Phone got hit by adware, any solutions besides a factory reset ? - Android Q&A, Help & Troubleshooting

I ran both Avast and Malwarebytes separately (delete one and install the other) and both detected nothing malicious.
Ran Airpush Detector and Ad Detect plugin, no helpful results.
This happened after downloading Wechat and some automatic updates of a few apps. I have since deleted Wechat, but the problem persists. The few apps that were automatically updated at that time were: Facebook, Foxit,Gmail, Google Drive,Google+,Kik,Maps,FB messenger,Twitter,Whatsapp Messenger, Twidere,Swiftkey keyboard, Mini Warriors. I have not tried deleting them yet, but it seems to me that they are pretty legit apps.
Some examples of the adware in action:
Taking over my lockscreen with this annoying blue lockscreen:
i418.photobucket.com/albums/pp270/ravenoz_bucket/Screenshot_2016-04-11-06-41-01.png
Occasionally the adware's lockscreen will contain ads:
i418.photobucket.com/albums/pp270/ravenoz_bucket/Screenshot_2016-04-11-06-46-46.png
Pop up ad:
i418.photobucket.com/albums/pp270/ravenoz_bucket/Screenshot_2016-04-11-17-12-45.png
I've also noticed that the pop up ad would occasionally be opened from the default Android web browser, as the web browser will be opened with an "about:blank" page with the pop up ad in front. A browser hijack as well ? :crying:
I am trying to avoid resetting the phone, hopefully there are possible ways to troubleshoot this adware
Phone: INO 3
Android version: Android Lollipop 5.1
Root status: Not Rooted

DrilloBan said:
I ran both Avast and Malwarebytes separately (delete one and install the other) and both detected nothing malicious.
Ran Airpush Detector and Ad Detect plugin, no helpful results.
This happened after downloading Wechat and some automatic updates of a few apps. I have since deleted Wechat, but the problem persists. The few apps that were automatically updated at that time were: Facebook, Foxit,Gmail, Google Drive,Google+,Kik,Maps,FB messenger,Twitter,Whatsapp Messenger, Twidere,Swiftkey keyboard, Mini Warriors. I have not tried deleting them yet, but it seems to me that they are pretty legit apps.
Some examples of the adware in action:
Taking over my lockscreen with this annoying blue lockscreen:
i418.photobucket.com/albums/pp270/ravenoz_bucket/Screenshot_2016-04-11-06-41-01.png
Occasionally the adware's lockscreen will contain ads:
i418.photobucket.com/albums/pp270/ravenoz_bucket/Screenshot_2016-04-11-06-46-46.png
Pop up ad:
i418.photobucket.com/albums/pp270/ravenoz_bucket/Screenshot_2016-04-11-17-12-45.png
I've also noticed that the pop up ad would occasionally be opened from the default Android web browser, as the web browser will be opened with an "about:blank" page with the pop up ad in front. A browser hijack as well ? :crying:
I am trying to avoid resetting the phone, hopefully there are possible ways to troubleshoot this adware
Phone: INO 3
Android version: Android Lollipop 5.1
Root status: Not Rooted
Click to expand...
Click to collapse
Try the app Addons detector, find the apps that are causing the ads to popup on your phone, then remove those apps.

Mufrad said:
Try the app Addons detector, find the apps that are causing the ads to popup on your phone, then remove those apps.
Click to expand...
Click to collapse
Apparently this particular adware only targets INO, how did this even occur ?
Found solution from here: yampblog.blogspot.sg/2016/03/solved-ino3-android-smartphone-suddenly.html
The adware masqueraded itself as a core system app and also in another apk. Geez.

DrilloBan said:
Apparently this particular adware only targets INO, how did this even occur ?
Found solution from here: yampblog.blogspot.sg/2016/03/solved-ino3-android-smartphone-suddenly.html
The adware masqueraded itself as a core system app and also in another apk. Geez.
Click to expand...
Click to collapse
Good to know that you found a solution and have fixed your problem.

