Android malware fakeinst ey - Nexus 4 Q&A, Help & Troubleshooting

Hi,
When i used firefox this morning, avast warned me about a malware... I removed and installed again firefox, but there is still the malware. After a scan, avast is showing me about 20 apps and files infected... Is it some kind of false positive, or is it a real malware ? I don't know what to do... Thanks for help
Sent from my Nexus 4 using xda app-developers app

If it was me I'd flash the entire phone then re install stock firmware, but all my stuff is backed up I don't know about yours??
Sent from my LT22i using xda premium

AutruiP said:
Hi,
When i used firefox this morning, avast warned me about a malware... I removed and installed again firefox, but there is still the malware. After a scan, avast is showing me about 20 apps and files infected... Is it some kind of false positive, or is it a real malware ? I don't know what to do... Thanks for help
Sent from my Nexus 4 using xda app-developers app
Click to expand...
Click to collapse
I have the same issue as of this morning, Avast reporting Android:FakeInst-EY [Trj] on 10 installed apps. Is it possible it's an avast issue?

AutruiP said:
Hi,
When i used firefox this morning, avast warned me about a malware... I removed and installed again firefox, but there is still the malware. After a scan, avast is showing me about 20 apps and files infected... Is it some kind of false positive, or is it a real malware ? I don't know what to do... Thanks for help
Sent from my Nexus 4 using xda app-developers app
Click to expand...
Click to collapse
Its avast problem. I'm on S3 and Avast just showed me 30 malwares "Android:FakeInst-EY"
Avast Blog has this post, I suppose this is related to this:
Block fake apps
avast! Free Mobile Security blocks fake apps and our new signature targeting protects you against
malware distributed with them. Our popular anti-virus/anti-theft app for Android stops downloads of fake apps and games, so you won’t be duped.
“All of these apps use multiple advert services, steal your personal data and they even are hidden under different creators. But don’t worry. Avast detects all of the mentioned applications as Android:FakeInst-DL, and urls of fake searchers are blocked also,” said Chytrý.
Get avast! Free Mobile Security for your Android device from Google Play. Please add a review and share with your friends if you like it!
Click to expand...
Click to collapse
Source: http://blog.avast.com/2013/01/24/fake-google-play-apps/
Similar problems in German Forums, but I could understand / translate the webpage.
http://www.computerbase.de/forum/showthread.php?t=1189186
http://www.android-hilfe.de/nexus-1...vast-als-trojaner-erkannt-auf-nexus-10-a.html
This has hit universally I suppose.

pharalia said:
I have the same issue as of this morning, Avast reporting Android:FakeInst-EY [Trj] on 10 installed apps. Is it possible it's an avast issue?
Click to expand...
Click to collapse
Having the same issue. Avast posting that gmail is a trojan, which seems unlikely.

Looks like avast is really messing this one up this time!
Getting Android:FakeInst-EY [Trj] on WhatsApp, Ingress, Norton Utilities (lol), + a couple others as well

Thanks for confirming my suspicions, I didn't really want to wipe my device

Just to add, this happened to me this morning as well. 8 apps infected including Gmail. It seems this is on Avast.

Thanks everyone ! I have it on gmail too, and on Ingress. I checked with Lookout, and nothing bad happened ! Avast, u suck...
Sent from my Nexus 4 using xda app-developers app

It's look like an avast! problem. You need refresh the virus definition to 20130321-01.
Info on: forum.avast.com/index.php?topic=118778.0

It's a problem with Avast virus signature DB
http://forum.avast.com/index.php?topic=118778.0
About Android:FakeInst-EY
« on: Today at 09:30:01 AM »
Hi everyone,
it seems that this false positive detection somehow got through our systems to everyone. I'm sorry for that. Don't worry though, there should be a virus definitions update soon that will remove this detection. I'm going to reroute all topics to this one and lock them so everyone knows what's happening. I'll post here when the update is out so everyone can do a manual update of their definitions to fix this (or you can, of course, wait for the automatic update to happen, but manual will most probably be faster in this case).
Filip

Happening to myself and my wife. Same malware identified in multiple applications (Google Gmail, Amazon Kindle)

Yup, same here. Avast reporting Gmail & Firefox as malware.

