Android Malware - unable to remove

[GLSmyth]

I have got a Samsung Galaxy S3 with Android version 4.4.2.  Recently, on an occasional basis, when opening an app (it might be going to Facebook, it might be opening Score, it is not consistent) I am first taken to the Google Play Store and Uber has been selected for me to download.  It does not happen every time, but several times a day.  I have AVG and Clean Master on the phone and neither are finding any problems.  I have even tried downloading the Uber app and this still happens.

I am not knowledgeable about such things and have no idea where to turn.  Any suggestions would be greatly appreciated.

Thanks -

george

[GLSmyth]

It just happened a little while ago and I told it to open with Firefox, which left the URL (I had not been able to capture it in Chrome).  In case it is any help, this is the URL:

 

https://90832.measurementapi.com/serve?action=click&publisher_id=90832&site_id=26744&destination_id=23524&agency_id=608&ref_id=102a8b673b2f04595f90c2bc1a600c&sub_placement=Piano&sub_campaign=Display-Tapit-Fetch_1_-99_US-national_R_And_ACQ_CPI_en_Ongoing&sub_adgroup=A081_A182_D544595&sub_ad=PM_16237-RD-en-US-op6_NotReadyYet_320x50&device_ip={device_ip}&user_agent=Mozilla%2F5.0+%28Linux%3B+Android+4.4.2%3B+SPH-L710+Build%2FKOT49H%29+AppleWebKit%2F537.36+%28KHTML%2C+Like+Gecko%29+Version%2F4.0+Chrome%2F30.0.0.0+Mobile+Safari%2F537.36&tracking_id=102a8b673b2f04595f90c2bc1a600c&sub_publisher=1035&sub_campaign_ref=4384&sub_campaign_name=US+%28National%29+-+Uber+US+-+Android+CPI&android_id=&mac_address=&ios_ifa=&google_aid=&windows_aid=&cost=3.50&cost_model=cpa

 

george

[GLSmyth]

Going to measurementapi.com directs one to the Google Play Store.

george

[GLSmyth]

Nothing?

george

[GLSmyth]

Okay, I guess never mind.

[a_Mbam]

Hi GLSmyth,

Unfortunately this is caused by how the browsers are handling javascript and the redirections. Chrome and other browsers don't do a great job of preventing these redirects or pop-ups. This behavior is similar to ad pop-ups and redirections on your PC. Advertising affiliates have found this loop hole and have been exploiting it. If they get shutdown it’s only a temporary fix, cause they’ll be back with a new affiliate id.
 
The only way to block is to try a different browser, disable javascript or install Ad-block Plus. Ad-block Plus works only with Wifi and needs additional configuration, but works.
 
https://adblockplus.org/en/android-install
 
If you encounter these pop-ups again, back out of the using Android's back key.
 
Regards,
 
-Armando

[GLSmyth]

Thanks for the note.  I have been using Chrome and will see if Firefox is able to deal with this.  I'll also try Ad-block Plus to see if that helps.

 

Cheers -

 

george