Downloaded and installed a dodgy apk, hygiene tips?

Ensov

Hi all,

Problem as per title. Downloaded what I believed to be an apk for an desired app, hit install without thinking and the app started immediately asking for permissions to write over other apps. I didn't give the permission, immediately checked app drawer, noticed the name of the app was not there and had a scan through 'applications' to see what it was actually installed as.

I uninstalled the first thing I noticed which looked suspect; 'Zlocker' - or something sounding like that.

Anyway, what precautions should I take now? I think I've removed it and it was installed in my 'google apps' work profile where I keep most junk apps away from main but does anyone have tips on how to test that nothing was compromised?

Thanks

raccoondad

Ensov you removed the application and didn't give it serious permissions, no worries to be had. Check your app list if you want to make sure

IcyScroll

To make sure it's gone, you could also install App Manager (signature, for use with App Verifier) inside said profile and use it to view currently installed apps.
Sort by: installation date
Filter by: user apps

I'm fairly certain I have seen the Project account state that attack surface is very small after an app was installed, before it was launched for the first time. I don't think an app can start itself right after installation. Did you tap anything else?