Malware/Virus in system files of my Android HELP!

[Naiexcerth]

I have a Samsung Galaxy S3 and recently it began to install random games and apps that I never approved of. After downloading and running Malwarebytes it detected 2 issues with my phone but when I tried to uninstall them it told me that the uninstall was unsuccessful. After running another anti-virus program it told me that the infected files/programs were Email Service and Key Chains which both appear to be system files that I can not uninstall. I currently have the programs disabled and that seems to have stopped the random installations for now.

I'm wondering if there is a way to get rid of the issues without doing a factory reset (if that would even work) or without buying a new phone entirely (Since I can't afford a new one.).

If anyone has any solutions or suggestions for me it would be greatly appreciated!   

[Baldape]

I had a similar issue on S5 when I first bought it, it downloaded some games and a cleaning app I just uninstalled them and I haven't seen any apps appearing since.

[Naiexcerth]

On 26/11/2016 at 10:38 PM, Baldape said:

I had a similar issue on S5 when I first bought it, it downloaded some games and a cleaning app I just uninstalled them and I haven't seen any apps appearing since.

I uninstalled what I thought was the problem but whenever I scan my phone it tells me that the problems are still there and that they can't be uninstalled since they're system files. It also appears to be spreading through my phone because more and more system apps show up as being infected with a trojan or malware. I have the infected apps disabled and it stopped the issue of things installing randomly but it's not stopping any of the other problems I seem to be having with it.

[a_Mbam]

Hi Naiexcerth,

Unfortunately with these system files you won't be able to uninstall without system privileges which would require rooting your device. Resetti--ng your device or installing a trusted ROM might be worthwhile if your current software images is preinfected.

Regards,

-Armando