Questions tagged [malware]

For questions regarding viruses, trojan horses, spyware, and other malicious software, especially in removing or preventing it.

Filter by
Sorted by
Tagged with
0
votes
0answers
15 views

Why do I see a screenshot of something that I was doing in the background on my smartphone?

When I take a screenshot it does not appear on it, it is like seeing through a drawn glass, It can only be seen from the outside, it's hard to explain. Is it some kind of malware? The screenshot looks ...
0
votes
2answers
988 views

How to prove an Android device is hacked? Retrieving logs from recovery booting

I'm having trouble with my new branded Vodafone Samsung Galaxy S7 Edge. How can I get a copy to the full logs (and other files), without rooting, for places I do not have the required access? I can ...
3
votes
0answers
135 views

Why am I getting Google Drive notifications about strangers' documents?

Screenshot: Is this just a new form of spam or phishing technique, basically betting that I'll click on the notification and look at the document? I haven't looked at any of them yet, but it seems ...
0
votes
0answers
41 views

Unable to permanently deleted broken files automatically appearing in “recently deleted” in photo gallery

I have this problem since few weeks now. I am Unable to permanently deleted unknown broken files (2 videos) automatically reappearing in "recently deleted" files in photos gallery app (Oreo ...
2
votes
1answer
19k views

How to stop my Android device from being spammed in the browser as well as in the application?

Recently I have downloaded two games: Deer Hunter PreHistoric Worm But after that I have my browser which keeps redirecting me to http://ad.adsmatte.com It is happening every time I load the page – ...
0
votes
0answers
39 views

So, I have an app called “ww_easteur001”, never installed it, and it behaves… weird I would say. Need help with it

So, I never installed this app, it just appeared at some point on my phone. I didn't do anything at first, thought it was something related to android because it has an android icon. The problem is ...
0
votes
1answer
779 views

What Does “[UID]” appended to a root request mean?

I recently got a root request that came up as "Greenify [UID]". This looked suspicious to me as I usually get greenify requests as just "Greenify". I have tried to contact the developer of Greenify ...
1
vote
2answers
7k views

How do I stop Android to auto enabling allow unknown sources?

Every time I restart my android 5 lollipop phone It auto enables allow installation of apps from unknown sources option. I switch it off manually then in a few seconds a pop up for an unknown app to ...
1
vote
0answers
18 views

What are the chances of a malware being persistent if I dd to write system.img and userdata.img from twrp

If I had a malware on my phone, say malware like xhelper, or strandhogg or something even critical than that, what are the chances of it being persistent even after using dd to write the system.img ...
0
votes
2answers
4k views

Android Stock Browser downloads file immediatelly after start

Android 4.4.2 Kitkat Stock Browser If I start it or open new tab, downloading of apk file (xb_client_blah-blah-blah.apk) from site no.stepfaster.com immediatelly starts instead of opening page which ...
0
votes
2answers
4k views

Is com.android.syshandler a malware file on Android 5.x?

I saw various unwanted pop up ads on an Android 5.x phone. Then installed the free Sophos Mobile Security on it (from the Play Store) and ran it several times over last few days. Each time it shows ...
9
votes
1answer
2k views

Suspected malware on stock apps in a Mediatek mtk6580 based phone

I have an old(2016) Mediatek mtk6580 chipset phone(non rooted/stock). Couple days back, I downloaded an app called "Apk extractor" from play store, and extracted the system apps to the ...
2
votes
0answers
79 views

Is mtk-su safe? Is it actually temporary?

mtk-su which helps mediatek mtk-65** based phone owners to basically gain a "temporary" root. My question is, if it was actually temporary as it claims, and if it actually doesn't persist ...
1
vote
0answers
25 views

Is this “app” malicious or is it a bug? [duplicate]

I was examining my battery usage and noticed this: I don't know what this "-5" app is supposed to be. Could it be malicious or is it just a bug? I own an OnePlus 6 with Android 10 (OxygenOS ...
0
votes
1answer
1k views

How to remove adware popups from notifications in S8?

So I visited a torrent site (not sure if it's the cause 100% though) on my S8 last night & since then have been getting the popups shown in the screenshot. I downloaded & ran Malwarebytes, ...
0
votes
0answers
29 views

Does cell service provider has ability to display ads over other apps?

