Go Back   Android Forums > Android Phones > Samsung Galaxy S4

test: Reply
 
LinkBack Thread Tools
Old April 11th, 2014, 09:48 PM   #1 (permalink)
Junior Member
Thread Author (OP)
 
Straydog's Avatar
 
Join Date: Oct 2013
Location: Western Europe
Posts: 45
 
Device(s): Samsung S4 GT-i9505 4.4.2 unbranded
Carrier: Not Provided

Thanks: 17
Thanked 3 Times in 3 Posts
Default Browser Hijacker in Chinese

I've got a Firefox hijacker. I don't understand the hijackerr's interest because it changed everything on the browser to Chinese and I have my phone on English 2070.

I can't use the browser because I don't understand a single character. I do not know what to do to get rid of this. I uninstalled Firefox and reinstalled a fresh copy from Google Play and nothing changed, but what I believe I have to do is to kill the hacker for good. This started when a shortcut was installed on the home screen when I was on Wi-Fi. There is some text but I do not know what it is. Maybe someone knowing Chinese could help. Please see the icon picture, it has some Characters underneath. when I tap it it launches Firefox and turns the camera and the light on, but tit can't record anything.

How can I get rid of this, please?
Attached Images
File Type: png 2014-04-11 19.00.40.png (64.0 KB, 17 views)

Advertisements
Straydog is offline  
Reply With Quote
sponsored links
Old April 11th, 2014, 10:25 PM   #2 (permalink)
Junior Member
 
guppy0130's Avatar
 
Join Date: Apr 2014
Posts: 16
 
Device(s): LG Spectrum
Carrier: Not Provided

Thanks: 1
Thanked 2 Times in 2 Posts
Default

Based on the icon, it looks like a QR code reader or something. Have you installed anything recently? If so, uninstall and reboot, and see if that solves the issue. If it doesn't work, then let me know.
guppy0130 is offline  
Reply With Quote
Old April 12th, 2014, 03:48 PM   #3 (permalink)
Junior Member
Thread Author (OP)
 
Straydog's Avatar
 
Join Date: Oct 2013
Location: Western Europe
Posts: 45
 
Device(s): Samsung S4 GT-i9505 4.4.2 unbranded
Carrier: Not Provided

Thanks: 17
Thanked 3 Times in 3 Posts
Default

Yes, the icon has a QR code background, but it is not any QR code in itself. It is rather a door spy eye. I only install what I am sure to be safe and I did NOT install anything myself lately. You know that a browser hijacker installs itself without invitation. You did not try to help me with the text on the icon or on anything else I asked.

Is there someone knowing Chinese or who could help otherwise, please?
Straydog is offline  
Reply With Quote
Old April 12th, 2014, 07:01 PM   #4 (permalink)
Senior Member
 
Join Date: Jan 2012
Posts: 937
 
Device(s): rooted AT&T GS4 w/ Android 4.3
Carrier: Not Provided

Thanks: 283
Thanked 201 Times in 157 Posts
Default

Quote:
I uninstalled Firefox and reinstalled a fresh copy
When you uninstalled it, did you push the "clear data" before you pushed "uninstall"?
I think that might give better chance to get rid of the nasty uninvited guest.

Maybe (longshot) also try clearing the whole cache after Firefox uninstall and before reinstall.

Also maybe see if AV program like Lookout picks up anything.

Last resort of course, try factory reset (with lots of work to set up your phone again afterwards). Or maybe try another browser instead.
electricpete is offline  
Last edited by electricpete; April 12th, 2014 at 07:20 PM.
Reply With Quote
The Following User Says Thank You to electricpete For This Useful Post:
Straydog (April 14th, 2014)
Old April 12th, 2014, 09:17 PM   #5 (permalink)
Junior Member
Thread Author (OP)
 
Straydog's Avatar
 
Join Date: Oct 2013
Location: Western Europe
Posts: 45
 
Device(s): Samsung S4 GT-i9505 4.4.2 unbranded
Carrier: Not Provided

Thanks: 17
Thanked 3 Times in 3 Posts
Default

Thanks for replying, electricpete.

Quote:
Originally Posted by electricpete View Post
When you uninstalled it, did you push the "clear data" before you pushed "uninstall"?
I think that might give better chance to get rid of the nasty uninvited guest.

Maybe (longshot) also try clearing the whole cache after Firefox uninstall and before reinstall.
I did clear the data before uninstalling, which also clears the cache. Sorry if I should have written that on my starting post.

I don't know how to clear the whole cache. I am an old desktops user, but fresh on smart phones.


Quote:
Originally Posted by electricpete View Post
Also maybe see if AV program like Lookout picks up anything.
I scanned with Lookout, Avast, Trust and Bitdefender. Only the last one found a pkg.apk file as a threat. Itried to delete it, but it sent a message "pkg.apk could not be deleted". I googled and found that it was used on rooted phones, but mune is not rooted. I don't know whether it is a system file, but I believe it is not and don't know how to delete it. It might be connected to this issue.


Quote:
Originally Posted by electricpete View Post
Last resort of course, try factory reset (with lots of work to set up your phone again afterwards). Or maybe try another browser instead.
A factory reset is the last thing I will do because of what you mentioned. I use Firefox since it was launched and have it synced with to PCs.


I can't do anything because I do not understand Chinese, so anything I do is a blind shot in the dark


Edit
I found how to clear the whole cache after Firefox uninstall, as you recommended, on a thread on this forum, did it and it worked! It is no longer hijacked! Now I only need to be sure about that pkg.apk and how to delete it. I like to have any device clean, I always have on PCs.
Straydog is offline  
Last edited by Straydog; April 13th, 2014 at 09:55 PM.
Reply With Quote
Reply

Samsung Galaxy S4
Current Rating:
Rate this Phone:

The all-new Samsung Galaxy S4 is all but guaranteed to be the next top-selling device. The new device is dubbed the "Life Companion" due to its intuitive features. The Galaxy S4 sports a 5-inch 1080p Super AMOLED display, an awesome 13 MP... Read More

Tags
browser hijacher


Go Back   Android Forums > Android Phones > Samsung Galaxy S4
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -5. The time now is 03:32 AM.
Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.