Questions tagged [malware]

For questions regarding viruses, trojan horses, spyware, and other malicious software, especially in removing or preventing it.

Filter by
Sorted by
Tagged with
7
votes
6answers
39k views

Remove “ad-type.google.com” adware in any Android device browser

ad-type.google.com is appearing regularly whenever I access the web through Chrome. It's a new adware and there are no solutions available other than Go to system Settings > Applications > Chrome >...
0
votes
1answer
55 views

Can a malicious application running in a container root the Android?

Can a malware root the Android when running in a container such as when running through VirtualXposed or Parallel space, or when a person is using the Guest user or any other secondary user in Android?...
3
votes
1answer
49 views

How to identify the app/process which re-mounts partitions R/W, creates files and changes file permissions?

I have a rooted device, with superuser rights granted to a few apps I trust. I have often found my /system or /vendor partition mounted read/write, and some files chmoded to 0777. Similarly ...
1
vote
1answer
1k views

How to detect a malicious USB charger?

My phone is rooted and has USB debugging enabled, because I do some development on it. In a moment of pre-caffeinated mental weakness, I plugged it into a cheap Chinese power bank. The phone ...
0
votes
1answer
1k views

Sony Reader PRS-T1 becomes unresponsive

My Sony Reader PRS-T1 based on Android 2.2 is acting funny. I had rooted it in the past but is now in the "original" state, upgraded with the latest official firmware. The problem is that many times,...
0
votes
1answer
2k views

Directory named with random characters automatically (re)created in SD card? Could this be a malware?

Lately, I've seen that a directory with what seems to be a random name (like Z0tQWDVmQmoyRUxVSWdBU2pwNzAxMzc1Mw) is present in the local storage (/sdcard) of my Samsung Galaxy S5. When I delete it, ...
0
votes
0answers
2k views

Application trying to access in app billing

Getting a message at the bottom of my screen: In app billing is not supported for this device. Try again later. The problem is, I never authorized an app for in-app billing in the first place. What'...
0
votes
2answers
2k views

Random apps keep installing on the phone

Here is a screenshot of these apps. I never downloaded them: Screenshot (click image for larger variant) Many times these have been deleted by me but they are download as well as installed by ...
2
votes
1answer
19k views

How to stop my Android device from being spammed in the browser as well as in the application?

Recently I have downloaded two games: Deer Hunter PreHistoric Worm But after that I have my browser which keeps redirecting me to http://ad.adsmatte.com It is happening every time I load the page – ...
0
votes
2answers
6k views

How do I stop Android to auto enabling allow unknown sources?

Every time I restart my android 5 lollipop phone It auto enables allow installation of apps from unknown sources option. I switch it off manually then in a few seconds a pop up for an unknown app to ...
0
votes
2answers
5k views

Malware on LG G3 redirecting all browsers

More or less two or three weeks ago strange pop ups came up on my PC. Antivirus detected ga.js as virus. I thought it was a false positive. Then I've found that the thing somehow jumped on my phone. ...
2
votes
1answer
2k views

Is “Preferred Activity Setter” a malware?

I have noticed I have Preferred Activity Setter after the most recent update of Google Play Services, and it has been wreaking havoc on my Samsung Galaxy prevail LTE on my stock browser called "...
0
votes
2answers
4k views

Android Stock Browser downloads file immediatelly after start

Android 4.4.2 Kitkat Stock Browser If I start it or open new tab, downloading of apk file (xb_client_blah-blah-blah.apk) from site no.stepfaster.com immediatelly starts instead of opening page which ...
0
votes
2answers
4k views

Is com.android.syshandler a malware file on Android 5.x?

I saw various unwanted pop up ads on an Android 5.x phone. Then installed the free Sophos Mobile Security on it (from the Play Store) and ran it several times over last few days. Each time it shows ...
0
votes
0answers
61 views

Gaining higher privileges

When an application requests access to some features of the phone, for example to read SMS storage, it always asks the user for permission for the second time. Is there a way to bypass/disable this ...
0
votes
0answers
68 views

Android asks to re-enter WiFi passwords. Is my phone compromised?

I have a Galaxy S8 (SM-950F) with Android version 8.0.0. I have rooted the device with Magisk. I have a couple of Magisk modules, including Bixby remapper, F-Droid Privilaged Extension, liboemcrypto ...
0
votes
1answer
980 views

How to remove adware popups from notifications in S8?

