Multiple Antivirus warnings

[arth1]

Scanning the Experia P with ESET Mobile Security gives the following result:

# of infections:  6

Threat:

A variant of @ApplicUnwnt.Android/Flexion.A

Infected Files

/system/etc/product/applications/magicbox.apk/DeadSpace.apk/classes.dex

/mnt/asec/com.trust5.odp-1/pkg.apk/DeadSpace.apk/classes.dex

/mnt/sdcard/Android/data/com.trust5.odp/files/apks/TigerWoods12.apk/classes.dex

/mnt/sdcard/Android/data/com.trust5.odp/files/apks/PvZ.apk/classes.dex

/mnt/sdcard/Android/data/com.trust5.odp/files/apks/NFSS.apk/classes.dex

/mnt/sdcard/Android/data/com.trust5.odp/files/apks/DeadSpace.apk/classes.dex

Checking, Flexion is a pre-authorized marketing/monetization package used by EA, which is indeed very unwanted.

I have uninstalled the EA package, which takes care of the bottom five, but the magicbox.apk does not appear to be deletable.

Is there any way to get rid of this malware without rooting and breaking the warranty?

Perhaps even worse, if connecting the phone to a PC, it first installs MediaGo, which in turn tries to install PlaystationStoreInstaller.exe, which ESET Nod32 identifies as being infected by Win32/Kryptik Trojan/Rootkit.

Given Sony's history with rootkits, well, I'm a bit worried here.

Is there any other way to sync with a PC without using the MediaGo app?

[Johan]

Thank you for informing us

The security and privacy of our users are important to Sony Mobile.

We are looking into the matter with the relevant partners why the apps above are now reported as unwanted software by the AV supplier.

Regarding MediaGo we can share that we have investigated, but we were unable to simulate the infection process using the same AV you are using.

We will continue looking into the issue but it might good if you run also a full AV scan on your PC.

Please share any outcome with us – we would appreciate it

[starlifter]

Same happened to me. McAfee Mobile security, which was preinstalled on my device, reported after a scan that the ea games app is a threat and I've deleted it, and /system/etc/product/applications/magicbox.afk is infected by Android/G.317a2 but can't be removed.

[Uliwooly]

this is quite interesting

@Johan do you think Sony could post the list of Xperias affected by this?

[Jnathan]

Same here with my Xperia P..Please Sony do something!! Before McAfree didn't detect it why now?Is it really a malware i choose to not remove EA Games till Sony solve it.

[zuhair198]

Same problem with my xperia P... It keeps on notifying that virus detected. I have uninstalled the EA games app but can't delete the .apk which is also reported as infected.

[elfigo89]

i have the same problem and i don't now how can i solve it?...i have to reset my xperia p

?

Messaggio modificato da elfigo89

[_alexdon_]

I have seen an article online where it says some new viruses have been released for Android,so be careful at what you download.I do not think they can infiltrate in the system on their own,they need to be on an apk file which will be installed.

[bernard06]

Same as with me. Starts appearing yesterday. I manage to 3remove 3 out of 4 detected virus by McAfee but I can't remove the last one which is magicbox.apk.

Please help us. Thanks

[_alexdon_]

what is the magicbox.apk?How does it appear on the phone?