Help Stagefright Infection

[Respit]

A couple weeks ago I manually upgraded my ancient Galaxy S2 OS to 4.1.2, only to get infected by Stagefright days later. The text message in question had the MMS video linked, which I stupidly opened (it used my father's number as the sender). Now all my outgoing text messages have that mms video - the virus replicating itself, I assume.

This is probably a stupid question, but would manually reinstalling the operating system again remove the virus, or is a patch the only solution at this point? I'm just extremely skeptical that the anyone would create a patch for a phone/OS this old...

 

[EarlyMon]

I'd be very surprised if you're reporting the first known successful Stagefright infection in the world.

In any case, you have some nasty malware.

Yes, wipe everything, including the sd card, reinstall the operating system and it'll be gone.

Switch to Textra, it'll give you a little bit of protection.

http://androidforums.com/threads/stagefright-vulnerability-disable-mms-auto-download.932588/


By the way - have you tried any security scanning apps to see if they can find the malware and quarantine it?

 

[MLSS]

Samsung pushed a stage fright patch to both my Samsung phones. Galaxy prevail lte and Galaxy S3 a few days ago.

 

[iowabowtech]

Any chance you could show us a video of your situation? i.e. you sending multiple texts and a rogue mms respawning on each send?

I've not seen anything that could be linked to stagefright in the wild yet but you never know.

At first glance, it seems more likely to be a malware attempting to emulate the characteristics of stagefright but I have not yet seen a malware of this description either and frankly even that seems somewhat low odds to obtain. That said, I've seen several firsts here at Android Forums so you have my attention and posting up a video might open some eyes and save some grief for others. Because if you have it, others will soon get it. Best we get a handle on this and get it out there for people to be aware.

 

[EarlyMon]

That's not the same as asking for a posting of the video itself.

If you want to share the infected video, upload it to your Drive (or equivalent) and drop one of us a line via a private conversation (tap one of our names to get to that) and share the link privately.

Thanks.

 

[mikedt]

I like seeing firsts on Android Forums.