I have noticed these chinese apps some how self installing on my S2.
Any idea how to get to the source of these unauthorized installs? (Lookout & AVG & NetQin don't detect them as malicious or find any reason for how they are getting on there).
Currently using KH3 + CFRoot.
Why do people give so little information when they post?
What Chinese apps? (Please provide a screen shot if the app name is in Chinese) .
This sounds really really bad.
Has this happened to any one else?
It should not be possible for this to happen.
Does your phone have any connection with China or have you installed any Chinese software?
If this is happening then you must have done something yourself to start the process. Nothing can install itself without your consent, unless there's malicious software that's bypassing the system and installing for you, but you would have had to install that first.
So, as above, a lot more information is needed. Personally, I'd just do a complete wipe and hard reset and never install anything from untrusted sources again, including warez, 3rd party app stores and the Chinese Market, which is known to have had dodgy software before now.
My friend got an S2 from China and it was preloaded with all those Chinese apps. Examples include QQ Security Suite and some other apps. I used Titanium Backup to uninstall but after each restart, the app re-appears!
I was surprised that Titanium couldn't uninstall. It says it uninstalled successfully but it just re-appears. The only thing I could do is to do a re-flash to a Hong Kong firmware without all those pre-loaded Chinese apps.
But before you wipe everything, please help us try and find out how it happened?
Again has this happened to any one else? Because I want to know if this could happen to my phone!
Mine also did this on stock rom i would uninstall samsung apps reboot and it would reappear on my menu. Is it possible the rom comes with an auto install script for the preloaded apps?
Sent from my GT-I9100 using XDA App
otester said:
I have noticed these chinese apps some how self installing on my S2.
Any idea how to get to the source of these unauthorized installs? (Lookout & AVG & NetQin don't detect them as malicious or find any reason for how they are getting on there).
Currently using KH3 + CFRoot.
Click to expand...
Click to collapse
If you have CF-Root, you have super user installed. Review your permissions. You can also install LBE privacy guard and set permissions for all apps as well, including many system apps (you'll need to 'untrust' them first).
Sent from my GT-I9100 using XDA App
Sorry for the little information guys, was 5am and very tired
I deleted the second incarnation of the app as soon as I saw it (worried about personal details being taken etc.) however it if it reappears again then I will screenshot it.
Virus scanners don't detect them as malicious, when the program opened (after stealth install) I went through it, albeit in Chinese it looked like a legit program and the menu worked etc.
I have market 3.1.3 installed (got the apk off the internet) and a few apps that got removed from the market place (torrent clients and certain games I couldn't find etc.) so it could well have been put in them.
I'm thinking about a hard reset, not using titan backup to avoid it coming back and a re-flash.
Also my phone has no connection with China (purchased in the UK), this has only happened recently.
Is there any more info needed before reset etc.?
Looks like the suspect apps removed from the market may have been the cause.
Does anybody know if running as root alows all download apps to run with root permissions?
LouisJB said:
Looks like the suspect apps removed from the market may have been the cause.
Does anybody know if running as root alows all download apps to run with root permissions?
Click to expand...
Click to collapse
Issue is the damage seems to have been done, looks like I have no choice but to reflash etc. Need a virus scanner that has root so it can do a deeper scan.
Superuser is a lot like UAC on Windows Vista/7, it will popup and ask you to allow/deny.
Also is there any way to wipe the device while re flashing to ensure this gets removed?
I found a folder on my Internal Storage "QinqiQuan" (Google Image search pinpoints this as one of the apps) which translates in Chinese to English as "Infringement", however the app itself appears to be a legitimate Chinese social app so I'm not sure of my original concern regarding "Infringement" being copyright related etc.
Another few suspicious folders were "the9GameCenter" & "waze".
In future I'll be sticking the Market and official sites, even if that means doing without certain apps that aren't available on my handset/region
Isnt waze a community based sat nav app?
poults said:
Isnt waze a community based sat nav app?
Click to expand...
Click to collapse
The apps themselves appear legitimate, but I didn't authorize the installs which is what worries me.
I wiped internal storage, wiped data and then re-flashed + CFRooted.
Hopefully what ever it was, won't come back
And how about the security in your computer? As we know, you can install an app in your phone via your market account using your computer. Perhaps someone is playing around with your market account. If this is the case, changing your password would be a good idea.
