[Safe browser scanner]

3 hours ago, mistertonmick said:

Seems to be working OK now, Nathan. 

Good to hear!

[Ad redirect on "safe" site, is it malvertising?]

Hi @bumblebee,

As long as you didn't enter any personal information, you should be fine.  If you start getting pop-ups, clearing your history and cache will help stop the ads from reoccurring.

Nathan

[Trying to delete some apks]

Hi @pawelr,

Oh okay, I see.  You can tell they are on your phone from the scan, but can't find them.  You might need is a file manager that can access the root directory.  I would try Amaze File Manager.  You can then get to the root directory by going to any path from the menu, and then clicking on the path at the top.  It will then allow you to navigate all the way to root (the phone icon).

 

There is also an "Apks" option in the menu that may display them as well.

 

Hope this works for you,

Nathan

[Trying to delete some apks]

Hi @pawelr,

If Malwarebyted for Android detected them at some point, they would have been removed from the device's storage.  Even if they weren't installed.  If you still think they are on your device, they would most likely be in your Downloads folder.

Nathan

[Safe browser scanner]

Hi @mistertonmick & @MAXBAR1,

Sorry for the delay.  You may want to try this: https://support.malwarebytes.com/docs/DOC-2696?origin_team=T9182B16E

Let me know if it fixes your issue,

Nathan

[conflict with banking remote deposit application]

Hi @mikewillnot,

Would you be able to provide the Google PLAY link to the banking app?

Thanks so much!

Nathan

[UpgradeSys virus (unremovable)]

7 hours ago, pepeelgrillo said:

Thanks Nathan, it worked for me.

👍

[Newbie here, can't access CD card]

Hi @TheCloudPainter,

Glad you figured it out!  Sorry we weren't more help.  With the Adware removed, you should be clean now. 

Nathan

[conflict with banking remote deposit application]

Hi @mikewillnot,

I'll send this over to our moible dev team to have a look.  Sorry for the inconvenience.

Thanks for letting us know,

Nathan

[Website redirected to Apple Music app]

Hi @brendanjj,

These types of ads are browser related. This is caused by the way most browsers handle redirections executed by javascript code.  Most browsers don't do a great job of preventing these redirects, which also cause ad pop-ups.  Advertising affiliates are aware of this, and exploit this weakness.  Even if an advertising affiliate is shut down for using this exploit, they just come back with a different affiliate id and are right back at it.

If you encounter these pop-ups again, back out of them using Android's back key. Also, clearing your history and cache will help stop the ads from reoccurring.

Thanks for reaching out,

Nathan

[Android Avast Anti-Theft false positive]

Hi @PapierKorb,

Agreed!  I'll chat with mobile dev and see if we can update the wording on PUP/Monitor apps when detected.

Nathan

[Android Avast Anti-Theft false positive]

Hi @PapierKorb,

Malwarebytes for Android is taking a more aggressive stance against stalkerware.

Therefore, apps that used to be clean may now be detected as Monitor.  Monitor is a subset of Potentially Unwanted Programs (PUPs), thus it’s NOT considered malware.  

The main purpose of detecting these Monitor apps is to make unsuspecting users aware of their presence.  Especially in cases of domestic abuse where abusers have physical access to victims mobile devices.  This particular version of Avast Anti-Theft fulls under this category.

If you are aware of the presence of these apps, you can simply ignore them using this method:

1. Run a scan.
2. On the results screen, below each checkbox is drop-down arrow. Click on the arrow.
3. From the list of options, select “Ignore Always.” Future scans will no longer detect the app as suspicious.

If you change your mind and like to stop ignoring, you can do so at any time by:

1. Tap Menu icon
2. Tap Scanner
3. Tap Whitelist (upper right corner)
4. Remove from list

We apologize for inconvenience, but due to the extreme outcomes of not letting unsuspecting victims aware of these apps, we will continue to take a hard stance on Monitor apps.

Thank you for understanding,

Nathan

[Old Android]

Hi @nukecad,

If you like, I can at least check the APK to make sure it has our Digital Cert.  Just PM me the website.

Nathan

[I have a trojan agent dropper on my LG! (addboy) or something?]

Hi @trojanagenthelppls,

Sounds like this could be browser related.  This is caused by the way most browsers handle redirections executed by javascript code.  Most browsers don't do a great job of preventing these redirects, which also cause ad pop-ups.  Advertising affiliates are aware of this, and exploit this weakness.  Even if an advertising affiliate is shut down for using this exploit, they just come back with a different affiliate id and are right back at it.