DrilloBan said:
I ran both Avast and Malwarebytes separately (delete one and install the other) and both detected nothing malicious.
Ran Airpush Detector and Ad Detect plugin, no helpful results.
This happened after downloading Wechat and some automatic updates of a few apps. I have since deleted Wechat, but the problem persists. The few apps that were automatically updated at that time were: Facebook, Foxit,Gmail, Google Drive,Google+,Kik,Maps,FB messenger,Twitter,Whatsapp Messenger, Twidere,Swiftkey keyboard, Mini Warriors. I have not tried deleting them yet, but it seems to me that they are pretty legit apps.
Some examples of the adware in action:
Taking over my lockscreen with this annoying blue lockscreen:
i418.photobucket.com/albums/pp270/ravenoz_bucket/Screenshot_2016-04-11-06-41-01.png
Occasionally the adware's lockscreen will contain ads:
i418.photobucket.com/albums/pp270/ravenoz_bucket/Screenshot_2016-04-11-06-46-46.png
Pop up ad:
i418.photobucket.com/albums/pp270/ravenoz_bucket/Screenshot_2016-04-11-17-12-45.png
I've also noticed that the pop up ad would occasionally be opened from the default Android web browser, as the web browser will be opened with an "about:blank" page with the pop up ad in front. A browser hijack as well ? :crying:
I am trying to avoid resetting the phone, hopefully there are possible ways to troubleshoot this adware
Phone: INO 3
Android version: Android Lollipop 5.1
Root status: Not Rooted
Click to expand...
Click to collapse
Interesting how you're seeing this. It looks eerily familiar to something I found after downloading the Flash Keyboard app. After downloading, and only while charging, the phone will show a second lock screen often with ads (for apps from the same company). Even more annoying, is that the app grants itself admin rights - so the only way to uninstall is to visit the admin section in settings before you can remove. Anyone else seeing issues like this for other apps?

Related

Spyware on my Note? Only used Google Apps and Stock everything.

I installed a few apps from the google app marketplace over the last week or two, and found I'm getting random advertisements popping up under my phones notifaction list ( Where you can drag down the menu at the top of your phones screen and see recent events. ) There are also buttons being placed in empty locations on my phones main tabs, like shortcuts to applications or widgets, and they link me to the web. ( I have multiple browsers and just close the box when it asks which browser to use. )
I don't understand where this is coming from or what I have to do to get rid of it... I understand that some apps have advertisements, but those are only while the application is actually opened and being used I thought. This has been sending me messages waking me up when I'm sleeping, It's kinda sorta bull**** lol... And I don't think I need an anti virus program constantly zapping my Notes resources, but yeah...
Any comments? What do I do to pinpoint which program is causing it, and will removing that app even fix the problem?
Seems you got airpush install somehow, download add on detector from the market
Sent from my SAMSUNG-SGH-I717 using xda premium
Make sure you post which app it was so we can all avoid it. 1 star it in the market and say it has AirPush and to avoid it before you uninstall it please!

