Harrison Posted April 3, 2018 ID:1229302 Share Posted April 3, 2018 I disabled it in settings, but I don't know what else I can do to clean this up. If I attempt to 'remove it it says 'cannot remove a system file and tells me to whitelist it. Thanks, Harrison Link to post Share on other sites More sharing options...
roybot Posted April 3, 2018 ID:1229315 Share Posted April 3, 2018 I have encountered the same detection today. Same outcome attempting to remove it. Can only disable and then prompted to whitelist it. Link to post Share on other sites More sharing options...
Harrison Posted April 3, 2018 Author ID:1229318 Share Posted April 3, 2018 14 minutes ago, roybot said: I have encountered the same detection today. Same outcome attempting to remove it. Can only disable and then prompted to whitelist it. I took it off the whitelist (even tough it's a system app) I don't want a corrupt file to have full access. Link to post Share on other sites More sharing options...
Harrison Posted April 3, 2018 Author ID:1229319 Share Posted April 3, 2018 On the same note - How can i "clear" or reset my system apps so it is no longer corrupt? Link to post Share on other sites More sharing options...
roybot Posted April 3, 2018 ID:1229322 Share Posted April 3, 2018 Hi Harrison, Yeah, I chose not to whitelist or ignore that AT&T Setup & Transfer app. I don't think the file is corrupt. I am hoping it is a false detection from the 4/2 definitions update... Hopefully some others will chime in on this topic. Link to post Share on other sites More sharing options...
Andie1982 Posted April 3, 2018 ID:1229350 Share Posted April 3, 2018 I got the same thing today too?? Link to post Share on other sites More sharing options...
MisterWeather Posted April 3, 2018 ID:1229419 Share Posted April 3, 2018 This is a repost from a similar thread elsewhere on this Forum. Add my name to the list of users with the same Malware alert on the same AT&T file; Samsung S7. Did a hard reset of the phone and it still shows up on the native app. I too have disabled the app as it cannot be removed without rooting the phone. Since I don't want a bricked phone, I'll wait to see if this is a FP or if removal instructions are forthcoming. Link to post Share on other sites More sharing options...
MollyE Posted April 3, 2018 ID:1229493 Share Posted April 3, 2018 Same thing here. Restored to factory settings and it is still there. I don't think it's a False Positive as I've had a bank account breach (last week). I'm not installing banking apps on my phone until I find out more. Link to post Share on other sites More sharing options...
MisterWeather Posted April 3, 2018 ID:1229502 Share Posted April 3, 2018 13 minutes ago, MollyE said: Same thing here. Restored to factory settings and it is still there. I don't think it's a False Positive as I've had a bank account breach (last week). I'm not installing banking apps on my phone until I find out more. Huh & Wowser! That would suggest the .apk / system file has been infected at the source (AT&T) I guess I'll be changing some passwords early. Thanks for the input MollyE Link to post Share on other sites More sharing options...
Harrison Posted April 3, 2018 Author ID:1229532 Share Posted April 3, 2018 1 hour ago, MollyE said: Same thing here. Restored to factory settings and it is still there. I don't think it's a False Positive as I've had a bank account breach (last week). I'm not installing banking apps on my phone until I find out more. I'm glad yo hear you took that measure to try and fix the issue. I have alot of finance apps on my device and a good credit score to target. Do you think you picked it up installing a bad app? Or do you think the legitimate banking apps were the ones that caused it? Link to post Share on other sites More sharing options...
MollyE Posted April 3, 2018 ID:1229539 Share Posted April 3, 2018 I've been chatting with ATT. They are now aware of the issue. I'm not sure if it came through the ATT app or took advantage of a vulnerability. I did download some language learning apps last week so it's possible it came through that. Link to post Share on other sites More sharing options...
MAM Posted April 3, 2018 ID:1229555 Share Posted April 3, 2018 Hello, well that is a FP. Read there posting #21. ----> MAM Link to post Share on other sites More sharing options...
Harrison Posted April 3, 2018 Author ID:1229584 Share Posted April 3, 2018 1 hour ago, MAM said: Hello, well that is a FP. Read there posting #21. ----> MAM It seems like everyone is up in the air about the issue being a 4/2 definition update and possibly an ATT compromise... I've uninstalled my banking apps for security purposes and will wait for a update that can address this. Harrison Link to post Share on other sites More sharing options...
MAM Posted April 3, 2018 ID:1229669 Share Posted April 3, 2018 Hello, well is this problem, after a New update from Malwarebytes for mobile not solved now? MAM Link to post Share on other sites More sharing options...
Harrison Posted April 3, 2018 Author ID:1229706 Share Posted April 3, 2018 1 hour ago, MAM said: Hello, well is this problem, after a New update from Malwarebytes for mobile not solved now? MAM It doesn't appear as a threat, after a full scan, since the update. I'm still curious why an att file was labeled with trojan.bank. Link to post Share on other sites More sharing options...
mbam_mtbr Posted April 5, 2018 ID:1230146 Share Posted April 5, 2018 Hi @Harrison, Are you still having this issue? I believe it was resolved and will no longer be detected in future database versions. Nathan Link to post Share on other sites More sharing options...
Harrison Posted April 6, 2018 Author ID:1230510 Share Posted April 6, 2018 The issue was resolved after the update. Thanks for the prompt response. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now