Avast WEBforum

Consumer Products => Avast Mobile Security => Avast Mobile Security for Android => Topic started by: Wrenger on May 28, 2020, 11:10:54 AM

Title: Persistent viruses keep installing after deleting
Post by: Wrenger on May 28, 2020, 11:10:54 AM

Viruses:
Apps ( installed from apps . no permissions , version 1.0.0 , no icon)
com.arxv.resvsd ( installed from com.arxv.resvsd , no permissions , version 1.0.0 , no icon)
com.ser.servicesads ( installed from com.ser.servicesads, all permissions , version 1.0.0 , no icon)
GService ( installed from Gservice , no permissions , version 1.0.0 , no icon)
(fake app) Show Photos ( installed from Show Photos, with credible icon , name does not change with language name from system , permissions to storage , version 1.0.0)
(fake app) Email ( installed from Email, with credible icon, name does not change with language name from system , all permissions , version 1.0.
Vis, Facebook (most likely fake) and 1 more are always blocked by play protect when they try to install.

All of them install to my phone every ~12-24 hours. ( i slept a night with internet off and nothing installed, ~10 hours of no internet acces )
Phone costed 91$ / 84 euro ( kinda cheap i know, Allview X5 Soul Mini )
I AM able to delete all of them ( unlike the real email app )
Nothing used to install on my phone 7 months ago.

What i have tried:
Factory resetting twice without backups to apps ( installed them one by one from google playstore )
Clearing all apps cache.
Force stopping ( most didnt stop ), clearing data, then deleting every virus app.
Now im trying to block internet acces for every app one by one with No Root Firewall.
Edit: It didn't work

Title: Re: Persistent viruses keep installing after deleting
Post by: Tereza V. on June 05, 2020, 07:40:01 AM

Hi, please read the following article, I guess it might be the case.
https://blog.avast.com/android-devices-ship-with-pre-installed-malware