Solved

threat found: com.android.mms



Show first post

91 replies

Userlevel 7
Badge +56
I have moved all posts to this one thread. We are sorry your having issues with this and support is aware of the False Positive!
 
Thanks for your patience and again we are sorry,
 
TH
 
From Support:
 
Hello,

Thank you for contacting Webroot Support. We apologize for any inconvenience this issue may have caused.

It does appear the detection in question was a false positive. We have re-evaluated the definition detecting the application you report and corrected the false positive on our end. Within the next 24-48 hours we will release a new definition set with those corrections and you should no longer see that detection. In the meantime, you may choose the option to "Ignore this threat" and this will prevent Webroot from displaying the alert again for that particular app. We appreciate your report and thorough troubleshooting!

Regards,

The Webroot Mobile Threat Research Team
 
Same here. Just woke up from a nap and threat keeps coming up on my messages. WTF?
I immediately reactivated my VZ Protect and ran a scan on my Verizon Note 3 which became "infected" about an hour ago. it detected no threats....
Same problem here
Userlevel 7
Badge +56
From Support:
 
Hello,

Thank you for contacting Webroot Support. We apologize for any inconvenience this issue may have caused.

It does appear the detection in question was a false positive. We have re-evaluated the definition detecting the application you report and corrected the false positive on our end. Within the next 24-48 hours we will release a new definition set with those corrections and you should no longer see that detection. In the meantime, you may choose the option to "Ignore this threat" and this will prevent Webroot from displaying the alert again for that particular app. We appreciate your report and thorough troubleshooting!

Regards,

The Webroot Mobile Threat Research Team
I contacted technical support and recieved an automated message that stated it is a false positive that will be fixed in 24-48 hours.  If you go into Application Manager and look at the messaging app info, you can clearly see that this app tracks your location and reads all your messages.  So even when this "bug" is fixed, you still will be tracked.  I guess just a lot more people are aware of it now! :8
I contacted customer support via this website and received an automated message saying it is a false positive that will be fixed in 24-48 hours.  If you look at the messaging app info on your phone it clearly shows that it does track you and what messages you write, so even when this is "bug" is fixed, you're still monitored.  It's just that now a lot more people are aware of it!:8
Userlevel 7
Badge +56
From Support:
 
Hello,

Thank you for contacting Webroot Support. We apologize for any inconvenience this issue may have caused.

It does appear the detection in question was a false positive. We have re-evaluated the definition detecting the application you report and corrected the false positive on our end. Within the next 24-48 hours we will release a new definition set with those corrections and you should no longer see that detection. In the meantime, you may choose the option to "Ignore this threat" and this will prevent Webroot from displaying the alert again for that particular app. We appreciate your report and thorough troubleshooting!

Regards,

The Webroot Mobile Threat Research Team
I just got the notification as well. Won't uninstall because of messaging app. Hopefully it was a false positive and an update on a definition that was missed. I ignored it 😕 .... I HOPE it is nothing big or an actually spyware. I totally just put my GF through 21 questions asking if she installed a sms spyware onto my phone hahahaha....glad I'm not the only one going through this. ***crossing fingers in a definition problem and a false positive***
Userlevel 1
I have also received this threat warning on my two phones at the same time. Restarted the phone but it didn't help.
Userlevel 7
Badge +56
From Support:
 
Hello,

Thank you for contacting Webroot Support. We apologize for any inconvenience this issue may have caused.

It does appear the detection in question was a false positive. We have re-evaluated the definition detecting the application you report and corrected the false positive on our end. Within the next 24-48 hours we will release a new definition set with those corrections and you should no longer see that detection. In the meantime, you may choose the option to "Ignore this threat" and this will prevent Webroot from displaying the alert again for that particular app. We appreciate your report and thorough troubleshooting!

Regards,

The Webroot Mobile Threat Research Team
 
Thanks everyone,
 
TH
Got the same message back from Tech Support.  Only thing kind of suspect is I got the reply a mere second or two after I submitted it.  Hope it's not just a blanket auto-reply for all false positive submissions. 
Just as we surmised
Yea I was reading about the 500k androids hit in China on 8/2/14
I can not get rid of this virus HELP
Go to :
https://community.webroot.com/t5/Webroot-Mobile-for-Android/threat-found-com-android-mms/m-p/137329/highlight/false#M2950
 
You're not the only one.
from tech support:
 
Hello,

Thank you for contacting Webroot Support. We apologize for any inconvenience this issue may have caused.

It does appear the detection in question was a false positive. We have re-evaluated the definition detecting the application you report and corrected the false positive on our end. Within the next 24-48 hours we will release a new definition set with those corrections and you should no longer see that detection. In the meantime, you may choose the option to "Ignore this threat" and this will prevent Webroot from displaying the alert again for that particular app. We appreciate your report and thorough troubleshooting!

Regards,

The Webroot Mobile Threat Research Team
Same and phone tech support has called it a day.
It just happened to me too!  You posted seconds before I did.  Glad to know I'm not the only one...I guess.  But this is disturbing.  It's a tracking program from what I found from searching on the web.
Exact same problem found on both my wife and my phone earlier this evening. Have been troubleshooting and researching on line for at least 2 hours now and also found Tech Support already closed. We have Samsung Galaxy S-4's and up until a few hours ago we didn't have this problem. I've uninstalled and reinstalled Webroot Secure-Anywhere Complete on both phones, hoping it would prompt a new result...but no change. Found that this "Android.SmsSpy" is listed by Webroot and several other virus scanners as a Trojan Malware Messaging spyware which shows up on our threat scans as  "com.android.mms". The "F-Secure" website summarizes the threat as: SmsSpy.F is a malware that targets banking consumers in Spain, posing as an Android Security Suite application.
 
Well, suffice it to say, it's either a threat definition update that wasn't thoroughly run-through by Webroot before being deployed today, or something bigger is out there that a large number of people now have. I'm on the hold line with Sales to try and get a human-being that I can notify of this potentially high-risk threat...either high-risk to the user, or high-risk to the Webroot company because of the trouble it is now causing many customers...who may opt to use competitive software after this if Webroot doesn't get this under control ASAP. With luck, my already 15 minutes on hold will end with an empathetic and professional agent that will see the value in contacting some on-call technical support personnel to tackle this. I'll update again if a human-being finally answers and we get anything new. Thanks. Paul - Tampa
Got a BS automated message from my trouble ticket.
 
I just received notification that Webroot detected a spyware program called Android.SmsSpy in the messaging program on my phone, but when I try to remove the item it says "Messaging uninstall unsuccesful."  Has this happened to anyone else?  How do I get rid of it?!  I don't want tracking on my phone.  Especially since I don't know why it is there or where it came from.  I can't uninstall or force stop my messaging program, that's how I text.
Webroot is saying it's infected all of a sudden.  Nothing I nor Webroot Complete installed on phone have done yet has cleared the warning/possible infection.
Did Webroot start using a new set of detection signatures?  You tell us, you seem to have all the proper icons attached to your post.
Not sure yet we have another discussion going on here , https://community.webroot.com/t5/Webroot-Mobile-for-Android/threat-found-com-android-mms/td-p/137285/highlight/false

Reply