Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [malware]

For questions regarding viruses, trojan horses, spyware, and other malicious software, especially in removing or preventing it.

2
votes
2answers
10k views

How to remove Measure/mobileOcr/engriks malware?

My phone is attacked by barrage of error dialogs every 1 second: Unfortunately Measure Has Stopped Unfortunately mobileOcr Has Stopped Unfortunately engriks Has Stopped It makes the ...
14
votes
2answers
12k views

Dropbox not installed, but there is log activity in /data/system/dropbox?

I don't have dropbox installed, but whilst checking log files I've found that there is a /data/system/dropbox directory with log files from the 18th (which I think is the last time I rebooted my phone)...
1
vote
1answer
54 views

What kind of applications use internet on the background? [duplicate]

Viewed the list of applications that use Wi-FI and came across what is shown on the image below. What it is? Virus? Instead of Google I use F-Droid. Root is there, but only Total Commander and ...
0
votes
1answer
77 views

How can I identify the cache if I see its name? One name is suspicious

If Device maintenance app is launched in Samsung S8, after pressing Clean Now button, storage cleanup briefly shows different apps, storage space of which is being cleaned: System cache OneNote ...
3
votes
0answers
48 views

How to remove a persistent malware?

My Samsung Note 8 has gotten very weird lately. I get programs I never have installed, and when I try to reboot/reset my device with no backup they still come up after I'm finished with the reboot. I ...
1
vote
0answers
47 views

Vital signs of unfamiliar software are present in safe mode: TopBuzz in Galaxy Note8

In Device Maintenance system app on Samsung Galaxy Note8, there is a TopBuzz cache shown when caches are being cleaned. Also in the safe mode. It reappears as a cleanup item every few minutes together ...
3
votes
0answers
45 views

How to uninstall an app which restarts the phone when uninstalling it?

This app named Handwriting Fonts for Samsung, Oppo and HTC phones is acting like a malware. Whenever I try to uninstall it, my phone restarts (or probably reboots) and the app doesn't get uninstalled. ...
1
vote
1answer
39 views

malicious software runs on the background of android phone cannot see it - how to find and remove?

I know that a malicious malware / spyware has been installed on my galaxy s 3 phone and I constantly get the message to close apps not in use because they drain my battery. But I do not have anything ...
-5
votes
1answer
95 views

How do I disinfect my device infected with a malware?

In the process of trying to resolve the infection, I kept hitting major, dangerous hurdles. I had a pretty good guess as to what had led to the infection, but hit hurdle after hurdle as I tried to ...
0
votes
2answers
4k views

Android Stock Browser downloads file immediatelly after start

Android 4.4.2 Kitkat Stock Browser If I start it or open new tab, downloading of apk file (xb_client_blah-blah-blah.apk) from site no.stepfaster.com immediatelly starts instead of opening page which ...
0
votes
2answers
4k views

Is com.android.syshandler a malware file on Android 5.x?

I saw various unwanted pop up ads on an Android 5.x phone. Then installed the free Sophos Mobile Security on it (from the Play Store) and ran it several times over last few days. Each time it shows ...
2
votes
2answers
103 views

Problems with the DNS Network part (or maybe virus/malware-related) on Android 6.0 Marshmallow (Alcatel Vendor)

I've been experiencing some strange problems maybe that be related with the DNS Network part in Android 6.0 Marshmallow, and could mention these two origins as the main likely sources of problems: • ...
0
votes
2answers
5k views

How do I stop Android to auto enabling allow unknown sources?

Every time I restart my android 5 lollipop phone It auto enables allow installation of apps from unknown sources option. I switch it off manually then in a few seconds a pop up for an unknown app to ...
1
vote
0answers
44 views

Audio file opened by itself?

This morning I woke up to the alarm on my phone, as I snoozed it I noticed that the Total Commander player had a notification open, with an audio file open but on hold. When I tapped on play I got ...
-1
votes
0answers
38 views

Uninstall unknown app that shows random ads frequently

An app got installed while I was browsing . It keeps advertising in my Instagram screen , in my game screen and it also downloads random pictures Image below is that of the application which can be ...
62
votes
8answers
252k views

What is this lock screen with ads and how do I remove it?