Same issue. Whatsapp and avocado are reported. Seems something wrong with avast. Considering to uninstall it
Sent from my Nexus 4 using xda app-developers app

From the avast forum link:
"the latest update should be version 130320-01. In case of user apps, you can run apps scan which should clear the detections. In case of system apps, running the apps should clear the detections (that applies for user apps as well, but it should be faster to just run the apps scan)."
I just went into avast and updated the app to 130320-01. It took a few times hitting the update button before it actually updated avast, but it finally did. Afterwards, I ran a virus scan on all my apps, and it came back clean. Problem solved.

wvcadle said:
From the avast forum link:
"the latest update should be version 130320-01. In case of user apps, you can run apps scan which should clear the detections. In case of system apps, running the apps should clear the detections (that applies for user apps as well, but it should be faster to just run the apps scan)."
I just went into avast and updated the app to 130320-01. It took a few times hitting the update button before it actually updated avast, but it finally did. Afterwards, I ran a virus scan on all my apps, and it came back clean. Problem solved.
Click to expand...
Click to collapse
jelmew said:
Having the same issue. Avast posting that gmail is a trojan, which seems unlikely.
Click to expand...
Click to collapse
The thing I find curious is I updated Gmail on both my phone & tablet at the same time. Phone update went fine with no detection. Tablet popped up the FakeInst:EY detection during Gmail install so thought maybe definition file wasn't up to date (or EVO3D had a newer def file). But both devices are running v130321-01 which is supposed to have the fix (?).
Rescanning both devices, EVO3D comes up clean but tablet now detects 4 apps w/malware! Have tried updating but says this is the latest version out there. As said, will wait for the next update after 130321-01 and see if it clears. Just odd that have two devices with same versions of Gmail & Avast (and updates/defs) and two different results!
Update: No new updates to avast, but reran scans a second time on both a second time 5 minutes later and this time both came up clean. How can that be? I guess most importantly, both are clear again though worries me when one "detects" (even w/false positive) while other doesn't with what appears to be same environment!

I got the same warning today for a few apps, i had already deleted Firefox....
I just updated Avast as said in this treat and no warnings anymore Time to reinstall Firefox

Check this link out: http://www.androidcentral.com/popular-mobile-security-app-avast-marking-gmail-malware
TLDC (Too Lazy, Didn't Click);
Avast said:
it seems that this false positive detection somehow got through our systems to everyone. I'm sorry for that. Don't worry though, there should be a virus definitions update soon that will remove this detection. I'm going to reroute all topics to this one and lock them so everyone knows what's happening. I'll post here when the update is out so everyone can do a manual update of their definitions to fix this (or you can, of course, wait for the automatic update to happen, but manual will most probably be faster in this case)
Click to expand...
Click to collapse

Update your avast antivirus to latest virus definitions and re scan the phone. all problems will be solved

Trojan.Generic in Nexus 4 toolkit ??
this morning trying to run Nexus 4 toolkit, it also reported "Trojan.Generic", and then stopped, even add it to trust file, still will not run, What's wrong.

Related

[Q] Anti-Virus?