I came to realize that in rare occasions when using the Android phone, Cell service provider (Mobile Network provider) shows some popup advertisements. Regardless of the app, screen I was in it always ...
0
votes
0answers
64 views

IP blacklisted - unusual traffic - possible malware?

Over the past month I've had about 5 or so occasions where Google force me to do a capture on a normal search, saying that there is unusual traffic from my device. Recently, past few days, I've had a ...
2
votes
1answer
511 views

I think my kid's Eee Pad has malware. How do I get rid of it?

As you might expect from a 11 year old, she keeps filling it with games and girly-pop songs. Today, I noticed a strange "pseudo-Market" icon on its home screen: When you click on it, you get the ...
0
votes
1answer
56 views

how to identify on command line terminal emulator apps and packages that have active network connections [duplicate]

I tried this using an app and I am able to identify most apps and their network connections however there are certain apps listed as '?' so apparently it is not able to identify a package name I ...
0
votes
0answers
26 views

Do rooting applications read as malware?

I DLed a root application at XDA-Developers and my Malwarebytes and Virus Total say it's malware. I suspect this is normal given what it does, but what I've read of rooting, never has it said, 'your ...
1
vote
1answer
244 views

How do I identify and remove this spammy malware “Suggestion” app?

Recently these spam ads have started showing up on my phone from an app calling itself "Suggestions". I never installed this thing itself and I don't see it on the apps list. It runs ...
3
votes
1answer
7k views

Is 'Boost' a feature or a virus?

The app 'File Manager' now has a new look, a look that has more of a virus feel and lees of an 'android' feel. Force stopping file manager gets rid of the addition to the notification bar thingy and ...
0
votes
0answers
31 views

High battery usage (no wifi no apps no wireless)?

I've noticed that I lose about 20% battery each hour while my phone is unattended and offline. I check the battery settings and find that no apps are running. The phone is rooted, and I'm wondering ...
0
votes
2answers
2k views

Directory named with random characters automatically (re)created in SD card? Could this be a malware?

Lately, I've seen that a directory with what seems to be a random name (like Z0tQWDVmQmoyRUxVSWdBU2pwNzAxMzc1Mw) is present in the local storage (/sdcard) of my Samsung Galaxy S5. When I delete it, ...
1
vote
2answers
1k views

Unwanted Apps (Maybe malware) downloaded and installed on Android device

Off late, I have been observing some unwanted apps getting downloaded and installed on my Android device without my knowledge. Upon noticing I uninstalled those apps. However, the next time I switch ...
0
votes
3answers
3k views

Random apps keep installing on the phone

Here is a screenshot of these apps. I never downloaded them: Screenshot (click image for larger variant) Many times these have been deleted by me but they are download as well as installed by ...
1
vote
1answer
378 views

how to *really* kill adware app

the BLU Dash X2, Android 6.0, has a known adware app shown as Preinstall Data2 in the Settings | Apps list, and I finally figured out this is the same as com.android.packages.oseasapps shown in pm ...
4
votes
2answers
3k views

Removing redirect link malware

I have Xiaomi Mi3 and it's not rooted. Every time I open a web page, both on mobile data and WiFi, and even with different browsers, I get redirected to other pages with ads and pages like this: http:...
-1
votes
1answer
69 views

a sketchy person has my phone for half an hour. what should i look for? [closed]

so i met this guy who had like 10 red flags... like I had a stalker once who didn't creep me out as much as he did. we just met and then were chillig and he asked me to turn on a song, which I also ...
0
votes
1answer
1k views

Sony Reader PRS-T1 becomes unresponsive

My Sony Reader PRS-T1 based on Android 2.2 is acting funny. I had rooted it in the past but is now in the "original" state, upgraded with the latest official firmware. The problem is that many times,...
0
votes
0answers
31 views

Is there risk of bricking in attempting to install a custom recovery on adevice that has been compromised and has sstem level malware apps on it?

My phone has been compromised and has malware system apps that have persisted after factory reset. I'd like to install a custom recovery so that I can at least get it back to functional if I brick it ...
0
votes
1answer
55 views

Is Google Voice susceptible to hacking like regular MMS or Whatsapp messages?

I have been using Google voice in a public facing way so as to reduce the chance of receiving malware messages over SMS/MMS or Whatsapp. But is it just as susceptible for someone to be able to sneak ...
0
votes
0answers
25 views

Automatic downloads

I've noticed in several occasions that on mobile browsers (I suppose it happens also on desktop ones) downloads can be forced without user consent. I've studied the matter and I've learnt that this is ...
2
votes
1answer
2k views

Is “Preferred Activity Setter” a malware?

