Questions tagged [malware]

For questions regarding viruses, trojan horses, spyware, and other malicious software, especially in removing or preventing it.

Filter by
Sorted by
Tagged with
3
votes
0answers
35 views

Should warnings about not charging your phone at airport/public usb ports be taken seriously?

There are many articles on the internet saying that charging at the usb ports available at the airport and public places can cause your phone to get hacked. Is there any any truth behind this? If ...
1
vote
3answers
486 views

Vital signs of unfamiliar software are present in safe mode: TopBuzz in Galaxy Note8

In Device Maintenance system app on Samsung Galaxy Note8, there is a TopBuzz cache shown when caches are being cleaned. Also in the safe mode. It reappears as a cleanup item every few minutes together ...
0
votes
1answer
15 views

How can I check that my Samsung phone is original and hasn't been modified?

How can I check that the mobile device that I am using has not been altered after leaving the factory? By this I mean no changes whatsoever have been made to the device. Whether it's the whole OS (...
19
votes
2answers
13k views

Dropbox app not installed, but there is log activity in /data/system/dropbox

I don't have Dropbox app installed nor DropBox account, but whilst checking log files I've found that there is a /data/system/dropbox directory with log files from, I think, the last time I rebooted ...
1
vote
2answers
994 views

Unwanted Apps (Maybe malware) downloaded and installed on Android device

Off late, I have been observing some unwanted apps getting downloaded and installed on my Android device without my knowledge. Upon noticing I uninstalled those apps. However, the next time I switch ...
0
votes
0answers
10 views

Google Search Bar Code Execution

So, is it possible to write a simple script in a Google search bar that can be executed? Is it possible to write out a sticker line of coffee that would, let's say, display a notification for the site....
3
votes
1answer
6k views

Is 'Boost' a feature or a virus?

The app 'File Manager' now has a new look, a look that has more of a virus feel and lees of an 'android' feel. Force stopping file manager gets rid of the addition to the notification bar thingy and ...
3
votes
1answer
208 views

How to remove a persistent malware?

My Samsung Note 8 has gotten very weird lately. I get programs I never have installed, and when I try to reboot/reset my device with no backup they still come up after I'm finished with the reboot. I ...
0
votes
1answer
1k views

Sony Reader PRS-T1 becomes unresponsive

My Sony Reader PRS-T1 based on Android 2.2 is acting funny. I had rooted it in the past but is now in the "original" state, upgraded with the latest official firmware. The problem is that many times,...
-2
votes
2answers
125 views

Does the use of Android One remove the risk of OEM spying?

China is forcing tourists to install text-stealing malware at its border. Also, U.S. intelligence officials imply that Huawei, ZTE devices aren't safe for consumers (even in the West). Some ...
1
vote
1answer
2k views

How to detect a malicious USB charger?

My phone is rooted and has USB debugging enabled, because I do some development on it. In a moment of pre-caffeinated mental weakness, I plugged it into a cheap Chinese power bank. The phone ...
0
votes
1answer
2k views

Directory named with random characters automatically (re)created in SD card? Could this be a malware?

Lately, I've seen that a directory with what seems to be a random name (like Z0tQWDVmQmoyRUxVSWdBU2pwNzAxMzc1Mw) is present in the local storage (/sdcard) of my Samsung Galaxy S5. When I delete it, ...
0
votes
0answers
38 views

'Your device is 10 days out of date' … unexpected notification, is it malware?

I have a Pixel 1, unlocked (bought direct from Google in 2016). I've never installed anything from an untrusted source. I just unlocked my phone and saw a popup similar to the 'emergency broadcast'/'...
0
votes
2answers
2k views

Random apps keep installing on the phone

Here is a screenshot of these apps. I never downloaded them: Screenshot (click image for larger variant) Many times these have been deleted by me but they are download as well as installed by ...
1
vote
0answers
3k views

advert web pages opened on phone by bg app [duplicate]

I have some unwelcome behavior on my Samsung S4 AOS 5.0.1 (unrooted) phone. A few days ago I start to get attempts to open my web pages (up to 3 times a day so far) while my phone is idle. All cases ...
2
votes
1answer
19k views

How to stop my Android device from being spammed in the browser as well as in the application?

