Hi there,
I have facing issue in my Android 4.2.1 JB from alst 7 days. There are few apps which automatically getting installed without asking my permission. It hapeens when they detect i am connected to Wi-Fi or mobile data connection. i didn't rebooted my device. Everytime i have to uninstall these apps but after few hours they get automatically installed . Device rooted 2 months back
Apps are:
Baidu Browser
UC browser
Flapy Bird
Poker
Option like USB debugging and installed from unknown source are turned off. Even scanned by device through multiple anti-virus like Avast, AVG & CM Security. Below are the apps which are currently in my device:
Adobe reader, all-in-one toolbox, angry bird, avg, avast, axis bank app, B1 free archiver, backup& restore, barcode scanner, battery doctor, call control, cam-scanner, chrome, clean master, CM Security, Easy Video player, EN-HI dictonary, fusion (music player), goggles, hdfc app, iMedia share, kickass torrent, linkedin, FB messanger, My Tom, Next Launcher 3D, Outlook, Oaytm, Push mail, Quickoffice, Rails, Ringtone Editor Pro, root uninstaller, skype, speedtest subway surfer, superuser, temple run 2, tubemate, whatsapp, youtube.
Please help.
aadishivan said:
Hi there,
I have facing issue in my Android 4.2.1 JB from alst 7 days. There are few apps which automatically getting installed without asking my permission. It hapeens when they detect i am connected to Wi-Fi or mobile data connection. i didn't rebooted my device. Everytime i have to uninstall these apps but after few hours they get automatically installed . Device rooted 2 months back
Apps are:
Baidu Browser
UC browser
Flapy Bird
Poker
Option like USB debugging and installed from unknown source are turned off. Even scanned by device through multiple anti-virus like Avast, AVG & CM Security. Below are the apps which are currently in my device:
Adobe reader, all-in-one toolbox, angry bird, avg, avast, axis bank app, B1 free archiver, backup& restore, barcode scanner, battery doctor, call control, cam-scanner, chrome, clean master, CM Security, Easy Video player, EN-HI dictonary, fusion (music player), goggles, hdfc app, iMedia share, kickass torrent, linkedin, FB messanger, My Tom, Next Launcher 3D, Outlook, Oaytm, Push mail, Quickoffice, Rails, Ringtone Editor Pro, root uninstaller, skype, speedtest subway surfer, superuser, temple run 2, tubemate, whatsapp, youtube.
Please help.
Click to expand...
Click to collapse
Is someone messing around with your Google Account?
If someone login from your google account from computer and install app from play store site, it is installed from internet.
When you say it happens when you are connected to Wi-Fi or data, so I am 99.99% sure, it is due to messing with Google Account.
ok. Let me try removing my all google account from device and some other account to see if this happen again.
Thanks
hnkotnis said:
Is someone messing around with your Google Account?
If someone login from your google account from computer and install app from play store site, it is installed from internet.
When you say it happens when you are connected to Wi-Fi or data, so I am 99.99% sure, it is due to messing with Google Account.
Click to expand...
Click to collapse
Hi there,
I removed all my google account from mobile and added new gmail account. But issue is still same.
Maybe you could try to disable "Auto-update apps" in google play.
Even i have the same problem. I even removed the auto-update but still its happening.
Please help ?
he_arslan said:
Maybe you could try to disable "Auto-update apps" in google play.
Click to expand...
Click to collapse
"Auto-update apps" is disabled in google play. But same this is keep happening. Did hard reset of my phone but same issue.
i have that same problem with my tablet from ebay running 4.2.2 app DU Battery Saver & Widgets is installed without my permission and i don't even have google account on this device, but tablet is connected on wifi 24/7 and all apps are stock i have original firmware and i try to reflash device but this is happening again
Very odd... Have you tried disabling the Install from Unknown Sources option?
now it is, let's see if this will help
i have something the same problem
I bought on e-bay a Chinese 10.1" M10 type with MTK8127 chipset and Android 4.4.2 Kernel: 4.3.67 tablet.
It works great except that it is every day i get a new surprise "great" application that are installed on their own, do not ask for anything and ready to license to be posted.
