[X]Assistant

[Gridzilla]

пїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅ пїЅ пїЅпїЅпїЅпїЅпїЅпїЅпїЅ пїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅ пїЅ пїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅ пїЅпїЅ пїЅпїЅпїЅпїЅпїЅпїЅ пїЅ пїЅпїЅпїЅпїЅпїЅпїЅ пїЅпїЅпїЅпїЅ, пїЅ пїЅпїЅпїЅ-пїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅ пїЅ пїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅ пїЅпїЅпїЅпїЅ пїЅпїЅпїЅпїЅпїЅ. download

Redirect from browsers to third-party sites | Attention! SMS fraud on Android | Help in finding programs for Android OS | Help to flash the device | Help me find the firmware | Getting ROOT | Questions beginner root user | Android OS FAQ | Terms and jargon | Newbie Questions

Talk in topic:Viruses|Advertising in the notification panel|Annoying advertising notifications|Advertising banners|Advertising banners in browsers|Opening applications (for example Google Play) without a request|Advertising on the lock screen|Advertising banners fully blocking device|Install applications without prompting users|Suspicious files|

Introduction

• Where and what kind of advertising happens.
  It happens that by installing an application, or an update to a device, an annoying advertisement appears in the blind (notification panel). Sometimes it can be seen as a pop-up banner. Sometimes advertising appears on the lock screen. It even happens that the device is completely blocked and you see a message asking you to send an SMS, or pay a bill to unblock it.All this is cheatingand do not believe him! Options for such"a divorce for money" lots of. Carefully read the instructions provided in the spoilers below to get rid of malicious files that run on the device advertising banners or otherwise harm you and your device.
  
• "Infection"Sewn into the firmware initially.
  Unfortunately, increasingly"malware"There are sewn into the system files of the stock (standard) firmware of the device initially. Antiviruses may often not see them, the user may not notice anything for a long time (weeks or even months), but then advertising banners or other manifestations will appear"contagion".Most often this can be observed in Chinese devices and firmware. If you are just going to buy a new gadget, be sure to visit its profile topic on our forum. It is risky to buy devices that have just appeared, then you become a pioneer and if you yourself have no experience, then there will be no one to tell you about your device. If there is a suspicion that"infection"In the firmware, carefully study the header (first message) of the profile topic on the device firmware, in turn type in the search for the topic requests:"viruses", "banner" , "advertising" . If after that you did not find out the information, ask the question in the topic itself, whether someone from the user had such a thing. Read the recommendations below to find the source. "contagion" and getting rid of it. Read the ready-made instructions of those who solved the problem and shared this solution.
  
• Banners in the browser.
  Banners may also occur while browsing the browser. The most unpleasant of them appear in pop-up windows, closing the main browser window. Contain frightening butcompletely lying information that "The device is locked MVD", "There is a virus on your device", or "You need to download an important update" and the like. The pop-up window (browser tab) must be closed using the browser, without clicking on the banner itself. It is recommended after that to clear the browser cache. Below you can find links to useful applications for blocking ads and pop-up banners in browsers, as well as learn how to block ads in other ways (for example, through the hosts file).
  
• Advertising in applications and on the Internet.
  Regular advertising in installed applications, or while surfing the Internet is not dangerous. But you can get rid of it by installing the necessary program to block ads. Also, ads can be removed if you buy the full version, or by installing a modified / hacked version of the application without ads, most of these versions can be downloaded from our forum. In the application topic header, they may be indicated, for example, as:"Full", "Pro", "Without advertising", "Premium", "Ad-Free" ... Or you can order to modify the application, removing advertising from it in a special topic: Club Mod APK . Keep in mind that not all applications on our forum are allowed to modify. If the profile of the program says that the version and modification are prohibited, then you can’t ask about it on the forum.
  
• Do not believe what is written on the banners.
  Never trust information on pop-up banners, or other manifestation."malicious". Do not send any messages or replenish the account to anyone! All this "divorce for money" and you will not receive any promised code! Do not follow the suggested links!
  
• How to quickly stop data transfer.
  If, however, you clicked on the advertising link and the download began, or the sending of your personal data (usually occurs without a request),put the phone inFlight mode which will avoid sending SMS to premium numbers. In the case when all the same SMS sent and withdrawn funds from the account, read the recommendations from the topic: Attention! SMS fraud on Android .
  
