Is there a way to remove Malware, preinstalled as system app

[Bubba DaCaveman]

Hi everyone my first post here.

I am thinking of rooting the phone and try to remove it, but not sure how to go about it. Internet is filled with redundant posts and videos of how to root, most of them old and not working on the phone.

The app is called QuickTouch. It creates a circular thingamajig on the phone which when touched opens some utility apps. I disabled the screen overlay to hide it from the desktop and also disabled almost all the permissions. I can't untick it's administrator rights, as soon as I do that system app crashes.

This is a screenshot of Malwarebyte detecting a threat.

It tells me to disable the app.

But I can't since the buttons are grayed out.


Malwarebytes and Eset detects it as a threat, Norton and Avast don't. Although I have a feeling that Norton doesn't even scan system apps.

It came preinstalled. Should I leave it as is? My other phone has no such issue, so never concerned myself with rooting before, but this phone is really making me want to root.

Any suggestions from experts is most welcome.

Regards.

P.S: The mobile is an Indian made phone called Ziox Astra Young Pro 4G. And the OS is Nougat 7.0. Should have gone with a Chinese phone like my previous Lenovo

 

[hallux]

Re: Malware preinstalled as system app

Is there any kind of explanation as to WHY those apps think this is a threat? If you've disabled the overlay you may have averted the risk. It's possible they're seeing it as an app collecting data from input.

 

[gordol]

Re: Malware preinstalled as system app

QuickTouch is a utility app available in the Google Play Store, with a 4.4 rating. And a quick scan of the ratings, it appears that the vast majority of the negative ratings are due to a lack of regionalization into English.

 

[Bubba DaCaveman]

Re: Malware preinstalled as system app

Hi hallux, nope no explanation just the one that is in the screenshot above.

Hi gordol, there's an option in the app, to share it's playstore link with friends(like I would) but anyway, that link takes me to a nonexistent app in playstore.

Here's a video of the app inaction. If I tap the middle portion of the app it redirects me to some shady casino site. I guess I will just hide it from view and keep all the permissions disabled.

https://www.youtube.com/watch?v=S7_mE68SkrY



Although, it would have been nicer, if I could get that app and a few other adwares completely out of the system. There's another one called 'Tap n Buy', and I have disabled that too.

I just hope that the phone is secure for some online banking, with all those apps disabled.

Just opened Playstore and saw that 'Google Play Protect' doesn't see it as a threat. Go figure