Questions tagged [malware]

For questions regarding viruses, trojan horses, spyware, and other malicious software, especially in removing or preventing it.

Filter by
Sorted by
Tagged with
7
votes
2answers
7k views

How to find app based on package name?

I've installed a malicious app that is posting ads over my notification bar, but can't find it. I know the java package name for it: com.letang.game103.en using the command: adb shell dumpsys ...
63
votes
8answers
264k views

What is this lock screen with ads and how do I remove it?

I think my device got a malware. A lock screen with ads sometimes appear, and I must swipe an area at the bottom of the screen to open the phone. I am in Eastern Europe, some ads are in Slavic ...
35
votes
7answers
56k views

Is this red star icon malware? How to get rid of it?

Every now and then a red star icon appears on my brother's notification bar, as shown below. The message related to this notification is some advert like "Turbo Boost Your Battery". He has been ...
3
votes
1answer
163 views

How to identify the app/process which re-mounts partitions R/W, creates files and changes file permissions?

I have a rooted device, with superuser rights granted to a few apps I trust. I have often found my /system or /vendor partition mounted read/write, and some files chmoded to 0777. Similarly ...
59
votes
14answers
28k views

Are there any tools to sandbox a malware application even more than the granted permissions on Android?

Suppose I want to run some program which requests too many permissions. For example, record from the microphone or read IMEI of my phone. However, there are no practical explanation why recording from ...
9
votes
2answers
9k views

How to find out which app is trying to open spam websites?

I've recently bought a new Android smartphone. After setting it up and loading my contacts onto it I thought that would be it. Now after some days, every time I unlock the phone it takes a few ...
2
votes
1answer
2k views

Attempted multiple solutions for malwares like androidSystem, timeService and monkeyTest, but to no avail

My Micromax A106 is affected by viruses called timeService, monkeyTest, androidSystem and some unknown ones. These viruses started automatically even though I uninstalls, disabled and stopped them. ...
9
votes
2answers
15k views

Apps install on their own

Every night for the past few days my phone installs a new app that I never saw/wanted/heard of before. It all started with AppCaster (Which I never installed on my phone, it just showed up one morning)...
7
votes
2answers
17k views

Toast message with Chinese characters, is it a virus?

I recently received some updates today from the Play Store. Every so often a pop notification, one of those bubble ones at the bottom of the screen with Chinese characters. The most recent update I'...
0
votes
3answers
35k views

“Lucky try” & “Recommended” shortcuts always appear on homescreen, how to remove it?

I am getting shortcuts in my home screen. I try to delete it, but it is appearing once again. Shortcuts names: Lucky try, Recommended.
8
votes
5answers
162k views

Is this notification that keeps coming up on my phone a virus?

This notification keeps coming up, and i'm not sure if it's real or a virus, or how to stop it coming up. It says 'Android system warning! Google has found serious bugs in your Battery Module!Click on ...
3
votes
1answer
208 views

How to remove a persistent malware?

My Samsung Note 8 has gotten very weird lately. I get programs I never have installed, and when I try to reboot/reset my device with no backup they still come up after I'm finished with the reboot. I ...
15
votes
1answer
6k views

How do I protect my phone from malicious apps once it is rooted?

I rooted my phone. Now if I use a Terminal Emulator such as Android Terminal Emulator, I noticed that I can can easily obtain root access without a password: $ id uid=10059(app_59) gid=10059(app_59) ...
13
votes
3answers
2k views

Pros and cons of rooting using apps (“Soft Root”) compared to other methods (“Hard Root”)

There are quite a few app based rooting methods. A recent review 9 free software apps to root Android devices, points to some of them and there may be more apps, paid or otherwise. From what I ...
3
votes
2answers
15k views

Device wants desperately to install a package (com.google.system.s) on its own

I have in my hands a Mpie M8 device (Android 5), The previous owner said it wasn't working properly and I suspected it had a virus. I factory reset it and now the phone wants desperately to install ...
3
votes
1answer
6k views

How to delete a file (e.g. malware app) that cannot be even removed with root access?