The best way to block these pop-ups are to try a different browsers, disable javascript, install a browser with ad blocking (like Opera), and/or install Ad-block Plus.

If you encounter these pop-ups again, back out of them using Android's back key. Also, clearing your history and cache will help stop the ads from reoccurring.

If this doesn't work, you can send me an Apps Report and I can look into it further.

To send an Apps Report with Malwarebytes for Android use the following instructions.

1.Open the Malwarebytes for Android app.

2.Tap the Menu icon.

3. Tap Your apps.

4. Tap three lines icon in upper right corner.

5. Tap Send to support

Choose an email app to send Apps Report.

Your email app will open with the Apps Report included. Send the Apps Report to create a ticket.

Private Message (PM) me the email used and/or the ticket number assigned.

Thanks for reaching out,

Nathan

[Old Android]

Hi @nukecad,

I heard rumor that there may be an older version on the Samsung store that is no longer supported.  Sorry, that's the best answer I have.

Nathan

 

[Testing an app]

Hi @RayRay26,

Is it technically "safe"? Yes.  If it were me, would I install it. No.   Hope that answers your question.

Nathan

[Huawei Y6 BlueTooth Malware]

Hi @SbbKbb,

Don't feel like you have to rush.  It can wait until later.  If something was installed, it will still be there.

Nathan

[Huawei Y6 BlueTooth Malware]

You couple copy/paste it to me through PM as well.

[Huawei Y6 BlueTooth Malware]

Hi @SbbKbb,

If you can send me an Apps Report, I can see if it installed on your device.

To send an Apps Report with Malwarebytes for Android use the following instructions.

1.Open the Malwarebytes for Android app.

2.Tap the Menu icon.

3. Tap Your apps.

4. Tap three lines icon in upper right corner.

5. Tap Send to support

Choose an email app to send Apps Report.

Your email app will open with the Apps Report included. Send the Apps Report to create a ticket.

Private Message (PM) me the email used and/or the ticket number assigned.

Nathan

[Vpn]

Hi @Att73,

Any VPN should work fine with Malwarebytes for Android.  However, I'd recommend this one: https://mullvad.net/en/guides/installing-mullvad-android-devices/

Nathan

[MB Extension in Kiwi?]

Hi @ingber,

I did some testing, and it works!  So yes, you can use Kiwi with the MB extension!  Guess I'm switching browsers  

Malwarebytes for Android only detects phishing sites, so using the Malwarebytes extension in Kiwi is definitely an added layer of security — even if it is mostly blocking windows malware sites.

Nathan

[Disable splash screen?]

Hi @jharris1993,

Although it's not possible to not show the splash screen (fun fact: "the cyborg from Hell" is named ZERO), I can assure this isn't whats slowing things down.  It takes awhile for things to load sometimes, and the splash screen is just something to look at while this is happening.  This is especially true after a device reboot or force stopping the app.  Sorry for the inconvenience.  We put performance as a top priority, but only so much we can do while still keeping you protected.

Nathan

[Help removing Deskgram.net from android phone]

Hi @Msrtin,

This sounds like it may be browser related ads. This is caused by the way most browsers handle redirections executed by javascript code.  Most browsers don't do a great job of preventing these redirects, which also cause ad pop-ups.  Advertising affiliates are aware of this, and exploit this weakness.  Even if an advertising affiliate is shut down for using this exploit, they just come back with a different affiliate id and are right back at it.

The best way to block these pop-ups are to try a different browsers, disable javascript, install a browser with ad blocking (like Opera), and/or install Ad-block Plus.

If you encounter these pop-ups again, back out of them using Android's back key. Also, clearing your history and cache will help stop the ads from reoccurring.

Thanks for reaching out,

Nathan

[Trojan.Dropper.Agent.BJH is in my settings app]

2 hours ago, TempLost said:

Always glad to help if I can!

It's much appreciated!

[Chrome 'Giveaway' pop-ups Samsung Mobile]

Hi @Justsaying, @Sirlansalittle, @Witch,

Yep, certainly sounds like browser related ads to me as well. This is caused by the way most browsers handle redirections executed by javascript code.  Most browsers don't do a great job of preventing these redirects, which also cause ad pop-ups.  Advertising affiliates are aware of this, and exploit this weakness.  Even if an advertising affiliate is shut down for using this exploit, they just come back with a different affiliate id and are right back at it.

The best way to block these pop-ups are to try a different browsers, disable javascript, install a browser with ad blocking (like Opera), and/or install Ad-block Plus.
If you encounter these pop-ups again, back out of them using Android's back key. Also, clearing your history and cache will help stop the ads from reoccurring.

Nathan