mbam_mtbr

Hi @dempy, These types of ads are usually browser related. This is caused by the way browsers handle redirections executed by JavaScript code. Most browsers do not do a great job of preventing these redirects, which can also cause ad pop-ups. Unethical advertising affiliates are aware of this and exploit this weakness. Even if an advertising affiliate is shut down for using this exploit, they just come back with a different affiliate id and are right back at it. Sounds like you already have it resolved. We usually suggest clearing your history and cache within the browser to stop the ads from reoccurring. In addition, clearing the Storage & Cache within the browser’s App Info itself also helps: Go to Settings > App Info Go to your browser app icon in App info list (such as Chrome) and click on it Once in your browser’s App info, go to Storage & cache Click Clear Storage Click Clear cache If you're still worried about Adware being on the mobile device, you can always send an Apps Report. To send an Apps Report with Malwarebytes for Android use the following instructions. Open the Malwarebytes for Android app. Tap the Menu icon. Tap Your apps. Tap three lines icon in upper right corner. Tap Send to support Choose an email app to send Apps Report. Your email app will open with the Apps Report included. At this point, it would be very helpful to mention you are submitting via recommendation from the Malwarebytes forum. This allows our support staff to know where to direct it. By sending the Apps Report, you will create a ticket in our support system. Private Message (PM) me the email used and/or the ticket number assigned. Nathan

Hi @marasov, I would mark the message as spam: Block, filter, and report messages on iPhone Nathan

Hi @marasov, As long as you didn't click a link, you're in the clear. Nathan

Hi @gentisle, Okay, it sounds like you have Malwarebytes set as the default installer. Weird that this was even an option. This is frustrating, but there doesn't appear to be a good way to change the default installer. Try uninstalling Malwarebytes, install from F-Droid again to set another default installer, then re-install Malwarebytes. Nathan

Hi @gentisle, Unless the version of f-droid you're installing or the app you're installing from f-droid is malicious, we aren't stopping you. 😁 You probably need to allow installing from unknown sources on your mobile device to install f-droid from your browser, then allow f-droid to install apps. WARNING: Do so at your own risk/responsibility!!! We do not recommend installing from unknown sources. However, I get that the glory of Android is the freedom to do whatever you like even if it comes with risk. Just don't say we didn't warn you. 😉 FYI, just checked the latest version of f-droid and it's clean. Nathan

HI @Nicolas2, Our Web Protection team concurs, sites appear to be clean. Nathan

Hi @Nicolas2, I'll have our Web Protection team take a look, but at first glance they look clean. You would have had to explicitly accepted and installed an app for there to be malware installed. Nathan

Hi @Tekz, This is most likely being created and used by an app installed on your mobile device. It's not necessarily malicious. If you want to send an Apps Report, we can try to figure out which app may be creating the folder. To send an Apps Report with Malwarebytes for Android use the following instructions. Open the Malwarebytes for Android app. Tap the Menu icon. Tap Your apps. Tap three lines icon in upper right corner. Tap Send to support Choose an email app to send Apps Report. Your email app will open with the Apps Report included. At this point, it would be very helpful to mention you are submitting via recommendation from the Malwarebytes forum. This allows our support staff to know where to direct it. By sending the Apps Report, you will create a ticket in our support system. Private Message (PM) me the email used and/or the ticket number assigned. Nathan

Hi @kjpportland, From what we can tell, the app (either Customizations or TopicNews) that cause the issue will eventually just change the homepage back to g21news.com if it is not disabled. I created an updated post not to long ago explaining how to do this: Nathan

Hi @soijds231, I'd probably ask that over in the Windows side of the forums. One way or another, the link will be blocked on both mobile and PC. Nathan

Hi @soijds231, I tested the link in an Android Emulator. No payload dropped. On Android, you would see something downloaded to your Downloads folder, and also have to confirm the install. Looks like a money scam from the webpage info: FORTY "Done For You" Campaigns Made Us Over $92,412.82 Just Copy & Past...Each Campaign Generates Passive Income Daily... Now It's Your Turn to Make Big Money! Step 1. Login To Clone-ME...Members Area & Enter your PayPal Account. Step 2. Deploy...Send Traffic (We'll Teach You a Simple FREE Method Inside) Step 3. Monetize...Click "Refresh" to see the Amount of Commissions You've Earned Each Day! Needless to say, but don't sign up for this "money maker". 🙄 I'll send this over to your web team to block. Thanks for letting us know, Nathan

Hi @TimWins, If you send an Apps Report, I can look into OMCAP for you. To send an Apps Report with Malwarebytes for Android use the following instructions. Open the Malwarebytes for Android app. Tap the Menu icon. Tap Your apps. Tap three lines icon in upper right corner. Tap Send to support Choose an email app to send Apps Report. Your email app will open with the Apps Report included. At this point, it would be very helpful to mention you are submitting via recommendation from the Malwarebytes forum. This allows our support staff to know where to direct it. By sending the Apps Report, you will create a ticket in our support system. Private Message (PM) me the email used and/or the ticket number assigned. Nathan

