Questions tagged [malware]

For questions regarding viruses, trojan horses, spyware, and other malicious software, especially in removing or preventing it.

146 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5
votes
0answers
128 views

What to do if I suspect my device is compromised?

I recently bought a Pixel 2 XL "open box" off eBay. The device appears slightly used, and a couple of days after registering with my Google account, I received security notifications of attempted ...
5
votes
2answers
123 views

Apps offering free data or money based on using and sharing

I have been hearing about some android apps which give you free money or data by installing, using and sharing. Many of my friends have been asking me to install such apps so-that they get benefits of ...
4
votes
1answer
500 views

Why am I getting Google Drive notifications about strangers' documents?

Screenshot: Is this just a new form of spam or phishing technique, basically betting that I'll click on the notification and look at the document? I haven't looked at any of them yet, but it seems ...
4
votes
1answer
286 views

Does Android's implementation of SELinux's MAC inhibit apps with root privileges from accessing other app's data?

Starting with Android 4.4, SELinux's MAC is enforced. Does this mean that if an app somehow can get installed and exploit the kernel to get root privileges, that MAC will still prevent that app with ...
4
votes
1answer
222 views

How can I know if the rooting files have malware?

I'm learning about how cellphone rooting works. Every procedure I've seen this far asks you to install a series of files that you download from random websites. Is it possible to know for sure that ...
3
votes
0answers
97 views

Worried about possible malware

I'm hoping someone can help me here. Yesterday I was doing some research for an essay when I clicked a website (very dumb of me, who never clicks suspicious websites or links) that redirected me. I ...
3
votes
0answers
123 views

Replacing Malware System Apps with Clean Versions of Apps

I have many times found devices or ROMs that have malware installed as system apps. This thread is intended to define a recurring problem and discuss and determine solutions. Background: In many ...
3
votes
1answer
529 views

How to remove a persistent malware?

My Samsung Note 8 has gotten very weird lately. I get programs I never have installed, and when I try to reboot/reset my device with no backup they still come up after I'm finished with the reboot. I ...
3
votes
0answers
215 views

How to uninstall an app which restarts the phone when uninstalling it?

This app named Handwriting Fonts for Samsung, Oppo and HTC phones is acting like a malware. Whenever I try to uninstall it, my phone restarts (or probably reboots) and the app doesn't get uninstalled. ...
3
votes
0answers
1k views

Virus keeps downloading “Female for Portuguese” TTS file while hijacking Chrome

Device: Samsung Galaxy S4 mini [SCH-I435] OS: Android 4.4.2 Problem: When I try to open my browser (Chrome) it auto redirects to us.councilors425qd.top/.... and starts auto downloading "Female for ...
3
votes
0answers
114 views

How to know what triggered an apk installation

I have been trying to solve a malware problem for the past couple days in a certain chinese phone (Android system version=6.0), the problem I am facing is that a malware keeps being reinstalled even ...
3
votes
1answer
8k views

Is 'Boost' a feature or a virus?

The app 'File Manager' now has a new look, a look that has more of a virus feel and lees of an 'android' feel. Force stopping file manager gets rid of the addition to the notification bar thingy and ...
3
votes
1answer
634 views

How to stop “Make your phone more social” prompts?

Alcatel One Touch 983, firmware version 2.3.7. I am frequently interrupted with a black screen displaying this prompt: Make your phone more social Authorize the synchronizing which will make it ...
2
votes
0answers
370 views

Is mtk-su safe? Is it actually temporary?

mtk-su which helps mediatek mtk-65** based phone owners to basically gain a "temporary" root. My question is, if it was actually temporary as it claims, and if it actually doesn't persist ...
2
votes
0answers
217 views

Is appgallery.cloud.huawei.com a Huawei site or kind of malware?

I started to receive notifications urging to install the official Huawei app store, kind of alternative to Google Play Store. I would be glad, but the app immediately requires to give about all ...
2
votes
0answers
204 views

I want to deinstall News Republic from my HTC U Ultra, how can I do that?

