I searched the web to see if anyone else had experience with this virus and found nothing...I hope this helps someone else save time and their data.
Whilst on Facebook I accidentally clicked on an ad about a live streaming video – and (unbeknownst to me) simultaneously downloaded a virus.
The virus activated whenever I used a browser – I had 2 installed Google Chrome and Samsung Internet. At first one of two web pages kept persistently loading: livezombymil.com and leaked-video.live
Then other sites appeared in quick succession opening multiple pages under a “Redirecting” command:
Dogolurkr.com
Vuwomoby.pro
Hotasianflirts.com
Update-it-now.com
Rancy.xyz
Tours-78-94.wellhello.com
Togakile.pro
Tours.specia1.com
Top.faqtoids.com
Adc.asomolapverdu.com
Private-message.live
2783.noapai.name
Boplodorteruk.com
Called Samsung Tech support and they basically told me that I’d never find where the virus had actually stored itself and best solution was to nuke the phone by doing a factory reset! They didn’t even try… so I thought I would try one more thing… I downloaded Trend Micro – as it’s my PC’s antivirus and activated its Webguard feature.
To my great delight and surprise, TrendMicro immediately identified the malicious web pages and stopped them appearing - It also identified the originating app as: Org.myklos.btautoconnect made by the apk group. I located the btautoconnect app in my phone’s installed app list and DELETED IT - No more problems!! Hope this helps anyone else having the same or similar issues.
Thank you for the tip, @trimbojd. We will definitely take a look into this issue. If you would like to provide any further information or feedback, please don't hesitate to let us know.
