Jump to content

Shortcuts get created


Recommended Posts

I have a Micromax Canvas 4 and just yesterday I installed a app called Super-Bright LED Flashlight which was from unknown source and by mistake I continued installing it!

Now I see two shortcuts which don't go! It cannot be removed! 

 

Recommend and Lucky Try

 

Also I started getting a half page pop-up when I install some new app. which also show some recommend and so many percent recommend

 

Any solution! 

 

Thanks in advance

post-184548-0-23511100-1425528379_thumb.

Link to post
Share on other sites

     I have exact same situation couldnt find any solution yet. I find the file that cause problem though i cant delete it. The file location in my phone is  /mnt/sdcard/.systemcache and its a hidden file.whenever i try to move, delete or rename the file it just creates the original version of it again. If you can find a solution please let me know.

Link to post
Share on other sites

Hi Mastiz and erlik

 

Do you recall by chance where the installs came from, what site or link? The version on the Play Store does not exhibit these behaviors. 

 

Are you able to manually remove these shortcuts, apps?

 

Thanks,

 

-Armando

i couldnt find where i download it but it wasnt from googleplay. I can remove shortcuts but they recreated in 2 minutes. In file directory which i write in previous post there is 3 files : openapp.lock , com_avazu_ad_sd.db , com_avazu_ad_sd.db-jounal. When i delete one of them they also recreated.

Link to post
Share on other sites

Hi Erlik,

 

Nice detective work, Avazu looks to be a pay-per-install service with apps tied to it, I was able to track down some copies of your flashlight app that showed the same behaviors you're seeing. 
 
I put in detection of the Avazu library in MBAM Mobile, update your sig to the latest, v2015.03.10.01, and scan your device.
 
Android/PUP.Ads.Avazu.a
 
Thanks,
 
-Armando
Link to post
Share on other sites

Good evening :)

 

I had the same problems with the shortcuts like mastiz and erlik.

After I saw the thread, I downloaded the malwarebyte mobile scanner and did a scan. And I actually found the "Android/PUP.Ads.Avazu.a" entry as the apparent culprit. But the thing is: I cannot delete it. Because my phone wants me to uninstall the setting file, which I just cannot do (I mean literally, my phone will stop the uninstalling process).

 

Do you have any advice on how to actually remove it, now that I found it?

Link to post
Share on other sites

Hi Hundefrau,

 

It sounds like something on your device has an open handle on that file that won't allow an uninstall. I would suggest uninstalling in Safe Mode.

 

Because of various Android updates and different device/carrier variants I can provide two methods they could try. If they don’t, they'll have to look up how to do it on their particular device.
 
Jellybean, Android 4.1 and up
  Power Button
  Long press Power Off on screen
  Press ‘OK’ to reboot to Safe Mode
 
Prior to Jellybean or above steps do not work.
  Power button
  Press ‘Power Off’ or ‘Restart’
  Restart if powered off
  Hold ‘Volume down’ button while booting up.
  
Once in Safe Mode
  Uninstall app or use MBAM Mobile to remove after scan
  Restart device
 
Regards,
 
-Armando
Link to post
Share on other sites

  • 2 weeks later...
  • 2 weeks later...

I'm having the same problem. I did a factory reset and the 2 shortcuts keeps coming back. how do i use your app on safe mode when i cant use any third party app during safe mode?  or, do you have the step by step procedure on how to remove the problem in safe mode?

Link to post
Share on other sites

Hi RJsMama,

 

It's odd that the shortcuts remain after a factory reset, did you install the same flashlight app as these other users? Did you restore apps from a back-up, is possible the malicious app was reinstalled from the backup?

 

If you didn't install the flashlight app, you'll need to identify the app creating these shortcuts by going through the latest apps you've installed and remove. These shortcuts are created by a third party ad library bundled in a seemingly legitimate app.

 

Where did you install the bad app, I'd like to see if I can reproduce?

 

-Armando

Link to post
Share on other sites

Thank you Armando for your attention in this matter.

 

 

The only thing that I downloaded from the play store after the reset was Whatsapp. btw, i've reset my phone 3 times since the problem started. i doubt the problem is attached to whatsapp (but I could be wrong). I think it was the Super Bright LED flashlight app that was installed that created this problem. 

 

MBAM identified 2 problems as: Android/Trojan.Rootnik.a  & Android/PUP.Avazu.a  

 

thanks.

Link to post
Share on other sites

  • 3 weeks later...
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.