• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Hijacked multiple ways

Jcol

Newbie
Hello,
My Note 4 has been experiencing at least 3 different forms of advertising hijacks which seems to be getting worse. The first type is when I open a King game I sometimes will be taken to the PlayStore and shown a similar game to download. This may be normal but I find it annoying. Related to this is I use the Samsung S Health app and again upon starting it up I will almost always be taken somewhere for a download of some related app. Same thing happens when I open Gallery. My second hijack type is less frequent but occurs at least one a week. While doing anything with the phone it will vibrate twice and an official looking Android screen will appear stating that my phone needs a critical update because of a virus infection, low memory or battery issue. Each of these appear official but they appear to be trying to get me to down load an app that will fix the problem. I cancel out of these each time they occur. My last hijack type and this just started last week is the phone will randomly sound the classic Apple ring tone and a voice will tell me I've just won a Mac Power book and pops up a window telling me how to claim my prize. This one if the most concerning because it will do it while the phone is locked and not being used so there is no apparent trigger. The first time this happened I thought it was someone else's iPhone ringing nearby. Image my surprise when the voice started up and it was my Note 4!

My browser is FireFox and I have scanned the phone with Dr. Web, CM Security, Malwarebytes and AVG and they all report nothing - no virus and no malware. It concerns me that no scan seemed to detect anything when clearly the phone has some sort of if not virus at least a malware infection. Any help would be appreciated.
 
Sounds like you have some really bad software on there! That first one with the King games is not normal. If anti-virus software isn't helping (not surprised), you probably should do a full wipe and factory reset. It sucks, but you have some really bad software on there. Who knows what else it's doing??

And in the future, please be more careful about what you install. That bad software had to come from somewhere!
 
Yes it is bad software but I think I am making some progress. I did some searches and found people have been reporting similar problems as I am having. The difference is most are not reporting the multiple symptoms that I am seeing. One post referred to these hijacks as Adware attacks and stated that if an app contains this type of code it is usually removed from the store but not before people have complained about it. I ended up searching for an Adware app at the store and the one that seemed to work for me is called AdWare. It quickly scanned my phone and is looking for specific embedded links to webpages and screen popups. It quickly identified 7 apps that contained this type of code. The links showned included MoPub, InMobi and others. The app described their effect and most of the things I was seeing were mentioned. The main two apps that had the most stuff was an MP3 downloader/ player and an internet radio app. I noticed that these are no longer available at the store. I deleted these two and some others and after a day my phone has been fine. The AdWare app did identify 3 other apps which I did not remove as their actions were collection only and they had been installed on the phone long before the hijacking started. One was a Samsung health app that I use every day. It will be a couple of days before I'm sure I have got everything but a least it is a start. I'll report back. Thanks.
 
Back
Top Bottom