Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [malware]

For questions regarding viruses, trojan horses, spyware, and other malicious software, especially in removing or preventing it.

1
vote
2answers
126 views

Vital signs of unfamiliar software are present in safe mode: TopBuzz in Galaxy Note8

In Device Maintenance system app on Samsung Galaxy Note8, there is a TopBuzz cache shown when caches are being cleaned. Also in the safe mode. It reappears as a cleanup item every few minutes together ...
23
votes
8answers
12k views

Securing a young child's tablet

My wife has decided to get the kids a set of android tablets for christmas. These are Coby Kyros 4GB wi-fi only models. The kids are ages 6-10 so I don’t particularly want to let them have free ...
-2
votes
0answers
18 views

Why are there two com.google.android.gm?

I find it weird that there would be another com.google.android.gm and can't tell which is the real one. Both regenerated (after I deleted both) after I opened Gmail and find it weird for there to be ...
0
votes
0answers
13 views

Why is there another Phone icon in my Apps?

This appeared a few minutes ago after I accepted the permissions of my Messaging app. It wasn't there earlier when I took look at the Apps which is weird. Also it looks different from the other Phone ...
4
votes
1answer
60 views

When Google removes malicious apps from their Play Store, are users notified?

This Check Point Research article describes over 200 malicious apps on the Google Play Store that were downloaded over 100 million times. Google has now removed the apps from their Play Store. But ...
4
votes
1answer
101 views

For basic users - Any reason to install mobile security App?

For users that play it straight, never going to doubted sites, never enabling APK from non-play sources... (e.g typical seniors) Any reason to install a mobile security app? Because Such users ...
1
vote
1answer
1k views

How to detect a malicious USB charger?

My phone is rooted and has USB debugging enabled, because I do some development on it. In a moment of pre-caffeinated mental weakness, I plugged it into a cheap Chinese power bank. The phone ...
0
votes
3answers
1k views

Can rooting remove all malware, viruses and backdoors?

I ask this question because I read somewhere that there was a Chinese smartphone with in-built malware which could not removed even by rooting. (I searched the article everywhere but couldn't find it....
0
votes
1answer
56 views

Apps whitelisted in AFWall+ without my knowledge

I've installed a firewall (AFWall+) on my phone, and I've manually whitelisted every app I wanted to allow accessing the Internet, including system apps. So everything is blocked by default, and I add ...
0
votes
0answers
46 views

How do I get rid of com.android.Pet.mediaproxy?

I found this on my phone on my Files after I woke up. I accidentally fell asleep and I have a housemate who likes messing with my things and decided to put something on my phone that is actually a ...
0
votes
1answer
26 views

File level changes by an Android app

How can I track the file level changes done by an application during execution on an Android device. Specifically I am interested in file level changes done by a malware - create, delete, save a file ...
0
votes
1answer
209 views

Persistent techniques used by Android Malware [closed]

What are the most commonly used persistent techniques by Android malware. That is to survive on device after reboot. In windows malware they change registry entries to auto start, Android malware ...
1
vote
2answers
89 views

Malicious software runs on the background of Android phone, but I cannot see it - how to find and remove it?

I know that a malicious malware/spyware has been installed on my Samsung Galaxy S3 phone and I constantly get the message to close apps not in use because they drain my battery. But I do not have ...
0
votes
0answers
31 views

Android malware debugging

To understand a malware better when it is running on a device, I would like to get a view of what is happening in the background. For instance if a malware is loading a page using LoadUrl, I want to ...
0
votes
0answers
38 views

How to locate app which installed a potentially malicious certificate?

On my S8 (Oreo) today, I got the notification: There is a certificate installed that may or not monitor your internet traffic. Did spyware install itself? Or is this normal? I updated from 7.0 to 8....
1
vote
2answers
1k views

Android Spy Apps

Is it possible for someone to install a spy app on an Android phone JB os? Do these spy apps really work? Can anyone install this spy app to your mobile phone without your knowledge? If you suspect ...
0
votes
1answer
1k views

Sony Reader PRS-T1 becomes unresponsive

My Sony Reader PRS-T1 based on Android 2.2 is acting funny. I had rooted it in the past but is now in the "original" state, upgraded with the latest official firmware. The problem is that many times,...
1
vote
0answers
74 views

Factory reset did not remove malware problem on my ZTE zmax blade. What do I do at this point?

