Personal
< Products
Computer Protection
Premium Security >
Free Antivirus >
Free Virus Scan >
Mobile Protection
iOS Security >
Android Security >
Identity Protection
Identity Theft Protection >
Digital Footprint Scanner >
Personal Data Remover >
Privacy Protection
VPN >
AdwCleaner >
Browser Guard >
Have a current computer infection?
Clean your device now
Try our antivirus with a free, full-featured 14-day trial
Download now
Find the right cyberprotection for you
Compare plans and pricing
Business

< Business

Teams >
Simple to manage protection for 20 or fewer devices
ThreatDown >
Award-winning endpoint security for small and medium businesses
Pricing

< Pricing

Personal pricing
Protect your personal devices and data
Small office/home office pricing
Protect your team’s devices and data
Business pricing (5+ employees)
Step up your corporate endpoint security. Save up to 45%
Partners
< Partners
Malwarebytes
Affiliate partner >
Computer repair >
ThreatDown: Malwarebytes for Business
Resellers >
Managed Service Providers (MSP/ISS) >
Resources
< Resources
Security terms glossary >
Threat Center >
Cybersecurity News >
About Malwarebytes >
Press >
Careers >
Cybersecurity Resource Center
Antivirus >
Malware >
Ransomware >
Phishing >
See all articles >
Support

< Support

Malwarebytes Personal Support
Malwarebytes and Teams Customers
ThreatDown Business Support
Nebula and Oneview Customers
Community Forums

Android/Trojan.Dropper.xHelper

Short bio

Android/Trojan.Dropper.xHelper is Malwarebytes’ detection name for a Trojan.Dropper targeting Android devices.

Symptoms

Users may notice an icon in the notifications entitled “xhelper” and after a few minutes the Trojan starts adding even more icons to the notifications. Other users may spot the presence of a simple xhelper entry in the Apps Info.

Type and source of infection

Android/Trojan.Dropper.xHelper drops an encrypted DEX file with a .jar extension on the affected devices. Android/Trojan.Dropper.xHelper is most likely being spread by web redirects.