Jump to content
mastiz

Shortcuts get created

Recommended Posts

I have a Micromax Canvas 4 and just yesterday I installed a app called Super-Bright LED Flashlight which was from unknown source and by mistake I continued installing it!

Now I see two shortcuts which don't go! It cannot be removed! 

 

Recommend and Lucky Try

 

Also I started getting a half page pop-up when I install some new app. which also show some recommend and so many percent recommend

 

Any solution! 

 

Thanks in advance

post-184548-0-23511100-1425528379_thumb.

Share this post


Link to post
Share on other sites

     I have exact same situation couldnt find any solution yet. I find the file that cause problem though i cant delete it. The file location in my phone is  /mnt/sdcard/.systemcache and its a hidden file.whenever i try to move, delete or rename the file it just creates the original version of it again. If you can find a solution please let me know.

Share this post


Link to post
Share on other sites

Hi Mastiz and erlik

 

Do you recall by chance where the installs came from, what site or link? The version on the Play Store does not exhibit these behaviors. 

 

Are you able to manually remove these shortcuts, apps?

 

Thanks,

 

-Armando

Share this post


Link to post
Share on other sites

Hi Mastiz and erlik

 

Do you recall by chance where the installs came from, what site or link? The version on the Play Store does not exhibit these behaviors. 

 

Are you able to manually remove these shortcuts, apps?

 

Thanks,

 

-Armando

i couldnt find where i download it but it wasnt from googleplay. I can remove shortcuts but they recreated in 2 minutes. In file directory which i write in previous post there is 3 files : openapp.lock , com_avazu_ad_sd.db , com_avazu_ad_sd.db-jounal. When i delete one of them they also recreated.

Share this post


Link to post
Share on other sites

Hi Erlik,

 

Nice detective work, Avazu looks to be a pay-per-install service with apps tied to it, I was able to track down some copies of your flashlight app that showed the same behaviors you're seeing. 
 
I put in detection of the Avazu library in MBAM Mobile, update your sig to the latest, v2015.03.10.01, and scan your device.
 
Android/PUP.Ads.Avazu.a
 
Thanks,
 
-Armando

Share this post


Link to post
Share on other sites

Good evening :)

 

I had the same problems with the shortcuts like mastiz and erlik.

After I saw the thread, I downloaded the malwarebyte mobile scanner and did a scan. And I actually found the "Android/PUP.Ads.Avazu.a" entry as the apparent culprit. But the thing is: I cannot delete it. Because my phone wants me to uninstall the setting file, which I just cannot do (I mean literally, my phone will stop the uninstalling process).

 

Do you have any advice on how to actually remove it, now that I found it?

Share this post


Link to post
Share on other sites

Hi Hundefrau,

 

It sounds like something on your device has an open handle on that file that won't allow an uninstall. I would suggest uninstalling in Safe Mode.

 

Because of various Android updates and different device/carrier variants I can provide two methods they could try. If they don’t, they'll have to look up how to do it on their particular device.
 
Jellybean, Android 4.1 and up
  Power Button
  Long press Power Off on screen
  Press ‘OK’ to reboot to Safe Mode
 
Prior to Jellybean or above steps do not work.
  Power button
  Press ‘Power Off’ or ‘Restart’
  Restart if powered off
  Hold ‘Volume down’ button while booting up.
  
Once in Safe Mode
  Uninstall app or use MBAM Mobile to remove after scan
  Restart device
 
Regards,
 
-Armando

Share this post


Link to post
Share on other sites

i have the same problem. .i have uninstall flashlight bt not malware. . what should i do ???

i have ur mobile app

Share this post


Link to post
Share on other sites

Hi Vimlesh8,

 

Are you seeing the same shortcuts as other users in this thread or are you seeing different behaviors, you might have a different app installing adware?

 

Any additional information you can provide would be great.

 

-Armando

Share this post


Link to post
Share on other sites

I'm having the same problem. I did a factory reset and the 2 shortcuts keeps coming back. how do i use your app on safe mode when i cant use any third party app during safe mode?  or, do you have the step by step procedure on how to remove the problem in safe mode?

Share this post


Link to post
Share on other sites

Hi RJsMama,

 

It's odd that the shortcuts remain after a factory reset, did you install the same flashlight app as these other users? Did you restore apps from a back-up, is possible the malicious app was reinstalled from the backup?

 

If you didn't install the flashlight app, you'll need to identify the app creating these shortcuts by going through the latest apps you've installed and remove. These shortcuts are created by a third party ad library bundled in a seemingly legitimate app.

 

Where did you install the bad app, I'd like to see if I can reproduce?

 

-Armando

Share this post


Link to post
Share on other sites

Thank you Armando for your attention in this matter.

 

 

The only thing that I downloaded from the play store after the reset was Whatsapp. btw, i've reset my phone 3 times since the problem started. i doubt the problem is attached to whatsapp (but I could be wrong). I think it was the Super Bright LED flashlight app that was installed that created this problem. 

 

MBAM identified 2 problems as: Android/Trojan.Rootnik.a  & Android/PUP.Avazu.a  

 

thanks.

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.