes
0answers
563 views
'Your device is 10 days out of date' … unexpected notification, is it malware?
I have a Pixel 1, unlocked (bought direct from Google in 2016). I've never installed anything from an untrusted source.
I just unlocked my phone and saw a popup similar to the 'emergency broadcast'/'...
1
vote
0answers
3k views
advert web pages opened on phone by bg app [duplicate]
I have some unwelcome behavior on my Samsung S4 AOS 5.0.1 (unrooted) phone. A few days ago I start to get attempts to open my web pages (up to 3 times a day so far) while my phone is idle. All cases ...