[Q] Help Leadboltads virus on Galaxy S4

Hi All
Since a day I have a sort of leadbolt virus that opens my browser and shows the website like below:
ad.leadboltads.net with Top Apps/Offers of the Day
This happens when I download something from the playstore or when I delete apps.
It Makes crazy and I have tried some things alrdy so fix it without any succes.
- Downloaded and installed virusscannen, no succes
- Downloaded and installed ad detector, found a app with leadbolt, deleted it but didn't solve the problem
Hopefully someone can help me too fix this annoying problem
Me too!!!
This is so annoying! My browser keeps opening to the leadbolts site with a bunch of apps on it....Please someone help!
+1. From where come this shlt ?
Shaundiesel said:
Me too!!!
This is so annoying! My browser keeps opening to the leadbolts site with a bunch of apps on it....Please someone help!
Click to expand...
Click to collapse
I'm also having the problem and have not found a solution yet.
The only difference for me is I have adaway installed so the webpage never gets to display. Just opens the browser.
I've tried different ad detector apps from google play, but nothing is fixed this problem. Almost ready to reflash the rom and start from scratch.
UPDATE: I fixed the problem.
When the browser hijacking occurred, it happened after installing or updating a program from any source. Google Play, Amazon or a standalone APK. That meant the virus had control over my installer.
Using Lookout's Ad Detector, I identified some potential culprits (Go Launcher EX being at the top of the list) and uninstalled them. That didn't work.
What actually fixed the problem was resetting the defaults for all the apps. Settings > More > Application Manager. Hit the menu key and choose Reset app preferences.
You don't loose any data. You just get prompted for choosing a default app when you run certain applications. I choose to use Lookout's installer instead of the default android installer when I got prompted to install updates.
Haven't had the issue since. Hope this helps.
markmi300 said:
What actually fixed the problem was resetting the defaults for all the apps. Settings > More > Application Manager. Hit the menu key and choose Reset app preferences.
You don't loose any data. You just get prompted for choosing a default app when you run certain applications. I choose to use Lookout's installer instead of the default android installer when I got prompted to install updates.
Haven't had the issue since.
Click to expand...
Click to collapse
Hi everybody. (First sorry for my english but I speak french)
This is a solution but it workn't very good.
After the downloading and installation from a update or a program, Androîd ask me if I want to finish the task with the default browser or Chrome ? So I can't see this f*cking page more but I must always put my choice between the 2 browsers.
I thank you for your solutions....
+1 to lookout fixing. Had the same problem, ripped it right out.
Sent from carbon note 2 on XDA premium app
shbaldw said:
+1 to lookout fixing. Had the same problem, ripped it right out.
Sent from carbon note 2 on XDA premium app
Click to expand...
Click to collapse
Glad I was able to help.
See the solution at
http://forum.xda-developers.com/showthread.php?t=2525965
#@!%&#! 'ad.leadboltads.net' Malware
shbaldw said:
+1 to lookout fixing. Had the same problem, ripped it right out.
Click to expand...
Click to collapse
Lookout Security & Antivirus found mine in ChargeBar Free Edition,
ChargeBar came embedded in the NottachTrix 2.3.0 ROM.
I installed it (NottachTrix) and it (ChargeBar) didn't update for 3 months, then, BANG.
I've deleted ChargeBar's update, moved it from system apps to apps, deleted it, and the browser pop open 'ad.leadboltads.net' still persists.
Lookout Security & Antivirus can not find the new location of the malware, they do not have a forum.
By the very definition and behaviour, this is malware, and, ChargeBar (Asgard Casino Apps) is involved in the distribution of malware.
Asgard Casino Apps distributes 34 apps that behave this way.
They are using Google to distribute this malware, abet, that app is benign in its origin, its a pipeline, or conduit for malware.
Sneaky F##kers aren`t they.........
#1) I would like to get this crap off my phone.
#2) I need to bring this to Google's attention, and have the developer and apps banned from the Play store.
Sooo, starting with #1,,,how do I get this crap off my phone!
NOTE:
I will be linking to this post in the NottachTrix post, I'm asking the developers to to move ChargeBar from the ROM zip.
My MBAM forum post: https://forums.malwarebytes.org/index.php?showtopic=138306#entry764184