I'm new to Android and I am wondering if you all plan to put some sort of antivirus program on your Xoom? Is this needed? If so, which programs are the best?
Thanks!
Malcus1
Don't think there are any viruses for Android.
Sent from my PC36100 using XDA App
Malcus1 said:
I'm new to Android and I am wondering if you all plan to put some sort of antivirus program on your Xoom? Is this needed? If so, which programs are the best?
Thanks!
Malcus1
Click to expand...
Click to collapse
Yes there are Viruses on Android. Most recently they were able to penetrate the actual Google marketplace. Before that most were found on third party sites which are not recommended to get apps from anyways. Most people dont use an anti virus but I believe this will change unless Google does something to prevent any other viruses from entering the market.
Lookout is a antivirus app that can found in the market. It is from a reputable company in the US. The app will scan your apps and compare to a database of known threats(free version is sufficient). While before the recent events I didnt worry about it either I now use Lookout. Something is better than nothing. But the best defense is common sense. Dont download from third party sites and always check the permissions an app is requesting before installing. A wallpaper app doesnt need access to every part of your phone. If it is asking for excessive permissions try to find another app that completes the same task with less permissions. Hope this helped.
I use lookout on my xoom. It just doesn't do the whole locate thing (a great feature) unless you have cellular service (which I do not) because it uses SMS for that feature
Sent from my Xoom using Tapatalk
DroidzFX said:
Yes there are Viruses on Android. Most recently they were able to penetrate the actual Google marketplace. Before that most were found on third party sites which are not recommended to get apps from anyways. Most people dont use an anti virus but I believe this will change unless Google does something to prevent any other viruses from entering the market.
Lookout is a antivirus app that can found in the market. It is from a reputable company in the US. The app will scan your apps and compare to a database of known threats(free version is sufficient). While before the recent events I didnt worry about it either I now use Lookout. Something is better than nothing. But the best defense is common sense. Dont download from third party sites and always check the permissions an app is requesting before installing. A wallpaper app doesnt need access to every part of your phone. If it is asking for excessive permissions try to find another app that completes the same task with less permissions. Hope this helped.
Click to expand...
Click to collapse
Thanks Droidz,
So it sounds like if I am cautious about which apps I download I should be alright. I tend to only download apps that have been downloaded by a large number of people with good reviews. Hopefully that will keep me safe. But I'll try out Lookout too.
Malcus1 said:
Thanks Droidz,
So it sounds like if I am cautious about which apps I download I should be alright. I tend to only download apps that have been downloaded by a large number of people with good reviews. Hopefully that will keep me safe. But I'll try out Lookout too.
Click to expand...
Click to collapse
As long as you're not downloading shady apps (esp ones from outside of market) you'll be fine. Antivirus is really not necessary.

Forced Spam Apps?

My phone will, when using various apps I've been using for years, suddenly open the play store and redirect me to Candy Crush or Caesar's slots. I'm getting sick of this. Does anyone know why this is happening? Lookout hasn't found any viruses or anything.
Sent from my LG-D800 using xda app-developers app
Try AirPush detector and see if some app is causing it to happen.
I actually had this happen from the browser. A damn play store "pop up". Surprised the hell out of me. Was also for candy crush. I also have pop ups disabled. I noticed this happen after I defaulted play links to the store. Must somehow disable the check.
Wow these adware companies are getting even more aggressive now a days
Same issue here.
Uninstalled everything except stock Google apps and same thing happening with pop up (candy crush), so I guess whatever is installed can't be uninstalled! Airpush or Ad detector software can't find the culprit either.
This is a huge security issue..... Reporting to Google
Browsers do it too... Doesn't have to be an app. It's a redirect "popup" avoiding standard android popup detection. I found this out by getting one before I defaulted links the play store. I actually got asked one time lol. The security issue would be a redirect to an actual infested page, which the built in popup blocker does block. The problem lies in the call of playstore only through playlink, which really can't cause harm being it can only show you the app, nothing further. Would be nice if fixed... Simply set to ignore non user clicked playlink pushes and implement a touch check.
Steamer86 said:
Browsers do it too... Doesn't have to be an app. It's a redirect "popup" avoiding standard android popup detection. I found this out by getting one before I defaulted links the play store. I actually got asked one time lol. The security issue would be a redirect to an actual infested page, which the built in popup blocker does block. The problem lies in the call of playstore only through playlink, which really can't cause harm being it can only show you the app, nothing further. Would be nice if fixed... Simply set to ignore non user clicked playlink pushes and implement a touch check.
Click to expand...
Click to collapse
I thought it was the browser I was using (Next), but problem persists across chrome and boat so I think it's some stealth junk installed in my system.
Google needs to find a fix for this, especially when airpush and ad detector apps can't resolve.
It isn't any stealth junk. Its browsing. Http. Port 80. The interwebs. Ect. Ect. It is not an app. It is not a service. Hence airpush or ad detectors will not detect it. Simply a link.
Steamer86 said:
It isn't any stealth junk. Its browsing. Http. Port 80. The interwebs. Ect. Ect. It is not an app. It is not a service. Hence airpush or ad detectors will not detect it. Simply a link.
Click to expand...
Click to collapse
You seem knowledgeable. How is it fixed? Simple restore of browser settings??

