adware on iphone

Question

Level 1

9 points

adware on iphone

Hi there,

I have some adware on my iPhone 4S. It seems to be related with Facebook app but I removed and reinstalled it and the adware is still there. It brings a pop-up with something like webdav..... when I clicked details I could see *.smartweb.tw and a looooong trusted certificate.

I searched the web, for long, I searched this forum, I tried all menus in Settings to find some place where to remove this: no way.

So please, any clue? Someone there with a solution for these annoying pop-ups?

Really appreciate any help : )

Regards.

iPhone 4S, iOS 7.1.2

Posted on Mar 13, 2015 10:25 AM

Reply

Answer 1

Mar 13, 2015 10:29 AM in response to pacoperezz

Unless your iPhone has been jailbroken, then it does not have any malware, including any adware.

If you think it is specific to the Facebook app, then delete the app, leave it deleted, and test for the issue.

Reply

Answer 2

pacoperezz Author

Level 1

9 points

Mar 13, 2015 7:14 PM in response to TJBUSMC1973

Hi TJ,

Thanks for your answer, it's not jailbroken.

Yes, you are right, if I keep Facebook out the issue ends but obviously that is not a solution, I want Facebook in and adware out.

Yesterday, only to try, I deleted all history and cookies in Safari, let's see whether it's related or not.

Any other idea?

Reply

Answer 3

MadMacs0

Level 5

5,233 points

Mar 15, 2015 6:12 AM in response to pacoperezz

Perhaps you router has been compromised. Do you have any other computers or devices that display this behavior?

See Fixing a hacked router.

Reply

Answer 4

pacoperezz Author

Level 1

9 points

Mar 15, 2015 6:54 PM in response to MadMacs0

Thanks MadMacs0, I don't think so. I have connected here 2 laptops, an iPhone 3GS, an iPhone 4S (the one with the issue) and an iPad 2. Everything working fine, only the 4S is doing this.

I'm pretty sure that something has been unintentionally installed on that iPhone, the thing is HOW to uninstall it. I'm thinking to reset the iPhone but 2 things stop me: one, that I don't know what I will lose after restoring the backup, because, you know, a selective backup is leaving always something behind; and two, that for sure I will have to spend 1-2 hours till the iPhone is again in normal service.

Yet I think that the solution is to find a way to remove/delete Trusted Certificates individually, but HOW?

Reply

Answer 5

pacoperezz Author

Level 1

9 points

Mar 15, 2015 11:10 PM in response to pacoperezz

Look at this:

(It's in Spanish but I think you can understand)

In the screen details there are like 20 screens down length.

Reply

Answer 6

AKRBTN

Level 6

8,869 points

Mar 16, 2015 2:52 AM in response to pacoperezz

I get that from time to time. I just press Continue. It's just saying that it cannot verify the server's identity. Not sure it's anything to worry about.

Reply

Answer 7

pacoperezz Author

Level 1

9 points

Mar 16, 2015 5:27 AM in response to AKRBTN

Well, if you read the second screenshot you can see:

www.dvb.de

Equifax Secure Certificate

Authority

No fiable (what in English means Not reliable)

Maybe it will not burn my mobile on flames : )) but definitely it's not a good thing and the most important, I never installed it willingly and I don't know which data it's taking from my mobile and to whom it's sending those data.if any.I want it out of my mobile : ))

One more remark: there is not only one certificate, there are different ones, I have already seen at least 3 or 4 different. I mentioned here only www.dvb.de and *.smartweb.tw, both under webdav.facebook.com, but there are some more. I will try to catch them.

Reply

Answer 8

Smallery

Level 1

8 points

Mar 19, 2015 7:17 AM in response to TJBUSMC1973

I am having a similar issue with my iPhone6 and iPad. In Safari, using Google search, if I click on an offered URL option, the browser takes me to the correct website URL for about 1-3 seconds and then it redirects, through a series of URLs I can see flashing by in the URL window....it finally lands on a page to purchase Game Apps. This happens EVERY TIME I try to access a website. One of the URLs it lands on is "c.mobpartner.mobi"

I've tried deleting history/data/cookies and resetting, multiple times.

Any ideas?

Reply