Is this malware? If so how do I remove it?

[AC Question]

Today when I went to the web - I think it was google but it was a regular web site, not porn nor anything like that - I got this popup that said "System Warning!! Your Generic Tablet software version is too old. Installing the new Google 360 Security update will update your Android version to Android 5.1.3 (78% faster)
Click the button below to install new Google 360 Security from Google Play for FREE.
UPDATE NOW."

At first I did think this was legit but then I noticed the web url was cx1app.com which didn't seem very legit.

I checked it online and it's set in the Netherlands.

I checked all my apps and I don't see anything even slightly dodgy except maybe (?) rofl.nu or batterybooster which does come with adware. I uninstalled BatteryBooster and I'm guessing what I saw was an affiliate ad for google security...?

Basically I am assuming it is malware but how do I figure out where the malware came from and get rid of it?
I ran a scan with malwarebytes anti-malware and it showed no malware.

Here's a jpg of the message:
[I was told I could not post a link and apparently I can't upload an image either...]

 

[pdsnickles]

Today when I went to the web - I think it was google but it was a regular web site, not porn nor anything like that - I got this popup that said "System Warning!! Your Generic Tablet software version is too old. Installing the new Google 360 Security update will update your Android version to Android 5.1.3 (78% faster)
Click the button below to install new Google 360 Security from Google Play for FREE.
UPDATE NOW."

At first I did think this was legit but then I noticed the web url was cx1app.com which didn't seem very legit.

I checked it online and it's set in the Netherlands.

I checked all my apps and I don't see anything even slightly dodgy except maybe (?) rofl.nu or batterybooster which does come with adware. I uninstalled BatteryBooster and I'm guessing what I saw was an affiliate ad for google security...?

Basically I am assuming it is malware but how do I figure out where the malware came from and get rid of it?
I ran a scan with malwarebytes anti-malware and it showed no malware.

Here's a jpg of the message:
[I was told I could not post a link and apparently I can't upload an image either...]

I started this thread before I signed up. Here is the jpg that shows the popup Warning and this is on a Galaxy SM T320 which I think is also called the Galaxy Tab Pro.

What I want to know is:
Is there a way to determine which app caused this pop-up warning which I think it pretty clear is an ad and not a true system warning...? Have only had my tablet or any tablet a short while so am trying to figure out if this is a common thing and how to deal with it?

 

[dmarchen]

Hi

Please help, I have the same issue with my Galaxy Tab 3 and Galaxy Note 2. I already restore to fabric default but the behavior persist, I dont know which app is causing this.

I tested a free antivirus but it didnt detect a thing.

Please HELP!!!!

 

[datoika999]

Try avast ot ccleaner

 

[Rukbat]

It could be just a popup on the site that activates if an Android phone connects. Otherwise, Avast Mobile Security & Antivirus and Malwarebytes Anti-Malware should get rid of it. (I haven't heard of a version 5.1.3 being released yet.)

 

[dmarchen]

Hi
I already try with Avast, CCleaner , Malware bytes but they didnt find a virus. I also probe with different browser Opera, Chrome, Firefox and the default.

Please consider that both devices (GAlaxy Note 2 and Galaxy Tab 3 has been restore to fabric defaults)
I cannot open web pages

Is there something else to do?

 

[pdsnickles]

I wonder if this might be a popup related to an app that pushes adware along with it such as maybe rofl or ? I suspect this one because when I uninstalled it I quit getting this popup. Could be coincidence though and I'm not sure rofl pushes adware or not, it's just a thought...