So I visited a torrent site (not sure if it's the cause 100% though) on my S8 last night & since then have been getting the popups shown in the screenshot. I downloaded & ran Malwarebytes, ...
-1
votes
2answers
52 views

How do I safely flash a new rom on an infected android phone? [duplicate]

Is using a live cd a good idea? Will it keep the rest of my computer including storage and installed OS safe?
2
votes
2answers
78 views

Can my father's smartphone be compromised?

My father said to me that he allowed installation of apps from unknown sources when he was asked to do it to go further with something (he said that he don't remember when or what he was doing). In ...
2
votes
1answer
65 views

Why is there “/proc/net/snmp” file on my device? Could it be due to a malware?

After reading this paper I observed a little and I realized that an SNMP socket (exactly two: v4 and v6) exists when I use ls /proc/1/net. I see them clearly. My question is simple, do the bootkits ...
0
votes
1answer
52 views

Why is Amazon Shopping app showing 'null' after the product price?

I've heard that if a website or an app appears in a weird way, it means that your device might have been hacked. I have Android 8.1 Oreo, and below is the Amazon Shopping app showing 'null' after the ...
1
vote
2answers
905 views

Unwanted Apps (Maybe malware) downloaded and installed on Android device

Off late, I have been observing some unwanted apps getting downloaded and installed on my Android device without my knowledge. Upon noticing I uninstalled those apps. However, the next time I switch ...
0
votes
0answers
17 views

Find out the URLs opened by each app on my phone [duplicate]

Every morning around 5 AM and in the evening around 4 PM, some app installed on my phone tries to reach out to the test.com website or other sites such as arlo-banners.weareenvoy.net. I suspect it ...
0
votes
0answers
29 views

Why is there another Phone icon in my Apps?

The second Phone app on the list appeared a few minutes ago after I accepted the permissions of my Messaging app. It wasn't there earlier when I took look at the Apps which is weird. Also it looks ...
1
vote
2answers
323 views

Vital signs of unfamiliar software are present in safe mode: TopBuzz in Galaxy Note8

In Device Maintenance system app on Samsung Galaxy Note8, there is a TopBuzz cache shown when caches are being cleaned. Also in the safe mode. It reappears as a cleanup item every few minutes together ...
23
votes
8answers
12k views

Securing a young child's tablet

My wife has decided to get the kids a set of android tablets for christmas. These are Coby Kyros 4GB wi-fi only models. The kids are ages 6-10 so I don’t particularly want to let them have free ...
4
votes
1answer
87 views

When Google removes malicious apps from their Play Store, are users notified?

This Check Point Research article describes over 200 malicious apps on the Google Play Store that were downloaded over 100 million times. Google has now removed the apps from their Play Store. But ...
4
votes
1answer
122 views

For basic users - Any reason to install mobile security App?

For users that play it straight, never going to doubted sites, never enabling APK from non-play sources... (e.g typical seniors) Any reason to install a mobile security app? Because Such users ...
0
votes
3answers
1k views

Can rooting remove all malware, viruses and backdoors?

I ask this question because I read somewhere that there was a Chinese smartphone with in-built malware which could not removed even by rooting. (I searched the article everywhere but couldn't find it....
0
votes
1answer
296 views

Apps whitelisted in AFWall+ without my knowledge

I've installed a firewall (AFWall+) on my phone, and I've manually whitelisted every app I wanted to allow accessing the Internet, including system apps. So everything is blocked by default, and I add ...
0
votes
0answers
93 views

How do I get rid of com.android.Pet.mediaproxy?

I found this on my phone on my Files after I woke up. I accidentally fell asleep and I have a housemate who likes messing with my things and decided to put something on my phone that is actually a ...
0
votes
1answer
30 views

File level changes by an Android app

How can I track the file level changes done by an application during execution on an Android device. Specifically I am interested in file level changes done by a malware - create, delete, save a file ...
0
votes
1answer
265 views

Persistent techniques used by Android Malware [closed]

What are the most commonly used persistent techniques by Android malware. That is to survive on device after reboot. In windows malware they change registry entries to auto start, Android malware ...
1
vote
2answers
100 views

Malicious software runs on the background of Android phone, but I cannot see it - how to find and remove it?

