Questions tagged [malware]

For questions regarding viruses, trojan horses, spyware, and other malicious software, especially in removing or preventing it.

Filter by
Sorted by
Tagged with
2
votes
1answer
62 views

How do I identify and remove this spammy malware “Suggestion” app?

Recently these spam ads have started showing up on my phone from an app calling itself "Suggestions". I never installed this thing itself and I don't see it on the apps list. It runs ...
0
votes
0answers
46 views

I am under the impression that my phone's security could've been compromised

TL;DR I'm using a stock Android 5.1.1 and there are two unauthorized apps named 'Root' and 'nobody' which I am unable to uninstall with adb and phone shows odd behavior on every site that requires you ...
-1
votes
1answer
50 views

a sketchy person has my phone for half an hour. what should i look for? [closed]

so i met this guy who had like 10 red flags... like I had a stalker once who didn't creep me out as much as he did. we just met and then were chillig and he asked me to turn on a song, which I also ...
0
votes
0answers
27 views

High battery usage (no wifi no apps no wireless)?

I've noticed that I lose about 20% battery each hour while my phone is unattended and offline. I check the battery settings and find that no apps are running. The phone is rooted, and I'm wondering ...
0
votes
0answers
21 views

Suspicious behaviour of Android Tor Browser

I'm using the Android Tor Browser 68.5.0 on my Samsung A40 running Android 9.0 (no root) and I've been observing some extremely strange behaviour: My data plan only allows 2 GB per month. Since I ...
0
votes
0answers
30 views

Is there risk of bricking in attempting to install a custom recovery on adevice that has been compromised and has sstem level malware apps on it?

My phone has been compromised and has malware system apps that have persisted after factory reset. I'd like to install a custom recovery so that I can at least get it back to functional if I brick it ...
0
votes
1answer
47 views

Is Google Voice susceptible to hacking like regular MMS or Whatsapp messages?

I have been using Google voice in a public facing way so as to reduce the chance of receiving malware messages over SMS/MMS or Whatsapp. But is it just as susceptible for someone to be able to sneak ...
0
votes
0answers
23 views

Automatic downloads

I've noticed in several occasions that on mobile browsers (I suppose it happens also on desktop ones) downloads can be forced without user consent. I've studied the matter and I've learnt that this is ...
2
votes
1answer
40 views

Will this Remove a Permission from an App?

So I downloaded an app from the web today, but it had some permissions I was uncomfortable with granting. So, I used APKTool to decompile the APK, removed the suspicious permission from the manifest, ...
0
votes
0answers
33 views

One Plus 7 - phone restarted after downloading an app and all apps permission got reset to default

I recently downloaded a game from the play store (Hitman Sniper). After the game completed installing, the phone automatically restarted and after that whichever app I opened, it asked for the ...
2
votes
0answers
87 views

Replacing Malware System Apps with Clean Versions of Apps

I have many times found devices or ROMs that have malware installed as system apps. This thread is intended to define a recurring problem and discuss and determine solutions. Background: In many ...
0
votes
0answers
10 views

What can malware on Android 10 actually do? [duplicate]

I was hoping to get an idea of how well modern versions of Android protect your phone using sandboxing. If you install an app and don't grant it any permissions what types of common malware activities ...
0
votes
0answers
63 views

Malware downloads APK

Some app is repeatedly downloading APK files in my Lenovo Android phone. How can I find which program is doing this ? I have installed all my apps from Google Play store.
0
votes
0answers
30 views

Android Malware Connections

Is it possible for android malware (with root privileges) to hide it's connections from network monitoring apps installed on the infected device? Are android network monitoring apps (such as Net ...
0
votes
0answers
25 views

Today, my phone out of nowhere started opening random spam/scam sites. What can I do to make it stop

I have an Huawei mate 10 lite, and today it started randomly opening my browser and showing me scam sites. I have tried some anti-virus apps, but after a full scan they didn't find anything. I also ...
0
votes
0answers
67 views

Samsung galaxy 8+ taken over

I am experiencing very severe issues with my Galaxy 8+. I am on my 3rd replacement. As soon as I create a Google account someone/something accesses it and changes my account recovery info, adds ...
0
votes
0answers
96 views

Run applications Isolated, avoid embedded trackers

So i'm going to be using microg trying to avoid the million trackers hidden in applications on the play store and mainly use applications from Fdroid as they don't for the most part. I actually had a ...
0
votes
1answer
520 views

What is “GPUwatch Interceptor app”

I was going through my settings today and I clicked on privacy then checked my special access and noticed something I've never seen before. An app called watch GPU interceptor it had full access ...
0
votes
0answers
51 views

If I buy a used and infected android phone, will flashing a new custom recovery and custom ROM make it safe to use?

