Attend XDA's Second Annual Developer Conference, XDA:DevCon 2014!
5,781,254 Members 36,232 Now Online
XDA Developers Android and Mobile Development Forum

Possible virus or malicious app

Tip us?
 
0331
Old
#1  
0331's Avatar
Senior Member - OP
Thanks Meter 81
Posts: 336
Join Date: Jan 2012
Default Possible virus or malicious app

Out of the blue a few days ago I started getting intrusive pop-up ads while browsing the web. I use Chrome and Firefox.

Now, while web browsing, I get redirected to a site called downlund.com and Firefox asks how I want to proceed with the download. I always just back out.

I have avg and lookout on my phone, both of which say I am good to go.

Anyone familiar with this?


Sent from my VS980 4G using Tapatalk
 
somnambulator
Old
#2  
Member
Thanks Meter 8
Posts: 76
Join Date: Sep 2010
Location: Wilmington, DE
have u installed any apps manually? is so, what? have u installed any shady ad blocker apps?

something may have taken over your hosts file. if so, it may be an easy fix, but who knows what else it's doing. might be best to do a factory reset and be done with it.

you're the first instance I've heard of having android malware, and apparently confirming why android antivirus apps are a joke.

Sent from Tapatalk using my xposed VZW G2
The Following User Says Thank You to somnambulator For This Useful Post: [ Click to Expand ]
 
0331
Old
#3  
0331's Avatar
Senior Member - OP
Thanks Meter 81
Posts: 336
Join Date: Jan 2012
I just rooted and that took care of it. I didn't have ad blockers. The only thing out of the ordinary was 2048 game app. But it was the highest rated in the play store. Anyway. Thank you.

Sent from my VS980 4G using Tapatalk
 
0331
Old
#4  
0331's Avatar
Senior Member - OP
Thanks Meter 81
Posts: 336
Join Date: Jan 2012
I spoke too soon. Its back. Its for an app I used to have. I uninstalled it a few days go, and just got this pop up tonight which links to the app in the play store.


Click image for larger version

Name:	uploadfromtaptalk1400220132705.jpg
Views:	59
Size:	43.2 KB
ID:	2746479

Sent from my VS980 4G using Tapatalk
 
0331
Old
#5  
0331's Avatar
Senior Member - OP
Thanks Meter 81
Posts: 336
Join Date: Jan 2012
Is anyone else besides my wife's S3 and my G2 getting pop up ads in the browser?

Sent from my VS980 4G using Tapatalk
 
somnambulator
Old
#6  
Member
Thanks Meter 8
Posts: 76
Join Date: Sep 2010
Location: Wilmington, DE
Quote:
Originally Posted by 0331 View Post
Is anyone else besides my wife's S3 and my G2 getting pop up ads in the browser?

Sent from my VS980 4G using Tapatalk
no, and I've used that app before. Unless malware was injected into the app recently updated on the play store, it's not the culprit.

what do u mean by you rooted and took care of the virus? What did u actually do after rooting? had you previously downloaded any apps from the internet (not on the play store)?

Sent from Tapatalk using my xposed VZW G2
 
0331
Old
#7  
0331's Avatar
Senior Member - OP
Thanks Meter 81
Posts: 336
Join Date: Jan 2012
It seemed to have stopped after I rooted, but I spoke too soon. I did not download anything from the internet.

But after all that I downloaded ad away from f-droid and now it s gone. Adaway said AccuWeather from the playstore was the culprit.

Sent from my VS980 4G using Tapatalk
 
scram99
Old
#8  
scram99's Avatar
Senior Member
Thanks Meter 46
Posts: 130
Join Date: Jul 2011
Airpush

Sent from my VS980 4G using XDA Free mobile app

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes


Give Your Android Wear Device a Lock Screen with Lockable

Without a doubt,Android Wear is one of the most frequently talked abouttopics of … more

Forums Added for the LG G Watch R and Samsung Gear S

A little over a week ago, LG “inadvertently” let the world know about the … more

Secrecy App Goes Open Source, New LG Android Wear Device! – XDA Developer TV

Secrecy encryption app goes open source! That and much … more

Pushbullet Updated with SMS Send Ability

Pushbullet is one of thoseapplications that every Android lover should have installed on his or … more