Sent from my GT-I9100 using XDA App
angelomaldito said:
And how about the security in your computer? As we know, you can install an app in your phone via your market account using your computer. Perhaps someone is playing around with your market account. If this is the case, changing your password would be a good idea.
Sent from my GT-I9100 using XDA App
Click to expand...
Click to collapse
Yeah I have changed my password and turned on all the Google security settings, albeit a bit of pain, does give peace of mind
Sent from my GT-I9100 using xda premium
Related
Hi,
what does it mean technically if an app is "freezed"? Is the APK moved to another location, or are the unix access rights altered, or is a reference to the app deleted from some kind of "registry" of the Android system, or what else? Can it be done manually by a file manager?
Thanks,
Stefan
It can be done using the purchased version of Titanium Backup and probably a few other apps. It basically renders the app inactive without uninstalling it. Helpful for bloatware that runs in the background but you can't decide if you want to delete it or not.
Thanks, but this was not my question...
lowandbehold said:
It can be done using the purchased version of Titanium Backup and probably a few other apps. It basically renders the app inactive without uninstalling it. Helpful for bloatware that runs in the background but you can't decide if you want to delete it or not.
Click to expand...
Click to collapse
Yes, I know, but what does it do exactly on file system level? Doesn't anybody know?
stbi said:
Yes, I know, but what does it do exactly on file system level? Doesn't anybody know?
Click to expand...
Click to collapse
Most freezing apps simply rename the app to be frozen with an extension, like in the case of Bloat Freezer (IMHO the best one) the frozen app gets a .bzw extension. It remains in place but of course cannot be executed. The nice part is that if you run into an issue you can just rename the app back to what it was (assuming that you have root).
It works!
docfreed said:
Most freezing apps simply rename the app to be frozen with an extension, like in the case of Bloat Freezer (IMHO the best one) the frozen app gets a .bzw extension. It remains in place but of course cannot be executed. The nice part is that if you run into an issue you can just rename the app back to what it was (assuming that you have root).
Click to expand...
Click to collapse
Cool, so simple - thanks! So it can be done with any file manager.
I've just successfully frozen the preinstalled "LGWorld.apk" by renaming it to "LGWorld.apk.bak". As soon as I had done this, a message popped up, saying "Deinstalled", and the icon disappeared from the app drawer, and also the update for "LG World" vanished from the Market app.
Hmm.. freezing doesn't mean rename. It is being remove from system. If.you rename yourself, the apps may failed to work.
Accidentally sent from my Google Nexus S using XDA Premium
Freezing the app works via decreasing the temperature of the app to roughly 50 Kelvin. At this point the the app's molecular structure becomes a super condensed crystal lattice. Due to the nature of the crystal lattice, android treats the super dense app as non existent. Essentially the app is deleted from your system completely. However, think of it not as a permanent deletion but rather a reversible one. Should you chose to 'restore' the app, you can defrost the app. You could defrost the app using a microwave but I for one use TB Pro as it does a far better job.
lambstone said:
Freezing the app works via decreasing the temperature of the app to roughly 50 Kelvin. At this point the the app's molecular structure becomes a super condensed crystal lattice. Due to the nature of the crystal lattice, android treats the super dense app as non existent.
Click to expand...
Click to collapse
Haha smart ass.
lambstone said:
Freezing the app works via decreasing the temperature of the app to roughly 50 Kelvin. At this point the the app's molecular structure becomes a super condensed crystal lattice. Due to the nature of the crystal lattice, android treats the super dense app as non existent. Essentially the app is deleted from your system completely. However, think of it not as a permanent deletion but rather a reversible one. Should you chose to 'restore' the app, you can defrost the app. You could defrost the app using a microwave but I for one use TB Pro as it does a far better job.
Click to expand...
Click to collapse
ha ha ha! that was hilarious man
Press THANKS
stbi said:
Hi,
what does it mean technically if an app is "freezed"? Is the APK moved to another location, or are the unix access rights altered, or is a reference to the app deleted from some kind of "registry" of the Android system, or what else? Can it be done manually by a file manager?
Thanks,
Stefan
Click to expand...
Click to collapse
Press thanks if I helped
Source - How TO Geek
Manufacturers and carriers often load Android phones with their own apps. If you don’t use them, they just clutter your system and sometimes in the background, draining resources. Take control of your device and stop the bloatware.
