Your browser is obsolete!

The page may not load correctly.

Android territory

Туманность Андроида

Other issues in this category (20)
  • add to favourites
    Add to Bookmarks


Read: 1417 Comments: 19 Rating: 43

When we buy an anti-virus, we rely upon it completely and have no doubts that it will remove malicious files from the system. That’s not always the case, but in those instances users count on the developer's support service to help them out.

And what would you say if the representatives of a company—a manufacturer of security products—offered you the chance to feel like a hacker?

Fortinet experts who discovered a new banking Trojan for Android said that in order to remove it, users must first deprive its rights by executing a specified sequence of actions (Settings → Security → Application administrators → Deactivate) and then remove the Trojan using the ADB utility (Android Debug Bridge).

Deactivate) and then remove the Trojan using the ADB utility (Android Debug Bridge).

Android.BankBot.140.origin really checks whether the Dr.Web anti-virus is installed, but ... after the Trojan detects it on a device, it terminates its activity and removes itself from the system!

#Android #mobile #Trojan #anti-virus_scanning

Dr.Web recommends

Fortinet's experts are absolutely right (although this is not mentioned in the news item) that anti-virus protection must be resident. Due to the way the Android OS is organized, by default the anti-virus does not have permission to remove programs from system areas. As a result, a malicious program launched before the anti-virus scanner is launched (if the user is relying only upon it) will be able to prevent it from running.

Rate this issue and receive Dr.Weblings! (1 vote = 1 Dr.Webling)

Sign in and get 10 Dr.Weblings for sharing the link to this issue via social media.


Unfortunately, due to Facebook's technical limitations, Dr.Weblings cannot be awarded. However, you can share this link with your friends for free.

Tell us what you think

Leave your comment on the day of publication and get 10 Dr.Weblings, or get 1 Dr.Webling for a comment posted any other day. Comments are published automatically and are reviewed by a moderator. Rules for leaving comments about Doctor Web news items.

To leave a comment, you need to log in under your Doctor Web site account. If you don't have an account yet, you can create one.