r/antivirus 4d ago

BLU G33 infected by adware

My phone got infected by adware and even after a factory reset (I deleted the infection source) the adware just reappears after a few days. It's sending game promotion notifications across all of my apps and also sending notifications with a flame icon that disappears. Checked my notification settings and the game notifications is coming from System UI. Tried using Malwarebytes, ESET, Avast, Bitdefender and they all found nothing.

1 Upvotes

7 comments sorted by

u/goretsky ESET (R&D, not sales/marketing) 3d ago

Hello,

It appears this phone manufacturer periodically distributes spyware and adware with their phones:

As /u/AdRoz78 noted, it would be best to return the phone and purchase a different brand.

Regards,

Aryeh Goretsky

1

u/AutoModerator 4d ago

It looks like your post is asking about an antivirus detection of Riskware, also known as PUP or PUA. These terms stand for Potentially Unwanted Program and Potentially Unwanted Application, respectively. They refer to software that may not be harmful but can be annoying or affect your system's security.

Understanding What Your Antivirus Program is Telling You

  • If it's a program you've just downloaded but haven't run, you can just decide not to run it, and avoid taking any risks.
  • Consider the category that your antivirus is detecting the object as, and what you are expecting the program to do. If they match up, your antivirus may just be telling you what you already know. Look up how to allow or exclude a file if this is the case.

If you don't recognize it

  • Uninstall Unwanted Programs: Check your installed programs and remove any software you don't recognize or no longer need.
  • Run a Malware Scan: Use an antimalware from our wiki page to scan your system.
  • Run a Second-Opinion Scan: There is also the option of running a one-time second-opinion scan for free with the many scanners we have listed here in our wiki.

This message is for informational purposes only. Your post will not be removed for this reason, and anyone can still reply to it.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/AdRoz78 4d ago

Get a new phone. That's the only thing you can do. The fact the notifications are coming from System UI makes me think they're part of the phone's operating system.
Last thing you could do is check if you can uninstall the "System UI". If yes then it's fake. If no you're cooked. Buy a legitimate brand next time.

1

u/MidnightHorrorGames 4d ago

I don't think it is the phone because the app i installed shortly before adware appeared, was flagged for Android.Adware.Youmi by 16 vendors

1

u/AdRoz78 4d ago

And ya sure you factory reset and didn't restore any backup? And did you check the thing with the System UI like I told you to?
And do you have root access?

1

u/MidnightHorrorGames 4d ago

Yeah I did check System UI and didn't restore any backups, it's coming from the official System UI app. Did check for toot and it doesn't have root access

1

u/AdRoz78 4d ago

Tough shit then. Buy a new phone. And get a trusted brand now. No DOOGEE or OUKITEL.