i think my evo has a virus

jpwhre · #1 (**permalink**) 10-26-2010, 01:00 AM

I had a notice saying my google sync was not auterized to re-enter my password. No luck. So i went online with evo and signed out of google.com. when i tried to log back in it said there was recent suspicous activity with my account, to select region and provide phone # and it would send me a confermation #. Got number and changed password then reloged in with google sync and new password. I then recieved 8 seperate emails show mail sent failed to all contacts. But one went thru and was a link that sent me to http://drugstorepillssite.com/ with link in outgoing mail of Please wait... my kid dropped my laptop and broke it few days ago so only have evo logged into net. This just happened a couple hours ago.

**gTen** · #2 (**permalink**) 10-26-2010, 01:15 AM

Since you have no laptop at the moment...do you have an earlier recovery? if so I suggest make a backup of what you have now, then go back to a previous recovery..once your laptop is fixed investigate what exactly happened.

Also, do you just have root or super user? or just stock? and did you install anything recently?

And check with some of your contacts to make sure it didnt email them the virus (some do that)

jpwhre · #3 (**permalink**) 10-26-2010, 01:24 AM

Full root/nand since 2 weeks after launch. SU but did change from CW recovery to RArecovery few weeks ago to flash 1.77_033 pri and then did a partion to sd card to remove the 2gig partion i had. Did a backup after that while on netarchy final froyo 3.26 root odexed. Yesterday i did myn 3.29 deodexed (not by happy choice though) and then tried to restore privous and it was gone.

**gTen** · #4 (**permalink**) 10-26-2010, 01:30 AM

Quote:

Originally Posted by jpwhre

Full root/nand since 2 weeks after launch. SU but did change from CW recovery to RArecovery few weeks ago to flash 1.77_033 pri and then did a partion to sd card to remove the 2gig partion i had. Did a backup after that while on netarchy final froyo 3.26 root odexed. Yesterday i did myn 3.29 deodexed (not by happy choice though) and then tried to restore privous and it was gone.

I guess for the time being just backup your current rom and flash a new rom..once you get your laptop fixed and have internet access is when you probably want to look into what happened.

jpwhre · #5 (**permalink**) 10-26-2010, 01:40 AM

I have lookout and it showed nothing when i forced scanned.

**gTen** · #6 (**permalink**) 10-26-2010, 01:48 AM

Quote:

Originally Posted by jpwhre

I have lookout and it showed nothing when i forced scanned.

Do you honestly think that by having an antivirus it will protect you? AV is a game of cat and mouse...only once a virus is sent in or identified can it be dealt with...AVs do employ tactics to try to predict it but it is not perfect...

Simply put an AV makes it less likely for you to be infected but the possibility still exists...I'm not saying what happened is a virus for sure..but it boils down to how much of a risk your willing to take.

jpwhre · #7 (**permalink**) 10-26-2010, 01:51 AM

I hate risk, and cats.

jpwhre · #8 (**permalink**) 10-26-2010, 01:54 AM

sorry, no offence. didn't see your profile stat

**gTen** · #9 (**permalink**) 10-26-2010, 02:04 AM

Quote:

Originally Posted by jpwhre

sorry, no offence. didn't see your profile stat

You mean my avatar? lol

Well anyways I'm not trying to scare you..I'm just giving you my advice on what I would do in that situation..what you choose to do is up to you..

I'll ask you this though..does Lookout prevent you from having root access? if not that means there are security flaws in the system..as thats how rooting works..it exploits a vulnerability in the OS to gain root access.

jpwhre · #10 (**permalink**) 10-26-2010, 04:06 AM

Well wifi fix for touch diamond that works on stock/locked tp/tp2 doesnt work on android. Othetwize i wouldn't be rooted and worry about exploits like root. Andrfdoid doesn't have a registry to edit/mamage stock/locked. i'm mobile, a home connection isn't co$t effective.