The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [malware]

For questions regarding viruses, trojan horses, spyware, and other malicious software, especially in removing or preventing it.

Filter by
Sorted by
Tagged with
0
votes
1answer
304 views

Persistent techniques used by Android Malware [closed]

What are the most commonly used persistent techniques by Android malware. That is to survive on device after reboot. In windows malware they change registry entries to auto start, Android malware ...
1
vote
2answers
108 views

Malicious software runs on the background of Android phone, but I cannot see it - how to find and remove it?

I know that a malicious malware/spyware has been installed on my Samsung Galaxy S3 phone and I constantly get the message to close apps not in use because they drain my battery. But I do not have ...
0
votes
0answers
52 views

Android malware debugging

To understand a malware better when it is running on a device, I would like to get a view of what is happening in the background. For instance if a malware is loading a page using LoadUrl, I want to ...
0
votes
0answers
79 views

How to locate app which installed a potentially malicious certificate?

On my S8 (Oreo) today, I got the notification: There is a certificate installed that may or not monitor your internet traffic. Did spyware install itself? Or is this normal? I updated from 7.0 to 8....
0
votes
2answers
1k views

Android Spy Apps

Is it possible for someone to install a spy app on an Android phone JB os? Do these spy apps really work? Can anyone install this spy app to your mobile phone without your knowledge? If you suspect ...
1
vote
0answers
94 views

Factory reset did not remove malware problem on my ZTE zmax blade. What do I do at this point?

Surveillanceware or a worm of some sort has highjacked my Android and Facebook and email accounts. I'm unable to scan with my premium plus lookout account because the virus has disabled lookout and ...
0
votes
1answer
175 views

Can a malware compromise safe-mode of non-rooted device?

Was there any known malware running on Android (let's say since Nougat) which can compromise non-rooted Android device in a way that the malware is active also in the safe mode? So when booting non-...
11
votes
11answers
53k views

How to track down an app that shows ads on smartphone screen?

I have a problem with malware apps. Looks like some app called "Native" installed itself, and created a shortcut for itself, all without my permission. After that happened, I have pop-up ads every ...
1
vote
1answer
399 views

Is GetApk Market application trustful?

Is "GetApk Market" application trustful or malicious? Will it affect one's smartphone or tablet? I have checked via VirusTotal & it mostly detected as Android.Riskware.Downloader: Can anyone ...
0
votes
1answer
153 views

How can I uninstall this app which keeps getting reinstalled?

Hello I'm running android 4.2 Samsung rooted. There is an app which always appears on my data/app folder and always runs at start-up. When I go to app manager I can uninstall it however the next time ...
-1
votes
1answer
2k views

Facebook Messenger Virus on Android

I received a message from a friend on facebook The message said "this video is yours 'mt name'" with a shocked emoji face and my profile picture below. I was daft enough to click the link and then ...
0
votes
1answer
173 views

How to remove a persistent malware that downloads unwanted apps? [duplicate]

Some months ago, I purchased an Azumi cell phone from an official store in a shopping mall in Mexico and subsequently discovered its firmware contains a ton of malware. The malware connects with a ...
0
votes
1answer
796 views

How to close a malware tab in chrome?

A webpage got redirected to a "virus alert" malware page and I can't close it. Deleted the cache, both the general tablet cache as well as the chrome cache, deleted the "unimportant data", did "...
2
votes
1answer
1k views

How to Block Pre-Installed Auto App Installer Malware?

I dont know which pre-installed app is auto installing new apps. But I think its com.android.system.service (also on few other phones: http://en.miui.com/thread-459132-1-1.html) Firewall is not ...
2
votes
2answers
10k views

How to remove Measure/mobileOcr/engriks malware?

My phone is attacked by barrage of error dialogs every 1 second: Unfortunately Measure Has Stopped Unfortunately mobileOcr Has Stopped Unfortunately engriks Has Stopped It makes the ...
16
votes
2answers
13k views

Dropbox not installed, but there is log activity in /data/system/dropbox?

