Personal
< Products
Device Protection & Antivirus
Premium Security Antivirus
Mobile Security for Android & iOS
Identity Protection
Identity Theft Protection
Personal Data Remover
Digital Footprint Scanner
Privacy Protection
Privacy VPN
Browser Guard
AdwCleaner
Have a current computer infection?
Free Virus Scan
Try our antivirus with a free, full-featured 14-day trial
Free Antivirus
Find the right cyberprotection for you
Compare plans and pricing
Business

< Business

Teams
Protect small & home offices – no IT expertise needed
ThreatDown
Award-winning endpoint security for small and medium businesses
Pricing

< Pricing

Personal pricing
Protect your personal devices and data
Small or home office pricing
Protect your team’s devices and data – no IT skills needed
Corporate pricing
Explore award-winning endpoint security for your business
Partners
Resources
< Resources
Security terms glossary
Threat Center
Cybersecurity News
About Malwarebytes
Press
Careers
Cybersecurity Resource Center
Antivirus
Malware
Ransomware
Phishing
See all articles
Support

< Support

Malwarebytes Personal Support
Malwarebytes and Teams Customers
ThreatDown Business Support
Nebula and Oneview Customers
Community Forums

Android/Trojan.Dropper.xHelper

Short bio

Android/Trojan.Dropper.xHelper is Malwarebytes’ detection name for a Trojan.Dropper targeting Android devices.

Symptoms

Users may notice an icon in the notifications entitled “xhelper” and after a few minutes the Trojan starts adding even more icons to the notifications. Other users may spot the presence of a simple xhelper entry in the Apps Info.

Type and source of infection

Android/Trojan.Dropper.xHelper drops an encrypted DEX file with a .jar extension on the affected devices. Android/Trojan.Dropper.xHelper is most likely being spread by web redirects.