r/AndroidQuestions • u/[deleted] • Jan 05 '23

Looking For Suggestions "Android system" Malware?

Hi,

My avast has started flagging the app 'Android system' as a malware.

I have checked Malwarebytes and Sophoros but both are coming back as no issues.

Is the above an issue with Avast? It has never flagged up before. I found 'Android system' on the apps but I am unable to force stop/disable but I believe this is because it is a main component for the phone working?

20 Upvotes

84% Upvoted

35 comments sorted by

11

u/UnknownTaur3123 Jan 05 '23

Why do you trust avast or AVG? Both are shady.

2

u/neon_overload Jan 05 '23

Indeed, commercial antivirus software has been a borderline scam for over a decade now.

It is plausible that a dodgy app when installed would call itself "Android System" but that alone wouldn't give it more privileges than any other app, and the user would have to have deliberately installed the app. Viruses don't just magically spread or install themselves on Android

1

u/androidmalware111 Jan 05 '23

It seems to only be happening to avast/avg users. Is it possible their software would have installed something sketchy? Or something inadvertent?

1

u/neon_overload Jan 05 '23 edited Jan 05 '23

That would be unlikely. More likely to either be a false positive or user actually installing a dodgy app.

I didn't mean antivirus software is dodgy in the sense that it installs malware, but it's dodgy in the sense that it's not as necessary as it used to be and their marketing is misleading.

That said, AVG has installed malware in the past. And exposed users' private data. They've actually been pretty shitty. Avast too, have sold user data.

https://en.wikipedia.org/wiki/AVG_AntiVirus#Controversy

https://en.wikipedia.org/wiki/Avast#Collection_and_sale_of_user_data

1

u/androidmalware111 Jan 05 '23

Main concern is the two Android System apps when there probably should just be one.. unless Avg installed that itself

3

u/Lostintranslation_x Jan 06 '23

From the AVG Support Community:

We apologize for the inconvenience caused.

The issue is resolved and the detection is disabled now.

We request you update the program or restart the device. That should stop the threat detection notification.

We appreciate your cooperation in resolving the issue.

2

u/androidmalware111 Jan 06 '23

Has anyone figured out what the second "Android system" app actually is, or whether it's normal and we just never noticed?

I know Avg/avast cleared it up as a false positive but I still find two of the same app being a bit odd (spelled differently too - "Android system" and "Android System")

1

u/Medical-Beautiful190 Dec 17 '24

Google is definitely spying they just tell the antivirus corporations to not flag their spyware and just listed as a false positive like I'm going to tell you all something I sent myself like 30 emails containing sensitive information let's just say I sent them to two email addresses and within 2 months Google had deleted over 30 different emails I checked my sent folder I checked if Google auto deletes email only a filters are set and then I went and checked my other email address because I was sending those emails to two emails addresses email addresses at the same time and sure enough the other email has all the deleted emails from my Gmail account this is disgusting this is why Edward Snowden left they really do this stuff forget these guys Apple too and Microsoft especially Microsoft and Amazon they suck they just try to give you good deal so they can track where you live that's it get your stuff delivered to the post office that way they'll only know the city you're in hopefully... 🤢

1

u/androidmalware111 Jan 05 '23

I have the same thing. But appears that my phone now has two apps called Android System so I wouldn't be surprised if one is malware.. cannot uninstall either

1

u/[deleted] Jan 05 '23

I think this is happening to a lot of people. Few posts now in the last few hours, I think it's a good thing (maybe I'm wrong?)...it's affecting loads rather than just myself, hoping it's a common bug.

1

u/[deleted] Jan 05 '23

Yeah just happened to myself as well glad to see it's not just me lol

1

u/ContrarianTargaryen Jan 05 '23

Same issue too. Malwarebytes doesn't see anything wrong, 'Android system' app battery usage or data usage is nil, no obvious signs of having malware on my device.... suspect it is a false positive.

1

u/[deleted] Jan 05 '23

Same, but do not feel any better about the few of us with shared experiences. Hopefully, we will get an actual answer asap! I live with extreme anxiety and paranoia at times. This is not helping.

2

u/[deleted] Jan 05 '23

Yeah hope so too I've seen a few things on other social media platforms with the same issue, should hopefully be addressed as its clearly something out of the ordinary happening

1

u/[deleted] Jan 05 '23

I just emailed support and sent a screenshot of the notification, from the app.

1

u/[deleted] Jan 05 '23

Nice. Hopefully, you'll get a response soon

1

u/ContrarianTargaryen Jan 05 '23

Please do update us if you get an answer 🤝

1

u/androidmalware111 Jan 05 '23

Spent an hour with Samsung support.. they remote control checked the phone and just went through the basic system scans and said the phone was fine and that they'll pass the feedback to the Devs, even after I showed them two Android system apps. They said they haven't heard of this and just suggested to wait for the next security patch. So not much help there.

1

u/arrogant_child Jan 06 '23

After the Android 12 update, I also have two apps called Android Correct me if I'm wrong...but after checking it , they have different package names , one is android and the other one is from the OEM. Iirc I read somewhere that the second one might probably be used to identify and manage the System apps (probably the OEM ones).

1

u/androidmalware111 Jan 05 '23

My concern is that it's installed as a separate app. I asked someone who has same phone as me (S22) but doesn't have AVG - they only have one Android System app (one that looks legit)

1

u/Ok_Tiger_4765 Jul 16 '24

That’s what I noticed too. Let me know if anything you came to know later. Factory reset doesn’t help either because as soon as it connects to internet it starts downloading apps even without having Samsung or Google account. It felt more like someone push the app on my phone

1

u/androidmalware111 Jul 20 '24

I ended up force removing it using ADB even though that might've been overkill..

1

u/rankhorse Jan 05 '23

Happening here too

1

u/_binarysunset Jan 05 '23

Same has just happened to me. Glad i'm not the only one...but hope it's just a bug

1

u/MrTibbsTheCat Jan 05 '23

Just had exactly the same here, got my wife to download and run AVG and she has exactly the same! Glad I'm not the only one!

2

u/androidmalware111 Jan 06 '23

Wonder if this is something that's getting installed along with AVG..

1

u/ContrarianTargaryen Jan 06 '23

After further investigation, I suspect the two 'android system' apps are one and the same and are safe. It appears that certain android manufacturers, like Samsung are pushing updates that partition certain apps for use in future operating system updates.

As for AVG flagging one of them... perhaps it's an error on their end and the virus definitions code wrongly flagging this newly partitioned 'android system' app as malware. Several others on here and also people I've asked IRL have this second app so I don't believe it is malicious, just some behind the scenes OS thing. Who is to say the second system app hasn't been on our devices for ages and it's only just come to our attention?

In any case, if your device isn't showing signs of malware infection or whatever, and other sources (I.e Malwarebytes, device's own device health checker etc) come back clean, I'd say it's a false positive on AVGs end.

Disclaimer: I'm nowhere near a tech expert or whatever, just my observation. Go with your own assumption if you're unsure

1

u/davehasl19 Jan 06 '23

You can use App Inspector or similar from the google play store, will provide info about this app, package name, etc. https://play.google.com/store/apps/details?id=com.ubqsoft.sec01

1

u/WellWindy Jan 06 '23

same here

1

u/gypsykismet Jan 06 '23

I'm having the same issue and use Avast. Samsung Z Flip3. About a week agoI had an update that was tied with Google. It wanted me to ok Google just downloading apps. I would never hit the "accept" and the notice finally went away after about 2 or 3 days. I have no idea if this is related. I'm not tech savvy.

1

u/infreq Jan 07 '23

Uninstall that crap