I don't have dropbox installed, but whilst checking log files I've found that there is a /data/system/dropbox directory with log files from the 18th (which I think is the last time I rebooted my phone)...
1
vote
1answer
78 views

What kind of applications use internet on the background? [duplicate]

Viewed the list of applications that use Wi-FI and came across what is shown on the image below. What it is? Virus? Instead of Google I use F-Droid. Root is there, but only Total Commander and ...
0
votes
1answer
229 views

How can I identify the cache if I see its name? One name is suspicious

If Device maintenance app is launched in Samsung S8, after pressing Clean Now button, storage cleanup briefly shows different apps, storage space of which is being cleaned: System cache OneNote ...
3
votes
0answers
172 views

How to remove a persistent malware?

My Samsung Note 8 has gotten very weird lately. I get programs I never have installed, and when I try to reboot/reset my device with no backup they still come up after I'm finished with the reboot. I ...
3
votes
0answers
72 views

How to uninstall an app which restarts the phone when uninstalling it?

This app named Handwriting Fonts for Samsung, Oppo and HTC phones is acting like a malware. Whenever I try to uninstall it, my phone restarts (or probably reboots) and the app doesn't get uninstalled. ...
-4
votes
1answer
146 views

How do I disinfect my device infected with a malware?

In the process of trying to resolve the infection, I kept hitting major, dangerous hurdles. I had a pretty good guess as to what had led to the infection, but hit hurdle after hurdle as I tried to ...
2
votes
2answers
143 views

Problems with the DNS Network part (or maybe virus/malware-related) on Android 6.0 Marshmallow (Alcatel Vendor)

I've been experiencing some strange problems maybe that be related with the DNS Network part in Android 6.0 Marshmallow, and could mention these two origins as the main likely sources of problems: • ...
1
vote
0answers
51 views

Audio file opened by itself?

This morning I woke up to the alarm on my phone, as I snoozed it I noticed that the Total Commander player had a notification open, with an audio file open but on hold. When I tapped on play I got ...
1
vote
2answers
1k views

How to know what is causing a weird lock screen with ads to show up?

I have a Samsung Galaxy J7 that just started displaying this as the lock screen. Sometimes, it displays my regular lock screen, but if I let my phone sit long enough, it will display this screen. It ...
2
votes
0answers
1k views

Finding out what App causes unwanted new tabs in firefox on Android [duplicate]

Recently some app started opening new firefox tabs with the adress 'livemobilesearch.com'. I uninstalled the most recentently installed apps, but the problem still persists. I assume the pages get ...
22
votes
1answer
15k views

Is it a good idea to force stop apps after using them?

I find myself using force stop for every application once I have finished using them. Is this a good practice? Are there any performance or security benefits of doing this? Is force stopping an app ...
1
vote
1answer
37 views

Is possible to invoke an Android API without declaring the related permissions but with root access?

While reversing some malware, I have realized that despite they use an exploit that gives them root access, such malware declares a lot of permissions in the manifest. Because (AFAIK) "normal" apps ...
59
votes
14answers
28k views

Are there any tools to sandbox a malware application even more than the granted permissions on Android?

Suppose I want to run some program which requests too many permissions. For example, record from the microphone or read IMEI of my phone. However, there are no practical explanation why recording from ...
5
votes
1answer
4k views

How do I fix malware installed automatically in the /system directory?

I bought a Lyf Flame 7 from Reliance Jio last september. It runs on Android Lollipop. My phone is not rooted and it has never downloaded any other apps from the internet except from the Play Store. ...
1
vote
0answers
51 views

Detecting a Bad File

I have an LG STYLUS 3 phone and suspect that it may be remotely controlled or linked to another person. What do I look for to know whats up?
0
votes
2answers
472 views

How do I remove Trojan horse virus from my android smartphone?

There is a virus in my android phone named com.wgjvp.idck and I tried every possible solution to remove it but couldn't find any solution. What I did: I hard-reset(factory-reset) my phone twice but ...
5
votes
2answers
8k views

How to find and remove malware from some chinese smartphones?

I am planning to buy a chinese smartphone. However, I've read that some come with extensive spyware straight from the factory. Will I be able to detect such malware (Android.Trojan.Uupay.D and the ...
1
vote
0answers
45 views

Popups with promotion

Sometimes, I'm getting popups on my Samsung S8 with promotions. Especially it is annoying during navigation with Google Maps. How to disable popups? How to know which application is responsible on ...
1
vote
1answer
156 views

What is the scope of Google Play Protect's scanning?

