Questions tagged [malware]

For questions regarding viruses, trojan horses, spyware, and other malicious software, especially in removing or preventing it.

Filter by
Sorted by
Tagged with
1
vote
2answers
6k views

How do I stop Android to auto enabling allow unknown sources?

Every time I restart my android 5 lollipop phone It auto enables allow installation of apps from unknown sources option. I switch it off manually then in a few seconds a pop up for an unknown app to ...
2
votes
1answer
28 views

Will this Remove a Permission from an App?

So I downloaded an app from the web today, but it had some permissions I was uncomfortable with granting. So, I used APKTool to decompile the APK, removed the suspicious permission from the manifest, ...
0
votes
0answers
29 views

One Plus 7 - phone restarted after downloading an app and all apps permission got reset to default

I recently downloaded a game from the play store (Hitman Sniper). After the game completed installing, the phone automatically restarted and after that whichever app I opened, it asked for the ...
2
votes
0answers
67 views

Replacing Malware System Apps with Clean Versions of Apps

I have many times found devices or ROMs that have malware installed as system apps. This thread is intended to define a recurring problem and discuss and determine solutions. Background: In many ...
0
votes
2answers
4k views

Android Stock Browser downloads file immediatelly after start

Android 4.4.2 Kitkat Stock Browser If I start it or open new tab, downloading of apk file (xb_client_blah-blah-blah.apk) from site no.stepfaster.com immediatelly starts instead of opening page which ...
0
votes
2answers
4k views

Is com.android.syshandler a malware file on Android 5.x?

I saw various unwanted pop up ads on an Android 5.x phone. Then installed the free Sophos Mobile Security on it (from the Play Store) and ran it several times over last few days. Each time it shows ...
4
votes
1answer
326 views

How to identify the app/process which re-mounts partitions R/W, creates files and changes file permissions?

I have a rooted device, with superuser rights granted to a few apps I trust. I have often found my /system or /vendor partition mounted read/write, and some files chmoded to 0777. Similarly ...
0
votes
0answers
8 views

What can malware on Android 10 actually do? [duplicate]

I was hoping to get an idea of how well modern versions of Android protect your phone using sandboxing. If you install an app and don't grant it any permissions what types of common malware activities ...
0
votes
1answer
1k views

How to remove adware popups from notifications in S8?

So I visited a torrent site (not sure if it's the cause 100% though) on my S8 last night & since then have been getting the popups shown in the screenshot. I downloaded & ran Malwarebytes, ...
0
votes
0answers
63 views

Samsung galaxy 8+ taken over

I am experiencing very severe issues with my Galaxy 8+. I am on my 3rd replacement. As soon as I create a Google account someone/something accesses it and changes my account recovery info, adds ...
0
votes
0answers
58 views

Malware downloads APK

Some app is repeatedly downloading APK files in my Lenovo Android phone. How can I find which program is doing this ? I have installed all my apps from Google Play store.
1
vote
2answers
1k views

Unwanted Apps (Maybe malware) downloaded and installed on Android device

Off late, I have been observing some unwanted apps getting downloaded and installed on my Android device without my knowledge. Upon noticing I uninstalled those apps. However, the next time I switch ...
0
votes
0answers
27 views

Android Malware Connections

Is it possible for android malware (with root privileges) to hide it's connections from network monitoring apps installed on the infected device? Are android network monitoring apps (such as Net ...
3
votes
1answer
7k views

Is 'Boost' a feature or a virus?

The app 'File Manager' now has a new look, a look that has more of a virus feel and lees of an 'android' feel. Force stopping file manager gets rid of the addition to the notification bar thingy and ...
2
votes
0answers
171 views

Is appgallery.cloud.huawei.com a Huawei site or kind of malware?

