Ok, maybe I'm in the wrong place. But here goes.
My phone is trying to send text to paid numbers behind my back. I'm using prepaid so it doesn't work. I get a "You have insufficient funds to send this text" message daily, at random times.
I have no pirated apps. Everything on my phone came straight from the market. However, I've not installed a single one of the apps that was on the recent list all over tech sites.
I'm planning on reflashing with a different rom and changing all the passwords that were stored on my phone.
BUT.
Before I do this, I want to find out which app is causing this behavior. Any Ideas on how to find out what is sending random text from my phone (they don't show up in the messaging app)
viogrep said:
Ok, maybe I'm in the wrong place. But here goes.
My phone is trying to send text to paid numbers behind my back. I'm using prepaid so it doesn't work. I get a "You have insufficient funds to send this text" message daily, at random times.
I have no pirated apps. Everything on my phone came straight from the market. However, I've not installed a single one of the apps that was on the recent list all over tech sites.
I'm planning on reflashing with a different rom and changing all the passwords that were stored on my phone.
BUT.
Before I do this, I want to find out which app is causing this behavior. Any Ideas on how to find out what is sending random text from my phone (they don't show up in the messaging app)
Click to expand...
Click to collapse
Install a android antivirus and firewall like Lookout.
Sent from my GingerBread Eris using XDA App
lookout finds nothing. All the other AV software fails to install. "Unknown error -18"
i have plenty of free space.
viogrep,
I wrote a novel, but then thought I should just ask a few preliminary questions:
Q1) does the error message contain any useful "hints", such as the destination number ?
Q2) if you use a logcat - capturing app, does anything show up in the logcat right around the time the message is generated which might provide some further clues?
There's a lot of different techniques you can use, but they require a bit of effort - not only to perform, but to explain, too.
Q3) Are you willing to post up the output of the "ps" command to a pastebin?
Q4) What apps on your phone request "SEND_SMS" privileges? You can find out with
Code:
strings /data/system/packages.xml > /sdcard/strings-pkgs-xml.txt
and then poking through the "strings-pkgs-xml.txt" file. When you see (for instance)
name="android.permission.SEND_SMS"
the immediately prior package is what requested it. Either that or you can do something tricky like
Code:
strings /data/system/packages.xml | awk '/<package name/{pkg=$2;}; /_SMS/{print pkg, $2;}'
bftb0
1. No destination number in the error. Sorry.
2. Also, no clues in logcat from what I've seen.
3. PS > http://pastebin.com/iUAfP9Yb
4. Besides the default gapps, the only other app with SEND_SMS priv. is Koxx Pure Messenger. (Purchased from the market, Have had for awhile, the sms sending is new)
Going to try to call my provider and see if I can get the number that's been denied because of funds.
*edit* No luck with provider.
I'd really like to know whats doing it so I don't install the same app once I flash. Luckily I keep nothing important on my phone. Its gmail account is actually a duplicate with my original forwarding to it. I'm a tiny bit overprotective over my email(address). :x
viogrep said:
4. Besides the default gapps, the only other app with SEND_SMS priv. is Koxx Pure Messenger. (Purchased from the market, Have had for awhile, the sms sending is new)
Click to expand...
Click to collapse
I know that it isn't necessarily this simple, but if that really is the only other app besides the GAPPs with SMS priveledges, especially coupled with the knowledge that the SMS capability is new, I think you have your answer.
If you tried a new ROM and restored all but that one app, and the problem never happens again then you can be 95% sure. Only way to be 100% sure is that after a certain length of time without a problem (a week?) you reinstall Koxx and then if the problem starts happening again.
I looked through your "ps" listing.
Didn't see anything too obvious sticking out at me; there were a couple of non-market apps running though. I know that there is no theoretical reason why non-market apps would be malicious - on the other hand, I sort of wonder why they are not on the market... you know what I mean? What is stopping them? (In the case of Tubemate - which was actually kicked off of Google's market, my suspicions are even higher. I realize it was not kicked off because of malware; but still...)
These were the only processes that were either not on my phone, or I didn't really recognize.
Code:
com.dylan.tube = [Non-Market App] Tubemate
com.gau.golauncherex.notification = GO Launcher EX (READ SMS)
com.levelup.beautifulwidgets = Beautiful Widgets (LevelUp)?
com.revsodev.volumecontrol = [Non-Market App] Volume Control (Cyrket?)
com.swype.android.inputmethod = Swype?
com.tencent.research.drop = QQPlayer (no perms req'd?)
net.bajawa.battery = BattStatt (no perms req'd?)
org.sipdroid.sipua = Sipdroid VoIP + video
The Road Warrior has an idea which is sort of useful; but I'll modify it to use binary division.