We’ll be focusing on disabling – also known as “freezing” bloatware here. It’s a safer process than uninstalling the bloatware completely, and is also easier to accomplish with free apps.
Uninstalling vs. Freezing
Uninstalling an app is exactly what it sounds like – the app is entirely removed from your device. Unfortunately, it’s not possible to get many of these preinstalled apps from the Play Store if you ever need them again. Uninstalling some preinstalled apps may result in problems or instability, so you could run into problems.
It’s safer to “freeze” apps instead of uninstalling them. A frozen app is disabled completely – it won’t appear in your app drawer and it won’t automatically start in the background. A frozen app cannot run in any way until you “unfreeze” it. Freezing and unfreezing are instant processes, so it’s easy to undo your changes if you end up freezing a necessary app.
If you really must uninstall apps, you should freeze them first and wait a few days to ensure that your phone or tablet works properly without them.
You can’t uninstall or freeze preinstalled bloatware apps without root access and third-party app managers. Try and you’ll find the options grayed out in the standard Android interface.
klacenas said:
ha ha ha! that was hilarious man
Click to expand...
Click to collapse
I understand and have frozen quite a few apps with TB Pro. My issue is there are shine pre-installed apps that I like to use, but when I run the task killer, they're always running. Is there a way I can fix them where they don't keep starting immediately after killing them, but still having them available when I want to use them?
donnebonn said:
I understand and have frozen quite a few apps with TB Pro. My issue is there are shine pre-installed apps that I like to use, but when I run the task killer, they're always running. Is there a way I can fix them where they don't keep starting immediately after killing them, but still having them available when I want to use them?
Click to expand...
Click to collapse
you can try greenify it will hibernate the apps and hence the app will be available for you any time
donnebonn said:
I understand and have frozen quite a few apps with TB Pro. My issue is there are shine pre-installed apps that I like to use, but when I run the task killer, they're always running. Is there a way I can fix them where they don't keep starting immediately after killing them, but still having them available when I want to use them?
Click to expand...
Click to collapse
Another app called greenify. Or using an autostart manager to prevent them from running without ykur intervention.
sangalaxy said:
you can try greenify it will hibernate the apps and hence the app will be available for you any time
Click to expand...
Click to collapse
Thx a bunch. I dwld and installed the grenify app and disabled them, however, when I run my task killer the gallery app is always running. I wanted to greenify it, but it's not showing up in the greenify app, even when I did a search for it, it just took me to my home screen. I clicked on the app and it just opened but I didn't see any options to greenify it. Any suggestions? Thx for ur help.
so at the end is freezing and renaming the same thing? no one cleared that up, i usually just rename to BAK and thats it, what does TItanium apart from renaming?
ok i answer myself, freezing is the same as going to app manager, and selecting DISABLE
or from a root terminal using:
pm disable {package_name} (e.g. # pm disable com.android.browser)
wich calls:
/system/bin/pm
wich in turn contains:
# Script to start "pm" on the device, which has a very rudimentary
# shell.
#
base=/system
export CLASSPATH=$base/framework/pm.jar
exec app_process $base/bin com.android.commands.pm.Pm "[email protected]"
what it does is set a flag for a component to some of different values:
COMPONENT_ENABLED_STATE_DEFAULT
COMPONENT_ENABLED_STATE_DISABLED
among others. (http://developer.android.com/reference/android/content/pm/PackageManager.html)
where does it store this flag: I DONT KNOW
is this flag a value inside some manifest/ini file? : IDK
is this flag st in the file system? IDK
can someone show me the light?
edit: I DONT KNOW for sure but i think it stores it in : /data/system/packages.xml
that is generated by package manager taking info fro each app manifest. i hope i am right, but dont take my word as absolute truth since it was a quick google research lol
Renaming the apk file can result in unwanted behaviour... I learned by trial&error! I'm running MIUI 6 and wanted Google Play as default app store and not the MI Market. Renaming the apk file for the Mi Market gave me the result I wanted: launching Google Play whenever I clicked a link to a certain app. But that was until I rebooted the phone... it got stuck on the MI startup logo. After renaming the Mi Market apk file in twrp recovery, my phone booted again.
So might try freezing it to see if it will do the job properly.
