• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

How do i delete the virus in this super cheap phone.

Hi guys. My Mom had a bough a phone back a few years ( ST c2000, so irrelevant even google cant find it) and she gave it to me and a virus attacked it(really bad one). I tried factory resetting from the settings menu but that didnt work. Then i tried factory resetting from the android menu which you go into by holding the volume up and power button. Tried to reset it but that didnt work either. I tried going into safe mode and the virus is still active even on safe mode on. the virus keeps forcing me to the play store to install random apps. There is a pointing hand on the top right corner also. So how do i remove the virus. Is there a way? Can someone help
 
Is it rooted? If not, a factory reset will clear out anything that been downloaded including malware. Now if you have the phone set to restore after a reset, then you are probably just downloading the same app (laced with adware, not a virus)


If it is rooted and you don't have access to the stock firmware, there's not much you can do.
 
  • Like
Reactions: Hadron and Dannydet
Upvote 0
Is it rooted? If not, a factory reset will clear out anything that been downloaded including malware. Now if you have the phone set to restore after a reset, then you are probably just downloading the same app (laced with adware, not a virus)


If it is rooted and you don't have access to the stock firmware, there's not much you can do.
I dont know how to check. I didnt root it. Dont think my mom did that either. Its a irrelevent name brand idk how to check
 
Upvote 0
As has been said, there are 3 ways that malware can "survive" a factory reset:

1) it's got into the system (a reset does nothing to the /system partition)
2) you are downloading it again after a reset
3) someone has hacked your account and is downloading it each time you reset

The first is unlikely with a modern Android version, but quite possible on older versions (5 and earlier). Prior to 6 many android phones could be rooted using an app: that means that there were security holes that the rooting app could exploit in order to modify the system for you, and of course if you could use them to install superuser access you could also use them to install malware instead.

The second is easy to test: don't redownload your apps after a reset and see whether the malware is still there.

The third you could test by not connecting your accounts after a reset, or setting up with a newly-created Google account. If you do that (which will also preclude downloading your apps again) and the malware is still there then you are definitely looking at scenario (1).

(Personally if you've been using an infected device I'd take measures to secure your accounts anyway, e.g. change passwords using a different device, enable 2-factor authentication, but definitely don't reconnect a compromised device to those accounts).

For the record, Android malware isn't the virus type: it can't transmit itself and infect other devices. So the malware was almost certainly hidden inside something you installed yourself (i.e. a Trojan rather than a virus). So be wary about reinstalling your apps after a reset or on a replacement phone: you don't want to install the same malware. It's hard to know which app it might be, but anything installed from outside the play store is more likely to be bad (however malware does sometimes get into the play store: Google just removed about 29 photo editing/photo filter apps that had malicious code in them).
 
Upvote 0

BEST TECH IN 2023

We've been tracking upcoming products and ranking the best tech since 2007. Thanks for trusting our opinion: we get rewarded through affiliate links that earn us a commission and we invite you to learn more about us.

Smartphones