Author Topic: Persistent viruses keep installing after deleting  (Read 1410 times)

0 Members and 1 Guest are viewing this topic.

Offline Wrenger

  • Newbie
  • *
  • Posts: 2
Persistent viruses keep installing after deleting
« on: May 28, 2020, 11:10:54 AM »
Viruses:
Apps ( installed from apps . no permissions , version 1.0.0 , no icon)
com.arxv.resvsd ( installed from com.arxv.resvsd , no permissions , version 1.0.0 , no icon)
com.ser.servicesads ( installed from com.ser.servicesads, all permissions , version 1.0.0 , no icon)
GService ( installed from Gservice , no permissions , version 1.0.0 , no icon)
(fake app) Show Photos ( installed from Show Photos, with credible icon , name does not change with language name from system , permissions to storage , version 1.0.0)
(fake app) Email ( installed from Email, with credible icon, name does not change with language name from system , all permissions , version 1.0.
Vis, Facebook (most likely fake) and 1 more are always blocked by play protect when they try to install.

All of them install to my phone every ~12-24 hours. ( i slept a night with internet off and nothing installed, ~10 hours of no internet acces )
Phone costed 91$ / 84 euro ( kinda cheap i know, Allview X5 Soul Mini )
I AM able to delete all of them ( unlike the real email app )
Nothing used to install on my phone 7 months ago.

What i have tried:
Factory resetting twice without backups to apps ( installed them one by one from google playstore )
Clearing all apps cache.
Force stopping ( most didnt stop ), clearing data, then deleting every virus app.
Now im trying to block internet acces for every app one by one with No Root Firewall.
Edit: It didn't work

Offline Tereza V.

  • Avast team
  • Advanced Poster
  • *
  • Posts: 968
Re: Persistent viruses keep installing after deleting
« Reply #1 on: June 05, 2020, 07:40:01 AM »
Hi, please read the following article, I guess it might be the case.
https://blog.avast.com/android-devices-ship-with-pre-installed-malware