I know that a malicious malware/spyware has been installed on my Samsung Galaxy S3 phone and I constantly get the message to close apps not in use because they drain my battery. But I do not have ...
0
votes
0answers
49 views

Android malware debugging

To understand a malware better when it is running on a device, I would like to get a view of what is happening in the background. For instance if a malware is loading a page using LoadUrl, I want to ...
0
votes
0answers
57 views

How to locate app which installed a potentially malicious certificate?

On my S8 (Oreo) today, I got the notification: There is a certificate installed that may or not monitor your internet traffic. Did spyware install itself? Or is this normal? I updated from 7.0 to 8....
0
votes
2answers
1k views

Android Spy Apps

Is it possible for someone to install a spy app on an Android phone JB os? Do these spy apps really work? Can anyone install this spy app to your mobile phone without your knowledge? If you suspect ...
1
vote
0answers
91 views

Factory reset did not remove malware problem on my ZTE zmax blade. What do I do at this point?

Surveillanceware or a worm of some sort has highjacked my Android and Facebook and email accounts. I'm unable to scan with my premium plus lookout account because the virus has disabled lookout and ...
0
votes
1answer
115 views

Can a malware compromise safe-mode of non-rooted device?

Was there any known malware running on Android (let's say since Nougat) which can compromise non-rooted Android device in a way that the malware is active also in the safe mode? So when booting non-...
11
votes
11answers
52k views

How to track down an app that shows ads on smartphone screen?

I have a problem with malware apps. Looks like some app called "Native" installed itself, and created a shortcut for itself, all without my permission. After that happened, I have pop-up ads every ...
1
vote
1answer
329 views

Is GetApk Market application trustful?

Is "GetApk Market" application trustful or malicious? Will it affect one's smartphone or tablet? I have checked via VirusTotal & it mostly detected as Android.Riskware.Downloader: Can anyone ...
0
votes
1answer
146 views

How can I uninstall this app which keeps getting reinstalled?

Hello I'm running android 4.2 Samsung rooted. There is an app which always appears on my data/app folder and always runs at start-up. When I go to app manager I can uninstall it however the next time ...
-1
votes
1answer
2k views

Facebook Messenger Virus on Android

I received a message from a friend on facebook The message said "this video is yours 'mt name'" with a shocked emoji face and my profile picture below. I was daft enough to click the link and then ...
0
votes
1answer
123 views

How to remove a persistent malware that downloads unwanted apps? [duplicate]

Some months ago, I purchased an Azumi cell phone from an official store in a shopping mall in Mexico and subsequently discovered its firmware contains a ton of malware. The malware connects with a ...
0
votes
1answer
722 views

How to close a malware tab in chrome?

A webpage got redirected to a "virus alert" malware page and I can't close it. Deleted the cache, both the general tablet cache as well as the chrome cache, deleted the "unimportant data", did "...
2
votes
1answer
1k views

How to Block Pre-Installed Auto App Installer Malware?

I dont know which pre-installed app is auto installing new apps. But I think its com.android.system.service (also on few other phones: http://en.miui.com/thread-459132-1-1.html) Firewall is not ...
2
votes
2answers
10k views

How to remove Measure/mobileOcr/engriks malware?

My phone is attacked by barrage of error dialogs every 1 second: Unfortunately Measure Has Stopped Unfortunately mobileOcr Has Stopped Unfortunately engriks Has Stopped It makes the ...
16
votes
2answers
13k views

Dropbox not installed, but there is log activity in /data/system/dropbox?

I don't have dropbox installed, but whilst checking log files I've found that there is a /data/system/dropbox directory with log files from the 18th (which I think is the last time I rebooted my phone)...
1
vote
1answer
78 views

What kind of applications use internet on the background? [duplicate]

Viewed the list of applications that use Wi-FI and came across what is shown on the image below. What it is? Virus? Instead of Google I use F-Droid. Root is there, but only Total Commander and ...
0
votes
1answer
211 views

How can I identify the cache if I see its name? One name is suspicious

If Device maintenance app is launched in Samsung S8, after pressing Clean Now button, storage cleanup briefly shows different apps, storage space of which is being cleaned: System cache OneNote ...