I think my device got a malware. A lock screen with ads sometimes appear, and I must swipe an area at the bottom of the screen to open the phone. I am in Eastern Europe, some ads are in Slavic ...
1
vote
2answers
117 views

How to know what is causing a weird lock screen with ads to show up?

I have a Samsung Galaxy J7 that just started displaying this as the lock screen. Sometimes, it displays my regular lock screen, but if I let my phone sit long enough, it will display this screen. It ...
5
votes
2answers
4k views

How to find out which app is trying to open spam websites?

I've recently bought a new Android smartphone. After setting it up and loading my contacts onto it I thought that would be it. Now after some days, every time I unlock the phone it takes a few ...
-1
votes
0answers
668 views

“Attackers on <b>%1$s</b> might atte…” downloads while using Facebook app

The night of the 17th, I was using the Facebook app while suddenly a download in progress icon appeared in the status bar. I pulled down the notifications screen just in time to catch a glimpse of the ...
2
votes
0answers
441 views

Finding out what App causes unwanted new tabs in firefox on Android [duplicate]

Recently some app started opening new firefox tabs with the adress 'livemobilesearch.com'. I uninstalled the most recentently installed apps, but the problem still persists. I assume the pages get ...
22
votes
1answer
10k views

Is it a good idea to force stop apps after using them?

I find myself using force stop for every application once I have finished using them. Is this a good practice? Are there any performance or security benefits of doing this? Is force stopping an app ...
1
vote
1answer
34 views

Is possible to invoke an Android API without declaring the related permissions but with root access?

While reversing some malware, I have realized that despite they use an exploit that gives them root access, such malware declares a lot of permissions in the manifest. Because (AFAIK) "normal" apps ...
58
votes
14answers
27k views

Are there any tools to sandbox a malware application even more than the granted permissions on Android?

Suppose I want to run some program which requests too many permissions. For example, record from the microphone or read IMEI of my phone. However, there are no practical explanation why recording from ...
6
votes
1answer
4k views

How do I fix malware installed automatically in the /system directory?

I bought a Lyf Flame 7 from Reliance Jio last september. It runs on Android Lollipop. My phone is not rooted and it has never downloaded any other apps from the internet except from the Play Store. ...
1
vote
0answers
42 views

Detecting a Bad File

I have an LG STYLUS 3 phone and suspect that it may be remotely controlled or linked to another person. What do I look for to know whats up?
0
votes
0answers
70 views

How to remove a pharming bookmark on my andriod phone ?

A webpage with whatsapp logo automatically adds itself on the screen and upon clicking it , redircts to a webpagee which does not open on chrome On removing It gets installed again.. And sometimes ...
0
votes
2answers
300 views

How do I remove Trojan horse virus from my android smartphone?

There is a virus in my android phone named com.wgjvp.idck and I tried every possible solution to remove it but couldn't find any solution. What I did: I hard-reset(factory-reset) my phone twice but ...
5
votes
2answers
7k views

How to find and remove malware from some chinese smartphones?

I am planning to buy a chinese smartphone. However, I've read that some come with extensive spyware straight from the factory. Will I be able to detect such malware (Android.Trojan.Uupay.D and the ...
0
votes
0answers
46 views

How to get rid of malware rootkit?

I wanted to root my tablet and installed a rootkit. Soon thereafter I realized that besides giving me root access, the rootkit was also uploading all my files and settings to some unknown place. To ...
1
vote
0answers
39 views

Popups with promotion

Sometimes, I'm getting popups on my Samsung S8 with promotions. Especially it is annoying during navigation with Google Maps. How to disable popups? How to know which application is responsible on ...
0
votes
1answer
400 views

How to remove adware popups from notifications in S8?

So I visited a torrent site (not sure if it's the cause 100% though) on my S8 last night & since then have been getting the popups shown in the screenshot. I downloaded & ran Malwarebytes, ...
8
votes
11answers
48k views

How to track down an app that shows ads on smartphone screen?

I have a problem with malware apps. Looks like some app called "Native" installed itself, and created a shortcut for itself, all without my permission. After that happened, I have pop-up ads every ...
0
votes
0answers
520 views

Androidrbx and Swak News

I have an BLU Advance 5, and of course I already have the same problem than other users have around the Androidrbx and Swak News. I still have no answer about how to stop vicious routine of ...
1
vote
1answer
70 views

What is the scope of Google Play Protect's scanning?

