1. Username0000000's Avatar
    - is it legit
    - What does it do

    Recieved a suspicious sms that disappeared almost as soon as it came in, then my AV notified me that "main components" was successfully scanned.

    Search in settings shows the app under app info but clicking on it does nothing.

    Google is not so helpful..

    Thanks in advance
    09-30-2020 10:03 PM
  2. B. Diddy's Avatar
    Welcome to Android Central! Which phone, and which antivirus app are you using?

    BTW, antivirus apps are generally unnecessary for Android, and many will actually have adware of its own, or at least impact the performance of the phone.

    Please register on this forum, which will allow you to engage in discussion more easily, as well as post images. https://forums.androidcentral.com/as...community.html
    09-30-2020 10:09 PM
  3. mustang7757's Avatar
    09-30-2020 10:11 PM
  4. B. Diddy's Avatar
    Got a PM from the OP, who was having trouble responding in the thread:

    "Here is the only image I can get of the suspicious app

    https://ibb.co/kSpcPd7

    I am on a Samsung a50 with android 10

    Using Kaspersky for my AV"

    The "main components" designation might be a term specifically used by Kaspersky. Is that the only place you see it mentioned?

    I also changed the post owner of the OP in this thread to the actual member's username.
    10-01-2020 01:48 AM
  5. Username0000000's Avatar
    Also in the settings app.... Kinda

    (The screenshot is from the search field in the settings app)

    I can see it in those results (and only there) but I cannot interact with it
    10-01-2020 01:51 AM
  6. Username0000000's Avatar
    Also what do you mean about the AVs? How do you defend your phone if you are not using them?
    10-01-2020 02:30 AM
  7. B. Diddy's Avatar
    Ok, go to Settings>Apps, then tap the Menu button (the 3-dot button at the upper right), then Show System. Now look through the App list to see if there's something called Main Components there.

    Regarding antivirus, here's my usual spiel:

    For the most part, it's still quite difficult to get an actual virus on your phone, because malware requires you to manually accept the installation (which is why they try to fool you into thinking you're installing something legitimate). Use common sense:


    1. Avoid shady websites that deal with things like porn, gambling, and "free" (aka pirated) apps/music/movies.


    2. Never ever tap on a link that appears in a popup while browsing, especially if they're warning you that your phone is infected -- they're just trying to scare you into installing some bogus "antivirus" app that is probably malicious itself.


    3. Only install apps from well-established app sources like Google Play Store or Amazon Appstore. Read a bunch of app reviews before installing an app to look for any complaints about adware or suspected malware.


    4. Turn on Google Play Protect features in Settings>Google>Security (or in the Play Store settings). This allows Google to periodically scan your phone's apps to look for malware.


    5. Turn off "Unknown Sources" in Settings>Security (or in Special App Access on newer phones). This prevents any app that wasn't obtained from Google Play Store from being installed (which could include malicious apps that are inadvertently downloaded).
    10-01-2020 03:39 AM
  8. mustang7757's Avatar
    OP also contacted me in PM and explained the 2 question they asked , about AV which I explain is not necessary and that app is a normal system app.
    B. Diddy likes this.
    10-01-2020 10:48 AM
  9. Username0000000's Avatar
    Let's say that you've now got one... What do you do short of factory reset
    10-05-2020 12:30 AM
  10. mustang7757's Avatar
    Let's say that you've now got one... What do you do short of factory reset
    What do you mean ?
    10-05-2020 12:40 AM
  11. B. Diddy's Avatar
    Let's say that you've now got one... What do you do short of factory reset
    Do you mean what do you do if you have malware?
    10-05-2020 01:10 AM
  12. Username0000000's Avatar
    Do you mean what do you do if you have malware?

    Stalkerware / Remote Access Trojan
    10-05-2020 02:57 AM
  13. B. Diddy's Avatar
    If you were to have malware like that (which would be very unlikely if you're not frequenting shady sites or installing apps from unreliable sources), then the first step would be to use a good security app like Malwarebytes.
    10-05-2020 04:41 PM
  14. mustang7757's Avatar
    Stalkerware / Remote Access Trojan
    Do you see this somewhere?
    10-05-2020 07:18 PM
  15. Username0000000's Avatar
    Company implicitly insists on us using whatsapp on our personal phones for intra office and client contact work purposes as well as connecting to our work outlook email on them.

    It's been over a year (and 7 phones iOS and droid trying to troubleshoot/shake the issue) but I'm fairly certain it would have been acquired by one of/ both of those points.

    On the aforementioned devices they have access to my screen, cameras, gps data, sms, social app activity and communications, whatsapp voice and text.

    They have alluded to (in response to having observed my seeking help /investigating solutions on my own) that they do it to protect their leads and client data...

    They have not been handling the information gathered discreetly or professionally—sharing either the information gathered or access to the user interface (for lack of a better term) around the office.

