HOW TO REMOVE ANDROID MALWARE

Is your Android device suddenly slow, using too much data, or showing corrupted data? You could have downloaded an infected app that came along with malware — or the much more obvious ransomware. Suspect apps (often promising free work software, cheat codes, new games, porn, or money) are an increasingly common method of getting viruses onto your mobile devices, where they wreak havoc and steal data.

If you can still access your Android device, your first step should be to get rid of the infected app ASAP, before it tries to infect other devices or does more damage. Here’s how to locate and remove Android malware, along with a few options for security downloads to help protect you in the future. We’re going to speak generally about consumer Android platforms here, but we also have a guide on deleting apps in stock Android which you may find useful.

Step 1: Shut down until you find out the specifics

Once you’re sure your phone is under attack by malware, hold the power button down and turn the phone fully off. It may not stop the malware from causing damage, but it can stop the problem from getting worse, and may halt ongoing malware attempts to access nearby networks.

Shutting down also gives you time to think and research. Do you know the specific infected app that brought malware onto your device? Do you know what other types of software it may have downloaded without your consent? If not, then move to another computer and look up your symptoms (as well as any new apps you tried out) to narrow down the issue. If you can’t find the app at the root of the problem, you can’t remove it!

If your research turns up nothing, you may want to turn your phone back on and skip down briefly down to step 5. Anti-malware apps can help identify what is causing your problems and will even be able to remove the infected software for you. However, it will also give your phone access to the internet again, which involves some risk.

Step 2: Switch to safe/emergency mode while you work

Flickr | Kārlis Dambrāns

When you turn your device back on and plunge back in to isolate the problematic app, switch over to safe mode first. This will help limit the damage the infected app can do.

For most Android devices, you can switch to safe mode by holding down the power button for a couple seconds once your device is on. This should bring up a few power options, including the option to switch to “safe mode,” “emergency mode” or similar wording. Choose this mode and wait for your phone to reboot before you continue.

Note: If you can’t find out what’s causing your malware problem, even after downloading a security app, this is not the time to tinker. Ask a professional for help and if you should wipe your phone. This is a good strategy if increasingly common ransomware takes over your phone and blocks your actions.

Step 3: Head to Settings and find the app

Visit Settings on your Android device. Settings typically has a gear-shaped icon, but that depends on your themes and arrangement: Search for it if you have trouble locating the right spot.

In Settings, scroll until you see the section called Apps, and enter. Look for a list of all your current apps — you may need to choose App Manager to locate the full list. Once there, scroll until you find the infected app at the center of your problems.

Select the app, and this should bring up options to Uninstall or Force close (you cannot uninstall core apps, only disable them, but these apps are unlikely to be the problem).

Step 4: Delete the infected app and anything else suspicious

Simon Hill/Digital Trends

Simply choose Uninstall, and your Android device should remove the app in question. It’s also a good idea to review your app list and uninstall other suspicious downloads — if you haven’t looked at this list before, you may be surprised at some of the odd things your device will automatically download.

Note: In some cases, you can’t uninstall the app, and the option itself will be disabled. Some of the most clever malware/ransomware will visit your administrator settings and give itself special protection to prevent this very thing. Fortunately, it’s often easy to fix. Go back to the original Settings menu and scroll down to Lock Screen and Security (or a similar corresponding section). In the Security menu, look for a section that says “Phone (Device) Administrators.” You may need to visit “Other security settings” first, depending on how your security menu is set up. In Phone Administrators, you should be able to enable the ability to remove Android malware.

Step 5: Download some malware protection

A vulnerable Android device deserves protection. There are a number of security apps you can download to help protect your phone, scan for viruses, and get rid of junk files and any potentially infected software. When you are finished manually deleting the troublesome app, download a security program to help take care of any future issues. There are many choices in this field: Try software like 360 Security, or Avast Security, or AVG Antivirus from the Google store. You can take a look at our other Android security recommendations here.

While it sounds obvious, it’s also a really good idea to keep your Android device constantly updated. Forgetting to update is one of the key risks leaving Android phones open to attack.

via digitaltrend
s

Read more »

Ransomware Attacks Hit LG Electronics’ Service Centers

South Korean electronics giant LG Electronics has been the latest company to fall prey to ransomware attacks after some of its self-service centers have been hit with malicious code that locks up computer files in exchange for ransom money. According to a new report by The Korea Herald, LG Electronics initially detected an issue with gaining access to the self-service kiosks earlier this week and alerted the Korea Internet & Security Agency that the problem occurred. Kiosk operations were quickly put on hold following the incident, and LG Electronics said it had managed to successfully protect files from being encrypted, which is a typical method of ransomware attackers in order to force their victims to pay for the key to unlock targeted computers.

 

State-run KISA found that the ransomware used in an attempt to encrypt LG Electronics’ service centers bears a resemblance to the WannaCry ransomware, which caused a major compromise to hundreds of thousands of computers in more than 99 countries over the course of 24 hours this May. The ransomware attack is allegedly an offshoot of the hacking tools supposedly built by the United States National Security Agency that were leaked by hacking collective Shadow Brokers in April of this year. The WannaCry incident compromised computers running the Windows operating system. Hackers reportedly carried out the global attacks using a modified variant of the WannaCry ransomware strain, which security experts say is taking advantage of a certain Windows bug. During the same month, Samsung was reported to have joined forces with the South Korean government in a bid to beef up security for mobile devices following the WannaCry attack, though it remains unknown how the two organizations plan to deal with the issue.

It now appears that some strain of the WannaCry ransomware is still alive despite various efforts to contain the malware, as KISA believes that some of LG Electronics’ self-service kiosks have been targeted by the same malicious code that hit several countries in May. The South Korean security agency added that it needs to conduct further investigation on the incident to identify the root cause of the problem. The good news is that the company has now updated the security system in those kiosks, which have since returned to business as usual.

Join Prime Student FREE Two-Day Shipping for College Students

via android headlines

Read more »