I started to receive notifications urging to install the official Huawei app store, kind of alternative to Google Play Store. I would be glad, but the app immediately requires to give about all ...
0
votes
0answers
24 views

Today, my phone out of nowhere started opening random spam/scam sites. What can I do to make it stop

I have an Huawei mate 10 lite, and today it started randomly opening my browser and showing me scam sites. I have tried some anti-virus apps, but after a full scan they didn't find anything. I also ...
0
votes
0answers
79 views

Run applications Isolated, avoid embedded trackers

So i'm going to be using microg trying to avoid the million trackers hidden in applications on the play store and mainly use applications from Fdroid as they don't for the most part. I actually had a ...
0
votes
1answer
1k views

Sony Reader PRS-T1 becomes unresponsive

My Sony Reader PRS-T1 based on Android 2.2 is acting funny. I had rooted it in the past but is now in the "original" state, upgraded with the latest official firmware. The problem is that many times,...
0
votes
1answer
4k views

An unknown app called 10102 shows up in Data Usage graph

A mysterious app named "10102" shows up in my data usage. It bears only the standard Android app icon (the Bugdroid logo with a cube on its torso). From what the graph tell me, it has used 36 ...
1
vote
1answer
2k views

How to detect a malicious USB charger?

My phone is rooted and has USB debugging enabled, because I do some development on it. In a moment of pre-caffeinated mental weakness, I plugged it into a cheap Chinese power bank. The phone ...
0
votes
0answers
13 views

Weird apps on my wifi data usage. I wonder is this the problem to my phone being really slow and overheating? Does anyone have them aswell? [duplicate]

My phone would sometimes get really slow. Like it would take it 15 seconds to close the app that I was currently using and everything starts glitching. It would also heat up when that happens. So I ...
0
votes
1answer
326 views

What is “GPUwatch Interceptor app”

I was going through my settings today and I clicked on privacy then checked my special access and noticed something I've never seen before. An app called watch GPU interceptor it had full access ...
0
votes
1answer
2k views

Directory named with random characters automatically (re)created in SD card? Could this be a malware?

Lately, I've seen that a directory with what seems to be a random name (like Z0tQWDVmQmoyRUxVSWdBU2pwNzAxMzc1Mw) is present in the local storage (/sdcard) of my Samsung Galaxy S5. When I delete it, ...
0
votes
2answers
2k views

Random apps keep installing on the phone

Here is a screenshot of these apps. I never downloaded them: Screenshot (click image for larger variant) Many times these have been deleted by me but they are download as well as installed by ...
0
votes
0answers
44 views

If I buy a used and infected android phone, will flashing a new custom recovery and custom ROM make it safe to use?

If I buy a used and infected phone with a expensive spyware on it that the antivirus does not detect or is unable to remove than will flashing a new custom recovery and custom ROM make it safe to use? ...
3
votes
1answer
269 views

Malware automatically installing unless I disable the play store

So I have been working on my brother's Elite 6.0l+ Sky device. This poor thing has been struck by the xhelper virus which auto installs firedoor, firemyn and an app that likes to hide itself by ...
2
votes
1answer
19k views

How to stop my Android device from being spammed in the browser as well as in the application?

Recently I have downloaded two games: Deer Hunter PreHistoric Worm But after that I have my browser which keeps redirecting me to http://ad.adsmatte.com It is happening every time I load the page – ...
1
vote
2answers
5k views

Malware on LG G3 redirecting all browsers

More or less two or three weeks ago strange pop ups came up on my PC. Antivirus detected ga.js as virus. I thought it was a false positive. Then I've found that the thing somehow jumped on my phone. ...
0
votes
0answers
38 views

Will a hard reset remove any malicious software/viruses/malware from my Experia X?

I suspect my phone is compromised, and if a simple hard reset will fix all potential problems, I'll do that. Will that solve all potential problems? I'm concerned that the guy who just replaced my ...
2
votes
1answer
2k views

Is “Preferred Activity Setter” a malware?

I have noticed I have Preferred Activity Setter after the most recent update of Google Play Services, and it has been wreaking havoc on my Samsung Galaxy prevail LTE on my stock browser called "...
0
votes
0answers
23 views

Avoid getting infected by Faketoken malware

In the past, the Faketoken malware was quite spreading, and in these days, it has started spreading again. I found article about few thousand Android phones being infected. How to avoid getting ...
9
votes
2answers
8k views

How to find app based on package name?

I've installed a malicious app that is posting ads over my notification bar, but can't find it. I know the java package name for it: com.letang.game103.en using the command: adb shell dumpsys ...
1
vote
1answer
186 views

how to *really* kill adware app

the BLU Dash X2, Android 6.0, has a known adware app shown as Preinstall Data2 in the Settings | Apps list, and I finally figured out this is the same as com.android.packages.oseasapps shown in pm ...
3
votes
1answer
284 views

How to remove a persistent malware?