• Download applications from trusted sources.
  If you downloaded the application / game and advertising banners appeared, or other manifestations"malware",not always to blame the developer. Often,"malicious"can be added to a popular application by an attacker and uploaded to the website from which you downloaded the installation file.You can not download applications and games from unverified sources! The best applications, as well as their light versions without ads, banners, sending your personal data and other things, can be downloaded from our forum.
  
• Find the source of the "infection".
  The appearance of advertising banners is not always solved by simply removing any one application. When fightingcomplex "malware"the most basic thing to do is find the source"contagion".Emerging banners, advertising in the curtain, self-installing applications do not arise from nowhere. It is necessary to find the services and files that activate the appearance"contagion".Carefully read the instructions below, they have all the necessary information on how to find the root cause and get rid of it.

First steps

• We remember how it all began.
  First of all, you need to find out which applications, or files on your device aremaliciousand get rid of them. If the "trouble" began after installing some application, or a game and you remember what was installed last - feel free to delete it.
  
• We scan the device with antivirus.
  Install antivirusDr.Web.Perform a full device scan for viruses. Remember that if you do not have Root-rights, the antivirus will not be able to remove malicious files that are registered as system files (they are in the system files). Only Root devices can access the system.
  
• If necessary, we get Root-access.
  Most of the tips from this topic imply Root rights on the smartphone. How to get them is written in the theme of your Android - Devices, or you can tryuniversal methods for obtaining Root rights.
  
• We are looking for a source"contagion".
  If suspicious files are found on the device; Self-installing applications (which reappear after your removal) need to find a malicious source somewhere in your device (most often in the system folders) and manage the installation and download of all these files.
  
• Source Search Application"contagion"and control access to the internet.
  Keep track of applications that access the Internet before the appearance of advertising, or downloading questionable files will help firewall:NoRoot Firewall.A source"contagion",It often loads ads on your device via the Internet. The firewall also blocks access to the Internet to all applications that are trying to get it and shows you those applications that made such a request to the Internet access. Gradually allow access to applications and see in the "event log" of the firewall which applications went online when advertising appeared on your device or some files were downloaded.
  
• Remove ads from the notification bar.
  If an advertisement appears in the notification panel, install the application:AirPush DetectorSometimes it helps to find which of the applications send ads to the notification panel. You can try to find out from which application the notification comes by holding your finger on the notification itself in the panel and then clicking on the exclamation mark that appears to the right.
  
• The best way is flashing.
  If you don’t want to receive Root on a device, or it is not yet possible for this device - flash the device. Changing the stock (default) firmware to custom (unofficial, modified) is the easiest and most effective way to combat"malware"which were installed in the firmware initially. Also to those for whom independent source search"contagion"complicated and who fears do more harmflashing is recommended.In the firmware thread on your device, find out all the instructions on how to flash the device and how to choose the firmware.
  
• We continue to study the instructions.
  Carefully read the topic header, a lot of useful instructions are available in the spoilers below. There is also a list of applications that users find dangerous.
  
• Other applications.
  In all the recommendations from this topic it is proposed to use the most famous and well-proven applications, but if for some reason they are not satisfied, you can ask their counterparts in the subject.Help in finding programs for Android OS.

Instructions

The authors of the instructions are not responsible.in case of your wrong actions. Before any removal operations; replace; editing system applications is highly recommended Make a backup of the firmware through the recovery.

• Step-by-step instructions for finding what activates"contagion"using applications"Dr.Web"and"NoRoot Firewall"
  
• The fight against the illegally downloadable Mobogenie application
  
• How to deal with ads in the App Market installation notification bar, clearmaster and browser baidu
  
• A way to calculate an application that sends an advertisement
  
• Advertise when you start any music playerUser confirmation thatthe advertising image was embedded in the body of the music files
  
• How can I find"contagion"via application log files
  
• About applications with strange names and names like links
  
• Advertising appears in a separate line of the curtain
  
• Uninstall GloablBCServiceInfo
  
• Remove the engrils virus
  
• Destruction"contagion"Android.Loki.10.origin
  
• Gooweel M9 mini - virus in Cooee Launcher
  
• Android.Triada.7 Removal Council
  
• Self-installing applications
  
• Trojan removal report com.Crimsonbend.dmclient
  
• Remove ad banners / dark screen
  
• Viruses that are disguised as applications, how to remove them
  
• Removing a virus with ads from the application "Search 14.0"
  
• Compilation of virus file namesand another onecompilation.
  
