This forum thread needs a solution.
Kudos0

Automatic installed app safe?

Posted: 19-Dec-2021 | 1:33PM · 15 Replies ·

Hi everyone, I am curious about an app on my phone that I did not install, but Norton said it was safe.

I notice there was a new calculator app on my phone, but I did not install it. I looked to see if it was installed by Google Play and it was not. It was installed by Content Adaptive Backlight Settings. Assuming it was malware/virus, I scanned my phone and this app showed up under App Advisor and it said Recently Installed Apps: Safe.

I uninstalled it anyway, just to be safe. I don't know much about Content Adaptive Backlight Settings, but I think it is a setting in Android? Has anyone experienced something similar? I haven't updated my phone lately, so it is not due to a new system update. I have always thought automatically installed apps are unsafe, but Norton says it is safe.

Thanks for any insight you can give me.

-Norton 360 version 5.22.0.211117004

Labels: Android, App Advisor, Malware Scan, Norton Mobile Security

Replies

Kudos0

Re: Automatic installed app safe?

Posted: 19-Dec-2021 | 5:35PM · Permalink

What device are you using and what Android version?

How did you determine the  Content Adaptive Backlight Settings installed the calculator app? From a quick search, this Content Adaptive Backlight Settings just does what its name says and changes your screen brightness settings automatically. It should not have any way to download an app. 

Did you have any calculator app installed on the device? Maybe it just got updated so you thought it was a new app?

Kudos0

Re: Automatic installed app safe?

Posted: 20-Dec-2021 | 12:47PM · Permalink

Hi Peter, 

My device is a Blackberry Keyone, Android version is Android 8.1.0

I knew that Content Adaptive Backlight Settings installed the calculator app because when I clicked on App Info that is what it said.

I do have calculator on my device, but this was a different one (a separate app).

This morning, I turned on my phone and the app was installed again. This time when I looked at the App Info it said it was installed by com.qti.service.colorservice. I did another System Scan from Norton, and again it showed up saying that is was a Safe App. I clicked on the info and Norton said that this app has no unusual behaviour etc (I can't remember what else). 

I uninstalled it anyway and turned off my phone for the day. When I turned it on again, it hadn't re-installed again.

From a little bit of searching on google, I found some people have had a similar experience finding an app with com.qti.service.colorservice and their anti virus app (not Norton) had picked it up. Some people were saying it was a virus others were saying it is a 'false positive'?? If it a legit app, why is it re-installing each morning and with a different 'installer'?

I am concerned, this behaviour typically means a virus/malware.

Kudos0

Re: Automatic installed app safe?

Posted: 21-Dec-2021 | 9:38AM · Permalink

Hi everyone, I just wanted to add any new info that might be helpful in trying to find an explanation to this issue. When I turned my phone on this morning, it had reinstalled again, this time the installer was com.qti.dpmserviceapp. Again, Norton said it was safe saying: No privacy risks, no unusual behavior, No Ad Networks (no ad networks were found in this app, but ads may be embedded in the content).

It is strange, sometimes it re-installs upon turning on my phone, sometimes it doesn't. (Like yesterday, I had my phone off for over 7 hours, the app didn't reappear when I rebooted my phone). My phone itself seems fine, nothing seems out of the ordinary as of yet.

I am really confused as to what is going on. I have very few apps on my phone and only use the same ones. I haven't downloaded, clicked on links etc 

I am wondering why Norton is saying that it is safe, is it? Is this something I should be concerned about or is there another explanation (and that's why Norton is saying it is safe)? It would be very disappointing if I actually have a problem because Norton's job is to prevent these types of situations or at the very least alert you of them.

Any insight into what might be going on, would be very appreciated.

Kudos1 Stats

Re: Automatic installed app safe?

Posted: 21-Dec-2021 | 12:40PM · Permalink

In your online searching for this issue, were the other users also using a Blackberry device? 

I would suggest downloading and running Malwarebytes for Android..

Kudos0

Re: Automatic installed app safe?

Posted: 22-Dec-2021 | 11:47AM · Permalink

Hi Peter,

There were a few other users, no one mentioned using a Blackberry phone.

I have heard of malwarebytes, but I have never used it before. I will look into it, thanks.

Kudos0

Re: Automatic installed app safe?

Posted: 23-Dec-2021 | 12:18PM · Permalink

Hi Peter,

I turned on my phone after having it off since yesterday morning, and the app did not reinstall! Do you think Norton may be blocking it? Is there a way to find out? It's strange, sometimes it is there and sometimes it isn't. Other times, I have turned on my phone and it didn't reinstall, but my phone had been off for only a few hours, so I was quite surprised to see it not installed again after my phone being off for over 24 hours.

I will try to scan with Malwarebytes anyway, but when I tried to install it, Norton popped up saying "No Info"-what does that mean? Usually, I download or update from Google Play and Norton has the Green pop up "safe".

thanks.

Kudos1 Stats

Re: Automatic installed app safe?

Posted: 24-Dec-2021 | 9:07AM · Permalink

Is there a specific name for this calculator app that gets installed? I'm wondering if it is not something specific to Blackberry???

