The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [malware]

For questions regarding viruses, trojan horses, spyware, and other malicious software, especially in removing or preventing it.

Filter by
Sorted by
Tagged with
-3
votes
0answers
14 views

Html viewer showed track and trace logs& won't factory reset properly..malware? [on hold]

Only thing I found through Google was the server: cops -reg- grn came back to copcast app like really police. Except single mom never out into anything for that type bs. Question is how do I find out ...
0
votes
0answers
22 views

'Your device is 10 days out of date' … unexpected notification, is it malware?

I have a Pixel 1, unlocked (bought direct from Google in 2016). I've never installed anything from an untrusted source. I just unlocked my phone and saw a popup similar to the 'emergency broadcast'/'...
1
vote
0answers
964 views

advert web pages opened on phone by bg app [duplicate]

I have some unwelcome behavior on my Samsung S4 AOS 5.0.1 (unrooted) phone. A few days ago I start to get attempts to open my web pages (up to 3 times a day so far) while my phone is idle. All cases ...
5
votes
0answers
80 views

What to do if I suspect my device is compromised?

I recently bought a Pixel 2 XL "open box" off eBay. The device appears slightly used, and a couple of days after registering with my Google account, I received security notifications of attempted ...
0
votes
1answer
45 views

Is it possible to get the SHA256 of an APK solely through ADB?

I am currently working on a project which will identify malware that are residing on a device. My aim is to make a hash-based detection of Android malware on a device by only accessing the ADB port ...
0
votes
0answers
21 views

Malware that destroys the color yellow?

I have no idea where to turn with this, but I am worried that malware or other misbehaving software is causing a color distortion. The story is: my phone, a Moto G5 Plus, at some point lost the ...
1
vote
0answers
29 views

Red-and-White Megaphone App coming up unsolicited

For about a month, an unknown app has been occasionally coming up on my cell phone's screen, interrupting whatever I'm doing, displaying a black screen and that rolling circle in the middle that means ...
0
votes
0answers
35 views

Remove notification “Activate Anti-malware service”

On my Samsung S10e device I get this notification: Device care - Activate Anti-malware service When I try to turn it off, it says: These notifications can't be turned off Which raises the ...
0
votes
0answers
47 views

CamScanner Malware: Do I need to uninstall older version?

Recently a malware was found in the popular android app CamScanner. The app is now removed from Google Play store. The company has also acknowledged the existence of the malware in an official ...
1
vote
0answers
35 views

Password reset screens appearing while inactive; was I hacked?

I put down my Samsung Galaxy S7 phone after making a phone call, and then noticed that the settings appeared on screen, and things like "reset password" were being clicked and text was being entered ...
0
votes
1answer
46 views

My android phone is often getting affected with virus

My problem : Hello friends. I use Asus zenfone go T500 android phone. My problem is, my phone often gets affected by some kind of virus which sometimes installs some chinese apps without my knowledge ...
0
votes
0answers
25 views

Some apps are installing constantly

Some apps are installing constantly and when I delete those apps, they again get installed. Quick Heal mobile antivirus shows that these are malware and resolve the problem, but sometimes they are ...
5
votes
1answer
3k views

CamScanner: Trojan detected by ESET

I usually use CamScanner to scan my documents. After updating to the last version, ESET told me I have to remove it, because this app has Trojan and it can provide remote access to the infected device....
0
votes
1answer
62 views

Can a malicious application running in a container root the Android?

Can a malware root the Android when running in a container such as when running through VirtualXposed or Parallel space, or when a person is using the Guest user or any other secondary user in Android?...
3
votes
1answer
128 views

How to identify the app/process which re-mounts partitions R/W, creates files and changes file permissions?

I have a rooted device, with superuser rights granted to a few apps I trust. I have often found my /system or /vendor partition mounted read/write, and some files chmoded to 0777. Similarly ...
0
votes
0answers
65 views

Gaining higher privileges

When an application requests access to some features of the phone, for example to read SMS storage, it always asks the user for permission for the second time. Is there a way to bypass/disable this ...
0
votes
0answers
81 views

Android asks to re-enter WiFi passwords. Is my phone compromised?

