UMI Rome: malware bytes reports 1 malware detected

tr131

\n\nHi Guys,

Received my Rome in the mail yesterday and started setting it up. I installed MalwareBytes and ran a scan. It's reporting one malware detected:

Android/PUP.HackTool.MgYun.a

in /data/app/com.mgyun.shua.protector-1/base.apk


Is this a false positive? Or did I get malware with my phone? If so, what should I do?

Thanks in advance for your help.

Edit: oh, also, the phone came with an app called SuperSU installed. Is this right? What's it for?

King_of_Portman

Phones, like computers, are vulnerable to malware. The most important thing is that it is not ransomware (http://soft2secure.com/knowledgebase/cry128-cry9)
Read the article, here is described the main method of removing ransomware - a free version of emsisoft

zgf

Phone is pre-rooted (isn't it, test eg by installing Root Checker) and SuperSU is the famous root access manager. You can find the both mentioned apps on Google Play. Searching on Google can provide you tons of materials about SuperSU, particularly a devoted discussion on XDA.

tr131

zgf replied at 2015-12-30 16:30
Phone is pre-rooted (isn't it, test eg by installing Root Checker) and SuperSU is the famous root ac ...

Thank you! Okay, so the superSU is okay. Now hopefully the malware report is a flase positive, then I can relax.


Thanks again.

tr131

So, an update. Flashed the phone using Umi's RootJoy and the rom that it's now offering - version 3.01 1229.

No malware this time. So, I guess I had malware on the new phone that arrived. Interesting.

Pilantra

I'll do it too, to see in my rome.

Saschimi

tr131, where did you buy your phone? I heard some reseller install malware on phones, but it´s just a rumor...

My Rome came from efox-shop, it had the version 3.01 already installed.

overrid3

mgyun offers a root tool for android smartphones (see VRoot or iRoot). rooting often uses an exploit in the android system, therefore it might be detected as malware (especially on PC). PUP stands for potentially unwanted program which might be true, sometimes, depending on phone model the iRoot app installs some adware app to show you ads on your phone, maybe so they can make a buck.
Google for mgyun root.