[Security Discussion] elpanda13:
Hi guys! i have a serious adware problem on my elephone p7000 and i hope you can help me out.

So it's been a few days and i haven't been able to uninstall this mofo.

Here's what the adware is doing:

-Used to open ads on homescreen. it did that disguising itself as a dancing matrioska doll (which you could move around). since i installed CM security it stopped showing this kinds of ads.

-It opens pop up windows with du batery saver or other related apps (from appstore and from non-official stores). Mostly when i browse the internet.

-it places vertical ad banners (like the normal ones on almost every app on the store) on some apps, it seems to be random, cause it doesn't always happen on the same app, but it's always placed on the lower side of the phone.

-it installs push notifications with ads

-i believe it shows app ads on google play store (i haven't installed any app in quite a while so it could be google implementing this).

i have tried a lot of apps:

-Avg

-Avira

-Avast

-Malwarebytes

-CM manager (found a stagefright vulnerability and fixed it)

-Stagefright detector (with vulnerable result)

-addons detector

-airpush detector

-trustgo ad detector

-adware

-ad clean & antivirus security

and not even has been able to remove this damn malware, they don't even spot it!

i've also tried looking for all the apps on the phone,searching for apps with all the permissions and here's the list ( i don't know if these are the problem or not):

-Aging test

-agoldFactory test

-Bluetooth

.Bluetooth Share

-Bluetoooth LE

-Common data service

-e_Compass

-Elephone launcher (apparently it's the same as X launcher mysterious)

-LocationEM2

-MTK THERMAL MANAGER

- at least 3 different phone apps, 2 with 4.4 icons and 1 with android 5.0 icon. all have access to everything (is it normal to have 3 apps with the same name but different icons? )

- settings storage

-trusted face

-ygps

i have also cleared the cache of the phone, because i've read on several places that it helps (settings -> storage -> clear cache data) but with no positive result.

i have also tried looking for admin permissions but the only things in there are CM security and android manager (which i suppose is NOT an app but part of the OS).

I have tried looking for hidden files while checking my phone on my pc but there wasn't any nor did i find any weird app NOT installed by me.

i don't know if you have any other advice on what to do, or if you can help me reduce this list of apps so i can find the culprit app.

i'm afraid this is the ghost virus everyone's talking about, it appeared out of nowhere.

i haven't browsed that much. and when i do i always go to trusted sources. apart from the netflix app which i downloaded a few days ago i haven't downloaded anything in like 1 or 2 months and didn't have this problem until a few days ago. Right after my girlfriend's phone (same model as mine) got the same problem.

We both had the "install from untrusted sources" option on because i was testing an app i am making, but i doubt that's the problem since we only activated it whenever i tried to install the app on the phone (like twice in a week).

she has sent me pictures or files through mail, whatsapp or telegram only and it's the only link between our phones, besides being under the same wifi connection, of course.

thanks in advance for the help!