I have one HTC U Ultra that has News Republic installed. I want to disable the push notifications or deinstall this program. How can I do that? On another HTC U Ultra the program is not installed so ...
2
votes
1answer
100 views

Used note 4 clean spyware

I purchased a used Note 4 off ebay and want to make completely sure there are no spy apps or malware on it. I know some spy apps can be installed into the system partition and survive a factory reset. ...
2
votes
0answers
4k views

How to get rid of a malware app “Chromes”?

A few days ago I noticed a new app on my phone. It's called Chromes and it has a logo really similar to Chrome's logo. It was detected as Malware by my antivirus at first, but after a few hours I got ...
2
votes
0answers
432 views

Skype sent messages I didn't send

On my laptop, I played a video on YouTube. In the morning I looked on my Android phone and discovered that the video had been sent, in Skype, to about six of my contacts. I'm not sure if the sending ...
2
votes
0answers
96 views

Trojan & Malware removal

I have a Samsung Grand neo I9060, in which I recently downloaded an app from the web only for it to install malware and trojan in it. Each time the data connection is on or I'm connected to a wi-fi ...
2
votes
0answers
25k views

Suspicious popup and 'Yellow Booster' installation

A pop-up appeared on my phone stating: Warning You only have to install a Great App to get your phone fully functioned. The only option I am given is "Confirm."I accidentally hit the ...
2
votes
0answers
509 views

Malware application trying to override system application

My device (Symphony W69Q; running Android 4.4.2) recently encountered an annoying problem. It's UI began to turn off & restart continuously. I also some unwanted apps running in background and ...
2
votes
1answer
10k views

How to remove Measure/mobileOcr/engriks malware?

My phone is attacked by barrage of error dialogs every 1 second: Unfortunately Measure Has Stopped Unfortunately mobileOcr Has Stopped Unfortunately engriks Has Stopped It makes the ...
2
votes
1answer
19k views

How to stop my Android device from being spammed in the browser as well as in the application?

Recently I have downloaded two games: Deer Hunter PreHistoric Worm But after that I have my browser which keeps redirecting me to http://ad.adsmatte.com It is happening every time I load the page – ...
2
votes
1answer
211 views

Malware has corrupted SD card

I have android phone with SD card. Malware has moved all files to other folder. Then I copied it to previous place. But now it doesn't show applications placed in menu. It shows it in settings. What ...
2
votes
3answers
467 views

Battery Popup at 25% english with system in spanish. Possible malware?

First of all, I know this question is duplicated, (this is the original question: Battery Popup at 25% ) but I can't comment or add any reply and I have some information that could be useful to ...
2
votes
2answers
574 views

Reformat / reset an unrooted phone and wipe /system

I'd like to reformat / reset my verizon Samsung S4 (SCH-I545, baseband **OF1, Android 5.0.1). After doing a number of tests and experimentation, I believe that there is a malicious binary sitting in /...
1
vote
0answers
14 views

What's the best way to protect my rooted Android 7 from malware and hacking?

Considering I have to use cellular data and being not connected to the internet is not an option, what measures can I take or tools I can use to keep myself protected from prying eyes? My first step ...
1
vote
0answers
44 views

Which files do malware reside in after visiting a malicious site

I've been really on edge about accidently visiting a malicious site in the the past month, so please excuse how badly explained this question may be. About twenty minutes ago I was visiting a site to ...
1
vote
0answers
45 views

Finding which process writing to storage

I suspect my phone being infected by malware. Every now and then, there's a folder named LSF_PUSH in internal storage, containing APK from app called SnackVideo and other random pictures from its ...
1
vote
0answers
24 views

Why does my phone battery die at 0% then it has more battery when I turn it on again?

So after dying at 0% when I turn it on again, it can have more battery like 26%. Why does this happen? Does this mean my phone has a virus?
1
vote
0answers
24 views

What are the chances of a malware being persistent if I dd to write system.img and userdata.img from twrp

If I had a malware on my phone, say malware like xhelper, or strandhogg or something even critical than that, what are the chances of it being persistent even after using dd to write the system.img ...
1
vote
0answers
34 views

Red-and-White Megaphone App coming up unsolicited

For about a month, an unknown app has been occasionally coming up on my cell phone's screen, interrupting whatever I'm doing, displaying a black screen and that rolling circle in the middle that means ...
1
vote
0answers
37 views

Password reset screens appearing while inactive; was I hacked?