[Q] Facebook updating OUTSIDE of the Play Store?

I run Version 27 of the Facebook app. Since I got my Note 4 last week, Facebook has been updating daily and sometimes more often than once, OUTSIDE of the Play Store.
I have all auto-updates turned off, no unknown sources allowed. This seems to happen only on the pre-installed version. This never, ever happened on my S5.
Is anyone else with any carrier having this issue?
Zoey2014 said:
I run Version 27 of the Facebook app. Since I got my Note 4 last week, Facebook has been updating daily and sometimes more often than once, OUTSIDE of the Play Store.
I have all auto-updates turned off, no unknown sources allowed. This seems to happen only on the pre-installed version. This never, ever happened on my S5.
Is anyone else with any carrier having this issue?
Click to expand...
Click to collapse
I know youre new to the Note 4 but not to XDA please follow the Forum Rules,
http://forum.xda-developers.com/note-4/general/post-questions-t2866827
as per your question, I haven't seen this issue, please uninstall and re-install the app, or wipe the apps, cache, and data and try again, god bless , cheers:fingers-crossed:
yoniinfante said:
I know youre new to the Note 4 but not to XDA please follow the Forum Rules,
http://forum.xda-developers.com/note-4/general/post-questions-t2866827
as per your question, I haven't seen this issue, please uninstall and re-install the app, or wipe the apps, cache, and data and try again, god bless , cheers:fingers-crossed:
Click to expand...
Click to collapse
Sorry, I did a quick skim, didn't notice the "no questions here" someone can feel free to move this.
You can't uninstall it, they made it "bloatware". Clearing cache etc doesn't work. This happens daily.
Zoey2014 said:
Sorry, I did a quick skim, didn't notice the "no questions here" someone can feel free to move this.
You can't uninstall it, they made it "bloatware". Clearing cache etc doesn't work. This happens daily.
Click to expand...
Click to collapse
You cant Unistall Facebook app???
yoniinfante said:
You cant Unistall Facebook app???
Click to expand...
Click to collapse
No, Facebook and Instagram were pre-loaded like bloatware. Disable is all you can do. I use the app, just don't want anything above v27.
Zoey2014 said:
No, Facebook and Instagram were pre-loaded like bloatware. Disable is all you can do. I use the app, just don't want anything above v27.
Click to expand...
Click to collapse
Well, mate root your phone and flash a custom ROM, you will get all kinds of advantages, if I helped please use the Thanks button, god bless, cheers:fingers-crossed:
yoniinfante said:
Well, mate root your phone and flash a custom ROM, you will get all kinds of advantages, if I helped please use the Thanks button, god bless, cheers:fingers-crossed:
Click to expand...
Click to collapse
I wish I could root it. No root for my variant yet.
there are two hidden apps in system responsible for that
com.facebook.appmanager
com.facebook.system
i did wanted to install them, they were installed silentlythey may causing it to update
Salim.Keady said:
there are two hidden apps in system responsible for that
com.facebook.appmanager
com.facebook.system
i did wanted to install them, they were installed silentlythey may causing it to update
Click to expand...
Click to collapse
I think you are correct about those two files, because I saw those show up.
I had some crazy issues with my phone two days ago and Best Buy had to replace it. I came home, didn't log into my Google or Samsung account. While it was downloading Lollipop, my Facebook app updated. Again, outside of the Play Store and this phone had never been logged into the Play Store, I also had not logged into my Facebook app or sideload my Facebook apk.
I saw those two files listed as "downloaded" in the App Manager. I was able to uninstall updates and disable them. Then I did uninstalled updates on the Facebook app and sideload version 27. I saw those two files in downloaded apps before when I did a reset when my original phone when nuts.
Since I disabled those and they don't show up in the "turned off" apps or show up anywhere now, my Facebook hasn't updated again. I was looking today to see if I could find those two files and where I had them disabled. But, again, the only time I have seen them is when I haven't installed my app and the app has just updated by itself. I hope that has stopped it for me. I think if someone isn't rooted, the only way to deal with those two files is how I did the other night.
lol man thanks i know about them but i forgot to disable them
Salim.Keady said:
lol man thanks i know about them but i forgot to disable them
Click to expand...
Click to collapse
Yeah I could only disable with the first update. I don't even know if going and uninstalling updates to Facebook, will let you do this or if you can only catch them with the first update after a reset or out of the box. All that based on a non-rooted device.
Still no updates for me since I was able to do that the other night and it was updating several times a day. Every time I rolled it back, it would update again not much long after.

