Author Topic: Samsung Core Services flagged as having malware by Avast  (Read 7391 times)

0 Members and 1 Guest are viewing this topic.

Offline E-ZPass

  • Newbie
  • *
  • Posts: 2
Samsung Core Services flagged as having malware by Avast
« on: May 05, 2023, 07:30:56 PM »
On my Samsung S-10 Galaxy phone, I am getting a warning message from Avast Security Premium.  It reads:

"Samsung Core Services contains malware that could harm your device.  It is installed in the system partition and cannot be uninstalled. Instead, you must deactivate the app from system settings.  Detection ID: 5f9e3bb91183"

Samsung Core Services is an integral component of my phone operating system, not easy or recommended to deactivate.   Could this be a false positive?

My phone is running the latest iteration of the Android operating system and is not jailbroken or rooted.

Offline E-ZPass

  • Newbie
  • *
  • Posts: 2
Re: Samsung Core Services flagged as having malware by Avast
« Reply #1 on: May 05, 2023, 08:02:38 PM »
Here is a screen capture of the malware warning message from Avast.

Offline hannon31

  • Jr. Member
  • **
  • Posts: 65
Re: Samsung Core Services flagged as having malware by Avast
« Reply #2 on: May 06, 2023, 06:22:17 AM »
I just got this message today after updating my Avast mobile :

Malware Detected
Media Storage contains Malware that could harm your device. It is installed in the system partition and cannot be uninstalled. Instead, you must deactivate the app from system settings. Detection ID: 069d6c2ac8d6

Has this been confirmed to be a false positive, as others have mentioned ? Has this ever been resolved ?

I'm using Moto G Play Android version 10 Mobile Phone.

Thanks !

Offline TrippyToes

  • Newbie
  • *
  • Posts: 1
Re: Samsung Core Services flagged as having malware by Avast
« Reply #3 on: May 07, 2023, 06:09:23 AM »
Same issue here with the Note 10+.

Avast says: Samsung Core Services contains Malware that could harm your device

It happened with another Samsung app for photo editing but I was ok uninstalling it. I just don't recall the name of it.

Offline Darryl7

  • Newbie
  • *
  • Posts: 2
Re: Samsung Core Services flagged as having malware by Avast
« Reply #4 on: May 07, 2023, 09:03:39 AM »
I'm having the same problem when I scan my phone. Actually my wife's phone is doing the same. Can't disable as suggested because the button is grayed out. I've tried reinstalling the app and restarting but it's the same.

Offline cedrisc

  • Newbie
  • *
  • Posts: 1
Re: Samsung Core Services flagged as having malware by Avast
« Reply #5 on: May 07, 2023, 10:54:41 AM »
I have just had it come up too.

Offline NotAVampyre

  • Newbie
  • *
  • Posts: 1
Re: Samsung Core Services flagged as having malware by Avast
« Reply #6 on: May 07, 2023, 10:56:01 PM »
Phone: Samsung Galaxy S10+
One UI Version: 4.1
Android Version: 12

"Samsung Core Services contains malware that could harm your device.  It is installed in the system partition and cannot be uninstalled. Instead, you must deactivate the app from system settings."
Detection ID: 1fc09fa67c60

Offline Bodil96

  • Newbie
  • *
  • Posts: 1
Re: Samsung Core Services flagged as having malware by Avast
« Reply #7 on: May 07, 2023, 11:51:53 PM »
Hi All,
I believe this was a security threat as per below link

https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=05

"Android Applications Updates

SVE-2022-2478(CVE-2023-21505): Improper access control in Samsung Core Service

Severity: Moderate
Resolved version: 2.1.00.36
Reported on: October 14, 2022
Description: Improper access control in Samsung Core Service prior to version 2.1.00.36 allows attacker to write arbitrary file in sandbox.
The patch add proper access control logic.
Acknowledgement: Stealth Assassin"


It appears Android/Samsung have released an update which removes Samsung Core all together. Re run your AV and it should come back clean. Hope this helps