• Search and delete files, without loading the device, through TWRP and other custom recovery
  
• Full removal of advertising banners on Philips Xenium V377
  
• Dr.Web official statement for Philips owners
  
• Remove android.hiddenAds.85.origin virus from Samsung Galaxy Tab 5 firmware
  
• How to get rid of the com.android.snap virus (Application Error)also, a similar problem andsolution on the phone Doogee t5 lite
  
• Fighting a banner that pops up in a curtain when the battery is discharged and that is closed only with the DISMISS button
  
• Fighting com.chunmei.calculator (aka SETTINGS) on Leagoo M5 +oropinion on the fight against "malware"and furtheropinion and a few links with a possible solutionothermethods you can use
  
• Getting rid of "adware malware" in the stock firmware Leagoo Z5c
  
• Block malware (including the CHROMES virus) on Unans A101
  
• We delete the built-in advertising on the firmware MIUI 8, Android 7.x
  
• Advertising banner is sewn into the file: com.android.systemsDo not confuse with com.adroid.system
  
• Remove ad banners, malicious: ApplicationHidingPreferences.xml
  
• We struggle with "coo123" by deleting Applica.tionProvider. Do not confuse it with ApplicationsProviderContinuing the themeuninstall com.android.setting.confirm
  
• Getting rid of com.example.testlock-1.apk via CWM and "AROMA Filemanager"
  
• Getting rid of Android.Triada.326 and Android.SkyMobi.7.origin on HOMTOM HT16 PRO
  
• Get rid of advertising spam from the "Menu SIM cards"
  
• Removal of system applications and malware through a computer with the program "Debloater"

The device is completely blocked by the banner

• If your device has the ability to enter safe mode, then use this. In safe mode, only system services are loaded, so you can detect andremove"harmful"attachment,orclear foldersorremove"malicious"through system settings
  
• Removing a banner through Total Commander with ADB plugin
  
• The way to remove the blocking banner from the screen of the Android smartphone with the preservation of all personal data
  
• Solution for the Wexler TAB 7T device through the PC software WexlerTool
  
• The decision against SMS-banner using a phone call on the device Galaxy
  
• A way to combat the virus with Avast Antivirus,andVideo instruction

Recovering after removing "malware"

• Instructions from alone-none
  
• Instructions from Vladimir Veter
  
• Instructions from aleh2006
  
• Instructions from SewerJan
  
• Instructions from N_A
  
• Instructions from Udavvfandlast option
  
• Instructions from Syavick
  
• Instructions from Doriella

Useful applications

Questions about how to use the applications are set in their profile topics at the indicated links. Search for other applications is conducted in the subject:Help in finding programs for Android OS

• Dr.Web- One of the best antiviruses.
  
• AirPush Detector- Search and delete ads from the notification panel.
  
• NoRoot Firewall- Firewall to prevent applications from accessing the Internet.
  
• В® AdAway- Block ads and scan your device for malicious code.
  
• ES File Explorer File Manager- File manager with Root access.
  
• Root uninstaller- Application for removing and "freezing" installed programs.
  
• В® SD Maid - System Cleaning- Removal of system applications and cleaning"tails"after their removal.
  
• В® Link2SD- Freeze system applications to see how the phone will work without them.
  
• AROMA Filemanager- File manager that you can run without downloading Android.
  
• В® LuckyPatcher by ChelpuS- A list of all installed applications and the removal of advertising from them.
  
• LBE Security MasterВ®- Control over the activity of applications in the system.
  
• Android Terminal Emulator- Terminal emulator for Android devices.

Dangerous applications

Information about the applications below cannot be 100% correct. It is possible that the developer has already deleted the virus code, or the application with the virus is distributed only on some sites. The list was not created to discredit the developer’s “honest name”, but as a warning to users, be careful with these applications.

