1. Download our Official Android App: Forums for Android!

General Android Malware - unable to remove

Discussion in 'Android Devices' started by George L Smyth, Jul 17, 2016.

  1. George L Smyth

    Thread Starter
    Rank:
    None
    Points:
    6
    Posts:
    8
    Joined:
    Jul 17, 2016

    Jul 17, 2016
    8
    1
    6
    Male
    I have got a Samsung Galaxy S3 with Android version 4.4.2. Recently, on an occasional basis, when opening an app (it might be going to Facebook, it might be opening Score, it is not consistent) I am first taken to the Google Play Store and Uber has been selected for me to download. It does not happen every time, but several times a day. I have AVG and Clean Master on the phone and neither are finding any problems. I have even tried downloading the Uber app and this still happens.

    I am not knowledgeable about such things and have no idea where to turn. Any suggestions would be greatly appreciated.

    Thanks -

    george

     

    Advertisement

  2. Jfalls63

    Jfalls63 Android Expert
    Rank:
     #30
    Points:
    818
    Posts:
    4,221
    Joined:
    May 15, 2015

    May 15, 2015
    4,221
    3,190
    818
    Male
    Electrician
    Satsuma,Alabama
    Clean Master and anything else by Cheetah Mobile would be the first thing I would uninstall. Notorious for data mining and other shady practices.
    You can also boot into recovery and wipe the cache partition then restart.
    There is a free app at the Play Store called Addons Detector which might find what is redirecting you to the Play Store
     
    tube517 and mikedt like this.
  3. mikedt

    mikedt 你好
    Rank:
     #4
    Points:
    3,238
    Posts:
    25,126
    Joined:
    Sep 22, 2010

    Sep 22, 2010
    25,126
    14,090
    3,238
    Teachaaa
    Jinan, China
    Could be it's Clean Master taking you to the Play Store. Cheetah might receive an affiliate commission if you install and use Uber, or whatever else is pushed.
     
    Jfalls63 likes this.
  4. George L Smyth

    Thread Starter
    Rank:
    None
    Points:
    6
    Posts:
    8
    Joined:
    Jul 17, 2016

    Jul 17, 2016
    8
    1
    6
    Male
    I removed Clean Master after it was unable to find anything. I do not believe that I have anything else by them installed on the phone.

    In addition to what was happening, if my phone is asleep for a period of time, when I wake it up then following the unlock it asks how I want to open "the program". I select Chrome (I also have Firefox and something called "Internet" and it opens Chrome and redirects to open the Play Store, with Uber selected.

    george
     
  5. Jfalls63

    Jfalls63 Android Expert
    Rank:
     #30
    Points:
    818
    Posts:
    4,221
    Joined:
    May 15, 2015

    May 15, 2015
    4,221
    3,190
    818
    Male
    Electrician
    Satsuma,Alabama
    After you unlock your phone, either with pin or swipe, you shouldn't see any pop up message. Are you using the default TouchWiz launcher?
     
  6. Jfalls63

    Jfalls63 Android Expert
    Rank:
     #30
    Points:
    818
    Posts:
    4,221
    Joined:
    May 15, 2015

    May 15, 2015
    4,221
    3,190
    818
    Male
    Electrician
    Satsuma,Alabama
    Did you try the Addons Detector app?
    Next time the pop up appears, can you take a screenshot?
    I would also go to each one of the browser's that you are using in the app manager, force stop and clear the cache and data then restart the phone.
     
  7. George L Smyth

    Thread Starter
    Rank:
    None
    Points:
    6
    Posts:
    8
    Joined:
    Jul 17, 2016

    Jul 17, 2016
    8
    1
    6
    Male
    The pop-up is the standard "which app do you want to use" box. I'll do the force stop on each browser as suggested and see if that helps.

    george
     
  8. Jfalls63

    Jfalls63 Android Expert
    Rank:
     #30
    Points:
    818
    Posts:
    4,221
    Joined:
    May 15, 2015

    May 15, 2015
    4,221
    3,190
    818
    Male
    Electrician
    Satsuma,Alabama
    Looking over your previous post, the lock screen that you mentioned, the nine dots is something that I'm unfamiliar with. I have seen pin, pattern and password. Is this something custom that you installed?
     
  9. aml1025

    aml1025 Android Enthusiast
    Rank:
     #152
    Points:
    98
    Posts:
    443
    Joined:
    Jan 31, 2013

    Jan 31, 2013
    443
    130
    98
    Twin Cities, MN
    Nine dots is how the pattern lockscreen looks. You create a pattern that connects the dots in some way.
     
    Jfalls63 likes this.
  10. George L Smyth

    Thread Starter
    Rank:
    None
    Points:
    6
    Posts:
    8
    Joined:
    Jul 17, 2016

    Jul 17, 2016
    8
    1
    6
    Male
    The problem still exists.

    Google backs up my images and I use Google's contacts. It is my understanding that if I do a factory reset then Google will reload my apps and then I would just need to okay updates as they are noticed.

    Is this correct? If so then I will go ahead and do that, as I have no other alternatives coming my way.

    george
     
  11. Jfalls63

    Jfalls63 Android Expert
    Rank:
     #30
    Points:
    818
    Posts:
    4,221
    Joined:
    May 15, 2015

    May 15, 2015
    4,221
    3,190
    818
    Male
    Electrician
    Satsuma,Alabama
    Everything you have backed up through Google will restore automatically when you log back into your account.
    I was going to suggest a Factory Rest but wanted to wait and see if anyone else had any ideas.
    If something ugly got installed into your system, a factory reset will re-install it.
    If that is the case, you will need to reflash your stock firmware.
     
    Mikestony and KOLIO like this.
  12. George L Smyth

    Thread Starter
    Rank:
    None
    Points:
    6
    Posts:
    8
    Joined:
    Jul 17, 2016

    Jul 17, 2016
    8
    1
    6
    Male
    I'll have to ask my son to see if he can help me with that. This is an area I know little about so hopefully he will be able to give me some guideance.

    george
     
    Jfalls63 likes this.

Share This Page

Loading...