Recently I have downloaded two games: Deer Hunter PreHistoric Worm But after that I have my browser which keeps redirecting me to http://ad.adsmatte.com It is happening every time I load the page – ...
0
votes
2answers
5k views

Malware on LG G3 redirecting all browsers

More or less two or three weeks ago strange pop ups came up on my PC. Antivirus detected ga.js as virus. I thought it was a false positive. Then I've found that the thing somehow jumped on my phone. ...
0
votes
2answers
6k views

How do I stop Android to auto enabling allow unknown sources?

Every time I restart my android 5 lollipop phone It auto enables allow installation of apps from unknown sources option. I switch it off manually then in a few seconds a pop up for an unknown app to ...
2
votes
1answer
2k views

Is “Preferred Activity Setter” a malware?

I have noticed I have Preferred Activity Setter after the most recent update of Google Play Services, and it has been wreaking havoc on my Samsung Galaxy prevail LTE on my stock browser called "...
5
votes
0answers
92 views

What to do if I suspect my device is compromised?

I recently bought a Pixel 2 XL "open box" off eBay. The device appears slightly used, and a couple of days after registering with my Google account, I received security notifications of attempted ...
0
votes
1answer
87 views

Is it possible to get the SHA256 of an APK solely through ADB?

I am currently working on a project which will identify malware that are residing on a device. My aim is to make a hash-based detection of Android malware on a device by only accessing the ADB port ...
0
votes
0answers
26 views

Malware that destroys the color yellow?

I have no idea where to turn with this, but I am worried that malware or other misbehaving software is causing a color distortion. The story is: my phone, a Moto G5 Plus, at some point lost the ...
1
vote
0answers
30 views

Red-and-White Megaphone App coming up unsolicited

For about a month, an unknown app has been occasionally coming up on my cell phone's screen, interrupting whatever I'm doing, displaying a black screen and that rolling circle in the middle that means ...
3
votes
1answer
160 views

How to identify the app/process which re-mounts partitions R/W, creates files and changes file permissions?

I have a rooted device, with superuser rights granted to a few apps I trust. I have often found my /system or /vendor partition mounted read/write, and some files chmoded to 0777. Similarly ...
0
votes
2answers
4k views

Is com.android.syshandler a malware file on Android 5.x?

I saw various unwanted pop up ads on an Android 5.x phone. Then installed the free Sophos Mobile Security on it (from the Play Store) and ran it several times over last few days. Each time it shows ...
0
votes
2answers
4k views

Android Stock Browser downloads file immediatelly after start

Android 4.4.2 Kitkat Stock Browser If I start it or open new tab, downloading of apk file (xb_client_blah-blah-blah.apk) from site no.stepfaster.com immediatelly starts instead of opening page which ...
0
votes
0answers
145 views

Remove notification “Activate Anti-malware service”

On my Samsung S10e device I get this notification: Device care - Activate Anti-malware service When I try to turn it off, it says: These notifications can't be turned off Which raises the ...
4
votes
1answer
247 views

Does Android's implementation of SELinux's MAC inhibit apps with root privileges from accessing other app's data?

Starting with Android 4.4, SELinux's MAC is enforced. Does this mean that if an app somehow can get installed and exploit the kernel to get root privileges, that MAC will still prevent that app with ...
5
votes
1answer
3k views

CamScanner: Trojan detected by ESET

I usually use CamScanner to scan my documents. After updating to the last version, ESET told me I have to remove it, because this app has Trojan and it can provide remote access to the infected device....
0
votes
0answers
51 views

CamScanner Malware: Do I need to uninstall older version?

Recently a malware was found in the popular android app CamScanner. The app is now removed from Google Play store. The company has also acknowledged the existence of the malware in an official ...
1
vote
0answers
35 views

Password reset screens appearing while inactive; was I hacked?

I put down my Samsung Galaxy S7 phone after making a phone call, and then noticed that the settings appeared on screen, and things like "reset password" were being clicked and text was being entered ...
0
votes
1answer
1k views

How to remove adware popups from notifications in S8?

So I visited a torrent site (not sure if it's the cause 100% though) on my S8 last night & since then have been getting the popups shown in the screenshot. I downloaded & ran Malwarebytes, ...
0
votes
1answer
52 views

My android phone is often getting affected with virus

My problem : Hello friends. I use Asus zenfone go T500 android phone. My problem is, my phone often gets affected by some kind of virus which sometimes installs some chinese apps without my knowledge ...
9
votes
2answers
9k views

How to find out which app is trying to open spam websites?

