Database Info

[Completed] [Q] Malware without opening a shady app?

So, I was trying to download an old xposed module. Upon downloading it, the apk was named as the file I wanted. Once installed, it installed as a download manager with a different name.
I never ran the app and uninstalled it immediately. Could my device have been infected with malware without launching the app?
My backup is over a month old and I would like to avoid a restore

Hi there,
Please read carefully this threads where is discussed about that:
[Guide] Detecting root-level Droiddream malware real-time with Tasker profile
[Guide]A few simple steps to avoid installing Malware
Good luck

operaservice.apk: Malware?

Hi there,
I have a cubot and Sophos Security shows the system-app operaservice.apk as a Android Downloader Trojaner...
Is it true? Any knowledge about it here?
Which Playstore App would you advise to use to scan for china spyware apps (I dont have root, but scanning system-apps (read) should be possible I guess??)????
Thanks!

[Completed] Is Kingroot Ghost Push Trojan?

Hello, I have the rooted s6 and how I was able to obtain it was kingroot. Recently I used "stubborn Trojan killer" app from the play store and when it scanned my phone it says there is one push Trojan found. Is it detecting Kingroot as a ghost push trojan? I'm afraid to click "remove trojan" because it won't give enough info and I think (but not sure) it's detecting Kingroot. Is it?

Hello and thank you for using XDA Assist,
KingRoot isn't a trojaner. Because it'll use a weak spot of your phone to root it, it will be shown as a trojaner.

[Completed] How to block apps which install themselves over and over again ?

Hi,
Phone : ZOPO ZP999 - rooted
The latest month there is something weird going on : 2 'apps' are reinstalling themselves over and over again.
I deinstalled them, blocked them. Even when i block them they disappear and reappear again.
These apps use icons like twitter and facebook.
This is the data :
1. com.roma.boostcleanpro.apk
it refers to this links on GooglePlay : https://play.google.com/store/apps/details?id=com.roma.boostcleanpro
uses Facebook icon
2. com.sp.cp.apk
nothing to find on Googleplay
uses twitter icon
Does anybody knows the reason ?
Is there another installed app which is responsible for this ?
ps : in "security" , unknown sources is not enabled and verify apps which can cause damage is enabled
Thanks for the help

Hello,
You've picked up some malware, you have to remove the malware to keep those apps from coming back. I'm willing to wager that you rooted your device with Kingroot because it deceptively installs apps when you use it. If you used Kingroot then you'll need to find the method of converting to SuperSU on your device and remove Kingroot, then you won't get those apps installing themselves.
To find the malware you can use Malwarebytes Ant-malware app from the Playstore.
For further help ask your question in the forum linked below.
http://forum.xda-developers.com/android/help
The experts there may be able to help. Good luck.

Droidriven said:
Hello,
You've picked up some malware, you have to remove the malware to keep those apps from coming back. I'm willing to wager that you rooted your device with Kingroot because it deceptively installs apps when you use it. If you used Kingroot then you'll need to find the method of converting to SuperSU on your device and remove Kingroot, then you won't get those apps installing themselves.
To find the malware you can use Malwarebytes Ant-malware app from the Playstore.
For further help ask your question in the forum linked below.
http://forum.xda-developers.com/android/help
The experts there may be able to help. Good luck.
Click to expand...
Click to collapse
Hi - thanks for the reply !
This phone - my ZOPO zp999 - is rooted with SuperSU. I made the root-thread my self here on XDA So the rooting is OK.
The phone has been working fine all the time so there must be an app which caused the reinstalling of some bad apps.
Therefore I run Malwarebytes and had about 8 issues - see screenshot - removed them and since yesterday the problem was gone...
hope it stays that way

Has their been any suspicious activity reported from devices after they were rooted with king(o)root?

I don't mean data gathering during the rooting proces. But after the phone has been rooted and kingoroot has been uninstalled, has their been any reported data gathering or spying? Refferences to forums and articles would be greatly apriciated.

KingRoot Malware / Adware root !!
There has been a lot of discussion about this topic and opinions. But lets be clear about a few things that are facts: KingRoot now installs a ton of Adware on your device KingRoot takes over your lock screen now and splatters ads on it...
forum.xda-developers.com
Kingo Android ROOT [android_root_other.exe] - Analysis, Malware, Safety
Is Kingo Android ROOT safe? android_root_other.exe file analysis - safety information, virus and malware testing with Avira, BitDefender, Malwarebytes, Norton and other top security software.
kingo-android-root.en.lo4d.com

jwoegerbauer said:
KingRoot Malware / Adware root !!
There has been a lot of discussion about this topic and opinions. But lets be clear about a few things that are facts: KingRoot now installs a ton of Adware on your device KingRoot takes over your lock screen now and splatters ads on it...
forum.xda-developers.com
Kingo Android ROOT [android_root_other.exe] - Analysis, Malware, Safety
Is Kingo Android ROOT safe? android_root_other.exe file analysis - safety information, virus and malware testing with Avira, BitDefender, Malwarebytes, Norton and other top security software.
kingo-android-root.en.lo4d.com
Click to expand...
Click to collapse
Thanks I apriciate the litterature. I have read the article but it doesn't seem to mention data gathering after the rooting proces is done. Do you have any information for me about that?