The tablet was rooted with VRoot_1.7.3.4863_english_cid1005_7337ba1e_89.exe and with MtkDroidTools_v253 do full backups.
Telepütek follows so far:
27/10/2014 1:16:17 DU Battery Saver
28/10/2014. 1:07:51 Flappy Cow
10/29/2014. Happy Jump 1:39:45
30/10/2014. 1:39:13 Freaking Math
31/10/2014. 1:49:11 Amazing Candle
11/1/2014. 1:28:43 Monkey (/data/app/com.candh.game.monkey-1.apk)
In addition, after each start / restart after a few minutes received a message in the notification area:
Du Battery Saver -> The key to optimize, clean up backstage power applications, rapid power
What I have tried:
Factory reset, after of course, google restore disabled and manually put up everything again.
Note that this is after factory reset the same applications in the same order almost exactly in same time per day.
The version numbera are earlier or actual that you can download from play.
The applications that I use on that device are the same that i use on other (Samsung) device so it is sure that there is no problem with them but i think the system itself compromised.
I tried Avast, Avira, eset, AirPush Block, Network connections, OS Monitor, Addons Detector, Trust - Event Logger but not found anything and I could not figure out what was happening.
I put CatLog - Logcat Reader to get it know whats happening but could not really understand what was happening.
Please help to figure it out based on the log to see what happens and how it happens and how can I get rid of this.
The following is a brief log details, of course, I will send out more on request.
See attachment.
kisger13 said:
I bought on e-bay a Chinese 10.1" M10 type with MTK8127 chipset and Android 4.4.2 Kernel: 4.3.67 tablet.
It works great except that it is every day i get a new surprise "great" application that are installed on their own, do not ask for anything and ready to license to be posted.
The tablet was rooted with VRoot_1.7.3.4863_english_cid1005_7337ba1e_89.exe and with MtkDroidTools_v253 do full backups.
Telepütek follows so far:
27/10/2014 1:16:17 DU Battery Saver
28/10/2014. 1:07:51 Flappy Cow
10/29/2014. Happy Jump 1:39:45
30/10/2014. 1:39:13 Freaking Math
31/10/2014. 1:49:11 Amazing Candle
11/1/2014. 1:28:43 Monkey (/data/app/com.candh.game.monkey-1.apk)
In addition, after each start / restart after a few minutes received a message in the notification area:
Du Battery Saver -> The key to optimize, clean up backstage power applications, rapid power
What I have tried:
Factory reset, after of course, google restore disabled and manually put up everything again.
Note that this is after factory reset the same applications in the same order almost exactly in same time per day.
The version numbera are earlier or actual that you can download from play.
The applications that I use on that device are the same that i use on other (Samsung) device so it is sure that there is no problem with them but i think the system itself compromised.
I tried Avast, Avira, eset, AirPush Block, Network connections, OS Monitor, Addons Detector, Trust - Event Logger but not found anything and I could not figure out what was happening.
I put CatLog - Logcat Reader to get it know whats happening but could not really understand what was happening.
Please help to figure it out based on the log to see what happens and how it happens and how can I get rid of this.
The following is a brief log details, of course, I will send out more on request.
See attachment.
Click to expand...
Click to collapse
Did you disable the option to install from unknown sources?
es0tericcha0s said:
Did you disable the option to install from unknown sources?
Click to expand...
Click to collapse
Yes, sorry i forget to write it.
I just. This morning also am getting random apps installed. Dominos pizza, panda pop and cookie jam the newest app i have installed is brave frontier can it be malware or something else.
4218kris said:
I just. This morning also am getting random apps installed. Dominos pizza, panda pop and cookie jam the newest app i have installed is brave frontier can it be malware or something else.
Click to expand...
Click to collapse
It could be if you got it from anywhere but the official play store. Never install apps not from a trusted source.
4218kris said:
I just. This morning also am getting random apps installed. Dominos pizza, panda pop and cookie jam the newest app i have installed is brave frontier can it be malware or something else.
Click to expand...
Click to collapse
I got the same apps today - Domino's PandaPop, and Cookie Jam plus Drippler. I did not install Brave Frontier, so that isn't the source.