System dump?

Hi so been on 7.0 for at least a month and just last two days phone was being really buggy so I turned the phone off and back on phone didn't prompt for password to boot.
Is there a way I can save the whole phone on to drive to send to someone to take a closer look to see what virus is on here Im guessing it's a rootkit some how also what way would you run packet capture to see things that way?
Sent from my Nexus 6P using Tapatalk
gjkrisa said:
Hi so been on 7.0 for at least a month and just last two days phone was being really buggy so I turned the phone off and back on phone didn't prompt for password to boot.
Is there a way I can save the whole phone on to drive to send to someone to take a closer look to see what virus is on here Im guessing it's a rootkit some how also what way would you run packet capture to see things that way?
Click to expand...
Click to collapse
I would just grab the latest software image from google and start all over....by the way this doesn't belong here...it belongs in Q&A
Well I think I have a virus I figure people here are going to would want to take a look at that
Sent from my Nexus 6P using Tapatalk
Hii, i would love to take closer look into your phone ? contact me
Viper-GT said:
Hii, i would love to take closer look into your phone contact me
Click to expand...
Click to collapse
let me know what i need to do i did adb backup-full but i doubt it has everything you need.
also couldnt wait so i manually flashed full image downloading the newest beta again.
kornklown69 said:
I would just grab the latest software image from google and start all over....by the way this doesn't belong here...it belongs in Q&A
Click to expand...
Click to collapse
doing this still didnt work even tried another rom manually flashed everything on week 3 my phone started acting buggy restarted phone everything is fine next week i get message that someone has saved new device from my bank bank account if my bank didnt have this feature i would probably not know this happend along with seeing the txt messages showing the second factor authentication.
please tell me how i can get this phone fully backed up with the virus in it to have it sent to someone to review what virus it has?
im going to try emailing other security firms, and google and also look at probably using an iphone for awial.
gjkrisa said:
doing this still didnt work even tried another rom manually flashed everything on week 3 my phone started acting buggy restarted phone everything is fine next week i get message that someone has saved new device from my bank bank account if my bank didnt have this feature i would probably not know this happend along with seeing the txt messages showing the second factor authentication.
please tell me how i can get this phone fully backed up with the virus in it to have it sent to someone to review what virus it has?
im going to try emailing other security firms, and google and also look at probably using an iphone for awial.
Click to expand...
Click to collapse
a virus would be software related...if you did a full wipe and installed fresh software and it continues it might be an app you keep installing...do you get your apps from the playstore or side load as well
kornklown69 said:
a virus would be software related...if you did a full wipe and installed fresh software and it continues it might be an app you keep installing...do you get your apps from the playstore or side load as well
Click to expand...
Click to collapse
playstore only before my phone was locked boot loader and encrypted to have to use pin to boot device.
AS SOON as i get the buggy phone and reboot when it boots up it no longer request pin to boot. on stock rom i was rebooting phone every week to see how long it would take and usually nothing odd until phone got buggy for reason of the reboot.
the buggy issue is shortly opening an app the app will freeze so i hit home nothing happends try to turn the screen off nothing happends until a minute later sometimes phone will reboot its self or i hold power to make it reboot but both take about same amount of time when phone goes into full freeze.
so it being a playstore app and the virus not getting detected google needs to look into how they can patch this...
so im putting this out there so this person or group doesnt forever have a backdoor into peoples phones.
this issue i have had since november last year but havent been so aware about the issue till august. since august ive been dealing with know some how they are getting in and must be an app but i got rid of all games and weird apps that are not nessisary
abs workout, esfile explorer, google+,mint personal finance,tapatalk,accuweather,alaskausafcu,amazon kindle, android auto, android device manager, android pay, calculator, chrome browser, chrome remote desktop, clock, cloud print, contacts, es task manager, facebook, family locator, favorite frequencies, fing, garmin connect, gci my usage, gmail, google, google calendar, google camera, google docs, google drive, google goggles, google keep, google keyboard, google news, google now launcher, google opinion, google photos, google play games, google play music, google txt to speech, hulu, keeper, look out, malwarebytes, maps, messenger, eset mobile security, pandora, playstation phone, phone, shazam, sixaxis controller, skype, speed test, usaa mobile, vlc for android, wifi analyzer, xbox, youtube, zombies run
these are all the apps ive had since ive had this issue.
i was hopping that esfiles exploreres new feature of being notified of new files would help solve this but some folders it doesnt detect like youtube or google music even though in es files explorer i unlocked ability to view the .nomedia