Surveillanceware or a worm of some sort has highjacked my Android and Facebook and email accounts. I'm unable to scan with my premium plus lookout account because the virus has disabled lookout and ...
0
votes
1answer
2k views

Directory named with random characters automatically (re)created in SD card? Could this be a malware?

Lately, I've seen that a directory with what seems to be a random name (like Z0tQWDVmQmoyRUxVSWdBU2pwNzAxMzc1Mw) is present in the local storage (/sdcard) of my Samsung Galaxy S5. When I delete it, ...
0
votes
2answers
2k views

Random apps keep installing on the phone

Here is a screenshot of these apps. I never downloaded them: Screenshot (click image for larger variant) Many times these have been deleted by me but they are download as well as installed by ...
0
votes
1answer
53 views

Can a malware compromise safe-mode of non-rooted device?

Was there any known malware running on Android (let's say since Nougat) which can compromise non-rooted Android device in a way that the malware is active also in the safe mode? So when booting non-...
11
votes
11answers
50k views

How to track down an app that shows ads on smartphone screen?

I have a problem with malware apps. Looks like some app called "Native" installed itself, and created a shortcut for itself, all without my permission. After that happened, I have pop-up ads every ...
1
vote
1answer
180 views

Is GetApk Market application trustful?

Is "GetApk Market" application trustful or malicious? Will it affect one's smartphone or tablet? I have checked via VirusTotal & it mostly detected as Android.Riskware.Downloader: Can anyone ...
0
votes
1answer
138 views

How can I uninstall this app which keeps getting reinstalled?

Hello I'm running android 4.2 Samsung rooted. There is an app which always appears on my data/app folder and always runs at start-up. When I go to app manager I can uninstall it however the next time ...
0
votes
2answers
6k views

How do I stop Android to auto enabling allow unknown sources?

Every time I restart my android 5 lollipop phone It auto enables allow installation of apps from unknown sources option. I switch it off manually then in a few seconds a pop up for an unknown app to ...
-1
votes
1answer
2k views

Facebook Messenger Virus on Android

I received a message from a friend on facebook The message said "this video is yours 'mt name'" with a shocked emoji face and my profile picture below. I was daft enough to click the link and then ...
2
votes
1answer
2k views

Is “Preferred Activity Setter” a malware?

I have noticed I have Preferred Activity Setter after the most recent update of Google Play Services, and it has been wreaking havoc on my Samsung Galaxy prevail LTE on my stock browser called "...
0
votes
1answer
107 views

How to remove a persistent malware that downloads unwanted apps?

Some months ago, I purchased an Azumi cell phone from an official store in a shopping mall in Mexico and subsequently discovered its firmware contains a ton of malware. The malware connects with a ...
0
votes
1answer
583 views

How to close a malware tab in chrome?

A webpage got redirected to a "virus alert" malware page and I can't close it. Deleted the cache, both the general tablet cache as well as the chrome cache, deleted the "unimportant data", did "...
2
votes
1answer
927 views

How to Block Pre-Installed Auto App Installer Malware?

I dont know which pre-installed app is auto installing new apps. But I think its com.android.system.service (also on few other phones: http://en.miui.com/thread-459132-1-1.html) Firewall is not ...
2
votes
2answers
10k views

How to remove Measure/mobileOcr/engriks malware?

My phone is attacked by barrage of error dialogs every 1 second: Unfortunately Measure Has Stopped Unfortunately mobileOcr Has Stopped Unfortunately engriks Has Stopped It makes the ...
15
votes
2answers
12k views

Dropbox not installed, but there is log activity in /data/system/dropbox?

I don't have dropbox installed, but whilst checking log files I've found that there is a /data/system/dropbox directory with log files from the 18th (which I think is the last time I rebooted my phone)...
1
vote
1answer
71 views

What kind of applications use internet on the background? [duplicate]

Viewed the list of applications that use Wi-FI and came across what is shown on the image below. What it is? Virus? Instead of Google I use F-Droid. Root is there, but only Total Commander and ...
0
votes
1answer
131 views

How can I identify the cache if I see its name? One name is suspicious

If Device maintenance app is launched in Samsung S8, after pressing Clean Now button, storage cleanup briefly shows different apps, storage space of which is being cleaned: System cache OneNote ...
3
votes
0answers
99 views

How to remove a persistent malware?