I have a Galaxy S8 (SM-950F) with Android version 8.0.0. I have rooted the device with Magisk. I have a couple of Magisk modules, including Bixby remapper, F-Droid Privilaged Extension, liboemcrypto ...
-1
votes
2answers
69 views

How do I safely flash a new rom on an infected android phone? [duplicate]

Is using a live cd a good idea? Will it keep the rest of my computer including storage and installed OS safe?
2
votes
2answers
83 views

Can my father's smartphone be compromised?

My father said to me that he allowed installation of apps from unknown sources when he was asked to do it to go further with something (he said that he don't remember when or what he was doing). In ...
2
votes
1answer
75 views

Why is there “/proc/net/snmp” file on my device? Could it be due to a malware?

After reading this paper I observed a little and I realized that an SNMP socket (exactly two: v4 and v6) exists when I use ls /proc/1/net. I see them clearly. My question is simple, do the bootkits ...
0
votes
1answer
54 views

Why is Amazon Shopping app showing 'null' after the product price?

I've heard that if a website or an app appears in a weird way, it means that your device might have been hacked. I have Android 8.1 Oreo, and below is the Amazon Shopping app showing 'null' after the ...
0
votes
0answers
23 views

Find out the URLs opened by each app on my phone [duplicate]

Every morning around 5 AM and in the evening around 4 PM, some app installed on my phone tries to reach out to the test.com website or other sites such as arlo-banners.weareenvoy.net. I suspect it ...
0
votes
0answers
38 views

Why is there another Phone icon in my Apps?

The second Phone app on the list appeared a few minutes ago after I accepted the permissions of my Messaging app. It wasn't there earlier when I took look at the Apps which is weird. Also it looks ...
4
votes
1answer
101 views

When Google removes malicious apps from their Play Store, are users notified?

This Check Point Research article describes over 200 malicious apps on the Google Play Store that were downloaded over 100 million times. Google has now removed the apps from their Play Store. But ...
4
votes
1answer
125 views

For basic users - Any reason to install mobile security App?

For users that play it straight, never going to doubted sites, never enabling APK from non-play sources... (e.g typical seniors) Any reason to install a mobile security app? Because Such users ...
0
votes
1answer
481 views

Apps whitelisted in AFWall+ without my knowledge

I've installed a firewall (AFWall+) on my phone, and I've manually whitelisted every app I wanted to allow accessing the Internet, including system apps. So everything is blocked by default, and I add ...
0
votes
0answers
123 views

How do I get rid of com.android.Pet.mediaproxy?

I found this on my phone on my Files after I woke up. I accidentally fell asleep and I have a housemate who likes messing with my things and decided to put something on my phone that is actually a ...
0
votes
1answer
30 views

File level changes by an Android app

How can I track the file level changes done by an application during execution on an Android device. Specifically I am interested in file level changes done by a malware - create, delete, save a file ...
0
votes
0answers
52 views

Android malware debugging

To understand a malware better when it is running on a device, I would like to get a view of what is happening in the background. For instance if a malware is loading a page using LoadUrl, I want to ...
0
votes
0answers
79 views

How to locate app which installed a potentially malicious certificate?

On my S8 (Oreo) today, I got the notification: There is a certificate installed that may or not monitor your internet traffic. Did spyware install itself? Or is this normal? I updated from 7.0 to 8....
1
vote
0answers
94 views

Factory reset did not remove malware problem on my ZTE zmax blade. What do I do at this point?

Surveillanceware or a worm of some sort has highjacked my Android and Facebook and email accounts. I'm unable to scan with my premium plus lookout account because the virus has disabled lookout and ...
0
votes
1answer
175 views

Can a malware compromise safe-mode of non-rooted device?

Was there any known malware running on Android (let's say since Nougat) which can compromise non-rooted Android device in a way that the malware is active also in the safe mode? So when booting non-...
1
vote
1answer
401 views

Is GetApk Market application trustful?