The only things done recently for me are:
- Connected up to my work Office 365 service, which requires admin access (for wipe, etc)
- Updated su binaries a few days ago - at prompt from SuperSU
Oh lovely...
http://www.pcworld.com/article/2853...aller-spotted-on-t-mobile-verizon-phones.html
yep thats it i bet, its on my tablet. thanks carrier...
Doktor-X said:
i have that same problem with my tablet from ebay running 4.2.2 app DU Battery Saver & Widgets is installed without my permission and i don't even have google account on this device, but tablet is connected on wifi 24/7 and all apps are stock i have original firmware and i try to reflash device but this is happening again
Click to expand...
Click to collapse
I just got DU Battery Saver installed on my Onix tablet. You read stuff on the internet about cheap Chinese tablets coming loaded with spyware and other sorts of stuff and I wonder whether apps can be freely installed via some hidden app on the device.
You all suck dumb asses
Thats why i hate these blog sites they call themselves experts but cant solve any damn thing untick auto updates, really you think we didn't knew that much really man,my problem never got solved in online sites infact you will get more confused why would some hack someone's google account and download du app make some sense guys you all suck
Hi all,
Since yesterday, my Viber constantly crashes. It openes for like 2-3 seconds, and then it force closes.
So far, I've tried restarting the phone, moving app to SD card, uninstalling and installing, downgrading to previous version, but no luck.
So I'm running latest Viber app, there are also no software updates for ROM (I'm running original ROM, phone is not rooted.)
When I go to running apps in developer options, it just says restarting, 0 processes and 2 services (voipService and AccountAuthenticatorService).
Also, when I go to settings, where is no Viber account to sync, I try to add it, but the account is not there.
I did not install any new apps recently.
I've created issue for Viber support, but honestly it looks that they are reaaaaly slow.
Phone is HTC Desire Eye.
Does anybody have any idea, what is causing this, and how to fix it?
Some very weird things started happening on my phone earlier today. It's a Nexus 5X, running 8.0 Oreo, with the October security patch. I'm not rooted and I'm careful about what I install. The phone is fairly new, from this summer.
I will begin with describing what I did in the hours before this started. I can think of two things that possibly could have started it:
1) Two of my Facebook contacts sent malicious links to me an hour before. It looked like Youtube videos but was not. I did NOT open any of these links, knowing directly they were harmful (not sure if you can be affected by just receiving them, not clicking on them?). I received them in the Messenger Lite application (an official app from Facebook with scaled-down functionality).
2) A few hours before the Facebook links, I sideloaded an APK containing the new Pixel Launcher. I got the APK from Android Police/APK Mirror.
Can't attach links, but Google for: Hands-on with the updated Pixel Launcher, including the new Pixel 2 features [APK Download]
The APK was working fine and nothing seemed odd with it (I used the launcher for a few hours). As long as Android Police know what they uploaded, this shouldn't be the cause for my problems. I bet on Facebook Messenger instead. (People that click such malware links typically get their Facebook accounts hacked, however my account seems fine and my account didn't spam others with the same link. I did not change password or did anything else to "recover" my account yet).
So what happened after this on my phone?
Here is the first thing I noticed. I open Play Store to install updates. It turns out I have one update pending, it's called BankID. This is a major Swedish app used by nearly every smartphone user in the country, and it's for signing into government websites, bank websites, insurance company websites, and much more. When I click update in Play Store two things happen almost instantly:
1) Six pictures are downloaded from Messenger Lite to my phone. That makes no sense, how could clicking a button in Google Play trigger something to happen in Messenger Lite? In fact I tried it three times, with the same behavior every time. (Well, actually opening the Messenger Lite photo album, there are only photos there I already downloaded, so nothing new seems to be added there - but the photos were probably re-downloaded I believe).
2) The BankID update downloads to 100 % (the downloading takes a little longer than expected), then it halts and does nothing, i.e. it's not installing. No error message, it just stops there. I can choose to abort and try again, which I do three times or more, with exactly the same behavior.
Also, I now notice Play Protect hasn't run for two days, but when I try to run it, it seems to be down. After ~30 seconds of scanning it says "App verification temporarily down". "App verification temporarily down" could very well be connected with the halted update I just described? It still says it hasn't run for two days after this.