To see if Norton might be blocking anything, you can check the Activity Log.   From the main Norton interface, tap on the three bars at the top left and click on Settings > Activity Log. Scroll through the recent entries to see if anything is reported.

As for the Google Play app scan by Norton showing No Information, I can confirm I see the same thing. Looking at the app information, the latest update to the app was at the end of November 2021. So it is possible that Norton just has not gotten the latest app checked yet.  Personally, I trust the Malwarebytes developers I am not worried about using their products. I have used them on my PC's for many years now.  

Kudos0

Re: Automatic installed app safe?

Posted: 24-Dec-2021 | 11:07AM · Permalink

Hi Peter,

The calculator app doesn't have a specific name, I don't think, it just says Calculator. I turned on my phone just now and it has not reinstalled. Very strange. The last time it installed (Wednesday morning), it had a different installer again, it was ANT HAL Service. I googled it and it is a android system thing. I am wondering if that is why Norton missed it, maybe this malware is hiding behind a 'system name' so that is why Norton missed it completely. Nonetheless, Norton should've caught it. I don't know if this is something specific to Blackberry, Peter, that is a good question. That would explain it. I googled it, but didn't find anything. I have used Blackberrys for years and never seen something like this. An app that automatically installs, over and over, from different sources, seems odd to me. 

I looked at the Activity Log, nothing seems out of the ordinary.

Thanks for checking the Malwarebytes app for me. I didn't want to install something else that might cause another problem. I will try that next, and let you know how it goes.

Thanks for all your help so far, wishing you and your family a happy holiday

Kudos0

Re: Automatic installed app safe?

Posted: 27-Dec-2021 | 1:05PM · Permalink

Hi Peter,

I tried to install Malwarebytes for Android, but I couldn't find one that said 'for Android' so I tried to install the app that simply said Malwarebytes. But when I tried to install it, Google Play asked to 'finish setting up my account' and to press Continue. I don't normally purchase apps on Google Play so I am guessing that is why that prompt came up, nonetheless I don't feel comfortable filling out anything on my phone with this problem going on.

I have check my phone daily and the app has not re-installed. Is that typical for malware?

Kudos0

Re: Automatic installed app safe?

Posted: 27-Dec-2021 | 6:07PM · Permalink

I have just started researching how to install Android apps on a Blackberry device. It appears there are some app stores for Blackberry devices, and you can use the Google Play Store. This is the app from the Google Play Store I was referring to.    https://play.google.com/store/apps/details?id=org.malwarebytes.antimalware

There is no 'normal malware behaviour. Without some way to gather logs from your device there is no way to confirm what has happened. If you see the calculator get installed again, I would suggest contacting Norton Support and seeing what they can find/suggest.   www.norton.com/contactcs  

Kudos0

Re: Automatic installed app safe?

Posted: 03-Jan-2022 | 9:35AM · Permalink

Hi Peter,

I ran a Malwarebytes scan and it said my device is safe. The app was not on my phone when I did the scan (it hadn't re-installed this morning).

I noticed when the app was re-installing daily, I had my phone on each day. But over the holidays, I have been keeping my phone off mostly, just checking it periodically, and I noticed the app hasn't re-installed. It will be interesting to see, once I head back to work and keep my phone on regularly, if the app will reinstall.

I ran a scan, but didn't turn on any other settings, should I? If I have this app on my phone I want to get the most of it. Will it interfere with the Norton app on my phone? I have always thought that 2 anti virus apps interfere with each other. Which setting should I have on?

Thanks.

Kudos1 Stats

Re: Automatic installed app safe?

Posted: 03-Jan-2022 | 10:59AM · Permalink

I usually only use Malwarebytes as an on demand scanner. So I would suggest uninstalling Malwarebytes until you need/want to use it again.

I would just keep an  eye on things when you are back to work.  I'm not convinced it might not be an Android system update of some kind. That could also explain why you could not uninstall it.

Kudos0

Re: Automatic installed app safe?

Posted: 05-Jan-2022 | 10:52AM · Permalink

thanks Peter. 

What is the best way to uninstall Malwarebytes? I noticed it says "uninstall malwarebytes" in the app (the panel where there is the dashboard, scanning, settings...) or do I uninstall it via my Apps?  Does it make a difference?

Also, I have had my phone on for the last few days and the app has not re-installed. I am wondering if Malwarebytes has blocked it? I would think that Malwarebytes would notify me, if it did. Anyway, does Malwarebytes have an activity log, like Norton does?

Kudos1 Stats

Re: Automatic installed app safe?

Posted: 05-Jan-2022 | 12:55PM · Permalink

I have not used Malwarebytes on Android yet. For activity logs, you would just need to look around in the app for a settings page, or maybe a help link.

I would always use the Android Settings > Apps. That should ensure that all the app data gets removed.

Kudos0

Re: Automatic installed app safe?

Posted: 06-Jan-2022 | 10:01AM · Permalink

Ok, thanks Peter.

This thread is closed from further comment. Please visit the forum to start a new thread.