Even though I don't recommend relying on it (because it is not very effective), I know quite a few people who only use Google Play Protect. Does Google Play Protect only scan apps installed via the ...
-1
votes
1answer
158 views

What is the best practice to deal with suspected malware infections in Lineage/Android?

I have reason to believe that my Lineage OS (14.1-20180620 nightly build) may be infected with malware. How should I deal with this? Other questions recommend running Malwarebytes. A question asking ...
1
vote
0answers
51 views

WIndows Antivirus reports Arp Cache Poisoning Attack by Android device

A Windows computer running ESET reports Arp Cache Poisoning Attack by the IP of my android phone. It's Redmi Note 4, MIUI 9 Global Stable, Android 7.0. I scanned it with Avast, Malwarebytes, MIUI ...
0
votes
0answers
27 views

What are the possible security issues when you're rooted? (not for apps but while browsing) [duplicate]

when flashing a good custom rom, will you have more security issues? in what way?? does this mean that lets say you had a pixel or a galaxy and you browsed a site with pornographic content or an ...
1
vote
1answer
62 views

How to stop Wi-Fi from using all my mobile data?

My phone all of a sudden is consuming huge amounts of mobile data ; apps usage report shows that 'Wi-fi' is causing this: from less than 500Mb per month is has consumed 2GB in a day , and it continues ...
0
votes
0answers
40 views

How to stop “keeps stopping” pop up

I've tried using malware detecting software, clearing app caches, and disabling notifications for most apps, but I still get this popping up every few seconds. I've tried searching, but I couldn't ...
1
vote
2answers
786 views

Unwanted Apps (Maybe malware) downloaded and installed on Android device

Off late, I have been observing some unwanted apps getting downloaded and installed on my Android device without my knowledge. Upon noticing I uninstalled those apps. However, the next time I switch ...
0
votes
1answer
36 views

Samsung phone charges poorly, periodically

My Samsung S8+ has started having periods when it does not keep up 100% charging when connected and in simple editing usage. If I leave it idle it charges slowly and the "charger beep" occasionally ...
6
votes
2answers
5k views

How to find app based on package name?

I've installed a malicious app that is posting ads over my notification bar, but can't find it. I know the java package name for it: com.letang.game103.en using the command: adb shell dumpsys ...
0
votes
1answer
152 views

Is there Malware on LineageOS that causes to receive SMS Spam

I never get SMS text spam on my phone. Installed Lineage OS on a Samsung Galaxy S4 mini phone. I installed TWRP and LOS both from official website (not various links on google or XDA). Installed F-...
0
votes
1answer
42 views

Where are LineageOS nightlies compiled & Who has commit rights to the codebase?

A] Where are LineageOS nightlies compiled? 1) Are they compiled on maintainer's machines 2) On a project controlled build farm? 3) Pool of contributed (random) machines? B] Who has commit rights to ...
3
votes
2answers
128 views

Persistent malware despite factory resets

I'd love your thoughts on this. Several months ago I mistakenly clicked a popup on a website, and since then have been getting intermittant popups says "your sim card is infected...etc" and it tries ...
0
votes
0answers
106 views

What's this file libAppDataSearchExt_armeabi_v7a.v7.so downloaded from *.gvt1.com on my device?

I was checking the traffic of my Android 5.1 tablet, and I've found that some files are downloaded discretely like this one: GET /edgedl/android/appdatasearch/libAppDataSearchExt_armeabi_v7a.v7.so ...
1
vote
0answers
225 views

How to stop apps from self installing

I have a problem for quite some time now. An app called xeroxservice which does not have any icon except that of apps like Google framework etc keeps downloading and installing itself without ...
1
vote
0answers
906 views

How can I remove com.android.service, launcher3, Medias and Shell?

I own a cheap Chinese android phone which I use for my everyday tasks and I am having issues with what I understand is malware. Frequently, Google Play informs me to Disable harmful app "com....
2
votes
1answer
5k views

Is this “Boost” / File Manager app a true system app or malware?

I installed this app after I received a notification on my lock screen informing me that a new system app was available for download. Seeing that the app was listed as an update to the "File Manager" ...
0
votes
0answers
226 views

Is the application com.jle.ini malware?

Way this app was downloaded automatically in my Android System? This app uses my data. I unninstall it and automatically reinstalls.