My Samsung Note 8 has gotten very weird lately. I get programs I never have installed, and when I try to reboot/reset my device with no backup they still come up after I'm finished with the reboot. I ...
3
votes
0answers
62 views

How to uninstall an app which restarts the phone when uninstalling it?

This app named Handwriting Fonts for Samsung, Oppo and HTC phones is acting like a malware. Whenever I try to uninstall it, my phone restarts (or probably reboots) and the app doesn't get uninstalled. ...
-5
votes
1answer
126 views

How do I disinfect my device infected with a malware?

In the process of trying to resolve the infection, I kept hitting major, dangerous hurdles. I had a pretty good guess as to what had led to the infection, but hit hurdle after hurdle as I tried to ...
0
votes
2answers
4k views

Android Stock Browser downloads file immediatelly after start

Android 4.4.2 Kitkat Stock Browser If I start it or open new tab, downloading of apk file (xb_client_blah-blah-blah.apk) from site no.stepfaster.com immediatelly starts instead of opening page which ...
0
votes
2answers
4k views

Is com.android.syshandler a malware file on Android 5.x?

I saw various unwanted pop up ads on an Android 5.x phone. Then installed the free Sophos Mobile Security on it (from the Play Store) and ran it several times over last few days. Each time it shows ...
2
votes
2answers
123 views

Problems with the DNS Network part (or maybe virus/malware-related) on Android 6.0 Marshmallow (Alcatel Vendor)

I've been experiencing some strange problems maybe that be related with the DNS Network part in Android 6.0 Marshmallow, and could mention these two origins as the main likely sources of problems: • ...
1
vote
0answers
48 views

Audio file opened by itself?

This morning I woke up to the alarm on my phone, as I snoozed it I noticed that the Total Commander player had a notification open, with an audio file open but on hold. When I tapped on play I got ...
62
votes
8answers
257k views

What is this lock screen with ads and how do I remove it?

I think my device got a malware. A lock screen with ads sometimes appear, and I must swipe an area at the bottom of the screen to open the phone. I am in Eastern Europe, some ads are in Slavic ...
1
vote
2answers
415 views

How to know what is causing a weird lock screen with ads to show up?

I have a Samsung Galaxy J7 that just started displaying this as the lock screen. Sometimes, it displays my regular lock screen, but if I let my phone sit long enough, it will display this screen. It ...
6
votes
2answers
5k views

How to find out which app is trying to open spam websites?

I've recently bought a new Android smartphone. After setting it up and loading my contacts onto it I thought that would be it. Now after some days, every time I unlock the phone it takes a few ...
2
votes
0answers
1k views

Finding out what App causes unwanted new tabs in firefox on Android [duplicate]

Recently some app started opening new firefox tabs with the adress 'livemobilesearch.com'. I uninstalled the most recentently installed apps, but the problem still persists. I assume the pages get ...
22
votes
1answer
11k views

Is it a good idea to force stop apps after using them?

I find myself using force stop for every application once I have finished using them. Is this a good practice? Are there any performance or security benefits of doing this? Is force stopping an app ...
1
vote
1answer
36 views

Is possible to invoke an Android API without declaring the related permissions but with root access?

While reversing some malware, I have realized that despite they use an exploit that gives them root access, such malware declares a lot of permissions in the manifest. Because (AFAIK) "normal" apps ...
59
votes
14answers
27k views

Are there any tools to sandbox a malware application even more than the granted permissions on Android?

Suppose I want to run some program which requests too many permissions. For example, record from the microphone or read IMEI of my phone. However, there are no practical explanation why recording from ...
6
votes
1answer
4k views

How do I fix malware installed automatically in the /system directory?

I bought a Lyf Flame 7 from Reliance Jio last september. It runs on Android Lollipop. My phone is not rooted and it has never downloaded any other apps from the internet except from the Play Store. ...
1
vote
0answers
46 views

Detecting a Bad File

I have an LG STYLUS 3 phone and suspect that it may be remotely controlled or linked to another person. What do I look for to know whats up?