Help with Samsung phone infected by a fake scanner app

Infected operating system
Android version 13
Infected device
Samsung Galaxy note 20
Infected device issues
Hi, I need help with my android phone. Today i had a pop-up whilst using a pdf scaner app on my samsung phone which said i needed to update the software or loose all scanned files. I clicked on the update link and it obviously was a virus which basically changed my phone's homescreen immediately and the layout of all my apps. It seems to have downloaded something called Document Reader-PDF launcher on my homescreen and i can not uninstall it or remove it
I do not know how to get my phone back to how it was setup? Any help would be greatly appreciated
Steps taken to remove the infection
I tried to download the kspersky app but even though i have an account in Europe it wont let me download the app here in the US ... i think because of the regional issues.
Browsers affected by infection
  1. Chrome
Browser extensions
No sure what this is about so cant answer this sorry

Pirate pete

New Member
Thread author
Feb 6, 2026
1
0
1
Hi, I need help with my android phone. Today i had a pop-up whilst using a pdf scaner app on my samsung phone which said i needed to update the software or loose all scanned files. I clicked on the update link and it obviously was a virus which basically changed my phone's homescreen immediately and the layout of all my apps. It seems to have downloaded something called Document Reader-PDF launcher on my homescreen and i can not uninstall it or remove it
I do not know how to get my phone back to how it was setup? Any help would be greatly appreciated
 
Hi, I need help with my android phone. Today i had a pop-up whilst using a pdf scaner app on my samsung phone which said i needed to update the software or loose all scanned files. I clicked on the update link and it obviously was a virus which basically changed my phone's homescreen immediately and the layout of all my apps. It seems to have downloaded something called Document Reader-PDF launcher on my homescreen and i can not uninstall it or remove it
I do not know how to get my phone back to how it was setup? Any help would be greatly appreciated
Sorry you’re dealing with this — what you describe sounds like a “launcher” style scareware/adware app that set itself as your Home screen (launcher) and may have given itself extra permissions to block removal.

1) Immediate containment (do this first)
  • Turn on Airplane mode (or at least disable Wi‑Fi and mobile data) to stop further downloads/ads.
  • Do not tap any more “update” prompts from that app.

2) Switch your phone back to the normal Samsung Home screen
The fake app likely set itself as the default “Home app”.

  • Go to Settings -> Apps
  • Tap “Choose default apps” (or “Default apps”)
  • Tap “Home app” (or “Home”)
  • Select “One UI Home” (Samsung) instead of anything like “Document Reader”, “PDF Launcher”, etc.

If you can’t find it via Settings -> Apps, also try:
  • Settings -> Apps -> (three dots menu) -> Default apps -> Home app

3) Boot into Safe mode (prevents most third-party apps from running)
On most Samsung phones:
  • Hold the Power button until the power menu appears
  • Press and hold “Power off” until “Safe mode” appears
  • Tap “Safe mode”

In Safe mode, the “Document Reader-PDF launcher” should usually stop taking over, making it easier to remove.

4) Remove the malicious/suspicious apps (including the original PDF scanner if needed)
While still in Safe mode:
  • Settings -> Apps
  • Find “Document Reader-PDF launcher” (and any other recently installed/unknown app around the time this happened)
  • Tap it -> Uninstall

If “Uninstall” is disabled, it usually has an “admin” style permission.

5) Check and disable the permissions that commonly block uninstall
Do these in order (not every phone shows all of these, but check what you have):

A) Device admin apps
  • Settings -> Security and privacy (or Security) -> More security settings
  • Device admin apps (or Device administrators)
  • Disable anything suspicious/unknown (especially related to “Document Reader”, “PDF”, “Launcher”)
  • Then go back to Settings -> Apps and try Uninstall again

B) Accessibility Services
  • Settings -> Accessibility -> Installed apps (or “Services”)
  • Turn OFF any suspicious service (these are often used to prevent removal and to click things in the background)
  • Then try Uninstall again

C) “Appear on top” / Display over other apps
  • Settings -> Apps -> Special access -> Appear on top
  • Turn OFF permission for suspicious apps

D) “Install unknown apps”
  • Settings -> Security and privacy -> Install unknown apps
  • Make sure your browser / file manager is not allowed unless you intentionally use it

6) Run a basic built-in check
  • Open Google Play Store -> Play Protect -> Scan

You can also scan with a reputable mobile security app, but Play Protect is a good first step.

7) After removal: clean up and reduce risk
  • Restart normally (exit Safe mode).
  • Check your Home app is still “One UI Home”.
  • Review and uninstall the original PDF scanner app if it’s the one that displayed the fake “update or lose files” message.
  • Open your Downloads folder and delete any newly downloaded APK files if you see them.

8) If you still cannot remove it
At that point, the safest path is usually a factory reset, because some of these apps dig in via multiple permissions and keep reinstalling components.

Before factory reset:
  • Back up important photos/files (but avoid backing up/restoring unknown “apps”).
  • If you logged into anything or typed passwords while this was active, change passwords from a different trusted device (especially Google account, email, banking).

Then:
  • Settings -> General management -> Reset -> Factory data reset
  • After reset, reinstall apps manually from the Play Store (avoid “restore all apps” if possible).

If you want forum members to help confirm exactly what’s installed
Post screenshots of:
  • Settings -> Apps (sorted by “Recently installed”)
  • The app’s details page showing permissions and the “Uninstall” button state
Also, if this looks like a Play Store app, report it in the Play Store listing as harmful.

The key takeaway: set your Home app back to “One UI Home”, then uninstall in Safe mode, and if uninstall is blocked, remove Device Admin/Accessibility permissions first.