Community

arth1

Scanning the Experia P with ESET Mobile Security gives the following result:

# of infections: 6

Threat:

A variant of @ApplicUnwnt.Android/Flexion.A

Infected Files

/system/etc/product/applications/magicbox.apk/DeadSpace.apk/classes.dex

/mnt/asec/com.trust5.odp-1/pkg.apk/DeadSpace.apk/classes.dex

/mnt/sdcard/Android/data/com.trust5.odp/files/apks/TigerWoods12.apk/classes.dex

/mnt/sdcard/Android/data/com.trust5.odp/files/apks/PvZ.apk/classes.dex

/mnt/sdcard/Android/data/com.trust5.odp/files/apks/NFSS.apk/classes.dex

/mnt/sdcard/Android/data/com.trust5.odp/files/apks/DeadSpace.apk/classes.dex

Checking, Flexion is a pre-authorized marketing/monetization package used by EA, which is indeed very unwanted.

I have uninstalled the EA package, which takes care of the bottom five, but the magicbox.apk does not appear to be deletable.

Is there any way to get rid of this malware without rooting and breaking the warranty?

Perhaps even worse, if connecting the phone to a PC, it first installs MediaGo, which in turn tries to install PlaystationStoreInstaller.exe, which ESET Nod32 identifies as being infected by Win32/Kryptik Trojan/Rootkit.

Given Sony's history with rootkits, well, I'm a bit worried here.

Is there any other way to sync with a PC without using the MediaGo app?

bernard06

I dont know also what is magicbox.apk. I think it is together with EA Sports that McAfee detected as possible malware also. I'm not sure about this but I started only to here about this magicbox yesterday when McAfee is reporting it as a virus.

_alexdon_

You say it is for ea sports?I had only ea games but i could remove the application.I will give a search with my computer antivirus to see if it finds anything.Could you do that also?

alexdon

_alexdon_

ok,i found these applications where mcaffee says.system/etc/product/applications/ with an android file explorer(androzip).There i can find magicbox and other apps from the installation of the firmware,but nothing can be deleted there,they are system files and i do not think we can delete without rooting.

alexdon

leonardo20000

I have the same problem...

_alexdon_

these files are preinstalled with the software,that is stranger,it means the virus was already in our phone.or how could it get directly to magicbox.apk?

alexdon

Jnathan

Maybe the problem is our antivirus don't think its a malware. But Mcafree notification is annoying hope Sony do something..

Uliwooly

I agree with Jnathan it is not a virus and as far of malware I don't think it is but it seems as it might be collecting info and sending it somewhere, do this

settings > apps > all > do you see that app? also settings > data usage > do you see that app?