• AdBlock Plus. Do not confuse with AdBlock Plus (original)
  
• Adclient
  
• block puzzle 2 (Block puzzle 2)
  
• Broservice
  
• Calculator Widget
  
• Crochet
  
• Wizard jewel
  
• Video player
  
• Talking cat
  
• VPN Browser & Wifi Signal Amplifier
  
• Talking Parrot Pierre (Talking Pierre)
  
• Talking battery
  
• Go sms pro
  
• Fool Pro
  
• Cheeky badger
  
• DJ Mixer Studio
  
• Call Recording (com.callauto.recorderautomatic.callrecorder)
  
• zaycev.net
  
• Zuma's Revenge
  
• Russian history. From prometej
  
• i.love.coca.cola. Or "HD Porno Player"
  
• Iq test in Russian
  
• Linervice
  
• Masha and the Bear: A Game for Kids
  
• Mahjong
  
• My paints (Another name is "Drawing Free")
  
• Mobogenie
  
• MX Video Player (Do not confuse with MX Player)
  
• Megogo
  
• Christmas Tree Live Wallpaper v2.0
  
• Fly iq458 system application
  
• Off Road Simulator UAZ 3153
  
• Putin says 2
  
• Princess jasmine from alladin
  
• Fifteen. The game, the developer is listed VladOs
  
• Premium Wallpapers HD
  
• PeaceKeeper
  
• Peel Smart Remote
  
• Pronclub
  
• petsfamily
  
• PornoPlayer
  
• Drawing Free (another name "My Colors")
  
• Russia crazy drift
  
• Smart 2048
  
• Space xonix
  
• Sex tube
  
• Shell
  
• CTimer
  
• coo123.net
  
• Texas poker
  
• Protractor 1.0.3 Software for measuring angles
  
• TouchPal
  
• Talking pierre (another name is Pierre Talking Parrot)
  
• Installation
  
• Fota
  
• HD Porno Player. (another name is "i.love.coca.cola")
  
• Hard Jumper 3D
  
• Chat VKontakte. From manchesteriofe
  
• xxx online player

Many thanks to all who filled and filled the topic with useful instructions. Special thanks to the distinguishedW.Masterfor the activity and constant assistance to users.

K

Theme needsCurator . Those who wish, please read Requirements for candidates to the curators of the forum . If the desire is not lost, the application can be left in the topic - I want to be curator .

Post has been editedKEEPERekb - 25.03.19, 19:30

Reason for editing: edit

[archangel-87]

kapitonov_95,Installed Kaspersky, nothing helped, just the browser opens. What version of Kaspersky set?

[Gridzilla]

Kapitonov_95 @ 08.25.2014, 06:02

So how not to install anything?

Just if it manifested itself only through WiFi, then it would be possible to sin on the router. HereRedirect from browsers to third-party sites.a similar problem was discussed.

[archangel-87]

Gridzilla
Not just a redirect! Now, if I opened the browser myself and he redirected me to other sites, then yes, but here the browser starts up automatically when the screen is unlocked.

[Vadensis]

Kapitonov_95 @ 08.25.2014, 09:02

Try to install antivirus software on a tablet from Kaspersky and check the system, I did just that, I did not find any viruses, but I also do not watch the opening browser.

Put Kasperycha, checked the system, rebooted. The problem did not dare. Links are opened in the browser, each time after unlocking the screen.
Who else has any thoughts? How to catch the linker?))

[kapitonov_95]

Maybe you downloaded some application from neta, installed it and installed a virus that opens this browser, I downloaded the attachments myself, installed them after that right away and the browser started to open, I then installed the antivirus program and deleted some applications that I did not need and everything went because of the application of what it became, I myself am sitting and cannot understand what the problem of opening the browser is, I have no more ideas)

[joytyfer]

Help guys, this is with me for the first time. My friends used to watch porn on the Internet after that, my tablet with each inclusion sees only one picture. I wanted to make a format but nothing happens, I do not know what to do!

Please let me know how it is treated.
I apologize for the photo jerk.

Post has been editedjoytyfer - 26.08.14, 00:17

[W.Master]

joytyfer,


In the topic about your model of the device did not ask about how to boot into safe mode?

[joytyfer]

W.Master,Oysters, Android 4.0.4, Tegra 3. No, I did not ask. Is it possible?

[W.Master]

joytyfer @ 08.26.2014, 10:36

Is it possible?

