• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Mobo Task Killer- Malware on my Thunderbolt?

  • Thread starter Thread starter Deleted User
  • Start date Start date
D

Deleted User

Guest
I searched all over, not just on this forum, but all over the internet, so perhaps I'm the only one that has ever written about this issue.

I'm pretty certain I never installed Mobo Task Killer onto my Thunderbolt in the past (I could be mistaken, I have used others before but I am not currently running one), but for the last few days I've had a curious notification show up on my phone.

Two things are off here:

1) The notification is from the Android Market, and the icon is the white bag with the green droid on it. Usually for market notifications (updates found) it's a black one with a white droid on it.

2) It's a link that says "A smart task killer to free your phone's memory is now available for download". It ends up being a link TO Mobo Task Killer in the Android Marketplace.

This leads me to believe that my phone has something hiding on it related to this task killer that keeps giving me this notification every day or two. The fact that it is unsolicited and just shows up repeatedly is what worries me.

I ran Lookout to see if it found anything, but no dice, which makes sense since it scans applications and processes, and if it's something in the Android Market then it wouldn't be flagged since it probably identifies it as an update.

Anyone else ever encounter this? Is there some way I can purge this from my phone? I have an unrooted HTC Thunderbolt, so I know my options are limited. However, my phone does run painfully slow for being brand new and this may be just a symptom of a larger set of problems on the phone.

And just FYI, I don't install third party apps, don't run a task manager, don't use any of the Sense UI/apps, and I am pretty light on my data use. I can post any other specs you need, if that will help.

Thank you in advance!
 
If you have no third party apps, back up your contacts to google and then factory reset your phone. That's all I can think of right now.
 
(Edited to add: I just noticed where you said you had no 3d party apps. Nevertheless, I'd suggest you follow the procedure below. It really, really sounds as though you, or someone with access to your phone, has installed an AirPush-infected app. I think you should check that before looking at anything else.)

Download AirPush Detector from the Market and delete any application(s) it flags (some folks also like to make a Market comment to warn others of offending apps).

AirPush is an ad pushing method that hijacks the Android notification bar. Revolting, isn't it? There's an opt-out app too, but since it's the AirPush folks that make it I don't use it; you can probably find it with a Market search though.
 
I had the exact same notice pop up today for the first time. I'm not rooted and Lookout as well. I will keep an eye on this to see if it pops up again.
 
Thanks for those who have helped out thus far, I definitely feel a lot more enlightened as to how it's hijacking my notification bar.

I installed AirPush Detector and it didn't find anything, but that may have to do more with the fact that my phone restarted and the notification was gone. It's a great security app, so I'm for sure going to keep it around, and I'm positive that the notification will pop up again anyway...once it appears, I'll try it again.

As for access to my phone, I know no one else has had access to my phone, since I'm pretty anal about my phone and I let people use it to make emergency calls (if that), and even then I'm with them during the call and take my phone back. So no worries on that front.

Gotta admit- AirPush, it doesn't surprise me, but man that is a low-down way to develop apps. Makes me that much more mindful of what I install!

Again, many thanks to all of you, you have each armed me with the knowledge to do some sleuthing and correct the issue. One love, thanks all around!
 
I've had the same message on my Droid X, about two or three times so far. I've just dismissed it, and haven't seen it for a few days.

It's had good reviews in the Market, and no mention that I've seem of the smarmy tactics.
 
I'd recommend all of you that have this download and run the following app:

https://market.android.com/details?id=com.joeykrim.rootcheck

Yes, it checks if you have root. These malware programs like to use root exploits to install backdoor apps that upload data on your device to a server. Doesn't hurt to make sure you're not rooted. If you are rooted when you don't want to be, I'd immediately factory reset your phone.
 
This popup is coming from First Aid android app. I just found out now. Lot others have experienced the same. Uninstall "First Aid" app too.
 
You must log in or register to reply here.
Back
Top Bottom