Freezing Mi Market with AppFreezer worked like a charm!
el_jefe said:
Renaming the apk file can result in unwanted behaviour... I learned by trial&error! I'm running MIUI 6 and wanted Google Play as default app store and not the MI Market. Renaming the apk file for the Mi Market gave me the result I wanted: launching Google Play whenever I clicked a link to a certain app. But that was until I rebooted the phone... it got stuck on the MI startup logo. After renaming the Mi Market apk file in twrp recovery, my phone booted again.
So might try freezing it to see if it will do the job properly.
Click to expand...
Click to collapse
Depends what you mean by "renaming." Changing the extension from .apk to .apkold or .bak or something like that will harmlessly freeze the app since it's no longer seen as an apk by the system. Renaming the app itself is another thing entirely.
I renamed the extension to .noapk and Miui wouldn't boot anymore.
Good stuff
I heard that app developers can potentially access all your photos. Is this right and how can you keep them private?
ummm not that I'm aware of. where did you hear this from? :silly:
I don't know if that is true or not, but I suspected something similar reading the permissions before downloading apps as well. I noted modifying the SD card in many of them, a few included WIPING it. Now if they have that kind of power, I would be hesitant. I suppose Google has something in place that prevents that kind of abuse, but seeing how Quickpic can replace the default Gallery app, I do think it is possible. However, transmitting that data back to them may not be allowed or possible. Until I finish learning the SDK thoroughly, I cannot say yea or nay on it. I would suggest asking google about a specific app and see what they say first, and then consult someone who knows how to read the .apk files to see what they can discover.
Wallace_Brownie said:
I heard that app developers can potentially access all your photos. Is this right and how can you keep them private?
Click to expand...
Click to collapse
If you're that worried, don't store them on your device. If the DroidWall app "really" works, it should block all internet communication on apps that you select.....a wall of fire is the purpose.
Sent from my Amazon Gindle Fireoid
Mephisto_VI said:
I don't know if that is true or not, but I suspected something similar reading the permissions before downloading apps as well. I noted modifying the SD card in many of them, a few included WIPING it. Now if they have that kind of power, I would be hesitant. I suppose Google has something in place that prevents that kind of abuse, but seeing how Quickpic can replace the default Gallery app, I do think it is possible. However, transmitting that data back to them may not be allowed or possible. Until I finish learning the SDK thoroughly, I cannot say yea or nay on it. I would suggest asking google about a specific app and see what they say first, and then consult someone who knows how to read the .apk files to see what they can discover.
Click to expand...
Click to collapse
If I rememeber correctly, the android permission to access the sd card gives full read write privileges to the app, there is no partial access. Most apps need this permission to save data, cache etc to your sd card.
If you have a linux OS running computer you can modify file permissions for write and delete as root only, while allowing all users to read. That way if you want to delete or modify the file, you'll have to use superuser permissions. Of course that requires a rooted phone then....
Sent from my HTC Desire HD using xda app-developers app
Mephisto_VI said:
but seeing how Quickpic can replace the default Gallery app, I do think it is possible. .
Click to expand...
Click to collapse
Use hide it pro from play store. It can hide pictures and videos from any gallery app.
Mephisto_VI said:
I don't know if that is true or not, but I suspected something similar reading the permissions before downloading apps as well. I noted modifying the SD card in many of them, a few included WIPING it. Now if they have that kind of power, I would be hesitant. I suppose Google has something in place that prevents that kind of abuse, but seeing how Quickpic can replace the default Gallery app, I do think it is possible. However, transmitting that data back to them may not be allowed or possible. Until I finish learning the SDK thoroughly, I cannot say yea or nay on it. I would suggest asking google about a specific app and see what they say first, and then consult someone who knows how to read the .apk files to see what they can discover.
Click to expand...
Click to collapse
They said that they can't, and that's why they won't put SD cards in their own line.
Since I first responded, I came across Avast! Anti-virus for Android. It has a built in firewall you can customize per app. I do believe it requires root to utilize it though. Once I nosed around the settings, I was impressed with it. Now to see how well it works before I recommend either way on it. Oh, if you are going to use it, root first then install Avast.
Sent from my (rooted) LG-P870 using xda app-developers app
I know it has been a bit since the last response. I did find a few more programs since then though. Addons Detector examines programs and their permissions and puts several lists together in an easy to read format for you. Its good for when you have forgotten which program had what permissions or didn't catch what they were when installing. It also has an extra option (paid) that I am still evaluating: a live monitor. Notifications of how many addons are added upon installing a new app. Could be beneficial for the security conscious or the, for lack of a better term, paranoid users.