If I buy a used and infected phone with a expensive spyware on it that the antivirus does not detect or is unable to remove than will flashing a new custom recovery and custom ROM make it safe to use? ...
2
votes
0answers
184 views

Is appgallery.cloud.huawei.com a Huawei site or kind of malware?

I started to receive notifications urging to install the official Huawei app store, kind of alternative to Google Play Store. I would be glad, but the app immediately requires to give about all ...
3
votes
1answer
306 views

Malware automatically installing unless I disable the play store

So I have been working on my brother's Elite 6.0l+ Sky device. This poor thing has been struck by the xhelper virus which auto installs firedoor, firemyn and an app that likes to hide itself by ...
0
votes
0answers
42 views

Will a hard reset remove any malicious software/viruses/malware from my Experia X?

I suspect my phone is compromised, and if a simple hard reset will fix all potential problems, I'll do that. Will that solve all potential problems? I'm concerned that the guy who just replaced my ...
0
votes
0answers
25 views

Avoid getting infected by Faketoken malware

In the past, the Faketoken malware was quite spreading, and in these days, it has started spreading again. I found article about few thousand Android phones being infected. How to avoid getting ...
1
vote
1answer
300 views

how to *really* kill adware app

the BLU Dash X2, Android 6.0, has a known adware app shown as Preinstall Data2 in the Settings | Apps list, and I finally figured out this is the same as com.android.packages.oseasapps shown in pm ...
0
votes
0answers
24 views

If I root and unroot my phone, is it safe for banking?

I have a Micromax phone that comes with App Center, bloatware that automatically installs nasty apps without permission. I'd like to get rid of it. I have tried this on my other phone by the following ...
4
votes
1answer
63 views

Should warnings about not charging your phone at airport/public usb ports be taken seriously?

There are many articles on the internet saying that charging at the usb ports available at the airport and public places can cause your phone to get hacked. Is there any any truth behind this? If ...
0
votes
1answer
56 views

How can I check that my Samsung phone is original and hasn't been modified?

How can I check that the mobile device that I am using has not been altered after leaving the factory? By this I mean no changes whatsoever have been made to the device. Whether it's the whole OS (...
0
votes
0answers
14 views

Google Search Bar Code Execution

So, is it possible to write a simple script in a Google search bar that can be executed? Is it possible to write out a sticker line of coffee that would, let's say, display a notification for the site....
-2
votes
2answers
169 views

Does the use of Android One remove the risk of OEM spying?

China is forcing tourists to install text-stealing malware at its border. Also, U.S. intelligence officials imply that Huawei, ZTE devices aren't safe for consumers (even in the West). Some ...
0
votes
0answers
93 views

'Your device is 10 days out of date' … unexpected notification, is it malware?

I have a Pixel 1, unlocked (bought direct from Google in 2016). I've never installed anything from an untrusted source. I just unlocked my phone and saw a popup similar to the 'emergency broadcast'/'...
1
vote
0answers
3k views

advert web pages opened on phone by bg app [duplicate]

I have some unwelcome behavior on my Samsung S4 AOS 5.0.1 (unrooted) phone. A few days ago I start to get attempts to open my web pages (up to 3 times a day so far) while my phone is idle. All cases ...
5
votes
0answers
115 views

What to do if I suspect my device is compromised?

I recently bought a Pixel 2 XL "open box" off eBay. The device appears slightly used, and a couple of days after registering with my Google account, I received security notifications of attempted ...
0
votes
1answer
319 views

Is it possible to get the SHA256 of an APK solely through ADB?

I am currently working on a project which will identify malware that are residing on a device. My aim is to make a hash-based detection of Android malware on a device by only accessing the ADB port ...
0
votes
0answers
28 views

Malware that destroys the color yellow?

