Wednesday, August 3, 2011

Remove Android.Golddream (Uninstall Guide)

Android.Golddream is a Trojan horse that logs incoming SMS messages and calls, stores certain information in text files and then uploads those files to a predefined website. Cyber crooks repack popular games or applications and then upload the repacked .apk files to certain market places, usually unofficial markets and Chinese web application stores. Android.Golddream runs automatically when the operating system starts. It creates a service called zjService. When user receives an SMS, the Trojan stores sender's address, message body and the time when the SMS was received. When a phone call is made, this Trojan stores date/time and phone number. Android.Golddream also gathers the following information: device ID, SIM serial number, subscriber ID. What is more, the Trojan can download, install/uninstall and execute new packages, send SMS messages and make a phone call. If you have zjService service running on your smart phone or you have recently installed an application from unofficial markets, you should scan your computer with legitimate mobile security application. To remove Android.Golddream from your Android device, please follow the steps in the removal guide below. Good luck and be safe online!

Also Known As: ANDROIDOS_SPYGOLD.A [Trend Micro]


Android.Golddream manual removal guide:

1. Open the Google Android Menu.
2. Go to the Settings icon and select Applications.
3. Next, click Manage.
4. Select the application and click the Uninstall button.

Associated Android.Golddream files:
  • [SET OF RANDOM CHARACTERS].apk
  • zjsms.txt
  • zjphonecall.txt
  • zjphonecall.txt
Additionally, you should scan your device with mobile antivirus software. All major antivirus software vendors offer Mobile Security products.
Share the knowledge:

No comments:

Post a Comment