Virus Help, Wife's droid had a triangle in notification bar

[1wired1]

it said that her gmail wasn't signed in and prompted her to enter her password. she did even though her gmail was signed in and working fine. then her email started sending random emails to large groups of people from her address book.

any help or ideas?

Thanks
1w1

[GeLopez]

factory reset

[Juggernaut]

Sounds like you were phished. I would suggest changing your gmail password now. Have you installed any apps lately?

[1wired1]

Sounds like you were phished. I would suggest changing your gmail password now. Have you installed any apps lately?

I had her change passwords to everything she has.

not sure if she has installed any apps lately.

[1wired1]

factory reset

will that remove all apps she has downloaded and everything else she has done?

[aminaked]

1) change your password
2) try to track down the app that pulled this trick, uninstall it, and report it to google

Why don't you list all of your apps here so we can help track down the problem?

By the way, this isn't a virus, it's a phishing trojan.

Be careful what privileges you grant to an app when installing. Be careful what apps you put passwords into. Only install software from trusted sources--like not off some random web page.

[chewy74]

good read

How to be safe, find trusted apps, & avoid viruses - A guide for those new to Android

[1wired1]

I dont have her apps list yet, but she said she hasn't downloaded an app in about 4+ months.

[cromo8]

oh wow 4+ months, well hmm id definately would change passwords and backup all her apps with my backup im guessing she has no root access

if you do a factory reset deletes all apps and messages, alarm clock plus all other data, yes contacts too unless saved to google account

[aminaked]

Well, it is certainly possible that her droid isn't responsible for her account getting hacked. The usual way this happens is through a desktop/laptop computer's web browser. A page gets loaded that runs in the background and prompts the user for a password, an addon gets installed, a browser is not up to date, someone is using Internet Explorer...

Change the gmail password to something very hard to guess and hopefully the problem will be solved. You also should check that your security questions haven't been changed and that a filter hasn't been set up to forward email to the person who cracked her account.