Start with a freshly installed, clean ROM, and only install half of your apps. (I would put all of your most frequently used apps in the first half, and delay any non-market apps as long as possible). Here's how this goes:
- if the "half" you put on the phone is trouble-free (long enough to know the SMS popup thing is not going on), then, install half of the remaining apps, and wait again to see if there is a problem.
- if the "half" you put on the phone develops trouble, then you know that the problem app is in that group. Wipe the phone and re-install all prior "halves" (that caused no trouble), but split the current half (the group containing the suspect app) in half, and only install that. Proceed in this fashion until you are down to the app which causes the trouble.
If you have 128 apps on your phone, and you wait 1 day between installations, it will take 7 days to find the malicious app. (And if you don't get a failure within the first two days, your phone will have 3/4s of it's apps installed - that's not too bad).
The thing is though, even if you had an app compromise your phone, it might not be an "app" that is doing the dirty work any longer. For example, the most recently discovered malware ran rooting exploits against the device, and once successful, downloaded and installed "other stuff". That "other stuff" could be native binaries. So, examining permissions in the system manifest doesn't necessarily guarantee that you have exhaustively looked at your phone, or discovered all possible means of interacting with the SMS system.
It might be "just an app", though - and if it were me, the first ones that I would suspect are non-Market apps, or apps that *cough* got downloaded from "freeware" sites.
Thanks for the responses. I actually did a fresh flash last night. First thing I installed was tubemate (running through non market apps) and it did it. Ironically I added some money to my account to see if I could get the number it was trying to text. Apparently it still couldn't go through.
Sent from my FroShedYo V10-ERIS using XDA App
I had a game from a Chinese developer that stole my gmail. Log into yours from the website and see if you get a red warning.
Sent from my GSBv1.9 ERIS using XDA App
viogrep said:
Thanks for the responses. I actually did a fresh flash last night. First thing I installed was tubemate (running through non market apps) and it did it. Ironically I added some money to my account to see if I could get the number it was trying to text. Apparently it still couldn't go through.
Sent from my FroShedYo V10-ERIS using XDA App
Click to expand...
Click to collapse
I'm always amazed when something I suggested actually works. LOL. It's just that I'm used to things being more complicated than I hope.
Glad you figured out the trouble!
Thanks bt and RW for the help.
As far as the gmail thing... I use a different gmail address on my phone with email forwarded (different pass)...
If it gets taken I just stop the forwarding and make a new one. Makes things a more simple. Sure, they can see past emails, but they cant request passes/info from other sites... (I also monitor the login IPs in gmail, religiously. Just a habbit.)
viogrep said:
Thanks bt and RW for the help.
As far as the gmail thing... I use a different gmail address on my phone with email forwarded (different pass)...
If it gets taken I just stop the forwarding and make a new one. Makes things a more simple. Sure, they can see past emails, but they cant request passes/info from other sites... (I also monitor the login IPs in gmail, religiously. Just a habbit.)
Click to expand...
Click to collapse
You're welcome. You could just change your password from the web if your phone gets stolen.
Especially since it's the gmail address you use on your phone that everything is sync'd to, not the one that's forwarding to it. So if you got another Android phone you'd lose all your contact info and bought and installed apps info, calendar and such. Unless you sync them manually which is so much harder in my experience.
Or you could use one of the many free apps out there that would let you remotely do many things to your phone. Turn the GPS on, triangulate your phone, make your phone scream, do a factory reset to erase everything...
Just a suggestion.
Hello,
I have a problem with my samsung galaxy s2 GT-I9100
running android 2.3.5 stock version.
I'm normal user who used the phone for basic function like making phone calls and using the google, facebook apps with some installed apps from the play store.
Today, 2 hours ago logsprovider initiated out of nowhere an endless loop of "force close" alerts, between them most of the running apps were closed too (including some weird z7... app).
Because of the interval (about half a second) between alerts I can goto setting -> apps -> and "clear data" in the logsprovider config.
this stops the "force close" alerts loop untill the next restart of the phone. in this state I basically don't have access to the phone features and all the home screens are empty, including the phone's apps menu.
I can run any app by adding it to the home screen and then executing it, if the app has system operation like the play store that require it to install something, the app will crash and no new programs will install.