When I experiment, I notice other things that are very weird indeed.
1) Notifications in Gmail, Snapchat and possibly other apps aren't coming through. By opening the apps, I can sync manually.
2) When I move a file to a new folder using the Downloads app (Files app, stock one) I get a error message saying the move operation failed. This also triggered the photo notifications from Messenger Lite (same behavior as described above, with six photos). However, after a while the moved pictures are indeed in the right folder, even though the error message saying otherwise.
3) After some time I remove "app data" for the Google Play app. When I open it after that, there are now three app updates pending (e.g. Google Wifi also). But the same behavior occurs, when I try to download one or all of them, I get the Messenger photo notifications and the updates halt at 100 % without installing. So the BankID app - which could be targeted by attackers for obvious reasons - could just be a coincidence. It could have happened with any app I suppose, this was the only one pending right then. But still, why couldn't Play Store detect other pending app updates until I refreshed it the way I did? Was Play Store blocked from connecting to Google (or forced to connect to some other server, perhaps?).
What did I do after all of this?
I uninstalled three apps:
-Facebook Lite
-Facebook Messenger Lite
-Pixel Launcher APK
However the uninstall process was very odd. A process called "Package Installer" had a notification saying "Uninstalling Lite" and "Uninstalling Messenger Lite". It didn't seem to be working, it was stuck after some time. I restarted my phone and the apps seem to be gone now, at least they aren't listed in Settings --> Apps. So the uninstall process was successful I suppose, even though it didn't seem to work.
After I restarted my phone I also noticed:
-When I install Messenger Lite from Play Store now, it's easy to uninstall it the way it should be - in mere seconds.
-When I open Play Store, updates are now installing fine. Play Protect is also scanning fine now.
Everything looks back to normal now. But I'm not trusting my device. I'm gonna factory reset it. Before I do, I wonder:
-Can I feel safe the wipe would erase whatever malware I might have had on the phone?
-Is there something I could do to let us know what caused this? Upload a log here somehow?
The only piece of advice I have received as of now is: "Try restarting in safe mode, installing some AV software, and generally looking for suspicious processes." I haven't done that yet, would it still be a good thing to do? Must I install AV software before rebooting into safe mode, or could I install it directly from safe mode? (App suggestions, AV software?).
Usually I'm very careful and security-minded. I haven't had something like this happen before. So I'm very intrigued and mad about this. I'm gonna change my Google account and Facebook account passwords later on I think (I already have 2-factor authentication enabled).
One last thing: When I install Pixel Launcher on my non-rooted phone, it's not running as a system app if my understanding is correct. (At least it shouldn't be). But none the less, when I wanted to uninstall it I had to go into Settings --> Apps and tap "Show system apps" to find it in the list. Is that normal? Perhaps it doesn't mean anything, I just want to know.
Thanks for your advice in advance. Anything else to add? What should I do know? All you might have to say is appreciated.
Come on now guys, someone must be able to help?
If I factory reset the device, will it be clean? I didn't mess with custom ROMs, root, the bootloader or something else. (I suppose the bootloader is locked).
Hey there,
I have a relatively recent Android 8 install (Superman ROM on an S7 Edge), rooted, and various apps no longer sync, including Firefox, and DAVDroid, but probably also others.
There have been times when initiating a manual sync within Firefox would actually make it work again (including DAVDroid, which uses the Android sync framework, as well), but that doesn't work anymore. The few times it did, I'd actually see a toast "Auto-sync timers have started", which Taskwarrior emitted upon reception of a broadcast intent probably related to system boot (see here: https://github.com/Doctor-Andonuts/...rc/main/java/kvj/taskw/data/BootReceiver.java).
Rebooting doesn't fix things, and neither does wiping Dalvik & cache.
I am really at a loss here and thinking that something is not starting up the service or threads or whatever it is that controls the Android sync framework. Auto-sync is obviously enabled, and dis- and re-enabling doesn't fix the issue either. Firefox and DAVDroid are set up to sync, and everything else appears normal.
So what is missing for the sync framework to start? What could be preventing it from starting, or killing it?
Thanks for any help!