Skip to main content

Scan apps and respond to threats

Use Scan App for an installed app and Scan APK for a downloaded Android installation file. Scanning an APK does not install it.

An internet connection is needed for online parts of the assessment. A queued, unfinished, or failed scan is not a safe result.

Scan an installed app​

  1. On the dashboard, tap Scan App.
  2. Wait for Select App to Scan to load.
  3. Search for the app by its name, then select it.
  4. Wait for the result and review the dashboard's Recent Activities or Flagged Apps.

The picker lists available non-system apps. A preinstalled system app may not appear. If you cannot find an app, clear the search and confirm it is installed in the Android profile where Argus is running.

Scan a downloaded APK​

  1. Wait for the download to finish.
  2. On the dashboard, tap Scan APK to open Manually scan APK files.
  3. If prompted, tap Allow file access and grant the requested Android file access.
  4. Return to the APK page and find the file under APK FILES TO BE SCANNED.
  5. Tap the file's Scan action.
  6. Wait for scanning to finish. Review the result in History, or tap View all for APK history.

Only one APK scan runs at a time. If you see Wait for the current scan to finish, let that scan complete before starting another.

The page works with Android APK installation files. Renaming a different file to end in .apk does not make it scannable. File discovery also depends on storage access and where the file is saved.

Understand a result​

Open a flagged item to review the app or file, result time, risk level, and available findings.

Result or stateWhat it means
Safe or benignNo threat was identified by that assessment. This is not a guarantee of safety.
Suspicious or possibly maliciousThe assessment found risk indicators that need review.
MaliciousThe assessment identified a high concern. Review the findings and remove the app or file if appropriate.
Scanning, pending, unknown, or failedA completed assessment is not available. Do not interpret it as a clean result.

A confidence or risk score is an assessment indicator, not a guarantee that harm has or has not occurred. Results can change as more information becomes available. Check the most recent finding as well as any earlier warning.

If an app is flagged​

  1. Stop using the app while you review the warning.
  2. Open the finding from Flagged Apps, scan history, or the warning notification.
  3. Read the app name and findings carefully so you do not act on a different app with a similar name.
  4. Keep background and network protection enabled.
  5. Use Quarantine if available and appropriate, or Uninstall to remove the app.
  6. Confirm the outcome in Android and in Argus.

See quarantine limits. A restriction is not a complete remedy for an account or information already exposed.

Remove an app or APK​

Installed app​

Tap Uninstall in the finding or Application Blocked screen, then confirm Android's removal prompt. Cancelling that prompt leaves the app installed.

If Android refuses removal, check its explanation. A managed or preinstalled app may require help from the device administrator or phone manufacturer. Do not assume the app was removed because Argus opened the removal dialog.

Downloaded APK​

Use the removal action offered in the file's finding. A successful deletion should be confirmed by the app.

Deleting a downloaded APK does not remove an installed copy of the app. If the file was copied or downloaded more than once, other copies can remain. Use your file manager to review known copies without opening or installing them.

If you think a detection is wrong​

tip

Contact Argus support before releasing a flagged app. A familiar app name or high download count alone does not confirm it is safe.

A false positive is a warning about something that is actually legitimate. A familiar name or a high download count is not enough to settle that question.

  1. Check the exact app, its source, and the reason given.
  2. Confirm with the app publisher using a known official channel.
  3. Record the result time and app version if available.
  4. Ask Argus support to review the finding if you remain uncertain.
  5. Only after deciding to trust the app, use Release or an appropriate exception.

Release removes quarantine and adds a network allowance. A monitoring exclusion can also bypass network filtering. Review both Manage Monitoring Exclusions and Manage Apps Allowed Through Network when restoring protection; see network rules.

Do not send an unknown APK to others or attach it to a support request unless support specifically requests it through an appropriate channel.

If you already shared information or granted access​

Removing an app does not reverse earlier actions. Stop interacting with the suspicious app or message. Use a trusted device and a known official route to contact the affected service or change the affected account's credentials. Avoid links or contact details provided by the suspicious source.

Keep the relevant warning and timing for your support request. Do not include passwords or verification codes.

Scan troubleshooting​

ProblemWhat to try
Download in progressWait for completion and confirm the file is available before scanning.
Failed to read the fileCheck file access, whether the file moved or was deleted, and whether the download completed.
File is not an Android appConfirm it is a genuine APK. Do not rename an unrelated file to bypass the check.
No APK files are listedCheck file access and the file's location. An empty list does not mean all phone files were scanned.
Scan seems stuckCheck the connection and wait for the current scan to finish or report failure. Reopen the page and retry if it returns to the waiting list.
Result appears late or changesOnline checks can complete at different times. Review the latest result and its time.
App is still installed after UninstallRepeat the Android confirmation or read the refusal message. Clearing history does not remove the app.