I can also connect the phone to a computer and get access to all the files (I think it's just those on storage), I might try to get an apk of an antivirus there and try to install it - hope it doesn't crash
These are desprate times... thats why I'm contacting the experts,
1. Can I fix this, this might have been caused by an app, what to do?
2. If the only solution is factory reset how do I backup the data, apps, or contact lists?
Has anyone had any issues registering within the ChatOn app? I am able to get my verification code via text msg (which is automatically filled in and skips to next step), but when I enter my name I get an endless "Waiting..." progress meter. (Trying to register through the website only refers me back to the app.)
I tried this over LTE and wireless without any success. I did notice the keyboard icon in the notification bar, and the notice says "Ongoing: Select input type" (or something similar), so I wondered if it got stuck on that step somewhere. I do select my keyboard there (Swiftkey) without any result.
I've also tried using the default Samsung keyboard, but same thing.
Have you tried to uninstall and reinstall the app?
Tutsumi said:
Have you tried to uninstall and reinstall the app?
Click to expand...
Click to collapse
Yep, I did that a few times. But I forgot that this is no longer an issue. Shortly after posting the thread, the I was able to complete the installation.
I've since disabled the app. I was under the impression it was a catch-all messenger, not that it required setting up on other peoples' phones too. I really just wanted to have something that I could both MSN in general and BBM my sister (who's stuck on BB).
Thx
Hi all gurus, need your helps.
I have just upgraded to 4.1.1 via Kies, XXDLJ1, on I9300.
Whenever I go to Applications Manager, it will has that error or auto exit.
1. I have tried wipe, it is fine, no more issue.
2. I restored all apps from titanium, it comes back
3. I uninstall apps by batch, it turns ok after some number of apps uninstalled. it is not related to particular apps but apps count matter as i tried install n uninstall a different batch of apps, same observation.
4. It always error or exit after i am in the application manager for a few seconds, it seem failed to get apps size successfully counted.
5. I have about 200 apps
Pls help, very frustrated and i tried google for long time but no obvious solution
any tips please?
Same thing with me on Samsung GT-I9300 with Android 4.1.1
I came across this problem 2 times.
The first time it happened when I installed a game "Waking Mars". The game was working fine, I played for around 20 minutes and then wanted to check free storage left after installing. But when I opened Application manager swiping was very laggy and after a few (5-10) secs it crashed with "Unfortunately, Settings has stopped" error or just closed. At that time I didn't know that it was because of "Waking Mars" and started to delete unnecessery applications I installed that day and yesterday, but problem vanished only after uninstalling "Waking Mars". Also, while this app was installed, phone's screen was glitchy and became bleached (the glitch disappeared after rebooting), like when "Natural" screen mode is activated, but it wasn't. When I had tried to install the game again, the problem came back.
The second time it was because of "Galaxy On Fire 2" installed. Same problems appeared: crashing Application manager and glitchy screen.
So I'm pretty sure the problem is because of some exact application, not because of the number of apps installed.
Both games contained their data in ".apk" file, but another Waking Mars version with separate data (cache) caused the same problem too.
By the way, funny thing is that both games are about space
P.S.: Sorry for my English, it isn't my native language.
hi casper1, did you solve the problem? how? same problem here and still persisting, after many many attempts
I've found a couple pages on this throughout the forum but nothing definitive to fix this. A couple people responded on my reddit thread saying they also have this issue but could not be fixed. I really hope someone has an answer for me because it is extremely annoying
When clicking certain links, the complete action using (application) dialog shows up even when *always* is clicked.
Per the advice on other threads, I have tried: 1)Clearing defaults 2)clearing cache on the apps I think are the culprit 3)uninstalled apps I thought was the culprit 4)going to application manager and resetting app preferences (this brought back all the apps I froze but did not fix the problem)
Under the launch by default I can see that the default apps I chose are there so the system is receiving my request but is not executing it. This only happens with certain launch types, as Nova launcher is launched probably when I press home button, phone calls are dialed with my preferred dialer, but links that require a browser, apk links (play store etc) and youtube links will always ask
I think I have done everything short of just reinstalling my phone which I don't want to do. For reference I have a Note 3 / 4.4.2 / Stock fimware / rooted.
I am running some XPosed frameworks, the only one that might conflict is CompleteActionPlus but I have tried uninstalling it already and no change.
This didn't use to be a problem but I can't pinpoint exactly when it happened. Another app I thought might be the culprit was Link Bubble but uninstalling that didn't help either.
Any help or suggestions will be appreciated.
Anybody with any ideas?