• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

BeiTa Plugin

A friend messaged me this morning with a problem on her phone. She's trying to remove a plugin called BeiTa Plugin and thinks it may be malware, but she hasn't been able to remove it with any malware removers from the Playstore. She says it's a virus or trojan, but I can't find much, if any, info on this online.
Any suggestions on how to remove or identify this?
 
  • Like
Reactions: Van Huong Hoang
I've found reports of Windows malware called "android.beita", but of course Windows malware can't infect a phone.

Otherwise I've found a description of a really old malware called "beita" at https://www.symantec.com/security-center/writeup/2013-110111-1829-99. But I think this predates plugin frameworks on android, and would be amazed if anything this old was capable of infecting a modern phone (and more so if no apps can remove it). Can you give us any more information on it and on what measures she's tried?
 
Upvote 0
I've found reports of Windows malware called "android.beita", but of course Windows malware can't infect a phone.

Otherwise I've found a description of a really old malware called "beita" at https://www.symantec.com/security-center/writeup/2013-110111-1829-99. But I think this predates plugin frameworks on android, and would be amazed if anything this old was capable of infecting a modern phone (and more so if no apps can remove it). Can you give us any more information on it and on what measures she's tried?

She's not able to see it in the app management. She's assuming it's a virus or malware because it pops up ads when she gets a text, phone call, or does any browsing. I've walked her through the Samsung Game Launcher from the link above, but it wasn't on. I had her turn the Game Launcher on and follow the instructions to disable the ads, but she said that option was already turned off too.
 
Upvote 0
She sent me this screencap. The other image pops up every time she finishes a phone call
 

Attachments

  • 46514445_1214962691989815_6972537633033420800_n.jpg
    46514445_1214962691989815_6972537633033420800_n.jpg
    67.1 KB · Views: 10,368
  • 46491468_281006035934117_2955388591473164288_n.jpg
    46491468_281006035934117_2955388591473164288_n.jpg
    31.5 KB · Views: 3,217
  • Like
Reactions: Denyse Schumacher
Upvote 0
I think you guys have some app installed that has permissions to download/install some undesirable popups like that.
The problem is finding out which app that is by doing some investigative work on recently installed apps. Google the apps, find user feedback, check out permissions about the app. Even go so far as clearing the app's data and cache, force stop it, then uninstall to see if the issue persists.
 
Upvote 0
It's the "plugin" bit that bothers me. This could explain no malware scanner finding it: if it's using plugin technology then the installed app itself may appear harmless, because the actual adware or malware is downloaded and installed on the fly when used.

I'm not having much luck finding how to forbid such things globally. You can turn off "instant apps" from your Google settings on the phone (on my Pixel that's Settings > Google > Google Play Instant, but it will probably be different on a Samsung), and I'd be tempted to do this and see if it helps (actually I turned it off on my phone as part of the initial setting up - I didn't like the sound of allowing things to run on my phone without my actually installing them). But I suspect that it's using some different plugin service.

Back in the days when "push notifications" were the adware scourge du jour I installed an app called "Addons Detector", and you could use this to search for any apps using plugin services: install, scan, click on the "addons" button and then search for "plug" or "plugin". Of course there are legitimate apps that use plugins of different types, so the fact that an app appears in the list doesn't mean it's guilty (I have 2 which show up this way, both of which I'm sure are safe). But if you are lucky this might narrow down the list of potential culprits.
 
Upvote 0
I was having the same problem with this plugin. Ads would always pop up when I used most apps including Google maps even whilst I was driving. I realised it was the Beita plugin when i went to close all active apps via the left button next to the home button on my Samsung s7. I could not find anything on the net to remove it so i decided to reset my phone. I backed up everything except the apps to my sd card via smart switch. When the reset was complete the problem was solved, no more annoying pop ups . My original apps were reinstated via my Google account. Phone also works faster now that the plug in is gone.
 
Upvote 0
My wife just experienced the same issue, if she would plug in her charger or right in the middle of playing a game she would get pop up ads. I noticed when I looked at the running apps I saw one named BeiTa Plugin and using Lurker suggestion found the app with the same logo, deleted it and the ads stopped popping up. Some app dealing with screen color changing.
Thanks for the info...
 
Upvote 0

BEST TECH IN 2023

We've been tracking upcoming products and ranking the best tech since 2007. Thanks for trusting our opinion: we get rewarded through affiliate links that earn us a commission and we invite you to learn more about us.

Smartphones