I have root access in my device, but there is a malware in /system/app/ that I can't delete. This malware installs TimeService, MonkeyTest, and also some other apps like DR battery and privacy guard, ...
19
votes
2answers
13k views

Dropbox app not installed, but there is log activity in /data/system/dropbox

I don't have Dropbox app installed nor DropBox account, but whilst checking log files I've found that there is a /data/system/dropbox directory with log files from, I think, the last time I rebooted ...
9
votes
2answers
15k views

Can a Factory Reset fix Malware Problem?

This recent story appeared on Slashdot regarding various malware apps that had invaded the Android Market. Google quickly removed them (and I was not infected - I don't typically download apps), but I ...
5
votes
2answers
27k views

Apps trying to install in background

I recently wanted to install a metronome app, so I downloaded one from the Play Store, but in the "install" step nothing happened. The app just wasn't there. I installed another one and forgot about ...
23
votes
8answers
12k views

Securing a young child's tablet

My wife has decided to get the kids a set of android tablets for christmas. These are Coby Kyros 4GB wi-fi only models. The kids are ages 6-10 so I don’t particularly want to let them have free ...
5
votes
1answer
1k views

Alldaymall A88s tablet popping up junk from PornClub. I have it rooted. Now what?

On eBay I picked up one of those cheap Chinese 7" Quad-Core AllDayMall A88s tablets for $25, WiFi-only. When it comes on all is fine unless you try to open the browser. Then things start popping ...
2
votes
1answer
19k views

How to stop my Android device from being spammed in the browser as well as in the application?

Recently I have downloaded two games: Deer Hunter PreHistoric Worm But after that I have my browser which keeps redirecting me to http://ad.adsmatte.com It is happening every time I load the page – ...
11
votes
11answers
53k views

How to track down an app that shows ads on smartphone screen?

I have a problem with malware apps. Looks like some app called "Native" installed itself, and created a shortcut for itself, all without my permission. After that happened, I have pop-up ads every ...
9
votes
5answers
119k views

Do I have a virus on my phone? A message from an Android app says so

I have just received a message from an Android app on my phone saying my phone has been infected with a virus and to click a link to fix the problem. I'm not sure I trust this, is it possible to ...
6
votes
3answers
2k views

Who is creating icons?

Some application (malware? adware?) is creating garbage icons on my Android desktop. How to know the application who does this? I heard each application is a Linux user on android. Is it possible to ...
5
votes
1answer
4k views

How do I fix malware installed automatically in the /system directory?

I bought a Lyf Flame 7 from Reliance Jio last september. It runs on Android Lollipop. My phone is not rooted and it has never downloaded any other apps from the internet except from the Play Store. ...
4
votes
1answer
2k views

Red Star And Green Cross Icons? [duplicate]

Possible Duplicate: Is this red star icon malware? How to get rid of it? I have a Motorola Defy and in the notifications bar I am always getting red stars and bright green crosses. The Red Star ...
3
votes
1answer
2k views

How does “virus been detected” on android pop up on chrome when visiting some sites?

What is the cause of this chrome bug on android? The last site I went to was www.destructoid.com and all of a sudden it gets redirected to the following url. This happened previously awhile back, but ...
2
votes
1answer
1k views

How to Block Pre-Installed Auto App Installer Malware?

I dont know which pre-installed app is auto installing new apps. But I think its com.android.system.service (also on few other phones: http://en.miui.com/thread-459132-1-1.html) Firewall is not ...
2
votes
1answer
51k views

Android adware lets me opt out: is it safe?

Recently my mom's phone running Android 5.0 has been infected with a piece of adware: At first we thought this was caused by applications, but as you can see here, only the Google/METROPCS Internet ...
1
vote
0answers
60 views

Why is my android phone portscanning my PC?

I have bitdefender whining about my PC being portscanned. The logs show that it is coming from my android phone (which has static address). Is that normal? How can i figure out the app that is doing ...
1
vote
3answers
24k views

Removal of the wonderlandads.com pop-up virus

Would anyone know how I can remove the wonderlandads.com pop-up virus from my Nexus 5 mobile - it appears in my Chrome browser. While there are many sites dedicated to the manual removal of the virus ...
1
vote
2answers
20k views

Android browser redirecting malware sites

I was redirected to appsliu, onclickads and some other sites which were reffered as malware when I was surfing the internet using android browserd on my Xperia Z1. I tried clearing data along with ...
2
votes
0answers
4k views

How to get rid of a malware app “Chromes”?

