futeko.com FORUM

Product Support => HiMedia Q10 Pro, Q5 Pro => Topic started by: maelor on December 20, 2016, 04:21:22 PM

Title: Trojan?
Post by: maelor on December 20, 2016, 04:21:22 PM

I've just run Malwarebytes on my q10 and it claims there is a Android/Trojan.Pmoqs.b in the file /system/app/HiRMService/HiRMService.apk  >:(

Should I do anything about it?

Title: Re: Trojan?
Post by: magnifico on December 20, 2016, 06:59:12 PM

Just imagine this app would not have found this problem?!
You might have gotten the idea this app is useless.
Now...guess what? This type of apps tend to alarm on things totally normal. To look like being an important app.
Now give it treat and leave things they are. This is a service app used in the background by Himedia.
Removing might break things immediately.

Title: Re: Trojan?
Post by: maelor on December 21, 2016, 11:27:54 AM

Magnifico, I assume that your curt reply is due to your poor grasp of the English language and therefore I will give you the benefit of the doubt! I would expect a more polite response from a "Senior Member". It would have been sufficient to say "This is a service app used in the background by Himedia."

The phrase "Just imagine this app would not have found this problem?" is one that every hacker would be delighted to hear! So are you suggesting that everyone should remove all security software from their devices? Very naive!

I worked in IT for 30 years and was building and commissioning large networks probably well before you were born! So please don't patronise me!

Title: Re: Trojan?
Post by: futeko.com on December 21, 2016, 11:57:44 AM

It's probably a false positive. I can find no reference to Android/Trojan.Pmoqs.b online.

I have asked HiMedia to investigate. What firmware version are you running?

Title: Re: Trojan?
Post by: maelor on December 21, 2016, 04:56:57 PM

Thanks, I could find nothing about it online either and I suspected that it was a false positive also.

I'm using HMD-2.0.0 2016-11-17.181855

Title: Re: Trojan?
Post by: kaosnews on February 03, 2018, 12:17:13 PM

This (HiRamService) is still flagged as a Trojan in the latest firmware.

Title: Re: Trojan?
Post by: pcristi on February 03, 2018, 12:34:29 PM

Quote from: kaosnews on February 03, 2018, 12:17:13 PM

This (HiRamService) is still flagged as a Trojan in the latest firmware.

Where you get it false positive report?

https://www.virustotal.com/#/file/05574994b49d2fc69fcdc5018a5c29ae44eaef764ef38ae5dc18b5dc88489489/

Title: Re: Trojan?
Post by: kaosnews on February 03, 2018, 01:07:27 PM

With Malwarebytes (Android/Trojan.Pmoqs.b). But I trust that there is no virus/mallware in this file. I also double checked the file from my box with virustotal - it's clean!