Help Android app with malware. What should I do?

[PFSV]

I downloaded an android app from Google Play Store (even verified with Google Play Protect) but now VirusTotal says that it has malware: VirusTotal
I unninstaled the app and now I am in Safe Mode, what else should I do?

 

[AugieTN]

I don't know how safe or accurate VirusTotal is. I would do a Factory reset and hope for the best

 

[Windroid]

@PFSV VirusTotal itself doesn't say that a file is or isn't malware. VirusTotal just scans a file with 70+ different virus scanners, and then tells you the results of those 70+ scans.

How many virus scanners are saying that this file is a virus? If it's only one or two, this is likely a false positive. Scan even an innocent file with so many diffident virus scanners, it's not a great surprise if one or two scanners mistakenly say that the file's malware.

 

[PFSV]

Oh I missed the link VirusTotal

There are 12, that's the problem

@PFSV VirusTotal itself doesn't say that a file is or isn't malware. VirusTotal just scans a file with 70+ different virus scanners, and then tells you the results of those 70+ scans.

How many virus scanners are saying that this file is a virus? If it's only one or two, this is likely a false positive. Scan even an innocent file with so many diffident virus scanners, it's not a great surprise if one or two scanners mistakenly say that the file's malware.

There are 12, that's the problem.
Sha1: d8f2deaa63c56524f75416815c85cd827e79a15b

 

[Windroid]

There are 12, that's the problem.
Sha1: d8f2deaa63c56524f75416815c85cd827e79a15b

That's very concerning! Can you link to the page on VirusTotal, and tell us the name of the app?

 

[PFSV]

That's very concerning! Can you link to the page on VirusTotal, and tell us the name of the app?

I cannot because of moderation aproval, but if you put the sha-1 in the "Search" option it would appear

It is Craftsman.

There is any risk of having wifi on?

 

[Windroid]

@PFSV There's always a risk when you connect a computer (including a smartphone) to the Internet! There's the risk that you're get an infection from the Internet, or that if your computer's infected, the always will phone home and give the bad guys your data.

 

[PFSV]

Oh ok. Sorry for annoy. What do you recommend to do?

 

[Windroid]

@PFSV AugieTV suggested that you reinstall the operating system ("factory reset" in Android jargon). It's hard to go wrong with that, because it's a good idea to reinstall the operating system once every few years anyway. Just back up your data and all first! Reinstalling the operating system may wipe all data and files you have on your computer (a tablet computer/smartphone is still a computer).

 

[James_Watson]

I don't think the situation is that serious.
Just delete that suspicious apk file and uninstall the app if you worry about it. And then make a virus scan again.

 

[James_Watson]

It's likely just an adware.