    I have been advised by sympathetic parties and have been able to reliably test this by exploiting the human element using unique information under controlled conditions.

    Once when I even let my guard down I came into the office to be greeted by jokes regarding a unique paaradoy porn that I had watched the night before.

    They had also been in contact with my mother whose contact information I made a point of not providing them with.

    Do excuse my relative nativity on the subject of mobile security but regarding your Malwarebytes suggestion... Does that not count as one of the antivirus programs that you had earlier suggested that I avoid?
    10-05-2020 11:00 PM
  16. Username0000000's Avatar
    Do you see this somewhere?
    Please see my response here

    https://forums.androidcentral.com/sh...=1#post6870151

    Thank you
    10-05-2020 11:00 PM
  17. Javier P's Avatar
    Also in the settings app.... Kinda

    (The screenshot is from the search field in the settings app)

    I can see it in those results (and only there) but I cannot interact with it
    Same here with a completely different phone (OP 7). Nothing to worry about.
    What is the (system???) app "main components"?-screenshot_20201006-000345.jpeg
    10-05-2020 11:05 PM
  18. mustang7757's Avatar
    Please see my response here

    https://forums.androidcentral.com/sh...=1#post6870151

    Thank you
    Yeah but I mentioned that was completely safe system app and had it on my Note 20
    10-05-2020 11:08 PM
  19. mustang7757's Avatar
    Do you have anything else for work installed on the phone , since you use it for whatapp calls for work related?
    10-05-2020 11:11 PM
  20. Username0000000's Avatar
    Do you have anything else for work installed on the phone , since you use it for whatapp calls for work related?
    Yes the whatsapp is used for work but I've a second one on another simcard (I've been through 5) that I keep on one of the other 7 phones...

    My personal phone that I use for work is also connected to the company email server...

    I know that the email server connection has the permission/ability to remotely wipe our phones as it outright said so during the start up process...

    However I strongly suspect that whatsapp was the point of ingress as it is plausible that I may have been sent one of those "dubious" links in whatsapp..

    Also I have changed mobile phones 7 times factory resetting them each at least twice before finding out that it came back (switching phones so often as I kept reading that factory reset doesn't always get rid of it)

    Shame too.... was particularly hopeful on the last one as I used entirely new accounts, a new OS, no google backup... Manually switching over all of my 2FAs
    10-06-2020 12:08 AM
  21. Username0000000's Avatar
    Same here with a completely different phone (OP 7). Nothing to worry about.
    Click image for larger version. 

Name:	Screenshot_20201006-000345.jpeg 
Views:	4 
Size:	21.0 KB 
ID:	327414
    Thank you
    10-06-2020 12:08 AM
  22. mustang7757's Avatar
    Yes the whatsapp is used for work but I've a second one on another simcard (I've been through 5) that I keep on one of the other 7 phones...

    My personal phone that I use for work is also connected to the company email server...

    I know that the email server connection has the permission/ability to remotely wipe our phones as it outright said so during the start up process...

    However I strongly suspect that whatsapp was the point of ingress as it is plausible that I may have been sent one of those "dubious" links in whatsapp..

    Also I have changed mobile phones 7 times factory resetting them each at least twice before finding out that it came back (switching phones so often as I kept reading that factory reset doesn't always get rid of it)

    Shame too.... was particularly hopeful on the last one as I used entirely new accounts, a new OS, no google backup... Manually switching over all of my 2FAs
    I think for most part your going be ok .
    10-06-2020 12:25 AM
  23. Username0000000's Avatar
    I think for most part your going be ok .
    and for that least part?
    10-06-2020 12:30 AM
  24. mustang7757's Avatar
    and for that least part?
    Just keep monitoring things
    10-06-2020 12:53 AM
  25. Username0000000's Avatar
    Just keep monitoring things
    It's just distracting to the point of adversely affecting my work... Back mid March I thought I was free of it, I was elated... Had my biggest month of the year...

    Before and since It's eating up my happiness and mental bandwidth. No one can sell like that.

    Anyway thank you for your help
    10-06-2020 01:15 AM

Similar Threads

  1. What case are you getting for your Pixel 5?
    By Super Spartan in forum Google Pixel 5
    Replies: 57
    Last Post: 10-18-2020, 09:13 PM
  2. Replies: 4
    Last Post: 09-30-2020, 09:45 PM
  3. I have an A20 Android what is the bell upper left side of screen
    By Android Central Question in forum Ask a Question
    Replies: 2
    Last Post: 09-30-2020, 08:21 PM
  4. How can i tell which keyboard is russian on a Samsung a20
    By Android Central Question in forum Ask a Question
    Replies: 2
    Last Post: 09-30-2020, 02:29 PM
  5. Replies: 1
    Last Post: 02-01-2018, 06:20 PM
LINK TO POST COPIED TO CLIPBOARD