Even though I don't recommend relying on it (because it is not very effective), I know quite a few people who only use Google Play Protect. Does Google Play Protect only scan apps installed via the ...
-1
votes
1answer
382 views

What is the best practice to deal with suspected malware infections in Lineage/Android?

I have reason to believe that my Lineage OS (14.1-20180620 nightly build) may be infected with malware. How should I deal with this? Other questions recommend running Malwarebytes. A question asking ...
1
vote
0answers
70 views

WIndows Antivirus reports Arp Cache Poisoning Attack by Android device

A Windows computer running ESET reports Arp Cache Poisoning Attack by the IP of my android phone. It's Redmi Note 4, MIUI 9 Global Stable, Android 7.0. I scanned it with Avast, Malwarebytes, MIUI ...
1
vote
1answer
65 views

How to stop Wi-Fi from using all my mobile data?

My phone all of a sudden is consuming huge amounts of mobile data ; apps usage report shows that 'Wi-fi' is causing this: from less than 500Mb per month is has consumed 2GB in a day , and it continues ...
0
votes
1answer
42 views

Samsung phone charges poorly, periodically

My Samsung S8+ has started having periods when it does not keep up 100% charging when connected and in simple editing usage. If I leave it idle it charges slowly and the "charger beep" occasionally ...
7
votes
2answers
6k views

How to find app based on package name?

I've installed a malicious app that is posting ads over my notification bar, but can't find it. I know the java package name for it: com.letang.game103.en using the command: adb shell dumpsys ...
0
votes
1answer
301 views

Is there Malware on LineageOS that causes to receive SMS Spam

I never get SMS text spam on my phone. Installed Lineage OS on a Samsung Galaxy S4 mini phone. I installed TWRP and LOS both from official website (not various links on google or XDA). Installed F-...
0
votes
1answer
53 views

Where are LineageOS nightlies compiled & Who has commit rights to the codebase?

A] Where are LineageOS nightlies compiled? 1) Are they compiled on maintainer's machines 2) On a project controlled build farm? 3) Pool of contributed (random) machines? B] Who has commit rights to ...
2
votes
2answers
181 views

Persistent malware despite factory resets

I'd love your thoughts on this. Several months ago I mistakenly clicked a popup on a website, and since then have been getting intermittant popups says "your sim card is infected...etc" and it tries ...
1
vote
0answers
560 views

How to stop apps from self installing

I have a problem for quite some time now. An app called xeroxservice which does not have any icon except that of apps like Google framework etc keeps downloading and installing itself without ...
1
vote
0answers
2k views

How can I remove com.android.service, launcher3, Medias and Shell?

I own a cheap Chinese android phone which I use for my everyday tasks and I am having issues with what I understand is malware. Frequently, Google Play informs me to Disable harmful app "com....
3
votes
1answer
6k views

Is this “Boost” / File Manager app a true system app or malware?

I installed this app after I received a notification on my lock screen informing me that a new system app was available for download. Seeing that the app was listed as an update to the "File Manager" ...
4
votes
1answer
6k views

Is 'Boost' a feature or a virus?

The app 'File Manager' now has a new look, a look that has more of a virus feel and lees of an 'android' feel. Force stopping file manager gets rid of the addition to the notification bar thingy and ...
0
votes
3answers
2k views

cannot disable OEM app

My new Jasper phone has a persistent app from the original manufacture which keeps popping up. Without rooting the phone, how can I disable or remove this app? Dragging it to "remove" doesn't ...
-1
votes
2answers
562 views

How can I remove adware that I can't uninstall, without resetting my phone?

My device has Android 7.0. I believe my device is affected with some malware. Symptoms: Pop up ads in the middle of the screen. When I click on the close button, it starts downloading random apps. ...
-2
votes
2answers
88 views
3
votes
1answer
2k views

How does “virus been detected” on android pop up on chrome when visiting some sites?

What is the cause of this chrome bug on android? The last site I went to was www.destructoid.com and all of a sudden it gets redirected to the following url. This happened previously awhile back, but ...