Is "GetApk Market" application trustful or malicious? Will it affect one's smartphone or tablet? I have checked via VirusTotal & it mostly detected as Android.Riskware.Downloader: Can anyone ...
0
votes
1answer
173 views

How to remove a persistent malware that downloads unwanted apps? [duplicate]

Some months ago, I purchased an Azumi cell phone from an official store in a shopping mall in Mexico and subsequently discovered its firmware contains a ton of malware. The malware connects with a ...
1
vote
1answer
78 views

What kind of applications use internet on the background? [duplicate]

Viewed the list of applications that use Wi-FI and came across what is shown on the image below. What it is? Virus? Instead of Google I use F-Droid. Root is there, but only Total Commander and ...
3
votes
0answers
172 views

How to remove a persistent malware?

My Samsung Note 8 has gotten very weird lately. I get programs I never have installed, and when I try to reboot/reset my device with no backup they still come up after I'm finished with the reboot. I ...
1
vote
2answers
417 views

Vital signs of unfamiliar software are present in safe mode: TopBuzz in Galaxy Note8

In Device Maintenance system app on Samsung Galaxy Note8, there is a TopBuzz cache shown when caches are being cleaned. Also in the safe mode. It reappears as a cleanup item every few minutes together ...
3
votes
0answers
72 views

How to uninstall an app which restarts the phone when uninstalling it?

This app named Handwriting Fonts for Samsung, Oppo and HTC phones is acting like a malware. Whenever I try to uninstall it, my phone restarts (or probably reboots) and the app doesn't get uninstalled. ...
0
votes
1answer
229 views

How can I identify the cache if I see its name? One name is suspicious

If Device maintenance app is launched in Samsung S8, after pressing Clean Now button, storage cleanup briefly shows different apps, storage space of which is being cleaned: System cache OneNote ...
1
vote
2answers
108 views

Malicious software runs on the background of Android phone, but I cannot see it - how to find and remove it?

I know that a malicious malware/spyware has been installed on my Samsung Galaxy S3 phone and I constantly get the message to close apps not in use because they drain my battery. But I do not have ...
-4
votes
1answer
146 views

How do I disinfect my device infected with a malware?

In the process of trying to resolve the infection, I kept hitting major, dangerous hurdles. I had a pretty good guess as to what had led to the infection, but hit hurdle after hurdle as I tried to ...
2
votes
2answers
143 views

Problems with the DNS Network part (or maybe virus/malware-related) on Android 6.0 Marshmallow (Alcatel Vendor)

I've been experiencing some strange problems maybe that be related with the DNS Network part in Android 6.0 Marshmallow, and could mention these two origins as the main likely sources of problems: • ...
1
vote
0answers
51 views

Audio file opened by itself?

This morning I woke up to the alarm on my phone, as I snoozed it I noticed that the Total Commander player had a notification open, with an audio file open but on hold. When I tapped on play I got ...
2
votes
0answers
1k views

Finding out what App causes unwanted new tabs in firefox on Android [duplicate]

Recently some app started opening new firefox tabs with the adress 'livemobilesearch.com'. I uninstalled the most recentently installed apps, but the problem still persists. I assume the pages get ...
1
vote
2answers
1k views

How to know what is causing a weird lock screen with ads to show up?

I have a Samsung Galaxy J7 that just started displaying this as the lock screen. Sometimes, it displays my regular lock screen, but if I let my phone sit long enough, it will display this screen. It ...
1
vote
1answer
37 views

Is possible to invoke an Android API without declaring the related permissions but with root access?

While reversing some malware, I have realized that despite they use an exploit that gives them root access, such malware declares a lot of permissions in the manifest. Because (AFAIK) "normal" apps ...
1
vote
0answers
51 views

Detecting a Bad File

I have an LG STYLUS 3 phone and suspect that it may be remotely controlled or linked to another person. What do I look for to know whats up?
0
votes
2answers
473 views

How do I remove Trojan horse virus from my android smartphone?

There is a virus in my android phone named com.wgjvp.idck and I tried every possible solution to remove it but couldn't find any solution. What I did: I hard-reset(factory-reset) my phone twice but ...
1
vote
0answers
45 views

Popups with promotion

Sometimes, I'm getting popups on my Samsung S8 with promotions. Especially it is annoying during navigation with Google Maps. How to disable popups? How to know which application is responsible on ...
0
votes
1answer
1k views

How to remove adware popups from notifications in S8?

So I visited a torrent site (not sure if it's the cause 100% though) on my S8 last night & since then have been getting the popups shown in the screenshot. I downloaded & ran Malwarebytes, ...