My Samsung Note 8 has gotten very weird lately. I get programs I never have installed, and when I try to reboot/reset my device with no backup they still come up after I'm finished with the reboot. I ...
0
votes
0answers
21 views

If I root and unroot my phone, is it safe for banking?

I have a Micromax phone that comes with App Center, bloatware that automatically installs nasty apps without permission. I'd like to get rid of it. I have tried this on my other phone by the following ...
0
votes
2answers
655 views

Remove notifications “Activate Anti-malware service” and “Battery fully charged” on rooted Samsung S10

On my Samsung S10e device I often get these notifications: Device care - Activate Anti-malware service and Battery fully charged When I try to turn one of them off, I am told: These ...
3
votes
1answer
6k views

Is this “Boost” / File Manager app a true system app or malware?

I installed this app after I received a notification on my lock screen informing me that a new system app was available for download. Seeing that the app was listed as an update to the "File Manager" ...
4
votes
1answer
63 views

Should warnings about not charging your phone at airport/public usb ports be taken seriously?

There are many articles on the internet saying that charging at the usb ports available at the airport and public places can cause your phone to get hacked. Is there any any truth behind this? If ...
0
votes
4answers
3k views

Cannot disable OEM app

My new Jasper phone has a persistent app from the original manufacture which keeps popping up. Without rooting the phone, how can I disable or remove this app? Dragging it to "remove" doesn't ...
1
vote
3answers
597 views

Vital signs of unfamiliar software are present in safe mode: TopBuzz in Galaxy Note8

In Device Maintenance system app on Samsung Galaxy Note8, there is a TopBuzz cache shown when caches are being cleaned. Also in the safe mode. It reappears as a cleanup item every few minutes together ...
0
votes
1answer
38 views

How can I check that my Samsung phone is original and hasn't been modified?

How can I check that the mobile device that I am using has not been altered after leaving the factory? By this I mean no changes whatsoever have been made to the device. Whether it's the whole OS (...
19
votes
2answers
14k views

Dropbox app not installed, but there is log activity in /data/system/dropbox

I don't have Dropbox app installed nor DropBox account, but whilst checking log files I've found that there is a /data/system/dropbox directory with log files from, I think, the last time I rebooted ...
0
votes
0answers
14 views

Google Search Bar Code Execution

So, is it possible to write a simple script in a Google search bar that can be executed? Is it possible to write out a sticker line of coffee that would, let's say, display a notification for the site....
-2
votes
2answers
153 views

Does the use of Android One remove the risk of OEM spying?

China is forcing tourists to install text-stealing malware at its border. Also, U.S. intelligence officials imply that Huawei, ZTE devices aren't safe for consumers (even in the West). Some ...
0
votes
0answers
78 views

'Your device is 10 days out of date' … unexpected notification, is it malware?

I have a Pixel 1, unlocked (bought direct from Google in 2016). I've never installed anything from an untrusted source. I just unlocked my phone and saw a popup similar to the 'emergency broadcast'/'...
1
vote
0answers
3k views

advert web pages opened on phone by bg app [duplicate]

I have some unwelcome behavior on my Samsung S4 AOS 5.0.1 (unrooted) phone. A few days ago I start to get attempts to open my web pages (up to 3 times a day so far) while my phone is idle. All cases ...
5
votes
0answers
112 views

What to do if I suspect my device is compromised?

I recently bought a Pixel 2 XL "open box" off eBay. The device appears slightly used, and a couple of days after registering with my Google account, I received security notifications of attempted ...
0
votes
1answer
285 views

Is it possible to get the SHA256 of an APK solely through ADB?

I am currently working on a project which will identify malware that are residing on a device. My aim is to make a hash-based detection of Android malware on a device by only accessing the ADB port ...
0
votes
0answers
28 views

Malware that destroys the color yellow?

I have no idea where to turn with this, but I am worried that malware or other misbehaving software is causing a color distortion. The story is: my phone, a Moto G5 Plus, at some point lost the ...
1
vote
0answers
31 views

Red-and-White Megaphone App coming up unsolicited

For about a month, an unknown app has been occasionally coming up on my cell phone's screen, interrupting whatever I'm doing, displaying a black screen and that rolling circle in the middle that means ...

1
2 3 4 5
8