Drop ES File Explorer, to start. Read this article, or do some googling about it on your own;
https://www.androidpit.com/this-is-why-you-should-not-use-es-file-explorer
I have to agree with the article when it says Solid Explorer is a great replacement. I've used it for years now and it's never let me down.
The fact of the matter is, if you manually wiped all of your phone and formatted your internal storage, nothing remains from pre-wipe. If your issue is coming back it can only be a hardware issue (if applicable) or some app you are using, as previously mentioned.
Furthermore, after googling your exact issue I came to find that certain apps that require 'Accessibility Services' can and will disable your pin/password/pattern on boot. Check if any of your apps fit the bill in 'Settings > Accessibility > Services'
Disable any apps which are enabled and reboot. You may have to set up pin, etc., again, but leave the services disabled and see if the issue returns. Let us know!
Edit: Upon more googling, I've found reports of people who had the issue return after disabling & uninstalling the apps in question as well. You may need to flash stock images again and do not install any apps that require accessibility services, or don't grant any of them permission even once.
Edit2: Just another link to check out;
https://blog.g3rt.nl/android-lollipop-encryption-user-interface-flaw.html
Edit3: Issue tracker link; https://code.google.com/p/android/issues/detail?id=219498
Edit4: If you logged into your bank app and factory reset or flashed factory images, logging in again after the wipe/flash will show as a new device. Same goes for having login alerts set for Google / Facebook, etc. Your same phone shows as a new device after the flash or wipe. Guaranteed not a virus.
Double post
RoyJ said:
Drop ES File Explorer, to start. Read this article, or do some googling about it on your own;
https://www.androidpit.com/this-is-why-you-should-not-use-es-file-explorer
I have to agree with the article when it says Solid Explorer is a great replacement. I've used it for years now and it's never let me down.
The fact of the matter is, if you manually wiped all of your phone and formatted your internal storage, nothing remains from pre-wipe. If your issue is coming back it can only be a hardware issue (if applicable) or some app you are using, as previously mentioned.
Furthermore, after googling your exact issue I came to find that certain apps that require 'Accessibility Services' can and will disable your pin/password/pattern on boot. Check if any of your apps fit the bill in 'Settings > Accessibility > Services'
Disable any apps which are enabled and reboot. You may have to set up pin, etc., again, but leave the services disabled and see if the issue returns. Let us know!
Edit: Upon more googling, I've found reports of people who had the issue return after disabling & uninstalling the apps in question as well. You may need to flash stock images again and do not install any apps that require accessibility services, or don't grant any of them permission even once.
Edit2: Just another link to check out;
https://blog.g3rt.nl/android-lollipop-encryption-user-interface-flaw.html
Edit3: Issue tracker link; https://code.google.com/p/android/issues/detail?id=219498
Edit4: If you logged into your bank app and factory reset or flashed factory images, logging in again after the wipe/flash will show as a new device. Same goes for having login alerts set for Google / Facebook, etc. Your same phone shows as a new device after the flash or wipe. Guaranteed not a virus.
Click to expand...
Click to collapse
Thank you! I tried googling but guess I wasn't doing it properly.
I turned off keeper nothing.
I un installed it nothing.
I dont know how to re enable boot encryption pin.
the phone says it is so I'll try clean install again and just not allow keeper anymore I think the issue has come up just after turning keeper on to allow the accessibility features.
Thank you I will keep you informed give it till February if nothing odd happened.
Sent from my Nexus 6P using Tapatalk
gjkrisa said:
Thank you! I tried googling but guess I wasn't doing it properly.
I turned off keeper nothing.
I un installed it nothing.
I dont know how to re enable boot encryption pin.
the phone says it is so I'll try clean install again and just not allow keeper anymore I think the issue has come up just after turning keeper on to allow the accessibility features.
Thank you I will keep you informed give it till February if nothing odd happened.
Sent from my Nexus 6P using Tapatalk
Click to expand...
Click to collapse
Also thanks I know about the added devices I cleaned the one to my bank account and I look at my other accounts every once in awial and make sure nothing odd wish my bank account showed what devices instead of only having clean on Facebook I've had things look suspicious ips from another states but the device listed was same as mine so don't know if they are able to spoof that.
I always assumed that some how the cell tower was saying it is relayd to Cali or something.
I live in Fairbanks Alaska.
Sent from my Nexus 6P using Tapatalk
Well turns out it was keeper I switched to last pass uninstalled keeper before uninstall It was telling me 8 hrs of battery life. Now 21 more hrs with already being on for 5 hrs at 78%.
Phone hasn't had any weird issues. Except I had lost the encryption anyways and only after having the new image for one week now been going for three weeks.
Sent from my Nexus 6P using Tapatalk
https://technet.microsoft.com/en-us/library/jj200124(v=ws.11).aspx
Sent from my Nexus 6P using Tapatalk