[Q] App installed automatically

Hi there,
I have facing issue in my Android 4.2.1 JB from alst 7 days. There are few apps which automatically getting installed without asking my permission. It hapeens when they detect i am connected to Wi-Fi or mobile data connection. i didn't rebooted my device. Everytime i have to uninstall these apps but after few hours they get automatically installed . Device rooted 2 months back
Apps are:
Baidu Browser
UC browser
Flapy Bird
Poker
Option like USB debugging and installed from unknown source are turned off. Even scanned by device through multiple anti-virus like Avast, AVG & CM Security. Below are the apps which are currently in my device:
Adobe reader, all-in-one toolbox, angry bird, avg, avast, axis bank app, B1 free archiver, backup& restore, barcode scanner, battery doctor, call control, cam-scanner, chrome, clean master, CM Security, Easy Video player, EN-HI dictonary, fusion (music player), goggles, hdfc app, iMedia share, kickass torrent, linkedin, FB messanger, My Tom, Next Launcher 3D, Outlook, Oaytm, Push mail, Quickoffice, Rails, Ringtone Editor Pro, root uninstaller, skype, speedtest subway surfer, superuser, temple run 2, tubemate, whatsapp, youtube.
Please help.
aadishivan said:
Hi there,
I have facing issue in my Android 4.2.1 JB from alst 7 days. There are few apps which automatically getting installed without asking my permission. It hapeens when they detect i am connected to Wi-Fi or mobile data connection. i didn't rebooted my device. Everytime i have to uninstall these apps but after few hours they get automatically installed . Device rooted 2 months back
Apps are:
Baidu Browser
UC browser
Flapy Bird
Poker
Option like USB debugging and installed from unknown source are turned off. Even scanned by device through multiple anti-virus like Avast, AVG & CM Security. Below are the apps which are currently in my device:
Adobe reader, all-in-one toolbox, angry bird, avg, avast, axis bank app, B1 free archiver, backup& restore, barcode scanner, battery doctor, call control, cam-scanner, chrome, clean master, CM Security, Easy Video player, EN-HI dictonary, fusion (music player), goggles, hdfc app, iMedia share, kickass torrent, linkedin, FB messanger, My Tom, Next Launcher 3D, Outlook, Oaytm, Push mail, Quickoffice, Rails, Ringtone Editor Pro, root uninstaller, skype, speedtest subway surfer, superuser, temple run 2, tubemate, whatsapp, youtube.
Please help.
Click to expand...
Click to collapse
Is someone messing around with your Google Account?
If someone login from your google account from computer and install app from play store site, it is installed from internet.
When you say it happens when you are connected to Wi-Fi or data, so I am 99.99% sure, it is due to messing with Google Account.
ok. Let me try removing my all google account from device and some other account to see if this happen again.
Thanks
hnkotnis said:
Is someone messing around with your Google Account?
If someone login from your google account from computer and install app from play store site, it is installed from internet.
When you say it happens when you are connected to Wi-Fi or data, so I am 99.99% sure, it is due to messing with Google Account.
Click to expand...
Click to collapse
Hi there,
I removed all my google account from mobile and added new gmail account. But issue is still same.
Maybe you could try to disable "Auto-update apps" in google play.
Even i have the same problem. I even removed the auto-update but still its happening.
Please help ?
he_arslan said:
Maybe you could try to disable "Auto-update apps" in google play.
Click to expand...
Click to collapse
"Auto-update apps" is disabled in google play. But same this is keep happening. Did hard reset of my phone but same issue.
i have that same problem with my tablet from ebay running 4.2.2 app DU Battery Saver & Widgets is installed without my permission and i don't even have google account on this device, but tablet is connected on wifi 24/7 and all apps are stock i have original firmware and i try to reflash device but this is happening again
Very odd... Have you tried disabling the Install from Unknown Sources option?
now it is, let's see if this will help
i have something the same problem
I bought on e-bay a Chinese 10.1" M10 type with MTK8127 chipset and Android 4.4.2 Kernel: 4.3.67 tablet.
It works great except that it is every day i get a new surprise "great" application that are installed on their own, do not ask for anything and ready to license to be posted.
The tablet was rooted with VRoot_1.7.3.4863_english_cid1005_7337ba1e_89.exe and with MtkDroidTools_v253 do full backups.
Telepütek follows so far:
27/10/2014 1:16:17 DU Battery Saver
28/10/2014. 1:07:51 Flappy Cow
10/29/2014. Happy Jump 1:39:45
30/10/2014. 1:39:13 Freaking Math
31/10/2014. 1:49:11 Amazing Candle
11/1/2014. 1:28:43 Monkey (/data/app/com.candh.game.monkey-1.apk)
In addition, after each start / restart after a few minutes received a message in the notification area:
Du Battery Saver -> The key to optimize, clean up backstage power applications, rapid power
What I have tried:
Factory reset, after of course, google restore disabled and manually put up everything again.