I have noticed I have Preferred Activity Setter after the most recent update of Google Play Services, and it has been wreaking havoc on my Samsung Galaxy prevail LTE on my stock browser called "...
3
votes
2answers
201 views

How would you avoid potentially dangerous apps in the Play Store

edit: The goal of the question is to create a simple checklist for novice users. It is not uncommon for news warning about malicious apps that have entered the Play Store to appear fairly regularly. ...
2
votes
2answers
5k views

Malware on LG G3 redirecting all browsers

More or less two or three weeks ago strange pop ups came up on my PC. Antivirus detected ga.js as virus. I thought it was a false positive. Then I've found that the thing somehow jumped on my phone. ...
2
votes
1answer
43 views

Will this Remove a Permission from an App?

So I downloaded an app from the web today, but it had some permissions I was uncomfortable with granting. So, I used APKTool to decompile the APK, removed the suspicious permission from the manifest, ...
0
votes
0answers
36 views

One Plus 7 - phone restarted after downloading an app and all apps permission got reset to default

I recently downloaded a game from the play store (Hitman Sniper). After the game completed installing, the phone automatically restarted and after that whichever app I opened, it asked for the ...
2
votes
0answers
103 views

Replacing Malware System Apps with Clean Versions of Apps

I have many times found devices or ROMs that have malware installed as system apps. This thread is intended to define a recurring problem and discuss and determine solutions. Background: In many ...
4
votes
1answer
429 views

How to identify the app/process which re-mounts partitions R/W, creates files and changes file permissions?

I have a rooted device, with superuser rights granted to a few apps I trust. I have often found my /system or /vendor partition mounted read/write, and some files chmoded to 0777. Similarly ...
0
votes
0answers
10 views

What can malware on Android 10 actually do? [duplicate]

I was hoping to get an idea of how well modern versions of Android protect your phone using sandboxing. If you install an app and don't grant it any permissions what types of common malware activities ...
0
votes
0answers
68 views

Samsung galaxy 8+ taken over

I am experiencing very severe issues with my Galaxy 8+. I am on my 3rd replacement. As soon as I create a Google account someone/something accesses it and changes my account recovery info, adds ...
0
votes
0answers
64 views

Malware downloads APK

Some app is repeatedly downloading APK files in my Lenovo Android phone. How can I find which program is doing this ? I have installed all my apps from Google Play store.
0
votes
0answers
35 views

Android Malware Connections

Is it possible for android malware (with root privileges) to hide it's connections from network monitoring apps installed on the infected device? Are android network monitoring apps (such as Net ...
2
votes
0answers
192 views

Is appgallery.cloud.huawei.com a Huawei site or kind of malware?

I started to receive notifications urging to install the official Huawei app store, kind of alternative to Google Play Store. I would be glad, but the app immediately requires to give about all ...
0
votes
0answers
29 views

Today, my phone out of nowhere started opening random spam/scam sites. What can I do to make it stop

I have an Huawei mate 10 lite, and today it started randomly opening my browser and showing me scam sites. I have tried some anti-virus apps, but after a full scan they didn't find anything. I also ...
0
votes
0answers
114 views

Run applications Isolated, avoid embedded trackers

So i'm going to be using microg trying to avoid the million trackers hidden in applications on the play store and mainly use applications from Fdroid as they don't for the most part. I actually had a ...
1
vote
1answer
2k views

How to detect a malicious USB charger?

My phone is rooted and has USB debugging enabled, because I do some development on it. In a moment of pre-caffeinated mental weakness, I plugged it into a cheap Chinese power bank. The phone ...
0
votes
1answer
666 views

What is “GPUwatch Interceptor app”

I was going through my settings today and I clicked on privacy then checked my special access and noticed something I've never seen before. An app called watch GPU interceptor it had full access ...
0
votes
0answers
60 views

If I buy a used and infected android phone, will flashing a new custom recovery and custom ROM make it safe to use?

If I buy a used and infected phone with a expensive spyware on it that the antivirus does not detect or is unable to remove than will flashing a new custom recovery and custom ROM make it safe to use? ...

1
2 3 4 5
8