Sent from my LG-P870 using xda premium
Hi - I'm new to Android (and not that well versed with WM5 yet either), but have also been concerned when I saw all these apps that require access to full network, contacts, phone ID and number, etc.
While I understand using the Avast! firewall would prevent apps accessing the internet and sending my data, would those apps then cease to run if they couldn't access what they wanted?
Thanks,
Dylan.
I just went from Paranoid Android to CyanogenMod, and expected to have to re-add several apps. If I go from an AOSP ROM back to a TouchWiz ROM, it is treated as a different device, and I get an app list months old. I was pleased to see Android attempting to download my newest set of apps...
However, the sync failed like it does 50% of the time (every app individually fails). Now when I visit the Google Play store, I see my 'new' phone with only a couple of apps installed. I just lost the entire list. Since there's no way to batch install apps with the Play Store, I get to spend a looooong time looking up and reinstalling them by clicking around like an idiot.
Am I missing something? Every element of the story I just described seems like awful design. I'd really not like to resort to AppBrain or something like it. It's incredibly stupid that if the Play Store has some error syncing apps, it makes the new short list the new goal for syncing (so, it won't even try next time).
In short, it would be ideal to have my list of installed apps tied to my account, so that in the event of a problem, I could just push a large "Yes, download ****ing everything" button. Apps that aren't compatible with THIS device can just be skipped I guess. Why is this so hard? Instead I'm going down my 'All' list on my phone, tapping 5 times per app to install them one by ****ing one.
Why don't you just backup apps with titanium and then restore them when you flash a new rom? Titanium has batch commands so it's pretty much one click for each. You can also set up a back up schedule so things are always backed up
Aside from my hesitation to use another app to perform a function that is already supported...
Is Titanium storing the apps themselves, or a list of apps? I really really really do not want to store several MB/GB of data which may or may not be corrupted. If anything, I want to simply store a list of apps, which will all re-download upon restoring the backup.
AndrewZorn said:
Aside from my hesitation to use another app to perform a function that is already supported...
Is Titanium storing the apps themselves, or a list of apps? I really really really do not want to store several MB/GB of data which may or may not be corrupted. If anything, I want to simply store a list of apps, which will all re-download upon restoring the backup.
Click to expand...
Click to collapse
Yea it will store all the apps. But if they are working, they probably aren't corrupt.
Also, I have had a few phones over the years linked to my Google account and the play store is never segmented by phone. All my apps that I have been using since my OG Droid show up on my note 2. The times I have let the play store sync my apps they all downloaded fine as long as your screen doesn't turn off which you can force to stay on in the dev settings
I have been using titanium for 5 years now. And have restored my apps literally hundreds of times. Never once did it not work. Never had a single failure. I also have only had the play store re install my apps once. That was the very first time time I flashed a rom back on my droid. That was the first and only time it did that.
Sent from my SCH-I605 using xda premium
Simply as a matter of principle, I am not concerned with storing the apps themselves. The entire point of the app sync is to keep track of what I have installed. Backing up the apps themselves strikes me as a different goal entirely.
I've had many successful restores myself, but just as many failures. It isn't that difficult of a task... and if it does fail, when every app for some reason (even if it is a legitimate one) isn't installed , there's no way to retry the process. Your new list of synced apps is now the tiny amount that succeeded, the rest are lost to needing to manually reselect. This is absurd.
Multiple phones are definitely treated as separate app lists. I have 5 devices on my Play Store account; each has its own list of associated apps.
This is because every time you flash your phone, or factory reset for that matter, your phone gets a new device ID. That makes it look like a new device to the play store. This will happen anytime you flash a ROM and wipe data. Dirty flashes do not change the ID.
If you use titanium back up, it automatically stores your device ID, so it will prompt you to revert it back the first time opening it after flashing the ROM. This will allow you to maybe reinstall apps through play store, or at least keep the "app list".
I personally think you are being petty about this. It's not Google's fault you are constantly flashing your phone and creating new app ID's.
Sent from my SCH-I605 using Tapatalk 2
I have had the play store fail upon sync before, but it has never failed to keep the list of all the apps I've installed on any device tied to my google account. Strange that said list got wiped for you.
