I'm hoping to get some assistance.
A family member recently come back from a trip aboard and now her phone is infected.
She told me a couple of different people at least used her phone to try to set up WIFI at the hotel they were staying at so one of them most have done something.
I installed Malwarebytes and it detected a few things see below...
1. App installation: Settings
Malwarebytes detects and removes this but it re-installs itself.
2. App installation: RV Parky
This app wasn't installed on the phone before, Malwarebytes doesn't recognize it as a threat but when i uninstall the app it re-installs itself.
3. File monitor
Scanned: 1 file - /mnt/sdcard//jm/Cool4100_1000_1003_2_1513241684921.xde.apk
This was picked up by Malwarebytes and removed, doesn't look to be back.
4. The phone will randomly launch the default web browser and chrome trying to load this website - https;//15.instantgame.net
I have cleared data and cache in chrome and disabled it, Default browser after the data and cache clear is still having the same issue of randomly launching and trying to open that web link also manually opening the browser usually gives a 'Permission denied' then closes the web browser.
I have sent the app report already so let me know who to PM the used email address to.
any advice on this would be appreciated!