Help Is this malware? lock screen hijack?

[BrownDevil]

This is actually for my friends Galaxy s8+
He has no idea why but this has taken over his lock screen, and neither him nor I can find away to make it go away.
Anyone have any ideas?
Would rather not do a master reset.
TIA
Robert

 

[PitCarver]

Looks like peel smart remote.
Disable it under the app manager.

 

[BrownDevil]

He doesn't have that app installed.
Thanks

 

[tube517]

Does it have any battery booster apps, ES file explorer, or Flash Keyboard?

Check this list if the phone has it:

• Amber Weather Widget • ES App Locker • GO apps (of note: GO Weather, GO SMS, GO Keyboard, Next Browser) • Kingo Root • KittyPlay Wallpapers, Ringtones • TouchPal apps (TouchPal makes multiple keyboard apps) • Xender (file transfer app) • Zero Team apps (of note: Z Camera)

These are all known apps that can put adware your phone and put unnecessary apps like that lockscreen in the picture

 

[Rocker1119]

Does it have any battery booster apps, ES file explorer, or Flash Keyboard?
Check this list if the phone has it:
• Amber Weather Widget • ES App Locker • GO apps (of note: GO Weather, GO SMS, GO Keyboard, Next Browser) • Kingo Root • KittyPlay Wallpapers, Ringtones • TouchPal apps (TouchPal makes multiple keyboard apps) • Xender (file transfer app) • Zero Team apps (of note: Z Camera)
These are all known apps that can put adware your phone and put unnecessary apps like that lockscreen in the picture

Rock1119

I have LG K7...Do you reccomend sn app to cool down..boost..clean..etc. And whivh one? Thaks

 

[Leon Marco]

Ask your friend to check his running apps after a reboot and make list of the ones that were not launched by him, among these will be the app that is troubling him. This used to be the best fix for me when I was a total newbie.

And no, his mobile has not been hijacked. That just some stupid app he must've installed by mistake.
He also does not need to do any reset.

 

[tube517]

Rock1119

I have LG K7...Do you reccomend sn app to cool down..boost..clean..etc. And whivh one? Thaks

I don't use any "boosters" or "Cleaners". They do nothing for your phone except make it work harder. Also, some of those apps will put adware on your phone that are sometimes difficult to remove.

 

[Hadron]

Rock1119

I have LG K7...Do you reccomend sn app to cool down..boost..clean..etc. And whivh one? Thaks

All of those cool down/clean/boost apps are scams, most are counter-productive, and a fair few are adware or data-miners. So my recommendation is "none of them".

 

[BrownDevil]

Does it have any battery booster apps, ES file explorer, or Flash Keyboard?

Check this list if the phone has it:

• Amber Weather Widget • ES App Locker • GO apps (of note: GO Weather, GO SMS, GO Keyboard, Next Browser) • Kingo Root • KittyPlay Wallpapers, Ringtones • TouchPal apps (TouchPal makes multiple keyboard apps) • Xender (file transfer app) • Zero Team apps (of note: Z Camera)

These are all known apps that can put adware your phone and put unnecessary apps like that lockscreen in the picture

Checking on this now. Will post up with results. Thanks!

 

[BrownDevil]

OK guys, checked for all the above mentioned suggested culprits. He has none of them installed on his phone.

Any other guesses?

 

[Dannydet]

Do a factory reset if all else fails

 

[BrownDevil]

Do a factory reset if all else fails

Trying to avoid that bro.

 

[tube517]

Does it have Clean Master or any apps by Cheetah Mobile?

Any apps by DU (Like their battery booster app)?

Any other cleaning, task cleaners, cache cleaning apps?

 

[dontpanicbobby]

Is he being pranked? That could be a wallpaper that looks like a Lock screen. Also what happens when he slides to unlock?

 

[Phalon4]

Have you long pressed the Home screen after swiping it to see if that's a lock screen image or not?

 

[BrownDevil]

Is he being pranked? That could be a wallpaper that looks like a Lock screen. Also what happens when he slides to unlock?

He's not being pranked. There is no slide to unlock anymore. That's what I'm saying, it's screwed up. I have no ideas where it came from or how to get rid of it.

 

[dontpanicbobby]

I'm sticking with it being a wallpaper prank gone wrong.. Looking at that image I don't see a service provider in the upper left corner which is what you'd normally see on a lock screen. Anyway even if it's not he'll have to do is Factory reset his S8+ using the hardware buttons to make it usable again. After the Factory reset all the data will be wiped from the device and have to be reinstalled but that's better than sitting there with a very expensive paperweight.

"Press and hold the Volume Up + Bixby + Power buttons at the same time. Release all buttons when the Phone vibrates. From the Android Recovery screen, select Wipe data/factory reset. Utilize the volume buttons to cycle through the available options and the power button to select."

That's from Verizon Wireless but will work with any Samsung Galaxy S8+.

 

[BAYFISHER]

suffer living with it or be gone with factory reset.

 

[Shotgun84]

Have you tried AirPush detector or similar from the Play Store to see if it can find it?

 

[BAYFISHER]

https://forum.xda-developers.com/galaxy-s8+/help/bypass-frp-s8-t3621416

 

[Shotgun84]

This could be way off here but es explorer did a similar thing to me a while a go. I have a feeling es put itself as a device administrator to be able to take over the lockscreen. It's worth checking the device administrator settings to see if somethings there that shouldn't be. However that could've been the solutions to one of the many other problems I had with my xperia so it might not work. Worth a shot though

 

[BAYFISHER]

ITS CALLED FRP PROTECTION MODE OR RELATED ISSUE

 

[BAYFISHER]

This is actually for my friends Galaxy s8+
He has no idea why but this has taken over his lock screen, and neither him nor I can find away to make it go away.
Anyone have any ideas?
Would rather not do a master reset.
TIA
Robert

looking at pic i see no errors or warnings

 

[Shotgun84]

This could be way off here but es explorer did a similar thing to me a while a go. I have a feeling es put itself as a device administrator to be able to take over the lockscreen. It's worth checking the device administrator settings to see if somethings there that shouldn't be. However that could've been the solutions to one of the many other problems I had with my xperia so it might not work. Worth a shot though

My mistake. It wasn't es file explorer. It was some photo editing app (sorry can't remember the name) which set itself as an administrator and changed my lockscreen.

 

[tube517]

Was this issue ever resolved??