A few days ago I noticed a new app on my phone. It's called Chromes and it has a logo really similar to Chrome's logo. It was detected as Malware by my antivirus at first, but after a few hours I got ...
31
votes
4answers
2k views

How do I tell if my phone has Carrier IQ Software on it?

What is known about the Carrier IQ Software and Android handsets? I see a similar icon as shown on the Carrier IQ app next to an app called "Contact Data" and another called "Contact Sync". Does my ...
22
votes
1answer
11k views

Why are Zygote and Whatsapp asking for root?

Since yesterday, WhatsApp and Zygote have been asking for root permissions on my phone via supersu. Apparently zygote is a system app. Is this malware? Lookout scan came up clean.
4
votes
5answers
28k views

Alarm Controller is sending me unwanted notifications, ads

From many days I am getting unwanted ads and notifications. I uninstalled many app, and also did a factory reset also, After searching, I found Alarm Controller may be the culprit. As I lock my screen ...
0
votes
0answers
4k views

Apps are installed in my smart phone without my permission?

When wifi is on, Some strange applications are being installed automatically. I don't request them. They are downloaded without my permission. I uninstalled (removed) the unwanted apps from my smart ...
5
votes
5answers
2k views

What's the “MTC Мобильная Почта” update on my Samsung Galaxy?

What's the wierd looking update that's just turned up on my Samsung Galaxy phone? "MTC Мобильная Почта" by "OJSC Mobile TeleSystems". The review section has lots of one-star comments saying its ...
5
votes
4answers
2k views

root-android.org - A scam? [closed]

I would just like to know whether the website root-android.org and its product is a big scam when it comes to rooting Android devices. If it is, then I advice other would-be rooters to stay away from ...
3
votes
2answers
3k views

Removing redirect link malware

I have Xiaomi Mi3 and it's not rooted. Every time I open a web page, both on mobile data and WiFi, and even with different browsers, I get redirected to other pages with ads and pages like this: http:...
2
votes
3answers
2k views

Heyzap interstitial ads in every app

I noticed when I start an app, often an Heyzap interstitial ad appears (I had the Heyzap app but removed it 2 days ago). Today I ran my own app that I've compiled from the Android SDK that definitely ...
1
vote
1answer
2k views

Getting toast message with text sending

I'm using Asus 551 with lollipop. I have numerous apps installed. Recently, I started getting toast notification with the text Sending.... This usually occurs when I'm using Facebook, whatsapp and ...
6
votes
3answers
2k views

Malware adding code to ga.js opens up random ads/websites?

A friend of mine just handed me his tablet saying that everytime he open a webpage the browser redirects to several advertisement page (or, it "adds" advertisements on the page). This happens both on ...
3
votes
0answers
79 views

What installed “DU quick charge” on my phone? [duplicate]

I started seeing something new on my lock screen, before even swiping the lock screen. It was a large battery charging-status display with advertisements below that. At the upper left corner was a ...
3
votes
0answers
103 views

How to know what triggered an apk installation

I have been trying to solve a malware problem for the past couple days in a certain chinese phone (Android system version=6.0), the problem I am facing is that a malware keeps being reinstalled even ...
2
votes
2answers
190 views

Persistent malware despite factory resets

I'd love your thoughts on this. Several months ago I mistakenly clicked a popup on a website, and since then have been getting intermittant popups says "your sim card is infected...etc" and it tries ...
2
votes
0answers
87 views

Trojan & Malware removal

I have a Samsung Grand neo I9060, in which I recently downloaded an app from the web only for it to install malware and trojan in it. Each time the data connection is on or I'm connected to a wi-fi ...
2
votes
0answers
25k views

Suspicious popup and 'Yellow Booster' installation

A pop-up appeared on my phone stating: Warning You only have to install a Great App to get your phone fully functioned. The only option I am given is "Confirm."I accidentally hit the confirm ...
2
votes
0answers
1k views

Finding out what App causes unwanted new tabs in firefox on Android [duplicate]

Recently some app started opening new firefox tabs with the adress 'livemobilesearch.com'. I uninstalled the most recentently installed apps, but the problem still persists. I assume the pages get ...