Note that this is after factory reset the same applications in the same order almost exactly in same time per day.
The version numbera are earlier or actual that you can download from play.
The applications that I use on that device are the same that i use on other (Samsung) device so it is sure that there is no problem with them but i think the system itself compromised.
I tried Avast, Avira, eset, AirPush Block, Network connections, OS Monitor, Addons Detector, Trust - Event Logger but not found anything and I could not figure out what was happening.
I put CatLog - Logcat Reader to get it know whats happening but could not really understand what was happening.
Please help to figure it out based on the log to see what happens and how it happens and how can I get rid of this.
The following is a brief log details, of course, I will send out more on request.
See attachment.
kisger13 said:
I bought on e-bay a Chinese 10.1" M10 type with MTK8127 chipset and Android 4.4.2 Kernel: 4.3.67 tablet.
It works great except that it is every day i get a new surprise "great" application that are installed on their own, do not ask for anything and ready to license to be posted.
The tablet was rooted with VRoot_1.7.3.4863_english_cid1005_7337ba1e_89.exe and with MtkDroidTools_v253 do full backups.
Telepütek follows so far:
27/10/2014 1:16:17 DU Battery Saver
28/10/2014. 1:07:51 Flappy Cow
10/29/2014. Happy Jump 1:39:45
30/10/2014. 1:39:13 Freaking Math
31/10/2014. 1:49:11 Amazing Candle
11/1/2014. 1:28:43 Monkey (/data/app/com.candh.game.monkey-1.apk)
In addition, after each start / restart after a few minutes received a message in the notification area:
Du Battery Saver -> The key to optimize, clean up backstage power applications, rapid power
What I have tried:
Factory reset, after of course, google restore disabled and manually put up everything again.
Note that this is after factory reset the same applications in the same order almost exactly in same time per day.
The version numbera are earlier or actual that you can download from play.
The applications that I use on that device are the same that i use on other (Samsung) device so it is sure that there is no problem with them but i think the system itself compromised.
I tried Avast, Avira, eset, AirPush Block, Network connections, OS Monitor, Addons Detector, Trust - Event Logger but not found anything and I could not figure out what was happening.
I put CatLog - Logcat Reader to get it know whats happening but could not really understand what was happening.
Please help to figure it out based on the log to see what happens and how it happens and how can I get rid of this.
The following is a brief log details, of course, I will send out more on request.
See attachment.
Click to expand...
Click to collapse
Did you disable the option to install from unknown sources?
es0tericcha0s said:
Did you disable the option to install from unknown sources?
Click to expand...
Click to collapse
Yes, sorry i forget to write it.
I just. This morning also am getting random apps installed. Dominos pizza, panda pop and cookie jam the newest app i have installed is brave frontier can it be malware or something else.
4218kris said:
I just. This morning also am getting random apps installed. Dominos pizza, panda pop and cookie jam the newest app i have installed is brave frontier can it be malware or something else.
Click to expand...
Click to collapse
It could be if you got it from anywhere but the official play store. Never install apps not from a trusted source.
4218kris said:
I just. This morning also am getting random apps installed. Dominos pizza, panda pop and cookie jam the newest app i have installed is brave frontier can it be malware or something else.
Click to expand...
Click to collapse
I got the same apps today - Domino's PandaPop, and Cookie Jam plus Drippler. I did not install Brave Frontier, so that isn't the source.
The only things done recently for me are:
- Connected up to my work Office 365 service, which requires admin access (for wipe, etc)
- Updated su binaries a few days ago - at prompt from SuperSU
Oh lovely...
http://www.pcworld.com/article/2853...aller-spotted-on-t-mobile-verizon-phones.html
yep thats it i bet, its on my tablet. thanks carrier...
Doktor-X said:
i have that same problem with my tablet from ebay running 4.2.2 app DU Battery Saver & Widgets is installed without my permission and i don't even have google account on this device, but tablet is connected on wifi 24/7 and all apps are stock i have original firmware and i try to reflash device but this is happening again
Click to expand...
Click to collapse
I just got DU Battery Saver installed on my Onix tablet. You read stuff on the internet about cheap Chinese tablets coming loaded with spyware and other sorts of stuff and I wonder whether apps can be freely installed via some hidden app on the device.
You all suck dumb asses
Thats why i hate these blog sites they call themselves experts but cant solve any damn thing untick auto updates, really you think we didn't knew that much really man,my problem never got solved in online sites infact you will get more confused why would some hack someone's google account and download du app make some sense guys you all suck

