how do you get rid of adware

[AC Question]

I ran malwarebytes like I do often and today this popped up on my BLU life XL android phone:
android/PUP.Riskware.YeMobi.a/system/app/Fire/Fire.apk

Malwarebytes asked if I want to delete it but it won't delete it. Is this bad? How can I get rid of it?

 

[Laura Knotek]

Hi and welcome to Android Central.

Please take a look at this guide and see if it helps you: http://forums.androidcentral.com/ambassador-guides-tips-how-s/630081-guide-malware-adware-popup-removal.html.

 

[lisa1230]

I'm sorry I forgot to sign in before posting my question. I looked at that link and tried it but I I couldn't find anything But Malwarebytes found it and won't delete it. I used 3 different programs but no others found it. Is it a real threat or a false positive?

 

[Dave123123]

I'm getting the same thing on my BLU Life One X2. Maybe it's something with the BLU phones

 

[lisa1230]

I'm wondering that now myself. Have you also tried removing it and it won't delete it? I wonder if a factory reset will fix it. Anyone??

 

[lisa1230]

This came up as malware in malwarebytes "Android communication sync". This is part of the phone right?

 

[Jman345]

I am having the same exact problem. Only malwarebytes can detect it, avast does not. It is the android/PUP.riskware.yeMobi.a that is in question.

Under that it says /system/app/fire/fire.apk

I have the Blu R1 HD, and it seem common in this thread that it is a problem with Blu phones for whatever reason. When I hit delete in Malwarebytes it brings up a window if I really want to delete the Android Communication Sync. WTH is going on?? Does anyone know if I happen to get rid of it if it will hurt my phone? Android Communication Sync sounds important for the phone.

Hopefully we/someone can figure something out.

 

[Brille666]

Hello
I just found this topic and i have basicly the same Problem.
All of a sudden without that i have downloaded something for like 1 Month my Malwarebytes on my Android told me some days ago that it found something

I have no clue what "AdupsFota" is. Not even google knows, not a single entry, lol.
If i try to delete it with Malwarebytes it says it can't. Tho then the name of the app change to "system update".
I tried to localy search for said "AdupsFota" and found 2 folders. I've deleted them, still it "finds" it :/ (But i havent noticed any trouble after deleting them, yet)... Maybe someone else knows what this is and if its really just false positive :/

 

[Jman345]

Hey guys, I found a reddit post dealing with this same problem. It seems the poster was able to get it fixed and malware free with a program called debloater.

Here is the link to the reddit thread https://www.reddit.com/r/AndroidQue...ed_help_getting_rid_of_possible_malware_cant/

 

[Brille666]

Thanks for the Tipp but is there maybe a solution that you can use on the device? Cuz since i tried Windows 10 it... broke.. my Smartphones and no PC on earth can establish a data connection anymore xD

 

[Jman345]

I don't think there is, sorry : ( Its a standalone program for pc.

 

[mbam_mtbr]

Hi Everyone,

It appears that PUP.Riskware.YeMobi.a is indeed a pre-baked system app on some phones manufactured by BLU. It is not unusual for this to happen from time to time on some of these budget devices. The apps in question fire.apk (package name com.data.acquisition) and AdupsFota.apk (package name com.adups.fota) both contain code with PUP.Riskware.YeMobi.a.

PUP is known as Potentially Unwanted Programs which is a lesser threat than malware, and simply warns users of its presence. Riskware is a sub category of PUP. Once again, this is NOT considered malware.

Because these apps are system apps, they cannot be removed. The only options are to ignore the app (which you can easily do with Malwarebytes Anti-Malware Mobile) or to root the phone and install a custom ROM; a complex and risky process that could result in a unusable phone. If you choose the option of installing a custom ROM, know that you do this at your own risk.

I hope this answers everyone's concerns,
Nathan C
Malwarebytes Mobile Researher

 

[Blu Moon]

Hi everyone,

I, too, encountered this issue with my Blu Studio Max. I appreciate the info people have provided here, so I figured I would go ahead and post the response I received from Blu Customer Support when I contacted them. Thanks!

----------------------------------------------------------
Hello,



Thank you for contacting BLU Products. We are happy to help you!



The reason this has been flagged is because of a portion of our update application that has been misclassified as Potentially Unwanted Programs by some malware protection apps. This is NOT considered malware or a security threat. We are currently working on an update that will resolve any issues created because of this, and we apologize for any inconvenience or confusion this may have caused.


Should you have any additional questions please contact us at 1-877-602-8762 (Monday-Friday 9:30am-10:30pm EST).



Thank you for choosing BLU!

 

[Nezarov]

I was able to remove it. I uninstalled all the bloatware that came with the phone and they're only a few apps: two games, the alarm app (the clock app is fine), the camera app (not the main simple one but the second more elaborate one), the Flashlight app (the torch app is fine), the Amazon Prime app. Some pre-installed apps are unremovable but they're fine. Once I uninstalled everything I can uninstall, I no longer saw this Adware.

 

[Smithjnsn]

Adware is a very annoying program. Adware seriously disturbs the PC performance. Here is a good way to get rid of adware

Go to Start Menu
Choose the Control Panel
Hover the mouse on left corner of the screen and wait for the icon to appear.
Then right click on the icon to show list of accessible programs.
Select Control Panel from the list. A window will open on the screen. From there you can adjust the computer settings.
The control panel window will appear. Click on Uninstall program under programs area. It will display a screen to uninstall or change the program, select the one to be removed. On the next prompt you need to confirm the uninstall process.
And lastly click on Ok to proceed with the removal of Ads by Dingit.tv infection and other associated threats.

For more information on the topic you can follow this link

Get rid of Ads by Dingit.tv completely from your PC

 

[nethshelley]

re Blu Phones and Malware

Please be advised that all Blu Phones are apparently pre-loaded, at the factory, with bad malware that randomly records you, tracks your location and logsbpretty much everything you do on your phone. And from what I have experienced and read in other online forums and security sites, the programs embedded in the operating system are impossible to get rid of, and will even reinstall themselves after a factory reset. B

 

[nethshelley]

Yes, 'Android communication sync' is one of the malware programs factory loaded on Blu phones. It records you, even when you have your mic disabled. 'Blueshare' is another and it, too, spies on you when you don't even have your Bluetooth on, or so you thought. And my spyware app also found something called 'voice command' which started a recording two minutes after I disabled the permission for the microphone in apps settings. The phone is evidently a very advanced and malicious spy tool, disguised as a phone, and we are the chumps that paid to be spied on. It's infuriating. The only real remedy is to buy a new phone from a reputable company, then run this one over until it's pieces are powder! I am very angry with the Blu phone company for doing this. Please tell everyone you know not to get a phone from them. Then delete all banking apps, etc., and use another non-Blu device to change all of your passwords.