• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Help Infected With ghost Trojan?

YoshiMoshy

YoshiMoshy

Newbie
Yesterday i realized something was installing random apps and it KEEPS restarting my phone when i try to do anything on it. I tried to install Stubborn Trojan Killer but when it finishes installing it restarts my phone so it doesn't properly install .I cannot connect via usb either. Any ideas how i can delete those apps and the virus?I don't know if my phone is rooted or not and the apps are acting like they are system apps.
 
Bg260 said:
Hello and welcome to AF. If you could give a little more info, manufacturer, model #, carrier, Android version.
I guess I'm a little confused by the statement


How long have you had it?
Click to expand...
7 months .Got it for Christmas. Its a stonex evo and i think the android is 4.4.2
 
Last edited:
Well, basically it says that your phone is prone to this virus. One suggestion is to factory reset, remove sdcard "if you have one" and scan it for virus.
 
Stubborn Trojan Killer is a Cheetah Mobile product so maybe it's a good thing you weren't able to install it. Cheetah Mobile apps tend to have privacy issues. Maybe try using Malwarebytes instead, it has a better track record:
https://play.google.com/store/apps/details?id=org.malwarebytes.antimalware&hl=en
But note that installing any anti-malware/antivirus utility as a regular user won't help you in this case, as it will need root level permissions to clean out something like a system-level infected app.

Also, if your problem is a matter where some exploit has installed itself as a system app, a Factory Reset won't help. A Factory Reset wipes the user partition, where your data is stored, but it doesn't affect the protected system partitions. All you will be doing is deleting your personal data but the infected operating system will still remain that way.

In order to solve a problem like a compromised system app, you need to flash your phone with its factory original ROM. Can't find much online about the Stonex Evo model so hopefully someone more knowledgeable will chime in.
 
Can you post the exact model number of the device and what country you are using it in? I can't find a lot of information on the device. It seems to be an Italian device but based on your response, it doesn't seem you are from Italy.

Hoping to find a firmware download for your model because if the malware made it's way to the system, the only way you will get rid of it is to reflash the system. As you've already discovered, a factory reset only wipes user data.

Also, just for information, I would assume that this device is having this issue because it is running such an old version of Android. There were several vulnerabilities discovered on Android: Heartbleed, Stage Fright, Master Key, etc that have subsequently been patched. Google now releases monthly security updates for Nexus devices but unfortunately with other devices you are at the mercy of the manufacturer as to when/if they ever release updates.

How old is this device anyway? Just curious if you've had it for a couple years with no updates or if it's a new device that comes with an old, vulnerable version of Android.
 
Brian706 said:
Can you post the exact model number of the device and what country you are using it in? I can't find a lot of information on the device. It seems to be an Italian device but based on your response, it doesn't seem you are from Italy.

Hoping to find a firmware download for your model because if the malware made it's way to the system, the only way you will get rid of it is to reflash the system. As you've already discovered, a factory reset only wipes user data.

Also, just for information, I would assume that this device is having this issue because it is running such an old version of Android. There were several vulnerabilities discovered on Android: Heartbleed, Stage Fright, Master Key, etc that have subsequently been patched. Google now releases monthly security updates for Nexus devices but unfortunately with other devices you are at the mercy of the manufacturer as to when/if they ever release updates.

How old is this device anyway? Just curious if you've had it for a couple years with no updates or if it's a new device that comes with an old, vulnerable version of Android.
Click to expand...
So im in romania right now. and how my mom works in italy she bought this phone i guess. So the exact model number is STX EVO.I have the phone for like 7 months
 
Im going to try Surya's site and tell you guys if it worked.Cuz if i look correctly its says ''Turn off your phone, remove the battery.'' So it doesnt need to be open , so it will not keep restarting
 
YoshiMoshy said:
I actually did it. Have a good day all of you :)
Click to expand...
hi, dunno if it's ok to resume this but i'm in the exact same situation as you were, so i hope you can share your solution with me, since this thread is the only resource i could find on the entire web about this phone.
So my phone is infected with auto-installing apps, ads and so on. Uninstalling them wont work. I'm not sure about doing a factory reset, cause i found some comment about the keyboard disappearing after that. Also i found a rom on needrom, but it is for the mtk6592 version, and i have the mtk6591.
Thank you in advance
 
Last edited:
android support?--do the chat help they will have you download "smart tudor" app and they can go into your phone and hopefully figure it for you-- just and idea because they helped me last week
 
You must log in or register to reply here.
Back
Top Bottom