• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Help How do I remove ransomware from Samsung stellar

I have a Samsung stellar and was browsing on the web and accidentally downloaded ransomware. How do I remove it? I have tried resetting with device management but it disconnects my phone from wifi and I do not have data. I tried using safe mode but the phone display doesn't change from the lock screen, or even black out. I also tried multi kit tools or something like that and that did not work either
 
You don't say what state the phone is in, but I assume you can't access the system menu to reset it. But you should be able to do a factory reset from recovery mode (and no android app can stop you accessing that via the bootloader).
 
I tried to add a custom boot loader or rom that wasn't compatible with Verizon. When I get to recovery mode it says the software isn't compatible with Verizon, as it is locked to verizon
 
Is this something you tried to do now, or earlier? Are you telling us that you can't reset because you have previously loaded incompatible software on the phone, or that you tried this rather than a reset?
 
Is this something you tried to do now, or earlier? Are you telling us that you can't reset because you have previously loaded incompatible software on the phone, or that you tried this rather than a reset?

Yes. I loaded the software a few weeks ago, not knowing what i was doing,and got the ransomware not too long after, so I can't access recovery
 
OK, then it's most likely your problem with accessing recovery is a result of a failed attempt to modify the software, rather than from the ransomware itself (unless whatever package you tried to use to root the device happened to contain the malware itself. That's not generally a risk if you work through sites like XDA, but as I don't know what tool you used or where you got it from I can't exclude the possibility).

So if you can't access recovery then it sounds like you need to fix that. I'm not familiar with modifying Samsungs, but the page that JFalls63 linked to sounds like it might help. All I could suggest myself would be to try reflashing the phone using firmware from Sammobile.com (make sure you get the right firmware for your device, including the carrier as well as model) and a tool called Odin, but I can't tell you more than that as I've never used either.

Did you actually manage to root the ROM? If you did then that increases the possibility that malware could install in a way that would survive a factory reset (i.e. install as a system app). A complete reflash would still remove it in this case. Please note that I don't know that this has happened, just considering the possibility.

Android apps need to be installed by the user (they can't install themselves), so the ransomware was probably hidden inside something else you installed. If you installed any apps from a third-party download site around that time I suggest avoiding that place in future.
 
The best thing Verizon as a carrier has going for it is their software repair tools. No matter how corrupt your software is, if you can get it to connect to your PC it will repair it. Be warned it will return you to bone stock out of the box condition. Latest updates on most of their phones lock down the bootloader.
 
Back
Top Bottom