How To Remove Sandboxed_process0

We reported today on KidsGuard, a powerful mobile spyware. Not only is the app secretly installed on thousands of Android phones without the owners' consent, it also left a server open up and unprotected, exposing the information it siphoned off from victims' infected devices to the net.

This consumer-grade spyware also goes by "stalkerware." It'due south often used past parents to monitor their kids, but all as well often it's repurposed for spying on a spouse without their knowledge or consent. These spying apps are banned from Apple and Google's app stores, but those bans have done little to adjourn the spread of these privacy invading apps, which can read a victim'due south messages, listen to their telephone calls, track their real-time locations and steal their contacts, photos, videos and anything else on their phones.

Stalkerware has go so reviled by privacy experts, security researchers and lawmakers that antivirus makers have promised to exercise more to meliorate notice the spyware.

TechCrunch obtained a copy of the KidsGuard app. Using a burner Android phone with the microphones and cameras sealed, we tested the spyware'due south capabilities. We also uploaded the app to online malware scanning service VirusTotal, which runs uploaded files against dozens of different antivirus makers. Only 8 antivirus engines flagged the sample as malicious — including Kaspersky, a member of the Coalition Against Stalkerware and F-Secure.

Yoong Jien Chiam, a researcher at F-Secure's Tactical Defense unit, analyzed the app and found it can obtain "GPS locations, account name, on-screen screenshots, keystrokes, and is also accessing photos, videos, and browser history."

KidsGuard's developer, ClevGuard, does not make it like shooting fish in a barrel to uninstall the spyware. Only this cursory guide will assist you to identify if the spyware is on your device and how to remove it.

Before you continue, some versions of Android may have slightly different menu options, and you accept these post-obit steps at your own run a risk. This only removes the spyware, and does not delete any data that was uploaded to the cloud.

How to identify the spyware

If you accept an Android device, go to Settings >Apps, then scroll down and meet if "Organization Update Service" is listed. This is what ClevGuard calls the app to disguise it from the user. If you see it, it is likely that you lot are infected with the spyware.

Get-go, remove the spyware as a "device administrator"

Go to Settings > Security, thenDevice administrators, and so untick the "System Update Service" box, then hit Deactivate.

Then remove the app'south "usage access"

Now, go back to Settings > Security, and then ringlet to Apps with usage access. In one case here, tap on "System Update Service," then switch off the let usage toggle.

Also remove the spyware'due south "notification access"

In one case that is washed, go back to Settings > Sound & notification, so go to Notification access. At present switch off the toggle for "System Update Service."

Now y'all can uninstall the spyware from your device

Post-obit those steps, yous have effectively disabled the spyware. Now you lot are able to uninstall it. Go to Settings > Apps and scroll downwards to "Organisation Update Service." You should be able to hit Uninstall, but you may need to hit Force Stop starting time. Tap OK to uninstall the app. This may accept a few minutes.

Secure your device again

Now that you've rid your device of the spyware, y'all'll need to enable a couple of settings that were switched off when your device was starting time infected. Firstly, go back to Settings > Security, then switch off the toggle for Unknown sources . Secondly, get to the Play Store > Play Protect . If you have the selection, select Turn on . One time it's on, yous should check to ensure that it "looks expert."

Source: https://techcrunch.com/2020/02/20/kidsguard-remove-stalkerware/

Share this post