I have no idea where to turn with this, but I am worried that malware or other misbehaving software is causing a color distortion. The story is: my phone, a Moto G5 Plus, at some point lost the ...
1
vote
0answers
31 views

Red-and-White Megaphone App coming up unsolicited

For about a month, an unknown app has been occasionally coming up on my cell phone's screen, interrupting whatever I'm doing, displaying a black screen and that rolling circle in the middle that means ...
0
votes
2answers
767 views

Remove notifications “Activate Anti-malware service” and “Battery fully charged” on rooted Samsung S10

On my Samsung S10e device I often get these notifications: Device care - Activate Anti-malware service and Battery fully charged When I try to turn one of them off, I am told: These ...
0
votes
0answers
63 views

CamScanner Malware: Do I need to uninstall older version?

Recently a malware was found in the popular android app CamScanner. The app is now removed from Google Play store. The company has also acknowledged the existence of the malware in an official ...
1
vote
0answers
37 views

Password reset screens appearing while inactive; was I hacked?

I put down my Samsung Galaxy S7 phone after making a phone call, and then noticed that the settings appeared on screen, and things like "reset password" were being clicked and text was being entered ...
0
votes
1answer
62 views

My android phone is often getting affected with virus

My problem : Hello friends. I use Asus zenfone go T500 android phone. My problem is, my phone often gets affected by some kind of virus which sometimes installs some chinese apps without my knowledge ...
5
votes
1answer
3k views

CamScanner: Trojan detected by ESET

I usually use CamScanner to scan my documents. After updating to the last version, ESET told me I have to remove it, because this app has Trojan and it can provide remote access to the infected device....
0
votes
1answer
73 views

Can a malicious application running in a container root the Android?

Can a malware root the Android when running in a container such as when running through VirtualXposed or Parallel space, or when a person is using the Guest user or any other secondary user in Android?...
4
votes
1answer
387 views

How to identify the app/process which re-mounts partitions R/W, creates files and changes file permissions?

I have a rooted device, with superuser rights granted to a few apps I trust. I have often found my /system or /vendor partition mounted read/write, and some files chmoded to 0777. Similarly ...
0
votes
0answers
114 views

Android asks to re-enter WiFi passwords. Is my phone compromised?

I have a Galaxy S8 (SM-950F) with Android version 8.0.0. I have rooted the device with Magisk. I have a couple of Magisk modules, including Bixby remapper, F-Droid Privilaged Extension, liboemcrypto ...
-1
votes
2answers
145 views

How do I safely flash a new rom on an infected android phone? [duplicate]

Is using a live cd a good idea? Will it keep the rest of my computer including storage and installed OS safe?
2
votes
2answers
101 views

Can my father's smartphone be compromised?

My father said to me that he allowed installation of apps from unknown sources when he was asked to do it to go further with something (he said that he don't remember when or what he was doing). In ...
2
votes
1answer
117 views

Why is there “/proc/net/snmp” file on my device? Could it be due to a malware?

After reading this paper I observed a little and I realized that an SNMP socket (exactly two: v4 and v6) exists when I use ls /proc/1/net. I see them clearly. My question is simple, do the bootkits ...
0
votes
1answer
68 views

Why is Amazon Shopping app showing 'null' after the product price?

I've heard that if a website or an app appears in a weird way, it means that your device might have been hacked. I have Android 8.1 Oreo, and below is the Amazon Shopping app showing 'null' after the ...
4
votes
1answer
117 views

When Google removes malicious apps from their Play Store, are users notified?

This Check Point Research article describes over 200 malicious apps on the Google Play Store that were downloaded over 100 million times. Google has now removed the apps from their Play Store. But ...
4
votes
1answer
146 views

For basic users - Any reason to install mobile security App?

For users that play it straight, never going to doubted sites, never enabling APK from non-play sources... (e.g typical seniors) Any reason to install a mobile security app? Because Such users ...
0
votes
1answer
867 views

Apps whitelisted in AFWall+ without my knowledge

I've installed a firewall (AFWall+) on my phone, and I've manually whitelisted every app I wanted to allow accessing the Internet, including system apps. So everything is blocked by default, and I add ...

1
2 3 4 5
8