• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Trojan!Opfake.L@Android

W

weezy7

Newbie
I have two anti-virus apps on my Galaxy S3. TrustGo and Lookout. Lookout detects nothing when doing a virus scan where as TrustGo claims there are 15 apps with "Trojan!Opfake.L@Android". These apps are mostly of the Playstore or apps which come with the phone itself, stuff like S-Voice. Maps. Googlesearch. Lookout (the other anti-virus I use), ChatOn, AutoRAP. Trojan!Opfake.L@Android apparently sends premium texts, how do I go about fixing the virus apparently the only choice i have is uninstalling the apps but then whats the point of having no app store etc? Please help thanks.
Edit: I installed another anti-virus AVG and TrustGo says that also has the Trojan so im guessing everytime i install another app it does that, just installed another anti-virus app but this time it didnt say its a trojan whats going on?
 
Wow, that's something!

I guess we need to find out if it's a false alarm from the one app or something real.

Do me a favor - could you get to your ChatOn app (it is under /data/app) using something like EStrongs File Explorer, long press to copy to your sd card, move the copy to your pc, and then post it up here?

I think that we'd like to have a look at it - unless someone else knows about this and has an explanation or a better idea.

Thanks!
 
Will do that now, thanks.
That anti-virus also says that ES File xplorer has Trojan!Opfake.L@Android
Edit: I cannot find /data/app there is no data folder? Just realised your phone has to be rooted for this, mine is not as I don't want to void my warantee.
 
I think there is more going on here, just weird, I would mount your phone to your PC, then do a scan from you PC and let us know what happens.
 
Plug in into your USB port your you PC and click on mount, then you can view your full SD card and system files, then use your AV program from your PC and scan
 
In EStrongs, menu, settings, change the home directory from /sdcard to just / and then you can get to it. No root required. :)

The name might be funny looking, it might not, so you may have to go by the icon. If it's hard to find, let me know, I will track down the exact name. (in fact, I will try that right now)
 
weezy7 said:
I have two anti-virus apps on my Galaxy S3. TrustGo and Lookout. Lookout detects nothing when doing a virus scan where as TrustGo claims there are 15 apps with "Trojan!Opfake.L@Android". These apps are mostly of the Playstore or apps which come with the phone itself, stuff like S-Voice. Maps. Googlesearch. Lookout (the other anti-virus I use), ChatOn, AutoRAP. Trojan!Opfake.L@Android apparently sends premium texts, how do I go about fixing the virus apparently the only choice i have is uninstalling the apps but then whats the point of having no app store etc? Please help thanks.
Edit: I installed another anti-virus AVG and TrustGo says that also has the Trojan so im guessing everytime i install another app it does that, just installed another anti-virus app but this time it didnt say its a trojan whats going on?
Click to expand...

I too got the same kind of results from trustgo antivirus today. Says about 15 infected apps with "Trojan!Opfake.L@Android". Includes browser, messages, contacts, settings, play store, dolphin, gtalk, mail, gmail, maps etc etc :confused:
 
same thing here.. got 25 apps flagged with this (things like Kindle, Audible, Google Play Store, Google+, Maps, Currents, Gmail, Talk, Google Search, etc, etc).. this is either a bug or it's a pretty serious infection!
 
I have my doubts about TrustGo. I just installed it (antivirus & mobile security, updated today, rather than the simple AV which was dated 03 August), ran a system scan, and it's reporting all sorts of stuff as containing this trojan, including the Settings app, Play Store, Messaging (25 apps in total).

I am rooted and S-Off, so in principle these apps could be modified, but I doubt it. If weezy7 is not rooted I don't know how a system app like S-Voice would be affected (Maps will likely have been updated, but I expect the Samsumg app is the copy in the ROM).

If you want I can copy one my my apks over.
 
Have you guys tried doing what EarlyMon said & DonB as neither are working for me atm, maybe it will work for you guys?
 
Hmmm. Don is probably right as usual (he helps me on some of my root stuff :)), I could be screwing up and giving root advice thinking that I'm not.

Sorry about that! :o

Weird though, I am having trouble with the Play Store accessing ChatOn.

Let's use EStrongs itself then, send me its copy, as you mentioned that it reported with the same problem.

But first, I believe that this work for you -

EStrongs, menu, Manager, App Manager.

Scroll down to "ES File Manager" and long press, choose Backup.

That will put a copy in /sdcard/backups/apps.

BTW - we're going to need time once we get the file, but we'll work as quickly as possible.
 
Yep I think Hadrons right as my Galaxy hasn't told me to update it and it usually notifies me instantly when it needs an update :) I re-checked just to make sure and I've got the latest one. Hopefully we can sort this problem out.
 
The TrustGo app says it received an update today. Not sure if that's the one causing the problem or if that's an effort to fix it. Perhaps go to the market and search your apps for any updates? Seems like it could be a glitch in the newest release.
 
Having the same problem here. 8 apps reported with this thing, including the play store itself, as well as several other "standard" things... I'm not rooted or anything.

I let TrustGo uninstall the offending apps - those which are standard were "reset to factory version". After this, trustgo reports NO apps with the trojan.

Now comes the funny thing. I restart the phone, just in case. Scan with trustgo again, it still reports everything as green. Then I open google play store (which according to trustgo should now be clean) again, and the play store wants to update to the last version. I let it (it doesn't give me a choice) and wait for a moment.

A moment later, trustgo says that the playstore is now infected.

So... Am I supposed to believe that the latest version of the play store itself infected...?
 
Yeah I mean my TrustGo wants to be updated in all but I thought I'd leave it so I could get the files, is it worth updating?
I agree with Aduial I don't know if I should uninstall then reinstall or what?
 
First rule in cases like this - Don't Panic.

This could just all be false positive on the malware scanner.

That happens each and every day in the pc world and I do mean all of the time, ok.

Just what I am hearing so far makes me think it's exactly that here.


But, I think that it won't hurt to check it.

That may take until later today.

Meanwhile - Don't Panic. ;) :)
 
You must log in or register to reply here.
Back
Top Bottom