I'd just install a backup app and call it a day. I use Ultimate Backup Pro, by Jrummy. The newest version will sync your apps (a list, or the data) to Dropbox, Box, or Google Drive.
^^^ +1 for this
nrfitchett4 said:
This is because every time you flash your phone, or factory reset for that matter, your phone gets a new device ID. That makes it look like a new device to the play store. This will happen anytime you flash a ROM and wipe data. Dirty flashes do not change the ID.
If you use titanium back up, it automatically stores your device ID, so it will prompt you to revert it back the first time opening it after flashing the ROM. This will allow you to maybe reinstall apps through play store, or at least keep the "app list".
I personally think you are being petty about this. It's not Google's fault you are constantly flashing your phone and creating new app ID's.
Sent from my SCH-I605 using Tapatalk 2
Click to expand...
Click to collapse
I'd like to agree that it is petty, or believe the terms of the problem as you describe them.
It isn't petty that a feature is not working correctly. Flashing a phone gives a new device ID, but so does losing it, or replacing it. You're passing off the lack of harmony as my mistake.
The mere fact none of us can find a way to retry the app sync proves my point; this argument alone brings me a bit of closure, because at least I am not the only one with the issue. If you are all happy with backing up actual program data instead of realizing the power of a synced list, fine. To suggest this behavior is the intention of Google, however, is nonsense.
...and one last word: if it were as simple as getting a new device ID upon each flash, surely I'd be able to log in to the Play Store and view the list of apps on my 'old' device, right? How does Google know that device no longer exists? How are the two ideas of "syncing apps, but not across different devices" and "getting a new ID upon flash, then attempting to sync" both able to exist?
Perhaps I'm wrong about all of this, but can you really say using 3rd party software to remedy a failed sync is not noteworthy? I specifically remember myself mocking the idea of avoiding 3rd party software when a user wanted to solve a problem... this is much different. This is a legitimate issue with an existing feature.
AndrewZorn said:
If you are all happy with backing up actual program data instead of realizing the power of a synced list, fine.
Click to expand...
Click to collapse
No one said you should backup/restore app data, just the app itself. The app data is actually frowned upon for the most part. Although I have done it numerous times and have never had an issue, but that's a whole different can of worms
But in the end, you do what you want to do.
You are tilting at windmills.
There is a reason everyone uses an app backup program like Titanium or My Backup Pro (those are the two I use). It's the easiest/fastest way to restore apps. Google backup and restore was not intended for 'us' who root. No amount of believing its wrong the way it works is going to change that.
There are apps that will only backup the market link (to your storage) but the only one I know of does not have a one button restore. But it's called App List Backup if you want to check it out.
Sent from my SCH-I605 using xda premium
I love titanium backup. The fact that I can backup all of my apps and restore them plus restore data, such as the music that's already buffered on Google play music is great. Is a time saver! Imop
Sent from my SCH-I605 using xda app-developers app
I still feel like you guys are misunderstanding me (mostly, yes, I've tried App List Backup, and it's alright, "Google should already do this better" aside)...
Backing up programs themselves to create some huge file is a completely different thing than maintaining a list of installed apps on Google's servers. Completely different things. You may be willing to say they accomplish the same goal, something I disagree with. Let's stop talking about rooting and flashing, and start considering the idea of a lost/broken/corrupted phone. If the Google app sync worked better (in terms of reliability or feature set), it would be a painless task to have a new phone redownload all apps installed on the old one.
Please read forum rules before posting
Questions and help issues go in Q&A
Thread moved
Thank you for your cooperation
Friendly Neighborhood Moderator
AndrewZorn said:
I still feel like you guys are misunderstanding me (mostly, yes, I've tried App List Backup, and it's alright, "Google should already do this better" aside)...
Backing up programs themselves to create some huge file is a completely different thing than maintaining a list of installed apps on Google's servers. Completely different things. You may be willing to say they accomplish the same goal, something I disagree with. Let's stop talking about rooting and flashing, and start considering the idea of a lost/broken/corrupted phone. If the Google app sync worked better (in terms of reliability or feature set), it would be a painless task to have a new phone redownload all apps installed on the old one.
Click to expand...
Click to collapse
You like to find problems instead of solutions. Sure it's a little bit of work to go down the Google Play list and install the one you want but how often are you planning to break/lose/corrupt your phone?
