Troubleshoot How to Remove A Trojan.Dropper.Agent in the Android Setting App

Operating System
Android 8.1.0
Device model
U683CL UMX
Current issues and symptoms
I have been trying to remove a Trojan.Dopper.Agent from the Settings Application in my Android phone for days. I have even tried doing a factory reset on the phone and that Trojan still shows as a malware.
When I do a scan with Malwarebytes it scans that:

1. com.android.settings has a Threat in Android/Trojan.Dropper.Agent.UMXrv
2. When I click to Remove the Threat it does not allow Malware to remove it and it states: Disable System App
Settings is a system app and cannot be uninstalled. Please disable this app manually and we will automatically add it to whitelist.
3. I click on DIsable and it goes to the App Info Settings Installed. I clicked Disabled. Under Advanced Modify System Settings I also click Not Allowed.
I even click Force Stop and i+t brings me back to the message shown on (1) 1. com.android.settings has a Threat in Android/Trojan.Dropper.Agent.UMXrv

I have installed Avast and Kaspersky and both of those scan and and say Your are Protected and did not identify the same malware.

I read the article How to remove Trojan.Dropper.Agent (Virus Removal Guide) which is how I found this forum to ask for Help!
Any help and recommendations on how to remove that specific trojan is greatly appreciated.
Steps taken in order to remove the infection
I have been trying to remove a Trojan.Dopper.Agent from the Settings Application in my Android phone for days. I have even tried doing a factory reset on the phone and that Trojan still shows as a malware.
When I do a scan with Malwarebytes it scans that:

1. com.android.settings has a Threat in Android/Trojan.Dropper.Agent.UMXrv
2. When I click to Remove the Threat it does not allow Malware to remove it and it states: Disable System App
Settings is a system app and cannot be uninstalled. Please disable this app manually and we will automatically add it to whitelist.
3. I click on DIsable and it goes to the App Info Settings Installed. I clicked Disabled. Under Advanced Modify System Settings I also click Not Allowed.
I even click Force Stop and i+t brings me back to the message shown on (1) 1. com.android.settings has a Threat in Android/Trojan.Dropper.Agent.UMXrv

I have installed Avast and Kaspersky and both of those scan and and say Your are Protected and did not identify the same malware.

I read the article How to remove Trojan.Dropper.Agent (Virus Removal Guide) which is how I found this forum to ask for Help!
Any help and recommendations on how to remove that specific trojan is greatly appreciated.

SCAndroid

New Member
Dec 12, 2020
1
Hello Tech Doctors,
Any help is greatly appreciated.

I have been trying to remove a Trojan.Dopper.Agent from the Settings Application in my Android phone for days. I have even tried doing a factory reset on the phone and that Trojan still shows as a malware.

When I do a scan with Malwarebytes it scans that:

1. com.android.settings has a Threat in Android/Trojan.Dropper.Agent.UMXrv
2. When I click to Remove the Threat it does not allow Malware to remove it and it states: Disable System App
Settings is a system app and cannot be uninstalled. Please disable this app manually and we will automatically add it to whitelist.
3. I click on DIsable and it goes to the App Info Settings Installed. I clicked Disabled. Under Advanced Modify System Settings I also click Not Allowed.
I even click Force Stop and i+t brings me back to the message shown on (1) 1. com.android.settings has a Threat in Android/Trojan.Dropper.Agent.UMXrv

I have installed Avast and Kaspersky and both of those scan and and say Your are Protected and did not identify the same malware.

I read the article How to remove Trojan.Dropper.Agent (Virus Removal Guide) which is how I found this forum to ask for Help!
Any help and recommendations on how to remove that specific trojan is greatly appreciated.
.
 

Thiag0

Level 1
Jan 2, 2021
11
This UMX device (and others) has some really serious security issues, so i'd recommend either placing a custom ROM (if you're an advanced user) or get a new device. I wouldn't put sensitive info (banking, etc) on that phone

Even though they claimed to "remove the pre-installed malware" , i'd not trust them.
 
Last edited:
  • +Reputation
Reactions: oldschool

sstone189

New Member
Jan 4, 2021
1
This UMX device (and others) has some really serious security issues, so i'd recommend either placing a custom ROM (if you're an advanced user) or get a new device. I wouldn't put sensitive info (banking, etc) on that phone

Even though they claimed to "remove the pre-installed malware" , i'd not trust them.
Yes, they didn't remove anything. The malware was gone for a few months but is back already after their latest phone updates. I would say don't update this phone anymore if you don't have malware on it, because the next updates will add it all back.
 
Top