Cosiloon (advertizing virus)

2018: Installation in smartphones from the plant

In May, 2018 the producer of the antivirus software Avast announced detection of the malware in some budget smartphones. And this undesirable software is set by producers.

It is about the advertizing program under the name Cosiloon which outputs pop-up declarations in the web browser. Avast says that it is software not less than three years are delivered together with smartphones. It is very difficult to delete it as the program is installed at the level of a firmware and has strongly spaghetti code.

Cosiloon displays advertizing

Cosiloon is noticed in gadgets of such producers as ZTE, Archos and myPhone, and is established mainly in the products using the versions of the Android operating system which are not certified by Google. Experts detected an advertizing virus more than in 18 thousand devices in 100 countries, including Russia, Italy, Germany, Great Britain and the USA.

Except advertizing software, on the device any other program, including for shadowing and theft of money can be remotely loaded. How exactly "bad" applications appear on smartphones, specialists did not manage to find out.

Avast notified Google on a problem, and the last began to undertake measures for decrease of the activity of Cosiloon and versions of this application. In particular, Google updated protection of Google Play shop and addressed directly producers for elimination of an advertizing trojan.

Users can independently eliminate a virus, having set at first Avast Mobile Security. It is necessary to find the program under the name CrashService, ImeMess or Terminal with the general Android icon in the Android settings. Then on the page of the application it is necessary to click "Disconnect" (function is available depending on the version of Android), and after deactivation of a dropper (the program which imperceptibly sets a malware) Avast Mobile Security will delete a virus.^[1]

Notes