Backup file size. Backup to dropbox. Backup to your SDCard. Move your backup file to your PC.
Restoring a device to the way it was. Do a nandroid. Use your extSDCard. Root the new phone and restore. Boom exactly the way you left it.
I think you already mentioned that you didn't want to use AppBrain. But that is another potential solution.
I realize you want a perfect native Google solution but we are not the ones who can solve that for you. It would be a nice feature, but I still wouldn't use it. App backup gives me more control with really no downside. And nandroid is a perfect system restore with data intact.
Sent from my SCH-I605 using xda premium
Hi All
Since a day I have a sort of leadbolt virus that opens my browser and shows the website like below:
ad.leadboltads.net with Top Apps/Offers of the Day
This happens when I download something from the playstore or when I delete apps.
It Makes crazy and I have tried some things alrdy so fix it without any succes.
- Downloaded and installed virusscannen, no succes
- Downloaded and installed ad detector, found a app with leadbolt, deleted it but didn't solve the problem
Hopefully someone can help me too fix this annoying problem
Me too!!!
This is so annoying! My browser keeps opening to the leadbolts site with a bunch of apps on it....Please someone help!
+1. From where come this shlt ?
Shaundiesel said:
Me too!!!
This is so annoying! My browser keeps opening to the leadbolts site with a bunch of apps on it....Please someone help!
Click to expand...
Click to collapse
I'm also having the problem and have not found a solution yet.
The only difference for me is I have adaway installed so the webpage never gets to display. Just opens the browser.
I've tried different ad detector apps from google play, but nothing is fixed this problem. Almost ready to reflash the rom and start from scratch.
UPDATE: I fixed the problem.
When the browser hijacking occurred, it happened after installing or updating a program from any source. Google Play, Amazon or a standalone APK. That meant the virus had control over my installer.
Using Lookout's Ad Detector, I identified some potential culprits (Go Launcher EX being at the top of the list) and uninstalled them. That didn't work.
What actually fixed the problem was resetting the defaults for all the apps. Settings > More > Application Manager. Hit the menu key and choose Reset app preferences.
You don't loose any data. You just get prompted for choosing a default app when you run certain applications. I choose to use Lookout's installer instead of the default android installer when I got prompted to install updates.
Haven't had the issue since. Hope this helps.
markmi300 said:
What actually fixed the problem was resetting the defaults for all the apps. Settings > More > Application Manager. Hit the menu key and choose Reset app preferences.
You don't loose any data. You just get prompted for choosing a default app when you run certain applications. I choose to use Lookout's installer instead of the default android installer when I got prompted to install updates.
Haven't had the issue since.
Click to expand...
Click to collapse
Hi everybody. (First sorry for my english but I speak french)
This is a solution but it workn't very good.
After the downloading and installation from a update or a program, Androîd ask me if I want to finish the task with the default browser or Chrome ? So I can't see this f*cking page more but I must always put my choice between the 2 browsers.
I thank you for your solutions....
+1 to lookout fixing. Had the same problem, ripped it right out.
Sent from carbon note 2 on XDA premium app
shbaldw said:
+1 to lookout fixing. Had the same problem, ripped it right out.
Sent from carbon note 2 on XDA premium app
Click to expand...
Click to collapse
Glad I was able to help.
See the solution at
http://forum.xda-developers.com/showthread.php?t=2525965
#@!%&#! 'ad.leadboltads.net' Malware
shbaldw said:
+1 to lookout fixing. Had the same problem, ripped it right out.
Click to expand...
Click to collapse
Lookout Security & Antivirus found mine in ChargeBar Free Edition,
ChargeBar came embedded in the NottachTrix 2.3.0 ROM.
I installed it (NottachTrix) and it (ChargeBar) didn't update for 3 months, then, BANG.
I've deleted ChargeBar's update, moved it from system apps to apps, deleted it, and the browser pop open 'ad.leadboltads.net' still persists.
Lookout Security & Antivirus can not find the new location of the malware, they do not have a forum.
By the very definition and behaviour, this is malware, and, ChargeBar (Asgard Casino Apps) is involved in the distribution of malware.
Asgard Casino Apps distributes 34 apps that behave this way.
They are using Google to distribute this malware, abet, that app is benign in its origin, its a pipeline, or conduit for malware.