Are you getting the terraclicks ad virus?

I think I have got a virus in my phone. Sometimes when I open any link in Chrome, a random popup opens which usually redirects to the play store somewhere. Once I opened 9gag.com and it opened 9gag's play store link. It even happened with android authority blogs that when I interact with the page i.e touch or scroll anywhere, a random ad link just pops up. Not only this but the original page is replaced by a facebook page whose URL contains something about a campaign i.e its ID etc. History shows a website terraclicks.com and google search on terraclicks shows that it's a PC virus.
Not only with Chrome, I even got the same popup while opening a link using facebook's own default internal browser.
I used Avast to scan for viruses including all files but it found no virus. The same thing is also happening in my brother's phone and we don't share anything between phones. There's a laptop in my home which also shows terraclicks in its history. So I think the virus is spread over all the devices, but I am still unsure as to how to remove it while mobile's antivirus detects nothing.
ad virus
Yes i have the same problem.Please help.
well I installed ccleaner and cleared three things:
All apps cache, chrome history and empty folders. It disappeared for some days but last night it came again to me. Now I have repeated the process again, let's see what happens now..
Usman i have factory restored my phone but it is still there. I dont know what to do now
khan khan said:
Usman i have factory restored my phone but it is still there. I dont know what to do now
Click to expand...
Click to collapse
which internet are you using? I am using PTCL
Do you also have this on another mobile or on computer?
no, there is only one mobile and it is only happening with it.
It's most likely a simple ad that is displayed when they detect your device and want you to download their app I stead. Use an ad blocker and you will be fine.
zelendel said:
It's most likely a simple ad that is displayed when they detect your device and want you to download their app I stead. Use an ad blocker and you will be fine.
Click to expand...
Click to collapse
It's also appearing on computers. And I can say it's not coming from the website's owner because I personally work on a website and one time clicking on its logo triggered the ad. That website would never put an onClick ad on its logo.
terraclicks ad virus
You should install a new window on your computer which will definitely remove these ads but what to do with this in the android. I have installed every antivirus , antimalware and have performed a reset too but no effect.
OMG, I was also infected with Terraclicks. All I can find is removal guides that have nothing to say about Android system.. Can I just reinstall by browser or reset my phone to factory settings? I would prefer the second option because I have lots of photos that are important to me on my device. thanks
It's almost a year since the original post on this thread, and still searches for info on this insidious malware, Terraclicks shows just non-android solutions and generic adware removal info.
Like several other posters I have tried dozens of AV and anti-malware apps but nothing works so far.
Has anyone found a solution??
Clear all apps cache, browser cookies (it will log you out of all websites in the browser), and browser history (only if needed).
Try the above steps one by one and give some time between them to see if the problem goes away without doing the other steps.
It probably comes from visiting cheap websites like those sharing apk files or songs etc. They don't give a damn about the users.
For me this was solved by making uTorrent pro inactive, the adds stopped.
Once I uninstalled it they never came back.
Assuming you have cleared your Chrome cache etc, I suspect you have an app which has been installed which is causing this. In my case it was an .APK which I had downloaded externally (because I couldn't get it from the Play Store). As it happened, this particular app made itself a device administrator (you can check by going into Security, Device Administrators) and it also had greyed out the ability to uninstall it. The app was also running as a background process which is how it keeps spawning those ads. Nothing picked it up as Malware (Malware Bytes, Trend, CCleaner). That was the giveaway to me, that something wasn't right with this app. This would also explain why a phone reset wouldn't remove it, because that typically reinstalls all your apps (except in your case) the app would have probably come from the Play Store. Since removing the app, I've had no problems and the dreaded problem has gone away. Now I am a lot more careful about which APKs I loaded. Good luck
I had this issue and it ended up being one of the apps I downloaded. Once in uninstalled the correct app the problem ended. If you do factory reset, then redownload all your apps, then the problem would come back because you redownloaded all the apps you originally had. This is especially true if you use an app that's not in googles playstore so what he is saying sounds almost exactly the same as what happen to me.
Thank you that fixed it. I downloaded showbox of a site. N it messed up my phone.

Browser opening ad website after updating apps

Sometimes when an app finishes updating my browser (Via Browser) opens and loads a page that is advertising apps. First it was Appsquare, now it's some other website I forgot to remember. I have NO idea what the cause is and I didn't install any strange apps to my knowledge. I never installed any APK that I downloaded outside the Play Store and both Malwarebytes Antimalware and Eset found nothing. This doesn't always happen when I update an app so there's no set pattern. Smetimes it doesn't happen after updating one or more apps and sometimes it does and that is why I can't really figure out which app is causing it, if it is an app at all because there are no ads displaying in either app I use because I paid to get rid of it. Yes, I did some research and it seems to be an issue mainly affecting Samsung users and one site in particular did some research and found out it was a shady ad network behind it: Clickity. My symptoms do match but I have an LG device, not a Samsung device and I use a different browser. I have used a few of Cheetah Mobile's apps in the past but I'm sure I deleted all traces of it on my phone, at least the things I could find. And I haven't used a single app from those devs anymore since I did a factory reset on my phone and updated to Android 8 so there shouldn't be a trace left. I need help fixing this because I have no idea where to look.
EDIT: It turned out to be my clock widget app "Digital Clock Widget Xperia" made by Lazar Dimitrov that was causing those ads to pop up, despite paying to remove ads.

Categories

Resources