I've recently bought a new Android smartphone. After setting it up and loading my contacts onto it I thought that would be it. Now after some days, every time I unlock the phone it takes a few ...
0
votes
0answers
26 views

Some apps are installing constantly

Some apps are installing constantly and when I delete those apps, they again get installed. Quick Heal mobile antivirus shows that these are malware and resolve the problem, but sometimes they are ...
1
vote
0answers
1k views

Is this malware behavior ?Q memo+keeps asking me to grant permission to wri

My metro pcs LG stylo 2 plus' andriod system 7.0 system app(q memo plus and pen settings) keeps asking me to grant a permission request(to draw over other apps)-pen setting-& Q-memo plus,keeps ...
63
votes
8answers
264k views

What is this lock screen with ads and how do I remove it?

I think my device got a malware. A lock screen with ads sometimes appear, and I must swipe an area at the bottom of the screen to open the phone. I am in Eastern Europe, some ads are in Slavic ...
0
votes
1answer
174 views

Virus on Lenovo P1M?

My phone, a two year old Lenovo Vibe P1M, has been acting weird for a while. It was damaged six months back in an accident, and the screen was somewhat cracked on the top. As a result the ...
7
votes
6answers
39k views

Remove “ad-type.google.com” adware in any Android device browser

ad-type.google.com is appearing regularly whenever I access the web through Chrome. It's a new adware and there are no solutions available other than Go to system Settings > Applications > Chrome >...
0
votes
1answer
67 views

Can a malicious application running in a container root the Android?

Can a malware root the Android when running in a container such as when running through VirtualXposed or Parallel space, or when a person is using the Guest user or any other secondary user in Android?...
0
votes
0answers
2k views

Application trying to access in app billing

Getting a message at the bottom of my screen: In app billing is not supported for this device. Try again later. The problem is, I never authorized an app for in-app billing in the first place. What'...
0
votes
0answers
65 views

Gaining higher privileges

When an application requests access to some features of the phone, for example to read SMS storage, it always asks the user for permission for the second time. Is there a way to bypass/disable this ...
0
votes
0answers
92 views

Android asks to re-enter WiFi passwords. Is my phone compromised?

I have a Galaxy S8 (SM-950F) with Android version 8.0.0. I have rooted the device with Magisk. I have a couple of Magisk modules, including Bixby remapper, F-Droid Privilaged Extension, liboemcrypto ...
-1
votes
2answers
92 views

How do I safely flash a new rom on an infected android phone? [duplicate]

Is using a live cd a good idea? Will it keep the rest of my computer including storage and installed OS safe?
2
votes
2answers
88 views

Can my father's smartphone be compromised?

My father said to me that he allowed installation of apps from unknown sources when he was asked to do it to go further with something (he said that he don't remember when or what he was doing). In ...
2
votes
1answer
80 views

Why is there “/proc/net/snmp” file on my device? Could it be due to a malware?

After reading this paper I observed a little and I realized that an SNMP socket (exactly two: v4 and v6) exists when I use ls /proc/1/net. I see them clearly. My question is simple, do the bootkits ...
0
votes
1answer
55 views

Why is Amazon Shopping app showing 'null' after the product price?

I've heard that if a website or an app appears in a weird way, it means that your device might have been hacked. I have Android 8.1 Oreo, and below is the Amazon Shopping app showing 'null' after the ...
0
votes
0answers
23 views

Find out the URLs opened by each app on my phone [duplicate]

Every morning around 5 AM and in the evening around 4 PM, some app installed on my phone tries to reach out to the test.com website or other sites such as arlo-banners.weareenvoy.net. I suspect it ...
0
votes
0answers
43 views

Why is there another Phone icon in my Apps?

The second Phone app on the list appeared a few minutes ago after I accepted the permissions of my Messaging app. It wasn't there earlier when I took look at the Apps which is weird. Also it looks ...
23
votes
8answers
12k views

Securing a young child's tablet

My wife has decided to get the kids a set of android tablets for christmas. These are Coby Kyros 4GB wi-fi only models. The kids are ages 6-10 so I don’t particularly want to let them have free ...