1. 2015 is going to be a great year for Android! Why wait??
    Samsung Galaxy Note 5 | Samsung Galaxy S6 | HTC One M9
  2. New Forum Created: Samsung Gear VR!

Cannot get rid of malware trojan


  1. Amaanael

    Amaanael New Member

    Hello everyone,
    I've encountered a nasty problem on my SE Xperia mini. I have Lookout app installed and today it found a trojan on my device - GoManag (Google Search (Enhanced)), which, according to webroot.com blog, can read text messages, uninstall security apps, download and install APKs, delete adresses, blacklist numbers etc... The problem is that everytime I try to remove it the phone just says "Uninstall not succesful".
    What should I do? I'm quite freaked out.
    The phone isn't rooted.

    Thank you for any advice!

    Advertisement
    :
  2. ianto65

    ianto65 New Member

    I have the same problem. Phone was ok yesterday and I haven't added any apps or downloaded anything. I hope a solution can be found.
  3. b1k3r4ck

    b1k3r4ck New Member

    Same thing happened to me. Nothing new added and lookout just popped up with an alert. Let's hope it's a false alarm because I cannot uninstall it either.
  4. pcullen

    pcullen New Member

    I cannot uninstall it either.
  5. violincat

    violincat New Member

    I got the same message from Lookout this morning. Like you, I can't uninstall it, nor can I find it in files, which I guess is what a trojan would do. Online searches give a trojan warning from years ago about the same thing. And a condom ad, but that was expected.

    I just installed Avast, and scans from it find no problem. either it's a false positive from Lookout, or really effective malware.

    I've sent an email to Lookout, but haven't heard anything from them yet.
  6. busybee1

    busybee1 New Member

    I have the same thing today and am now pretty stressed! Any info on removal would be greatly appreciated!
  7. terryd3

    terryd3 New Member

    DITTO...
  8. Arthurlk

    Arthurlk New Member

    I also got a message from Lookout saying that "Google Search Enhanced" was chinese malware. I can't uninstall it. I down loaded Norton Mobile Security Lite from Cnet and ran scans and it didn't find any malware.

    I emailed Google and Lookout and am waiting for a reply. Frustrating. I disabled wireless and internet by putting phone in flight mode till I figure this out.
  9. dgi

    dgi New Member

    I also got this warning today. The software and version looks like the default install:

    Google Partner Setup 2.1-update1 10/7/2010 5:11:36 PM
    Google Search 2.1-update1 10/7/2010 12:11:36 PM
    Google Search (Enhanced) 2.1-update1 10/7/2010 12:11:36 PM
    Google Settings Provider 2.1-update1 10/7/2010 12:11:36 PM

    So it may be a false positive from Lookout. I will follow this post to see what develops.
  10. samsungadvice

    samsungadvice Active Member

    You need to enter recovery mode on your phone and do a data and system wipe. You will lose all data but this will definitely fix the problem. Google how to enter recovery mode on your device
  11. chanchan05

    chanchan05 The Doctor Guide

    It looks like a false positive IMO.
  12. Hadron

    Hadron Well-Known Member Contributor

    The only thing I've been able to find out is that it's only Lookout that seems to be reporting this at the moment.

    Have you had a recent update of the virus signatures? Seems the likeliest explanation for why all of these reports should suddenly start. That wouldn't tell you whether it's real or not - all AV occasionally throws false positives, but an update could by definition detect something that was previously undetected. As the GoManag trojans don't seem particularly new you might think it unlikely they're only now being flagged, but that is not a guarantee by any means.

    Webroot's blog is most vocal on GoManag, so maybe you could install the free version of their software and see whether it identifies a problem with your phone?
  13. dgi

    dgi New Member

    I just went on the Android App Market looking for webroot and second item on the top of the top free list is Lookout which indicated the My Lookout has an update. I choose to update the app and after scanning with this version and now all is good. No more warning about the malware.
    kev315, Hadron and Rxpert83 like this.
  14. Rxpert83

    Rxpert83 Dr. Feelgood Moderator

    Seems lookout has corrected their mistake then
  15. Hadron

    Hadron Well-Known Member Contributor

    Good result. :D
  16. kongie

    kongie New Member

    Hi all...

    My wife and I have the same phone, I had Lookout installed, my wife hadnt. I got the virlus alert 2 hours ago, got worried, and havde done this:

    Installed Lookout on my wifes phone, and that was the newest version, scanned the phone and got the message: "NO PROBLEMS and NO ALERTS"...

    Then I updated my own Lookout and scanned the phone... GOT THE SAME REPORT: NO PROBLEMS AND NO ALERTS....

    Just for your info... Have a great evening..
  17. kongie

    kongie New Member

    Hi all...

    I have just recieved this from Lookout Support:

    Ryan Martis, Aug 09 10:52 am (PDT):
    Hi lookout,
    I'm sorry for the confusion. Our latest set of malware detection signatures went out to our users last night (August 8, 2012). Unfortunately it misidentifies the app "Google Enhanced Search" as the trojan 'GGSearch'. If you've received this warning please ignore it - we will be shipping a new set of detection signatures in the next 24 hours, at the latest.
    Thanks for using Lookout!
    Ryan Martis,
    The Lookout Team
    kev315 and Hadron like this.
  18. b1k3r4ck

    b1k3r4ck New Member

    I remembered that I had actually updated my Lookout a couple days back, so seeing reports of people updating theirs and solving the issue I went to the market but found nothing new for me. I installed Avast and it found no issues. So I uninstalled both Lookout and Avast and reinstalled Lookout and now the problem is clear. Sounds like they'll clear the issue eventually though based on the above post.

    Kind of a PITA but one good thing out of this hassle is that I found this site /cheer
    Hadron and Rxpert83 like this.
  19. Rev Dave Sr

    Rev Dave Sr New Member

    Just got a reply from lookout team, read post below, hope this helps:)
    I'm sorry for the confusion. Our latest set of malware detection signatures went out to our users last night (August 8, 2012). Unfortunately it misidentifies the app "Google Enhanced Search" as the trojan 'GGSearch'. If you've received this warning please ignore it - we will be shipping a new set of detection signatures in the next 24 hours, at the latest.

    Thanks for using Lookout!

    Ryan Martis,
    The Lookout Team
    Hadron and Rxpert83 like this.
Loading...

Share This Page