Sneaky F##kers aren`t they.........
#1) I would like to get this crap off my phone.
#2) I need to bring this to Google's attention, and have the developer and apps banned from the Play store.
Sooo, starting with #1,,,how do I get this crap off my phone!
NOTE:
I will be linking to this post in the NottachTrix post, I'm asking the developers to to move ChargeBar from the ROM zip.
My MBAM forum post: https://forums.malwarebytes.org/index.php?showtopic=138306#entry764184
I set a data usage limit in my phone, because I was using a lot of data. After doing it, it alerted me that my mobile data was about to go over and cut off. So scrolled down and discovered these 2 "Android " (looked like the little green Android robot ) and they are named "10193" & "10194" 10194 runs in the foreground all the time and 10193 runs in the background all the time. I was told these are "Kaspersky Mobile Security or Parental Control Monitor" I'm 34yrs old and my parents don't monitor me, please help...
Sent from my SCH-R530M using XDA Premium 4 mobile app
Do you have Kaspersky installed?
veeman said:
Do you have Kaspersky installed?
Click to expand...
Click to collapse
I do not think I did or ever had I looked at all the appsI have installed via play store under the all section of "my apps" and do not see it.
Why do you say it is Kaspersky? My phone has been having some really weird things happening to it. I went though 3 batteries in 2 months, its been using a ton of data. My data just reset on 10/29/13 and it is already at 5gb. Also we have been finding "duplicate processes" running in the application manager. I really don't know what to do, I have installed Avast, Look out, and some other antivirus apps nothing has helped. Reset a few times and it will help it for a little bit and then boom its right back
victhesunshine said:
I do not think I did or ever had I looked at all the appsI have installed via play store under the all section of "my apps" and do not see it.
Why do you say it is Kaspersky? My phone has been having some really weird things happening to it. I went though 3 batteries in 2 months, its been using a ton of data. My data just reset on 10/29/13 and it is already at 5gb. Also we have been finding "duplicate processes" running in the application manager. I really don't know what to do, I have installed Avast, Look out, and some other antivirus apps nothing has helped. Reset a few times and it will help it for a little bit and then boom its right back
Click to expand...
Click to collapse
I recommend wiping completely and start fresh with a new ROM. You could also install an app like Data Manager and see which app is using the most data and uninstall. Also, do not install apps that you download off the internet. Only download from reputable sources like the Play Store and Amazon app store.
veeman said:
I recommend wiping completely and start fresh with a new ROM. You could also install an app like Data Manager and see which app is using the most data and uninstall. Also, do not install apps that you download off the internet. Only download from reputable sources like the Play Store and Amazon app store.
Click to expand...
Click to collapse
this is going to sound crazy, but i just got that phone back up and running in January. But that is what I did,,,
The reason I said Kaspersky is because this guy I know said he "googled " those numbers and symptoms a
and deemed it that. IT did have a spy wear type thing on it but it was not Kaspersky. It was one that was
sent from a website and it has to be removed via the website. I don't remember the name. Anyhow I have
long since ditched that phone and on to bigger and better things. But w/ that phone it has sparked an interest
in this whole "development/modification" thing! Thanks for you help and advice and sorry it took me so long to
get back to you! Be blessed!:laugh:
Hi Everyone, I know this is a very old thread, but I want to give out a solution because I just encountered this 10194 app as well.
I would like to post this for future reference to other people who will encounter this since I've done searching around about this but I can't find any solution.
To remove this app you must:
1. Open Settings and tap [Security] or [Security and Finger Print] or any other name it might now posses.
2. Under this settings entry, you'll see [Device Administrators], tap that
3. Inside [Device Administrators] you'll see that there is a blank application containing a space as well and the indicator should be ticked, that means this app has administrator access to your phone, it has access to calls, messages, email accounts, etc. See: here
4. Tap this app and [Deactivate] or [De-authorize] it
5. Now go back to the main settings list and navigate to [Apps] or [Applications]
6. Tap the app and you can now uninstall it.
I highly recommend changing your passwords for any account that might have been on that phone, there is a high possibility that this app has gathered information on you.
This includes phone call lists, phone call recordings, your contacts, your messages, notes, emails, etc.
This is a speculation of course and will highly depend on the amount of data this application has passed to wherever it connected to but it is safe to assume that you have been infected by malware and your previous information has been compromised.