On some devices there is such an opportunity, and in this safe mode you can remove "parasitic" programs.

[joytyfer]

W.Master,And how, maybe worth a try?

[W.Master]

joytyfer,


on different devices, this input can be different.


If you have one, then the likelihood that this will help is very great.

[pcsec]

Hello to all!
Today they brought a smart with a lock with a charger. But the campaign is somehow modified already - it already requires 310 UAH. instead of 260 UAH and the picture is slightly different design. So in nete dug that is treated by the utility from Avast - avast! Ransomware Removal. It didn’t work out for me - it scans, finds, offers to delete, and then writes that the Video Player (the virus came with it) is installed to administer the device and does not delete, but only turns the offer to delete in a cycle.
As a result, I saw here that the good old DrWeb "managed to remove this infection. I downloaded version 9 of the demo and deleted it immediately without any problems. I hope someone will help this info.

[Andrey Komarichev]

There was a problem with advertising in the browser after unlocking and when watching a video (full screen), everything was decided by removing the iq test in Russian. He did not show any signs of life for 2 days, whatever they thought of him, but now he was raging.https: //play.google.co…s? id = com.iwolt.iqtest.And read reviews please. I hope to help. And I want a hat! What would everyone see, I helped someone)

[MaleJohn]

I was helped by the demolition of the game "Fool Pro". And it was installed for six months, but I did not use it. And 3 days ago he opened, and immediately appeared advertising.

[Alexakot]

I also had an advertisement and opened the site novosti-blog.ru - the removal of the games "Fool Pro" and "Space xonix" helped. Were installed a long time ago, and it seems that after the update such a garbage appeared similar to the actions of the virus.
Installing DrWeb and LBE Security Master did not help the problem, everything turned out to be easier.

Posted on 08/27/2014 08:28:

MaleJohn,your message would be yes yesterday :-)

Post has been editedAlexakot - 27.08.14, 08:27

[Vadensis]

[email protected], 18:59

Put Kasperycha, checked the system, rebooted. The problem did not dare. Links are opened in the browser, each time after unlocking the screen.
Who else has any thoughts? How to catch the linker?))

Tax, it turned out his wife installed the application, a talking cat. I do not remember exactly what is called, the point is that you say words to him, but he repeats in a funny voice ... deleted and the problem is gone. Be careful with the applications. Antiviruses do not recognize such evil unfortunately.

[smart1985]

Thanks to the forum, the same tops were with unlocking, the fool of pro was also to blame, I, as luck would have it, played about 2 days ago, and the next day began to crawl out. I also remember the Fool, as he started up and flew out after 2 minutes somewhere. So I advise everyone to watch the latest updated applications. And he stood with me for almost a year, antiviruses did not help me either, Casper, Avast, and others, and the latter was very long.

[derkach83]

Father-in-law rang up the Video Player banner to his Explay Vision asks for 1,200 rubles, which is expensive now, the price is half the phone, well, 100 would not go anywhere else.
1. I entered the safe mode, pressed the power button, a logo appeared and right there we hold down the volume buttons and the camera button, something like this!
2. RootExplorer was installed, the benefit of the other progs disappeared, I searched for titanium, went to the system / app folder and deleted 2 files with the name Video Player, but it does not help.
3. I started searching and went to the data / app folder and deleted everything I didn’t like, but it didn’t help either.
4. By breaking the Internet, I found out that there are programs in the / mnt / asec / folder, then I also deleted everything that did not have a clear name from it.
I rebooted and everything is in work, maybe someone will come in handy, my father-in-law just doesn’t remember his passwords, and I’d format him or re-ask him, maybe good luck to anyone

Post has been editedderkach83 - 01.09.14, 19:29

[mnv2013]

Yesterday, the following issue appeared:
When the phone was unlocked, the browser also started up via "ad1.mads.bz/v2/b/, etc." redirected to advertising sites.
Disconnected one browser - began to go through another.
Today I connected my body to my computer and started searching for files and folders with the names through a search engine:
1. ad1
2. mads
3. bz
There was little hope, so I didn’t remember, but on some of these files, the search engine found a document — I deleted it and it seems that the problem has disappeared.

Post has been editedmnv2013 - 02.09.14, 09:24

[Yuri_K]

I confirm about "Fool Pro".