Hp slate 7 3403es ghost push trojan issue

[Misulica03]

I have a hp slate 7 3403es, a few days ago i restored it to factory settings and installed The usual apps from g market. After install i started having a lott of ads on the screen, and started installing by its own apps (with porn content). I have a small daughter and this îs her play tool, so its a big issue. I tried everything - malwarebytes, eset, stubborn, zemana but nothing worked. The Last solution i understand its Doing a fresh firmware reinstall.
I tried to do factory reset, hard reset with cache wipe, didnt work... The slate its not root ed, and for that matter a lott of push ghost killers dont work.
My local repair shop ( România) sayd The tablet cant be root ed.

All în one, i need a solution!

[WyreNut]

Hello, and Welcome to the HP Support Community!

Strange situation you have there!  Sorry it's been so troublesome...

I suspect you have downloaded an app that is hiding a virus.  When you wiped the tablet via the Factory Reset, it reloaded all the apps from when you logged back in with your Google identity, correct?

As an experiment, you could create a new Gmail/Google account and use that after doing another Factory Reset.  If the malware does not reappear, then you will have to determine which app that is tied to the other logon is causing the problems.

Is your child surfing the web unsupervised?  She may be accessing a toxic site and be totally unaware.

Good luck!

WyreNut

[Misulica03]

I tried with other gmail account, it doesnt work. My daughter uses off-line apps, YouTube cartoons or The notorios Tom ( The cat).
One of The apps that i tried to delete The trojan says The infected files are :. Install-recovery. No. Sh , install-recovery.sh-nu.bak, certificateinstallerproviders.apk, installerprotect.apk, COM.iduo.tual-1.apk, and something cleaner.apk that doesn't appear always.

[WyreNut · Accepted solution]

---

@Misulica03 wrote:
I tried with other gmail account, it doesnt work. 

---

What does the above mean?  The malware returned even with new account, and no apps installed?

As a last resort, you could try re-flashing the firmware from this link:

http://support.hp.com/us-en/drivers/selfservice/HP-Slate-7-HD-Tablet/5447828/model/6475054

If it were my device, I'd start uninstalling any "free" apps one by one and see if the issue disappears, including anti-virus/malware apps.

WyreNut

[Misulica03]

I allready tried with another gmail account, and it didn't work (yes, the mallware is this installing by its own) . Now i have local alarm apk and fast boot apk new trojan. I uninstalled all the free apps ( that i downloaded from g market )  andall  i got is the new trojan detections. 

The funny thing is, i never thought android can be this vulnerable to trojan and viruses! 

This is making me thing how well my win mobile phones worked and how few problems i had with them. 

I`ll try reinstalling the firmware.

After i googled this problem, it seems that when my apps uploaded , one of them ( i guess cleaner apk ) had this kind of trojan in the update .

As this problem occured , i checked all my phones ( because i use android ) to see if it could be a problem from my computer.... but this wasnt the case !

Hoppely g market will do a better management of the posted apps . 

I`ll try the firmware reinstall and will be back with a answer if the solution is working. 

PS: please put some tag words to this topic, so that other with the same problem could solve it with less stres than me.

update 1: when trying to install the firmware i get the following error : Can't install this package ( Mon Jun 15 15:38:16 CST 2015) over newer build ( Thu Jul 2 14:28:33 CST 2015) , so i think the version provided by hp to download is older then the version got from wifi update. Any solution?

update 2 : i finally  installed the update.zip with 446.4 MB, seems this is my version.

After install the tablet its working perfect, the issue seems to have been cleaner.apk .

Thank you very much for your fast help! 

[WyreNut]

My pleasure!  Glad you/we got it all sorted out.  🙂

WyreNut