A forum for reverse engineering, OS internals and malware analysis 

Forum for analysis and discussion about malware.
 #18439  by TwinHeadedEagle
 Wed Mar 06, 2013 12:04 pm
It seems that I managed to infect my Galaxy phone somehow...at least I think.

Last night I installed suspicious app, and since that time, Play Store started to misbehave. In short, it's not like it was before...

When I search, it shows me strange results.

Normal search
256965_tmb_454190247_uploadfromtaptalk1362570170874.jpg
256965_tmb_454190247_uploadfromtaptalk1362570170874.jpg (49.89 KiB) Viewed 446 times
My Search
256965_tmb_56773782_Screenshot_2013-03-06-11-49-32.jpg
256965_tmb_56773782_Screenshot_2013-03-06-11-49-32.jpg (32.46 KiB) Viewed 446 times
Here is the VT result

https://www.virustotal.com/en/file/0000 ... /analysis/
Attachments
pass: infected
(1.47 MiB) Downloaded 54 times
 #18541  by BachMinuetInG
 Fri Mar 15, 2013 2:10 pm
That file is a crack right? :shock:

There's a 'RewtHelper' file in the assets folder! :?: