• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Trojan!Opfake.L@Android

weezy7 said:
Does this mean that it was fake (according to Spike)
Click to expand...


Yes.

The email SpikeLang posted indicates that this is a false alarm.

They are working to fix their app.

If uncomfortable, uninstall, try again later.

I want to welcome SpikeLang, Santaria, Guttless and all of our new members to the forums! :) :party:

Security is everyone's business, we here appreciate you all taking an interest in this and showing responsible concern.

Hopefully, this will get cleared up quickly.

We're still checking the apps they offer, but I did some company checking.

Seems that they're after bad app suppliers in Asia, where the Play Store isn't always easily accessed and bad versions of apps need a trusted source to replace them.

Choosing the right security app is a personal choice.

We neither endorse nor condemn TrustGo at this point.
 
Before doing anything else, try going to the TrustGo website forum and see if they are reporting anything out of the ordinary, my guess you are all getting false positives.



weezy7 said:
Updated TrustGo > Still does the same with 17 apps. Guess we just have to wait and like EarlyMon said, don't panic :P
Click to expand...
 
I guess I posted to late, LOL ;) I should of read the full thread



SpikeLang said:
HI guys, Just registered to let you know this.

I emailed Trustgo's support today after getting the same sort of reports as you've had, and this is their response
Hi there,

Thanks for contacting TrustGo support team! My name is Shawn and I'm glad to assist you today.

Thanks for bringing this to our attention! This issue is caused by the latest signature update. We have reproduced the issue and our engineering team is working on it right now. We will try our best to make the fix available immediately.

Thank you for trying the TrustGo Mobile Security app, and we appreciate your patience in dealing with this issue. Have a great day ahead!

Best regards,
Shawn
TrustGo Support Team
SO it looks like a false positive !

HTH
​
Click to expand...
 
Greetings! I had the same issue this morning and stumbled upon your forum. It's such a blessing to have this type of information available for us regular folk. I hope to continue to get great information in the future. I reached out to TrustGo, as well. Now that I know I don't need to panic, I'll wait for an outcome.
 
I go this e-mail from TrustGo. My phone problem is resolved.

Hi there,
Thanks for contacting TrustGo support team! My name is Shawn and I'm glad to assist you today.

I am sorry to let you know that we have identified an issue in recent virus signature update. It has been corrected and published again. If you found any apps infected with Trojan!Opfake.L@Android, there is no need to take any action. The new signature will be pushed to each device in 3 - 4 hours automatically. You are highly recommended to scan your device again to see the correct scan results.

Please accept my sincerely apologies and we will take immediate actions to avoid such issue from happening again. If you have any question or need further assistance, please reply to this email.

Best regards,
Shawn
TrustGo Support Team
http://www.trustgo.com/support/
 
I had this issue this morning and I chose to ignore all of the apps because I thought it would be rediculous to uninstall the play store and Gmail as well as others that were preinstalled on my phone or others that have been on my phones for years. It was afterwards that I stumbled upon this thread and got concerned and proceeded to read it in its entirety. I just received a notification from trust go that my phone was scanned and is clean, but I am wondering if it redcaps those ignored apps? I installed lookout and the scan was clear. I also tried installing Audible, as that had been mentioned and Trustgo found it clean.
 
IOWA said:
Uninstall TrustGo.

1.) Nobody knows who they are.

2.) They have an obvious agenda, as they are pushing their own version of a "market". Most likely applications that are REALLY infected.

3.) Their website is half broken, and the site hasn't been around very long. The domain registration and copyright claims also conflict a bit, but that could just be circumstance. For a security "firm", this is unacceptable.

Chances are, TrustGo is the real malware here.(Or the developer really screwed up.) Given the Android market now scans for obvious malware, providing outside the market downloads after claiming loads of false positives is a rather devious yet genius approach to circumventing Google's malware filtering.

Although, I could be jumping to conclusions.

When in doubt, get a second opinion, or even a third.

If you must use a scanner, Try Avast! or Kaspersky, both are trusted names.

EDIT: After doing some more research, I can't make heads or tails of the companies intentions. Whether this is an unintentional glitch in the program (it does happen), or an extremely elaborate scam. It appears the domain itself has changed hands a few times throughout the years, all with the same focus on IT Security. However, they were an originally an IT Security recruiting firm.

Sorry I couldn't be any more of a help, but I can't find anything conclusive either way. If I find anything I'll let everyone know.

EDIT2: I've emailed several of the developers featured on the trustgo website. If TrustGo is legit, these developers would have given permission to distribute their applications.

Personally speaking though, I would still uninstall it. When security is at risk, don't take chances. Even if they are 100% legit(which is entirely possible!), false-positives aren't helping anybody.
Click to expand...

Ok, I just heard back from Adobe. Here's what they had to say:

We do not have any relationship with this site. To get Adobe Reader for Android, just go to Google Play or the Amazon App Store, search for Adobe Reader, and install from there. If you do not have access to those stores for some reason and need to side-load, you can download the APK from Adobe - Adobe Reader download - All versions

I have not looked deeply at what this site is doing, but from looking at the url presented on their download button, it appears that they are scraping Google Play for application descriptions, and then doing something to download the app from google play, and then re-download it to the device.

I will forward this info, and thanks for letting us know.

Dennis Griffin
Adobe
Click to expand...

So my question is, why are they being the man in the middle?
 