Hi @Praz, I would try uninstalling/reinstalling. Are the scan times slow as well? Nathan

Hi @cwc, If you could send an Apps Report, we can check it out. To send an Apps Report with Malwarebytes for Android use the following instructions. Open the Malwarebytes for Android app. Tap the Menu icon. Tap Your apps. Tap three lines icon in upper right corner. Tap Send to support Choose an email app to send Apps Report. Your email app will open with the Apps Report included. At this point, it would be very helpful to mention you are submitting via recommendation from the Malwarebytes forum. This allows our support staff to know where to direct it. By sending the Apps Report, you will create a ticket in our support system. Private Message (PM) me the email used and/or the ticket number assigned. Nathan

Hi @turg, Let's start with changing the homepage. Here's how to change the homepage on Chrome: Settings > Homepage Change the Open this page to Chrome's homepage Next, clearing your history and cache within the browser will help stop the ads from reoccurring. In addition, clearing the Storage & Cache within the browser’s App Info itself also helps: Go to Settings > App Info Go to your browser app icon in App info list (such as Chrome) and click on it Once in your browser’s App info, go to Storage & cache Click Clear Storage Click Clear cache Nathan

Hi @turg, Is web.bwanwt.ca a website? A package name? Do you have screenshots to describe what you are experiencing? Thanks, Nathan

Hi @BigArachnotron, If you send an Apps Report we can check for any malicious apps. To send an Apps Report with Malwarebytes for Android use the following instructions. Open the Malwarebytes for Android app. Tap the Menu icon. Tap Your apps. Tap three lines icon in upper right corner. Tap Send to support Choose an email app to send Apps Report. Your email app will open with the Apps Report included. At this point, it would be very helpful to mention you are submitting via recommendation from the Malwarebytes forum. This allows our support staff to know where to direct it. By sending the Apps Report, you will create a ticket in our support system. Private Message (PM) me the email used and/or the ticket number assigned. Nathan

Hi @garfieldthecatto, Yes, we do scan files. For example, APKs sitting in your Downloads. As far as scan times, you can try disabling battery optimization for Malwarebytes in Settings to see if that helps. https://support.getfindster.com/hc/en-us/articles/360000666497-Disabling-battery-optimization-on-Android-smartphones After disabling, we suggest restarting your device. Nathan

Hi @DesperateHELP, If you could send an Apps Report, we can see what exactly is going on here. To send an Apps Report with Malwarebytes for Android use the following instructions. Open the Malwarebytes for Android app. Tap the Menu icon. Tap Your apps. Tap three lines icon in upper right corner. Tap Send to support Choose an email app to send Apps Report. Your email app will open with the Apps Report included. At this point, it would be very helpful to mention you are submitting via recommendation from the Malwarebytes forum. This allows our support staff to know where to direct it. By sending the Apps Report, you will create a ticket in our support system. Private Message (PM) me the email used and/or the ticket number assigned. Nathan

Okay, great. I'll have a look this morning. Your Android OS is 11, which about right for the device. Nathan

Hi @Blondii_-, Do you have Malwarebytes for Android installed on your phone? Would you be able send me an Apps Report? To send an Apps Report with Malwarebytes for Android use the following instructions. Open the Malwarebytes for Android app. Tap the Menu icon. Tap Your apps. Tap three lines icon in upper right corner. Tap Send to support Choose an email app to send Apps Report. Your email app will open with the Apps Report included. At this point, it would be very helpful to mention you are submitting via recommendation from the Malwarebytes forum. This allows our support staff to know where to direct it. By sending the Apps Report, you will create a ticket in our support system. Private Message (PM) me the email used and/or the ticket number assigned. As far as running your mobile device as a hotspot, this method really works best as a backup to get internet if home internet fails. It's not very reliable as a primary way to connect to the internet. In addition, ISP providers often throttle the speed of your internet if you are using it a lot. Especially with unlimited data plans. What ISP do you have? Nathan

Hi @Jmrowell87, The only thing I can think of is checking the system's language. Should be under Settings > System > Languages & input. There may be Language settings in individual news apps as well. Nathan

Hi @H_S, Okay, great. Could you Private Message (PM) me the email used and/or the ticket number assigned? Nathan

Hi @H_S, What is the make/model of your phone? Nathan

Hi @Jay1702, If you send an Apps Report, we can see if there is anything else going on here. To send an Apps Report with Malwarebytes for Android use the following instructions. Open the Malwarebytes for Android app. Tap the Menu icon. Tap Your apps. Tap three lines icon in upper right corner. Tap Send to support Choose an email app to send Apps Report. Your email app will open with the Apps Report included. At this point, it would be very helpful to mention you are submitting via recommendation from the Malwarebytes forum. This allows our support staff to know where to direct it. By sending the Apps Report, you will create a ticket in our support system. Private Message (PM) me the email used and/or the ticket number assigned. Nathan