I put down my Samsung Galaxy S7 phone after making a phone call, and then noticed that the settings appeared on screen, and things like "reset password" were being clicked and text was being entered ...
1
vote
0answers
140 views

Factory reset did not remove malware problem on my ZTE zmax blade. What do I do at this point?

Surveillanceware or a worm of some sort has highjacked my Android and Facebook and email accounts. I'm unable to scan with my premium plus lookout account because the virus has disabled lookout and ...
1
vote
0answers
57 views

Audio file opened by itself?

This morning I woke up to the alarm on my phone, as I snoozed it I noticed that the Total Commander player had a notification open, with an audio file open but on hold. When I tapped on play I got ...
1
vote
0answers
59 views

Detecting a Bad File

I have an LG STYLUS 3 phone and suspect that it may be remotely controlled or linked to another person. What do I look for to know whats up?
1
vote
0answers
46 views

Popups with promotion

Sometimes, I'm getting popups on my Samsung S8 with promotions. Especially it is annoying during navigation with Google Maps. How to disable popups? How to know which application is responsible on ...
1
vote
0answers
96 views

WIndows Antivirus reports Arp Cache Poisoning Attack by Android device

A Windows computer running ESET reports Arp Cache Poisoning Attack by the IP of my android phone. It's Redmi Note 4, MIUI 9 Global Stable, Android 7.0. I scanned it with Avast, Malwarebytes, MIUI ...
1
vote
0answers
1k views

How to stop apps from self installing

I have a problem for quite some time now. An app called xeroxservice which does not have any icon except that of apps like Google framework etc keeps downloading and installing itself without ...
1
vote
0answers
2k views

How can I remove com.android.service, launcher3, Medias and Shell?

I own a cheap Chinese android phone which I use for my everyday tasks and I am having issues with what I understand is malware. Frequently, Google Play informs me to Disable harmful app "com....
1
vote
0answers
23 views

I have a weather window that keeps popping up

I have a weather window that keeps popping up. It occurs randomly & wants permission to install. Problem is, it looks me out of doing anything but installing. Only way to not install is restart ...
1
vote
0answers
61 views

Why is my android phone portscanning my PC?

I have bitdefender whining about my PC being portscanned. The logs show that it is coming from my android phone (which has static address). Is that normal? How can i figure out the app that is doing ...
1
vote
0answers
3k views

BLU Advance 5.0 HD: Unknown apps source: androidrbx, mfn, swak news

On my year-old BLU Advance 5.0 HD phone (running Android 6.0), I recently had a few suspicious incidents where the Audio Profile seemed to have changed from Meeting to Normal on its own, and once ...
1
vote
0answers
229 views

WTF! How can a adware get installed inside system level folder on a non-rooted phone?

I dont know how could this happen.The phone started popping ads randomly everywhere.I ran malwarebytes and found a RockClient.apk installed on my phone in the system level.There was another Dropper ...
1
vote
0answers
310 views

How to detect spy software like flexispy, mspy, phonesheriff?

I don't want to factory reset my phone nor do I want to reflash Lineage OS ROM. I just want to check for a possible trace of spy software like flexispy, mspy, phonesheriff, ikeymonitor thetruthspy, ...
1
vote
2answers
1k views

Unwanted Apps (Maybe malware) downloaded and installed on Android device

Off late, I have been observing some unwanted apps getting downloaded and installed on my Android device without my knowledge. Upon noticing I uninstalled those apps. However, the next time I switch ...
1
vote
0answers
631 views

Can't mount /system as RW

I own an old Motorola XT910 that has several malwares, so I'm trying to delete them from the /system/app folder (since they're set as system apps), but when I try to mount the system as read-write, ...
1
vote
0answers
352 views

unknown sources turns back on about every 24 hours

I'm having to turn off unknown sources everyday. I'm on 5.1. Not rooted. Never installed anything except from app store. Eset Av says phone clean. Root checker says not rooted. Had phone from new. ...
1
vote
0answers
55 views

Is there any android apk or process info library website/database?

I have a virus on Micromax canvas A104 and is on deep system(with root privilege) level. I tried removing it on safe mode, resetting the phone etc. I rooted my canvas a104 rooted to find the virus ...