Jump to content

Recommended Posts

I disabled it in settings, but I don't know what else I can do to clean this up. 

 

If I attempt to 'remove it it says 'cannot remove a system file and tells me to whitelist it. 

 

Thanks,

Harrison

Screenshot_20180402-195456.png

Link to post
Share on other sites
14 minutes ago, roybot said:

I have encountered the same detection today.  Same outcome attempting to remove it.  Can only disable and then prompted to whitelist it. 

I took it off the whitelist (even tough it's a system app) I don't want a corrupt file to have full access.

Link to post
Share on other sites

Hi Harrison,

Yeah, I chose not to whitelist or ignore that AT&T Setup & Transfer app.  I don't think the file is corrupt.  I am hoping it is a false detection from the 4/2 definitions update...

Hopefully some others will chime in on this topic.

 

Link to post
Share on other sites

This is a repost from a similar thread elsewhere on this Forum.

Add my name to the list of users with the same Malware alert on the same AT&T file; Samsung S7. Did a hard reset of the phone and it still shows up on the native app. I too have disabled the app as it cannot be removed without rooting the phone. Since I don't want a bricked phone, I'll wait to see if this is a FP or if removal instructions are forthcoming.

Link to post
Share on other sites

Same thing here.  Restored to factory settings and it is still there.  I don't think it's a False Positive as I've had a bank account breach (last week).  I'm not installing banking apps on my phone until I find out more.

Link to post
Share on other sites
13 minutes ago, MollyE said:

Same thing here.  Restored to factory settings and it is still there.  I don't think it's a False Positive as I've had a bank account breach (last week).  I'm not installing banking apps on my phone until I find out more.

Huh & Wowser! That would suggest the .apk / system file has been infected at the source (AT&T) I guess I'll be changing some passwords early. Thanks for the input MollyE

Link to post
Share on other sites
1 hour ago, MollyE said:

Same thing here.  Restored to factory settings and it is still there.  I don't think it's a False Positive as I've had a bank account breach (last week).  I'm not installing banking apps on my phone until I find out more.

I'm glad yo hear you took that measure to try and fix the issue.  I have alot of finance apps on my device and a good credit score to target. Do you think you picked it up installing a bad app? Or do you think the legitimate banking apps were the ones that caused it?

Link to post
Share on other sites

I've been chatting with ATT. They are now aware of the issue.  I'm not sure if it came through the ATT app or took advantage of a vulnerability.  I did download some language learning apps last week so it's possible it came through that.

Link to post
Share on other sites
1 hour ago, MAM said:

Hello, well that is a FP. Read there posting #21.

---->

MAM

It seems like everyone is up in the air about the issue being a 4/2 definition update and possibly an ATT compromise...

I've uninstalled my banking apps for security purposes and will wait for a update that can address this.

Harrison

Link to post
Share on other sites
1 hour ago, MAM said:

Hello, well is this problem, after a New update from Malwarebytes for mobile not solved now?

MAM

It doesn't appear as a threat, after a full scan, since the update. 

I'm still curious why an att file was labeled with trojan.bank. 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.