Author Topic: Malware Found  (Read 6276 times)

0 Members and 1 Guest are viewing this topic.

Offline soccerguy99

  • Newbie
  • *
  • Posts: 16
Malware Found
« on: December 01, 2020, 04:28:58 PM »
Hi there, when scanning my samsung mobile, Avast is detecting malware on the "Visual Voicemail" application. The message says
"it is installed in the system partition and cannot be uninstalled. Instead, you must deactivate the app from system settings." When I go to the app in the settings, it does not have a disable option.


Question:

1. Has anyone else seen malware on this app? Or on a manufacturer's app?
2. Any idea how to disable?


Thanks

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37191
Re: Malware Found
« Reply #1 on: December 01, 2020, 05:23:47 PM »
Quote
The message says
"it is installed in the system partition and cannot be uninstalled. Instead, you must deactivate the app from system settings."
Is this the message avast give?   i dont see any malware mentioned


Offline soccerguy99

  • Newbie
  • *
  • Posts: 16
Re: Malware Found
« Reply #2 on: December 01, 2020, 05:46:28 PM »
Sorry I skipped that portion of the full message. It says "Malware detected on the Visual Voicemail app" ..

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37191
Re: Malware Found
« Reply #3 on: December 01, 2020, 05:50:33 PM »
Sorry I skipped that portion of the full message. It says "Malware detected on the Visual Voicemail app" ..
No malware name ?



Offline soccerguy99

  • Newbie
  • *
  • Posts: 16
Re: Malware Found
« Reply #4 on: December 01, 2020, 05:55:12 PM »
No malware name was given

I ended up just clean reinstalling my phone out of caution.. not sure if this was the right approach but was overly worried.

Have you heard of this type of malware attached to a Samsung app? without a name? is it a "possible" malware or false positive perhaps?

Offline soccerguy99

  • Newbie
  • *
  • Posts: 16
Re: Malware Found
« Reply #5 on: December 01, 2020, 06:02:05 PM »
Update:

I did a factory reset, turned on my phone and only logged into to google to download Avast from the playstore. No other apps installed or any other use.

I scanned my phone and this message is still coming up on a cleaned new phone. Could it be attached to my google account somehow?

The exact message is:

"Malware detected

Visual voicemail contains malware that could harm your device. it is installed in the system partition and cannot be uninstalled. Instead, you must deactivate the app from system settings."

Offline soccerguy99

  • Newbie
  • *
  • Posts: 16
Re: Malware Found
« Reply #6 on: December 01, 2020, 06:16:12 PM »
Sorry for the additional posts, but would a factory reset wipe malware on the system partition (as the note seems to indicate it's located there)? Any help is appreciated.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37191
Re: Malware Found
« Reply #7 on: December 01, 2020, 06:24:41 PM »
It could be that avast by "malware" mean PUP = Possible Unwanted Program ?
Or it is a False Positive ?   somone from avast need to answer


https://lifehacker.com/what-to-do-when-your-budget-android-phone-arrives-with-1840929271

https://blog.malwarebytes.com/android/2020/07/we-found-yet-another-phone-with-pre-installed-malware-via-the-lifeline-assistance-program/


When i buy Android phones i always buy one that comes with a clean android and no extra crapware ... like Nokia
https://www.androidauthority.com/best-smartphones-stock-android-844672/







« Last Edit: December 01, 2020, 06:26:36 PM by Pondus »

Offline soccerguy99

  • Newbie
  • *
  • Posts: 16
Re: Malware Found
« Reply #8 on: December 01, 2020, 06:34:13 PM »
Thanks @pondus

Not sure what to do here. It's possible that the malware can be in the system partition? Any recommendations here? Note, I've already done a factory reset.

Offline Simion

  • Advanced Poster
  • **
  • Posts: 873
Re: Malware Found
« Reply #9 on: December 01, 2020, 08:27:59 PM »
I had a "malware" detection on a Sprint system file a few days ago. I checked the file with the VirusTotal app and it was clean. I reported it as a false positive through the Avast app and now it is no longer detected.

Offline soccerguy99

  • Newbie
  • *
  • Posts: 16
Re: Malware Found
« Reply #10 on: December 01, 2020, 09:22:32 PM »
Hi @Simion, thanks for the reply. Appreciate it.

So you viewed "VirusTotal" as being more reliable than Avast  I guess?

And if Avast removes it as malware, have they done their due diligence or do they just take it out if someone reports it as false positive?

Thanks a bunch in advance

EDIT: my bad - didn't know what VirusTotal was

I downloaded VirusTotal for android and the result for the app was:

green check mark - 1/75 Clean

How do I interpret the "1 detected"? Oddly enough, the AV that detected is not AVAST, even though AVAST for mobile is flagging it as malware.

Can someone with experience using VirusTotal help interpret these results?
« Last Edit: December 01, 2020, 10:26:39 PM by soccerguy99 »

Offline soccerguy99

  • Newbie
  • *
  • Posts: 16
Re: Malware Found
« Reply #11 on: December 01, 2020, 10:26:48 PM »
I downloaded VirusTotal for android and the result for the app was:

green check mark - 1/75 Clean

How do I interpret the "1 detected"? Oddly enough, the AV that detected is not AVAST, even though AVAST for mobile is flagging it as malware.

Can someone with experience using VirusTotal help interpret these results

When I checked the results, even the google playstore has 1 issue detected... "Windows: Trojan" --- are these normal??
« Last Edit: December 01, 2020, 10:44:23 PM by soccerguy99 »

Offline soccerguy99

  • Newbie
  • *
  • Posts: 16
Re: Malware Found
« Reply #12 on: December 01, 2020, 10:44:36 PM »
updated with more info

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37191
Re: Malware Found
« Reply #13 on: December 01, 2020, 10:46:30 PM »
Quote
Can someone with experience using VirusTotal help interpret these results
Screenshots are a big help for those who cant see what you see   ;)



Offline soccerguy99

  • Newbie
  • *
  • Posts: 16
Re: Malware Found
« Reply #14 on: December 01, 2020, 11:04:42 PM »
Here are the screenshots.  The first is from avast and the other 2 are from when I ran virustotal and 1 out of 76 AVs (drweb) found something.

On a related note, even Google play store has a detection by 1 AV. Is this normal?  Will most phones have at least 1 detection for some of these apps?
« Last Edit: December 01, 2020, 11:35:31 PM by soccerguy99 »