Unknown App sending URL to open in Samsung Browser on Galaxy S10+

For quite some time now I'm searching for a solution for the following issue, for which so far anything I tried didn't solve it. Hoping someone here has a suggestion on how to resolve it.
Several times per day an unknown app sends an url to open in the Samsung Browser. Each time it's a different website, so blocking the site or domain doesn't work.
I cleaned cache/date, blocked background data for apps, reset everything, used dozens of malware/android security apps - none of these apps found anything suspicious - running AdGuard, tried all Samsung Browser Ad blocker, uninstalled app by app to find the causing one, but nothing solved the issue so far.
What are your thoughts?
Thank you.
TGSKK said:
For quite some time now I'm searching for a solution for the following issue, for which so far anything I tried didn't solve it. Hoping someone here has a suggestion on how to resolve it.
Several times per day an unknown app sends an url to open in the Samsung Browser. Each time it's a different website, so blocking the site or domain doesn't work.
I cleaned cache/date, blocked background data for apps, reset everything, used dozens of malware/android security apps - none of these apps found anything suspicious - running AdGuard, tried all Samsung Browser Ad blocker, uninstalled app by app to find the causing one, but nothing solved the issue so far.
What are your thoughts?
Thank you.
Click to expand...
Click to collapse
Look for an app named "Mobile Installer" or "Mobile Services Manager". They install apps in the background and cause system wide 'pop-up' ads. You can use PD MDM to disable it if you cant through settings.
Sent from my SM-G975U using XDA Labs
jwarrior319 said:
Look for an app named "Mobile Installer" or "Mobile Services Manager". They install apps in the background and cause system wide 'pop-up' ads. You can use PD MDM to disable it if you cant through settings.
Sent from my SM-G975U using XDA Labs
Click to expand...
Click to collapse
Thank you.
I looked in PD MDM for such an app but don't have one with or similar to the names you mentioned.
I noticed that the package on your screenshot is a Sprint related app. I'm sorry I didn't mention before, but I have an unlocked device on T-Mobile, without any carrier specific apps.
TGSKK said:
Thank you.
I looked in PD MDM for such an app but don't have one with or similar to the names you mentioned.
I noticed that the package on your screenshot is a Sprint related app. I'm sorry I didn't mention before, but I have an unlocked device on T-Mobile, without any carrier specific apps.
Click to expand...
Click to collapse
The unlocked firmware wouldn't have either app anyway. That does make me wonder what's causing the issues. The apps i mentioned are installed by carriers on most android devices. They make money from the ads and when someone opens an app it auto installed. I first discovered it on my S5 with stock firmware. At that time data plans were still limited and it would be downloading 100+mb apps on data even with background data disabled.
Sent from my SM-G975U using XDA Labs
Factory reset.
You must a naughty individual surfing for porn..you should use your friends or your wife's phone to surf for porn. Thats what i do

Categories

Resources