• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Help malware

F_M_J

Lurker
Hi!
I started having a problem last night with docs to go. Everytime I open it, it opens a browser first with a link to followedmedia.com then to bestewed.com popup for an iphone. If I close the browser, it will just open another.
I did install a new app yesterday (meme creator) which must be the culprit since a co-worker installed it as well and is having the same issue but with a different app.
I have uninstalled meme creator, uninstalled docs to go, cleared the system cache, ran 4 different malware scans (all show nothing). I just reinstalled docs to go and still the same problem.
I have been searching for a fix but have had no luck at all.
Hoping to avoid a reset but not sure what else to do.
I have an S4 running 5.01. No recent apps other than meme creator and no recent updates to anything.
Thanks for your help!
 
I'd start by clearing caches on your browsers and Docs to Go. A bit of a long shot, but quick and will do no harm.

How are you opening Docs to Go? From the app drawer or a desktop shortcut? When you try to open it does it actually open DTG at all, or just the browser? I'm wondering whether this thing has replaced a shortcut with one of its own (I don't know exactly which app you installed or whether it was Play Store or an external download, so don't know whether it would have the permissions to mess with shortcuts, but this is easier to imagine than it actually modifying another app).
 
It will open the app but within a few seconds the browser will open. I have tried both the desktop and drawer, same thing.
Both apps are from the play store. Docs to go I have had for over a year and no issues. Meme creator was installed last night and the issue started not long after. The only permission it needed was for photos.
My co-worker installed it as well and is having the same issue but with a gallery app.
I tried opening dtg without my sim and it works fine. As soon as its back in, same issue.
 
I am also having same issue but with a different app, also downloaded from the app store. Tried all same stuff original poster listed. In addition I keep getting a random popup that takes me to what seems to be the Google play store to download a game app, this usually happens while I'm using Facebook
 
Hi - I'm having the same issue: browser redirect to followedmedia.com and a popup trying to sell me an iphone.
Mine has been happening for about 2 weeks and only occurs when I'm playing
Einstein's Logic (https://play.google.com/store/apps/details?id=com.agent0013.einsteinlite&hl=en)
or Scrabble (https://play.google.com/store/apps/details?id=com.ea.scrabblefree_na&hl=en)

I've had both games for years and have not had a problem before. I do have a feeling that the banner ads that appear at the bottom of the screen in both games are involved.

I have a Galaxy S5 with Android 5.0. Let me know if you find a solution!
 
F_J_M, have you tried to re-create the issue with any other app? If this is strictly an app issue with Docs to Go, you can always try to Clear Data and then uninstall the app. Afterwards, try power-cycling the device and reinstalling the app from the Play Store and try to see if the issue persists.

If the issue can be replicated with another app, it might be something a bit more serious, so you should check to see if that works first.
 
I'm having the same problem, but with an app called Mahjong II.

https://play.google.com/store/apps/details?id=com.onecwireless.mahjong2.free

I downloaded it a week ago, but this started yesterday. I'm wondering if this is some kind of attack through the ad network, since this app is displaying ads at the bottom. I reported the app to Google Play just in case.

Could be connected with this....
Chinese smartphones mount massive web attack -
http://www.bbc.co.uk/news/technology-34379254

The tidal wave of data was traced to a pool of booby-trapped adverts that had been seeded with malicious code. The adverts seem to have been shown in apps popular in China, said Cloudflare, which uncovered the data deluge.

Goes without saying, Mahjong games are very popular in China. This one was it?
http://www.appchina.com/app/com.onecwireless.mahjong/
Although it's worth noting One Wireless are Russian, not Chinese.
 
Last edited:
F_J_M, have you tried to re-create the issue with any other app? If this is strictly an app issue with Docs to Go, you can always try to Clear Data and then uninstall the app. Afterwards, try power-cycling the device and reinstalling the app from the Play Store and try to see if the issue persists.

If the issue can be replicated with another app, it might be something a bit more serious, so you should check to see if that works first.
This is happening to me on an app called meet me and also external Facebook links (opened in app)
 

Attachments

  • Screenshot_2015-10-02-17-26-26.png
    Screenshot_2015-10-02-17-26-26.png
    447.9 KB · Views: 108
This is happening to me on an app called meet me and also external Facebook links (opened in app)

You mainly get that from infected websites. Avoid the websites that do that after you clean your device and you should be fine. Consider uninstalling the app that does that on your phone as well.
 
So factory reset is only answer?
You can try uninstalling the single app that is redirecting you, then running a virus scan in Safe Mode with your antivirus of choice, but if the issue persists afterwards, then yes, that would be your only choice.
 
Last edited:
Ahoy.

I'm getting the EXACT SAME problem, except in my case it's with Scrabble, by EA, which indeed also has ads at the bottom. I'm guessing China loves word games?

I'm also leaning towards security problems with the ads feed...
 
Ahoy.

I'm getting the EXACT SAME problem, except in my case it's with Scrabble, by EA, which indeed also has ads at the bottom. I'm guessing China loves word games?

I'm also leaning towards security problems with the ads feed...

Oh yeh, we love word games, but they haven't made a scrabble yet that has all the letters. LOL

chinese-scrabble.jpg
 
Hi, I have kind of the same problem here. I don't know which app cause it but I made a factory reset just to find out that with no apps installed the problem was still there...
every time I try to navigate in internet (with a browser or facebook app or some games ads) nasty things happen.
now I found a way to bypass the problem installing a firewall (NoRoot Data Firewall in my case) and everything works fine but the malware is still there because if I turn off the firewall problems start again.
I'm asking myself if the only solution is to throw away the phone since not even the factory reset solved the problem...
 
Try an update to your OS... I had an issue with a non market installed app sadly and upgrading through kies was my only option because it wouldnt let me said it was modified, and my tablet is not rooted or anything
 
I haven't tried Kies yet because I'm on a mac and kies doesn't seem to work in a proper way to me but I will try and we'll see if something will happen.
Thanks
 
Hey, I also have docs to go preinstalled, but I removed it because it was recognized as a malware... At first, I was a bit puzzled; Why would a simple app do that? But for me, I will follow what was said.. But unlike you, Mine runs normally as if that is just a simple app.. besides, Its hard to navigate to controls. Definitely replaced it with another app!
 
Back
Top Bottom