Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 8 subscribers
  • Views 2544 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Low reputation app

Lukas Lohn

Hi,

 

Sophos did notify me while charging my freshly factory resetted Samsung Tablet about a "low reputation app".

 

All my Sasmung devices seem to update/install apps while charging. Atleast the Sophos notification idicates they do. Its the same Scan result as normally installed/updated apps. They do this while "automated Updates" are DISABLED in PlayStore. I updated all my Apps manually before charging my Phone. The Number of Apps before this Sophos notification and after it was the same. So no additional app was installed. I also have disabled installation of apps via unknown sources. The path in the 2nd picture indicates a PlayStore loaded app anyways.

 

I had this kind of a message from Sophos on another Samsung device too (1 year ago so i dont remember the code/id). On others i never got a warning from Sophos. Even on similar device (aka same Android version).

 

Another "security" app on my Tablet notifies my about app installations too. At 03:20 i didnt show any installation.

 

I could find anything online regarding this strange number/code shown by Sophos. My guess would be that it is same kind of internal code/id for PlayStore Apps ...

 

The storage/... path was empty when i checked it. Sophos says the file/app was removed from safety assessment seconds after the warning message. What does this mean?

 

Might this be a false positive?

 

Thx.

 



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Shweta

    I did another test with a different model of a Samsung Tablet + factory reset + different WLAN and i got a similar notification by Sophos too. The ID/number was different. But it popped up during charging too.

     

    I thought that the Samsung App "Daily Board" is the culprit. I usually disable it after a fresh install on a Samsung device. This App activates itself while charging. I did another factory reset with the Tablet from my 1st Post and got the same result again. Immidiatly after plugging the Tablet for charging Sophos found the App with low rep. After another factory reset + disabling "Daily Board" nothing showed up so far (even while charging).

     

    On the 2nd device i didnt get a notification from sophos right away after beginning of charge.

  • 0 in reply to Lukas Lohn

    Hi  

    If that is the case, I would suggest you submit the app to our Sophos Labs to analyze if possible. A low reputation does not necessarily mean that the app is a threat, it just means that Sophos is unaware of the app or is yet to be analyzed.

    Shweta

    Community Support Engineer | Sophos Technical Support
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
    The New Home of Sophos Support Videos! - Visit Sophos Techvids
Unfiltered HTML