Possible FPs Android/Trojan.Ransom.Agent.my

[Quixotic1ca]

I have 5 apk apps on my old Galaxy S4, that is being detected as suggested above. This phone is old, so I only occasionally use it on WiFi. These apps were clean on 12/7, but began being detected as such on the 11th or 12th. I've not installed any new apps in that time, and Avast reports I only visited 22 websites in the intervening period. 

Have no idea what to think. I've not had any files on the phone become locked in any way. I removed my removable storage, but am afraid to do much else. 

The 5 reported apps are:

Soundhound infinity

SetCPU

MyBackup Pro

Shazam

Camera Zoom FX

 

What's interesting is that the apk files listed in each apps folder are all called pkg.apk. Is that normal? 

If not, do I just remove these as per your app? What is my risk to the files on my storage card and files still on the Android?

Avast doesn't detect any problems on the phone. 

Please advise. And how did this happen? Did not install any apps or do updates. Nor did I get any warning while going to the websites. Only use Google play with one or two apps from Amazon. 

I'm using the MB beta, and have re-run with same 5 detections using the last 3 recent database updates. 

Help... Thank you. 

-quixotic1ca

[Quixotic1ca]

Sorry... Forgot to mention that it's running 4.4.4. Model SGH M919. 

MB app version is 2.1.1.16

 

[Sbob]

I have the same problem on my phone ( S4 mini).

I reinstalled one of the apps and for that one it was solved. Other apps which are reported as infected are default apps which I disabled. Being default I cannot remove them.

 

 

[a_Mbam]

Hi Quixotic1ca,

Thank for reporting this to us. The information you provided doesn't tell us much about the detections. Could you provide a screen cap of the scan results or post what MBAMM detects these files as? This will help us determine if they are an FP or not.

Regards,

-Armando

[minimouse]

I have the same malware in my phone (s4 mini) and the infected apps are flipboard and google play movies, but both of them are disabled and i can't uninstall them eihter.

 

[mbam_mtbr]

Hello all,

 

The issue has been resolved and will be addressed in next database version.

 

Regards,

Nathan

[minimouse]

17 minutes ago, mbam_mtbr said:

Hello all,

 

The issue has been resolved and will be addressed in next database version.

 

Regards,

Nathan

Does this mean that this is a false alert or what?