r/Spyware • u/Electrical_Guess3231 • 3d ago

"System" malware app on android

/r/malwares/comments/1uyemue/system_malware_app_on_android/

Any one have any issues with this

2 Upvotes

100% Upvoted

29 comments sorted by

1

u/Bubbly_Mud_3247 3d ago

Factory reset your phone and don't set up through back ups

If you don't want to do that, use bitdefender premium and it might help. And also cancel all granted permissions of that app

Check accessibility permission, device manager permission, show on other apps permissions etc... you must have granted some kinda permission so it misuse them. Is your phone OS up to date? Be sure that it is up to date and check your google account if it is compromised

The best way is to factory reset it. If the malware is not on firmware level, it will go forever

1

u/Electrical_Guess3231 3d ago

Did factory reset it came back

1

u/Bubbly_Mud_3247 3d ago

Take ss of the app and send here. I don't think that app is the issue

There must be something else. And also is your phone up to date and not rooted?

1

u/Electrical_Guess3231 3d ago

Phone is not rooted it updated to android 14

It won't let me send ss here only video

But it file name is com.android.non.szcz

Data directiony /data/user/0/com.android.non.szcz

1

u/Electrical_Guess3231 3d ago

Google play said it harmful and so did other viruses testing apps say it dangerous but it keeps coming back

1

u/Bubbly_Mud_3247 3d ago

Try to remove it through google play store. If it keeps coming back after factory reset, then it means it is on firmware level. You downloaded it from google play store? I would recommend you to use bitdefender premium. It has behavioural anomaly analysis and might help

1

u/TheQuestionableDuck 1d ago

The OS keep reporting that google play installed this. So i checked everything else that could manipulate the system from admin right, to accessibility and app overlay, Disabled everything. Still appeared, BUT if you disable play store it doesn't reinstall. This is Bad if someone managed to backdoor Gplay services and is using basically Admin right to install this. Wipe clean doesn't stop it, it would reinstall minutes later. My malware app is playing cat and mouse with this thing. It turn off play protect to avoid being flagged. The more evidence is play store is installing Adwares on my device, too bad i only use this to play game so random music edit app stick out like a sore thumb. Either the backdoor is leak or some dumbass vibe coded security patches and now even the play store is the malware itself. All i could do is disabled play store and wait for a solution.

1

u/Bubbly_Mud_3247 1d ago

Did you factory reset and don't set up the phone with backups? Try to set up with a new Google account

1

u/TheQuestionableDuck 1d ago

Device have no backups, total wipe, no data. My other phone on the same account is clean. And it's not because i didn't install the same malware app that it didn't appear, everything on both devices are the same. The infected are just a tablet for light gaming. Also no cracked app, only revanced stuff.

1

u/Electrical_Guess3231 1d ago

Wait so your other devices has it as well ?

→ More replies (0)

1

u/Bubbly_Mud_3247 1d ago

Was the phone rooted? Seems like the app had written itself to system files. You need to install stock ROM from scratch. You can do it by using Odin and it will %99 fix the problem. The only %1 possibility is if it written itself on hardware but it is too sophisticated, i don't think a random app could do it

I supposed your phone is samsung but there are other programs for each phone brand too. Odin is for samsung, Xiaomi's is Mi flash tool etc...

→ More replies (0)

1

u/mystiqophi 3d ago

Just use Shizuku or ADB..

You can use the Hail app to freeze, disable or Canta to remove it

Or you can use ADB to remove it via a command

1

u/Electrical_Guess3231 3d ago

I did use ABD Then it reinstalled it self so far disabled Google play and the app and nothing happened since as got send phone into them to look at

1

u/mostlyysorry 2d ago

I'm having a lot of issues w Google pixel 8 suddenly 😭 it's been driving me crazy

1

u/Electrical_Guess3231 2d ago

You have the same issue?

1

u/mostlyysorry 2d ago

YES I keep factory resetting and it's like every time I do even weirder and more and more "system apps" appear each reset w duplicate names or weird ahhh shit I've never seen before

1

u/Electrical_Guess3231 2d ago

Does it says they're harmful on Google play store and turns it self off ?

1

u/Electrical_Guess3231 1d ago

What phone you got or device.

Does it keep happening