billobill Posted May 15 ID:1567478 Share Posted May 15 (edited) Hi i was looking through my phone and i found this app downloaded multiple times here is the link NORMAL USERS DONT CLICK THE LINK IT WILL DOWNLOAD THE APP AFTER YOU CLICK ON IT is it a malware/virus??? i dont know if it is installed on the phone Also i run a scan with malwarebytes and didnt see something. Im reposting it here because i think i posted it in the wrong section before Edited Tuesday at 06:27 PM by AdvancedSetup Link removed per user request Link to post Share on other sites More sharing options...
David H. Lipman Posted May 15 ID:1567479 Share Posted May 15 FYI: https://www.virustotal.com/gui/file/da461ddcc68105914cfcdb8db48e2e7ad183a3de6c69082960752183e6afc020/detection If you don't want viewers to click on a link, all malicious, suspicious and/or nefarious URLs should be placed within Code Tags such that they are no longer "clickable" Live Links. 1 Link to post Share on other sites More sharing options...
billobill Posted May 15 Author ID:1567480 Share Posted May 15 What does that link you posted means? Link to post Share on other sites More sharing options...
Porthos Posted May 15 ID:1567481 Share Posted May 15 31 minutes ago, billobill said: Im reposting it here because i think i posted it in the wrong section before One post was enough. If it needs to be moved we will do it for you. I have removed your other post. Link to post Share on other sites More sharing options...
billobill Posted May 15 Author ID:1567482 Share Posted May 15 Also something weird happened today i did a software update on the phone tha needed to be Done ande after i went to check the apps name again in the downloads app and for 1 sec there were there and the they desapeared Link to post Share on other sites More sharing options...
David H. Lipman Posted May 15 ID:1567483 Share Posted May 15 (edited) 8 hours ago, billobill said: What does that link you posted means? My apologies for the faux presumption of fore knowledge of Virus Total. Virus Total is a web site which aggregates anti malware and Web Protection Engines of numerous anti malware and related software vendors. By submitting suspect URLs or disk files, participating vendor software will check the submissions to see if it is in their database as a "detection" or via a heuristic examination. In the case of the APK, there were no detections. However not all participating vendors may even target a given file type. For example the Malwarebytes Engine only targets Windows based executable files. Even with its limitations Virus Total provides much value. In the case of the APK files, it shows that it has been known to Virus Total for almost two months with no detections. That does not mean that it is not malicious but it does reduce the likelihood that it is malicious. Edited May 15 by David H. Lipman Edited for content, clarity, spelling and/or grammar Link to post Share on other sites More sharing options...
billobill Posted May 15 Author ID:1567484 Share Posted May 15 Soo what should i do? Link to post Share on other sites More sharing options...
David H. Lipman Posted May 15 ID:1567485 Share Posted May 15 Wait for @mbam_mtbr to reply. 1 Link to post Share on other sites More sharing options...
Staff mbam_mtbr Posted May 15 Staff ID:1567561 Share Posted May 15 Hi @billobill, Yeah, that's an interesting one for sure. I'll do some analysis and see if it meets our criteria for detection. In the meantime, may be a good idea to send an Apps Report. To send an Apps Report with Malwarebytes for Android use the following instructions. Open the Malwarebytes for Android app. Tap the Menu icon. Tap Your apps. Tap three lines icon in upper right corner. Tap Send to support Choose an email app to send Apps Report. Your email app will open with the Apps Report included. At this point, it would be very helpful to mention you are submitting via recommendation from the Malwarebytes forum. This allows our support staff to know where to direct it. By sending the Apps Report, you will create a ticket in our support system. Private Message (PM) me the email used and/or the ticket number assigned. 1 Link to post Share on other sites More sharing options...
Staff mbam_mtbr Posted May 15 Staff ID:1567564 Share Posted May 15 Hi @billobill, Installing the app on a test phone, it doesn't appear to be doing anything malicious. It appears to be a version of Vodafone AppBox. Unless you have a Vodafone phone, I don't believe it works on any other phones. Link to post Share on other sites More sharing options...
billobill Posted May 15 Author ID:1567571 Share Posted May 15 Okk thanks for testing it. No i don't have a Vodafone phone. So everything is good then? I shouldn't worry about it? Link to post Share on other sites More sharing options...
billobill Posted May 16 Author ID:1567659 Share Posted May 16 (edited) @mbam_mtbr soo i did some diging and i found the app throu malwarebytes apps section its is installed in system apps i it doesnt let me to uninstall it only to clear cache and uninstall the updates What should i do now? Edited May 17 by billobill Link to post Share on other sites More sharing options...
Staff mbam_mtbr Posted May 16 Staff ID:1567687 Share Posted May 16 Hi @billobill, Okay, I wouldn't worry about it then. It makes sense that it would be a system app. All clean. Link to post Share on other sites More sharing options...
billobill Posted May 16 Author ID:1567688 Share Posted May 16 If i factory reset it do you think it will be removed Also it doesn't show in play store and you cant find it in the desktop of the phone Link to post Share on other sites More sharing options...
billobill Posted May 16 Author ID:1567700 Share Posted May 16 @mbam_mtbr Link to post Share on other sites More sharing options...
Staff mbam_mtbr Posted May 16 Staff ID:1567716 Share Posted May 16 @billobill If it's a system app, then it will still be there after factory reset. Link to post Share on other sites More sharing options...
billobill Posted May 16 Author ID:1567717 Share Posted May 16 @mbam_mtbr but why it downloaded from tha specific site of all of a sudden and assigned its self to be a system app? Link to post Share on other sites More sharing options...
billobill Posted May 16 Author ID:1567719 Share Posted May 16 And downloaded different versions o ift self in a matter of three days Link to post Share on other sites More sharing options...
Staff mbam_mtbr Posted May 16 Staff ID:1567720 Share Posted May 16 Hi @billobill, Unless the mobile device is rooted, it would be impossible for it to assign itself system permission. Regardless, you can use this method to resolve. Remove Preinstalled Malware You can use this method to uninstall for current user (details in link below): https://forums.malwarebytes.com/topic/216616-removal-instructions-for-adups/ Warning: Make sure to read Restoring apps onto the device (without factory reset) in the rare case you need to revert/restore app. Use this/these command(s) during step 7 under Uninstalling Adups via ADB command line to remove: adb shell pm uninstall -k --user 0 com.aura.oobe.vodafone Link to post Share on other sites More sharing options...
Staff mbam_mtbr Posted May 16 Staff ID:1567721 Share Posted May 16 Also @billobill, Did you happen to send the Apps Report? Thanks, Link to post Share on other sites More sharing options...
billobill Posted May 16 Author ID:1567722 Share Posted May 16 No sorry im scared about privacy, i looked at the report and i didn't catch something the app was installed the 25 of march and a previous versions on 23 and 24 Link to post Share on other sites More sharing options...
billobill Posted May 16 Author ID:1567723 Share Posted May 16 @mbam_mtbr Link to post Share on other sites More sharing options...
Porthos Posted Wednesday at 05:18 AM ID:1569989 Share Posted Wednesday at 05:18 AM On 5/16/2023 at 1:44 PM, billobill said: No sorry im scared about privacy Anything sent to Malwarebytes support is covered by the Privacy Policy https://www.malwarebytes.com/legal/privacy-policy Link to post Share on other sites More sharing options...
billobill Posted Wednesday at 05:20 AM Author ID:1569990 Share Posted Wednesday at 05:20 AM No need everything is ok i resolved my issue 1 Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now