1. Download our Official Android App: Forums for Android!

Support Infected With ghost Trojan?

Discussion in 'Android Lounge' started by YoshiMoshy, Jun 14, 2016.

  1. YoshiMoshy

    YoshiMoshy Newbie
    Thread Starter
    Rank:
    None
    Points:
    26
    Posts:
    14
    Joined:
    Jun 14, 2016

    Jun 14, 2016
    14
    3
    26
    Yesterday i realized something was installing random apps and it KEEPS restarting my phone when i try to do anything on it. I tried to install Stubborn Trojan Killer but when it finishes installing it restarts my phone so it doesn't properly install .I cannot connect via usb either. Any ideas how i can delete those apps and the virus?I don't know if my phone is rooted or not and the apps are acting like they are system apps.

     

    Advertisement

  2. Bg260

    Bg260  
    VIP Member
    Rank:
     #32
    Points:
    763
    Posts:
    3,538
    Joined:
    Apr 30, 2016

    Apr 30, 2016
    3,538
    3,666
    763
    Male
    Freelance Entrepreneur
    Lincoln
    Hello and welcome to AF. If you could give a little more info, manufacturer, model #, carrier, Android version.
    I guess I'm a little confused by the statement
    How long have you had it?
     
  3. YoshiMoshy

    YoshiMoshy Newbie
    Thread Starter
    Rank:
    None
    Points:
    26
    Posts:
    14
    Joined:
    Jun 14, 2016

    Jun 14, 2016
    14
    3
    26
    7 months .Got it for Christmas. Its a stonex evo and i think the android is 4.4.2
     
    #3 YoshiMoshy, Jun 14, 2016
    Last edited: Jun 14, 2016
  4. YoshiMoshy

    YoshiMoshy Newbie
    Thread Starter
    Rank:
    None
    Points:
    26
    Posts:
    14
    Joined:
    Jun 14, 2016

    Jun 14, 2016
    14
    3
    26
    And actually i can connect via usb but i dont know when the phone will restart
     
  5. Bg260

    Bg260  
    VIP Member
    Rank:
     #32
    Points:
    763
    Posts:
    3,538
    Joined:
    Apr 30, 2016

    Apr 30, 2016
    3,538
    3,666
    763
    Male
    Freelance Entrepreneur
    Lincoln
  6. YoshiMoshy

    YoshiMoshy Newbie
    Thread Starter
    Rank:
    None
    Points:
    26
    Posts:
    14
    Joined:
    Jun 14, 2016

    Jun 14, 2016
    14
    3
    26
    Maybe italian i dont know
     
  7. YoshiMoshy

    YoshiMoshy Newbie
    Thread Starter
    Rank:
    None
    Points:
    26
    Posts:
    14
    Joined:
    Jun 14, 2016

    Jun 14, 2016
    14
    3
    26
    Hm i translated it with google and they didnt found a solution either
     
  8. Bg260

    Bg260  
    VIP Member
    Rank:
     #32
    Points:
    763
    Posts:
    3,538
    Joined:
    Apr 30, 2016

    Apr 30, 2016
    3,538
    3,666
    763
    Male
    Freelance Entrepreneur
    Lincoln
    Well, basically it says that your phone is prone to this virus. One suggestion is to factory reset, remove sdcard "if you have one" and scan it for virus.
     
  9. YoshiMoshy

    YoshiMoshy Newbie
    Thread Starter
    Rank:
    None
    Points:
    26
    Posts:
    14
    Joined:
    Jun 14, 2016

    Jun 14, 2016
    14
    3
    26
    I actually did that. The app managed to make itself a system app
     
  10. svim

    svim Android Expert
    Rank:
     #45
    Points:
    608
    Posts:
    3,748
    Joined:
    Dec 19, 2013

    Dec 19, 2013
    3,748
    2,789
    608
    Illinois
    Stubborn Trojan Killer is a Cheetah Mobile product so maybe it's a good thing you weren't able to install it. Cheetah Mobile apps tend to have privacy issues. Maybe try using Malwarebytes instead, it has a better track record:
    https://play.google.com/store/apps/details?id=org.malwarebytes.antimalware&hl=en
    But note that installing any anti-malware/antivirus utility as a regular user won't help you in this case, as it will need root level permissions to clean out something like a system-level infected app.

    Also, if your problem is a matter where some exploit has installed itself as a system app, a Factory Reset won't help. A Factory Reset wipes the user partition, where your data is stored, but it doesn't affect the protected system partitions. All you will be doing is deleting your personal data but the infected operating system will still remain that way.

    In order to solve a problem like a compromised system app, you need to flash your phone with its factory original ROM. Can't find much online about the Stonex Evo model so hopefully someone more knowledgeable will chime in.
     
  11. YoshiMoshy

    YoshiMoshy Newbie
    Thread Starter
    Rank:
    None
    Points:
    26
    Posts:
    14
    Joined:
    Jun 14, 2016

    Jun 14, 2016
    14
    3
    26
    Yea i thought about flashing my phone too but i dont know how.
     
  12. YoshiMoshy

    YoshiMoshy Newbie
    Thread Starter
    Rank:
    None
    Points:
    26
    Posts:
    14
    Joined:
    Jun 14, 2016

    Jun 14, 2016
    14
    3
    26
    And i still cant use my usb lets not forget about that
     
  13. Brian706

    Brian706 I like turtles!
    Moderator
    Rank:
     #27
    Points:
    1,053
    Posts:
    9,345
    Joined:
    Jul 25, 2012

    Jul 25, 2012
    9,345
    8,589
    1,053
    Drafter
    Can you post the exact model number of the device and what country you are using it in? I can't find a lot of information on the device. It seems to be an Italian device but based on your response, it doesn't seem you are from Italy.

