Jump to content
misspaperwait

Xhelper redirecting virus hell on andriod

Recommended Posts

I have a Sky Elite 6.0L+ phone that is infected with the xhelper virus. This tenacious pain in my arse just keeps coming back! I've factory reset, I've flashed with new firmware and within an hour or so it's suddenly reinstalled.

I have been fighting with this virus all day, deep diving online trying to find solutions and nothing is working. This virus redirects to  aiboo.cc on chrome or "browser" every chance it gets, even if I'm not actively on one of the webbrowers. 

I have scanned using malware bytes and it always finds it but apparently can't rid of it all. When i scan with Kaspersky, it always finds xhelper, firewey and usually an app called settings, it calls them trojans or whatever but when I say to remove them, it always says 2 out of 3 uninstalled or it will show that 3 things have been removed and one file has been skipped.

Is there any solution to get rid of this god forsaken virus?? I have Andriod Nougat if that helps in anyway.

I'm fairly technically inclined so I'm comfortable with comman prompt or anything else I may need to do to make this thing go away so the phone is actually usable

Share this post


Link to post
Share on other sites

Hi @misspaperwait,

Could you post a screenshot of Malwarebytes detecting?  It could be at the system level, which means you would need alternative means to remove: 

Sending an Apps Report would be extremely helpful as well.

To send an Apps Report with Malwarebytes for Android use the following instructions.

1.Open the Malwarebytes for Android app.

2.Tap the Menu icon.

3. Tap Your apps.

4. Tap three lines icon in upper right corner.

5. Tap Send to support

Choose an email app to send Apps Report.

Your email app will open with the Apps Report included.

At this point, it would be very helpful to mention you are submitting via recommendation from the Malwareybtes forum.  This allows our support staff to know where to direct it.

By sending the Apps Report, you will create a ticket in our support system.

Private Message (PM) me the email used and/or the ticket number assigned.

Nathan

Share this post


Link to post
Share on other sites

So I ended up resetting it again last night and I installed malware bytes and ran it right out of the gate. First scan came out clean, I left it untouched over night. I woke it up again today and there was a warning message about Firewey being detected and dangerous so I told malware to remove it. 
 

I ran another scan and this is the results 😕 I also sent a report and sent you a pm with my email address

5713763F-0F90-4CC8-AAE7-D8ABD0EEAE2F.jpeg

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.