-
After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.
Spy app detection
- Thread starter CaliB805
- Start date
Just do a factory reset
If the spyware has installed as a system app, a factory reset will not remove it. A factory reset only clears the user data and cache partitions: it does not alter the system partition. In this case, something like Malwarebytes or other app, that looks for behaviors consistent with malware, is advised.
svim
Extreme Android User
Is there anything that your phone is doing that indicates it has been compromised in some way? Or is this a matter where you just want to be more proactive and keep it safer?
https://www.computerworld.com/article/3012630/android-security-checkup.html
As for a utility like the Malwarebytes app, keep in mind that you'll be installing it as a typical user. That's adequate for exploits residing in the user's data partition but there are some exploits that do infect the Android operating system itself. The OS resides in various system partitions so as far as the Malwarebytes app, it only has some advanced user-level permissions. That applies to the user data partition but not necessarily for those with the protected, system-level permissions, so the utility is only going to have very limited access (perhaps read access but not write access) -- so while it may be able to detect a problem it probably cannot actually fix the problem.
With an Android device, when it involves something that's only in the user data partition there's a good chance it can be cleaned up and eliminated, but if the OS becomes infected the most likely fix is to just flash it with an appropriate stock ROM.
https://www.computerworld.com/article/3012630/android-security-checkup.html
As for a utility like the Malwarebytes app, keep in mind that you'll be installing it as a typical user. That's adequate for exploits residing in the user's data partition but there are some exploits that do infect the Android operating system itself. The OS resides in various system partitions so as far as the Malwarebytes app, it only has some advanced user-level permissions. That applies to the user data partition but not necessarily for those with the protected, system-level permissions, so the utility is only going to have very limited access (perhaps read access but not write access) -- so while it may be able to detect a problem it probably cannot actually fix the problem.
With an Android device, when it involves something that's only in the user data partition there's a good chance it can be cleaned up and eliminated, but if the OS becomes infected the most likely fix is to just flash it with an appropriate stock ROM.