    Hoping to find a firmware download for your model because if the malware made it's way to the system, the only way you will get rid of it is to reflash the system. As you've already discovered, a factory reset only wipes user data.

    Also, just for information, I would assume that this device is having this issue because it is running such an old version of Android. There were several vulnerabilities discovered on Android: Heartbleed, Stage Fright, Master Key, etc that have subsequently been patched. Google now releases monthly security updates for Nexus devices but unfortunately with other devices you are at the mercy of the manufacturer as to when/if they ever release updates.

    How old is this device anyway? Just curious if you've had it for a couple years with no updates or if it's a new device that comes with an old, vulnerable version of Android.
     
    YoshiMoshy and Bg260 like this.
  14. surya kumar

    surya kumar Newbie
    Rank:
    None
    Points:
    56
    Posts:
    24
    Joined:
    Apr 27, 2016

    Apr 27, 2016
    24
    3
    56
    Male
    India
    Brian706 and YoshiMoshy like this.
  15. YoshiMoshy

    YoshiMoshy Newbie
    Thread Starter
    Rank:
    None
    Points:
    26
    Posts:
    14
    Joined:
    Jun 14, 2016

    Jun 14, 2016
    14
    3
    26
    So im in romania right now. and how my mom works in italy she bought this phone i guess. So the exact model number is STX EVO.I have the phone for like 7 months
     
  16. YoshiMoshy

    YoshiMoshy Newbie
    Thread Starter
    Rank:
    None
    Points:
    26
    Posts:
    14
    Joined:
    Jun 14, 2016

    Jun 14, 2016
    14
    3
    26
    Im going to try Surya's site and tell you guys if it worked.Cuz if i look correctly its says ''Turn off your phone, remove the battery.'' So it doesnt need to be open , so it will not keep restarting
     
    Bg260 likes this.
  17. Bg260

    Bg260  
    VIP Member
    Rank:
     #32
    Points:
    763
    Posts:
    3,538
    Joined:
    Apr 30, 2016

    Apr 30, 2016
    3,538
    3,666
    763
    Male
    Freelance Entrepreneur
    Lincoln
    Good luck. I hope it works.:)
     
  18. YoshiMoshy

    YoshiMoshy Newbie
    Thread Starter
    Rank:
    None
    Points:
    26
    Posts:
    14
    Joined:
    Jun 14, 2016

    Jun 14, 2016
    14
    3
    26
    Ok.Thank you guys. It worked all thanks to @surya kumar. Love you guys <3
     
    #18 YoshiMoshy, Jun 15, 2016
    Last edited: Jun 15, 2016
    Brian706 likes this.
  19. Bg260

    Bg260  
    VIP Member
    Rank:
     #32
    Points:
    763
    Posts:
    3,538
    Joined:
    Apr 30, 2016

    Apr 30, 2016
    3,538
    3,666
    763
    Male
    Freelance Entrepreneur
    Lincoln
    If you put an @ and spell the full username it will ping that person. Like today I'm paying tribute to @svim .He is always spot on. As well as the others.
     
  20. YoshiMoshy

    YoshiMoshy Newbie
    Thread Starter
    Rank:
    None
    Points:
    26
    Posts:
    14
    Joined:
    Jun 14, 2016

    Jun 14, 2016
    14
    3
    26
    The only problem now is that i dont have any signal from my gsm. Any solutions?
     
  21. YoshiMoshy

    YoshiMoshy Newbie
    Thread Starter
    Rank:
    None
    Points:
    26
    Posts:
    14
    Joined:
    Jun 14, 2016

    Jun 14, 2016
    14
    3
    26
    It has something to do with the imei i think
     
  22. YoshiMoshy

    YoshiMoshy Newbie
    Thread Starter
    Rank:
    None
    Points:
    26
    Posts:
    14
    Joined:
    Jun 14, 2016

    Jun 14, 2016
    14
    3
    26
    I actually did it. Have a good day all of you :)
     
    andreaqaws likes this.
  23. andreaqaws

    andreaqaws Lurker
    Rank:
    None
    Points:
    15
    Posts:
    1
    Joined:
    Dec 17, 2017

    Dec 17, 2017
    1
    0
    15
    hi, dunno if it's ok to resume this but i'm in the exact same situation as you were, so i hope you can share your solution with me, since this thread is the only resource i could find on the entire web about this phone.
    So my phone is infected with auto-installing apps, ads and so on. Uninstalling them wont work. I'm not sure about doing a factory reset, cause i found some comment about the keyboard disappearing after that. Also i found a rom on needrom, but it is for the mtk6592 version, and i have the mtk6591.
    Thank you in advance
     
    #23 andreaqaws, Dec 17, 2017
    Last edited: Dec 17, 2017
  24. heamicdan

    heamicdan Member
    Rank:
     #274
    Points:
    53
    Posts:
    63
    Joined:
    Dec 15, 2017

    Dec 15, 2017
    63
    55
    53
    android support?--do the chat help they will have you download "smart tudor" app and they can go into your phone and hopefully figure it for you-- just and idea because they helped me last week
     

Share This Page

Loading...