CyreneK said:
I had this issue this morning and I chose to ignore all of the apps because I thought it would be rediculous to uninstall the play store and Gmail as well as others that were preinstalled on my phone or others that have been on my phones for years. It was afterwards that I stumbled upon this thread and got concerned and proceeded to read it in its entirety. I just received a notification from trust go that my phone was scanned and is clean, but I am wondering if it redcaps those ignored apps? I installed lookout and the scan was clear. I also tried installing Audible, as that had been mentioned and Trustgo found it clean.
Click to expand...

ummmm.... not clear on what you mean by redcaps the ignored apps? :confused:

I would hope that the fix is what's expected - proper signature checking so false positives don't occur, rather suppressing a known false positive - maybe you meant that?

OyVey1964 said:
Greetings! I had the same issue this morning and stumbled upon your forum. It's such a blessing to have this type of information available for us regular folk. I hope to continue to get great information in the future. I reached out to TrustGo, as well. Now that I know I don't need to panic, I'll wait for an outcome.
Click to expand...

Welcome to the forums!

If you need any help finding your way around, please drop any of red or green nametag types a line - just click on our name to the left of any post! :)

Anyway, glad this part is all sorted out!
 
EarlyMon said:
ummmm.... not clear on what you mean by redcaps the ignored apps? :confused:

I would hope that the fix is what's expected - proper signature checking so false positives don't occur, rather suppressing a known false positive - maybe you meant that?



Welcome to the forums!

If you need any help finding your way around, please drop any of red or green nametag types a line - just click on our name to the left of any post! :)

Anyway, glad this part is all sorted out!
Click to expand...

Sorry, autocorrect...I meant that I was wondering if Trustgo scanned the apps I previously told it to ignore when it suggested I uninstall the apps that were "infected" the first time around (this morning.)
 
CyreneK said:
Sorry, autocorrect...I meant that I was wondering if Trustgo scanned the apps I previously told it to ignore when it suggested I uninstall the apps that were "infected" the first time around (this morning.)
Click to expand...

Good point.

Seems if there's any doubt, you can go into your Apps Management and clear data and cache for it.

That will likely mean getting a new signature update and redoing any settings, but if there's any doubt that seems like the way to be sure.
 
EarlyMon said:
Good point.

Seems if there's any doubt, you can go into your Apps Management and clear data and cache for it.

That will likely mean getting a new signature update and redoing any settings, but if there's any doubt that seems like the way to be sure.
Click to expand...

I tried this but it is greyed out as not an option. Can't even uninstall. Went to the playstore and uninstall is not an option, only deactivate. I sent an email to them asking them all my questions.
 
CyreneK said:
I tried this but it is greyed out as not an option. Can't even uninstall. Went to the playstore and uninstall is not an option, only deactivate. I sent an email to them asking them all my questions.
Click to expand...

Wait, you can't uninstall TrustGo?
 
This reminds me of when I got my Droid X (my first smartphone). I installed an Anti-Virus app that turned out to be malware itself.

If the app refuses to let itself be deleted, then there are two things you can do:

Go to Settings and look for a Device Administrator field. Depending on device and version of Android, it could be in a number of fields. Either System, Security, or Development. Make sure TrustGo is not a Device Administrator.

If that fails, factory reset. If an app you downloaded (that wasn't previously installed by the device manufacturer) will not uninstall itself, that's a huge red flag right there.

And, because I'm a paranoid person when it comes to this: Change your passwords. It's a pain, but if it's really malware, it's likely looking for passwords and financial information.
 
I uninstalled the software by using APK Manager? I had no problems and it uninstalled straight away. I ended up installing again but I am thinking of re-uninstalling it due to the false positives.
Edit: I tried to uninstall using the playstore rather than APK manager and it still uninstalled perfectly. Not sure why your device didn't do that.
 
The Lookout security app has also this uninstall "feature" ...

Note: If you’re on Android (Froyo) 2.2+ and have trouble uninstalling, go to Settings -> Location & Security -> Select Device Administrators and uncheck Lookout.

I think, it's because this "Missing Device" feature ... to put some difficulty in the uninstalling ;)

Harry
 
jerofld said:
This reminds me of when I got my Droid X (my first smartphone). I installed an Anti-Virus app that turned out to be malware itself.

If the app refuses to let itself be deleted, then there are two things you can do:

Go to Settings and look for a Device Administrator field. Depending on device and version of Android, it could be in a number of fields. Either System, Security, or Development. Make sure TrustGo is not a Device Administrator.

If that fails, factory reset. If an app you downloaded (that wasn't previously installed by the device manufacturer) will not uninstall itself, that's a huge red flag right there.

And, because I'm a paranoid person when it comes to this: Change your passwords. It's a pain, but if it's really malware, it's likely looking for passwords and financial information.
Click to expand...

I went into device administrators and unchecked them as an administrator. Then Trustgo popped up and I checked to deactivate. It then asked for my password to unlock, then I was able to uninstall. Do you still think I need to factory reset? It is now uninstalled.
 
Harry2 said:
The Lookout security app has also this uninstall "feature" ...

Note: If you’re on Android (Froyo) 2.2+ and have trouble uninstalling, go to Settings -> Location & Security -> Select Device Administrators and uncheck Lookout.

I think, it's because this "Missing Device" feature ... to put some difficulty in the uninstalling ;)

Harry
Click to expand...

Yep. Usually there's a prompt when activating device administrator though.
 
IOWA said:
Yep. Usually there's a prompt when activating device administrator though.
Click to expand...

Thank you. I wasn't aware of this. I installed it, and installed Lookout instead. Do you think it is necessary to change passwords and factory reset? I'm unhappy about this because I really liked their features and the remote access to the phone actually worked. It was able to find airpush apps where AVG and Lookout failed. I'm hoping to find more out about TrustGo and reinstall.
 
You must log in or register to reply here.
Back
Top Bottom