I have a THL T9 Plus. I just wonder, why are applications installed automatically in background. I already installed NoRoot Firewall and Avira Antivirus. These are in most cases "HotKnotBean" and "Coordinator" named applications. I get notification by Avira, when these are installed and I can remove these too, but unable to protect phone from installation of these.

  • Have you tried turn off 'install app from unknown sources' in the security settings?
    – Beveloper
    Commented Sep 13, 2018 at 16:35
  • @Beveloper : Yes, but somehow applications are installed silently in the background.
    – plaidshirt
    Commented Sep 18, 2018 at 6:18
  • 1
    there seem to be an app on your phone that has the permission android.permission.INSTALL_PACKAGES used for installing apps, so as long has that app is installed or is given that permission it will continue. Use apps like Startup Manager or Task Killer to see if you could find out which app is doing the downloads. Or use permissions management tool on lolipop and above to check apps permissions
    – Beveloper
    Commented Sep 19, 2018 at 8:06

1 Answer 1


Looks like malware in your phone is pre-installed by manufacturer.

It's better to install another ROM.
You may check here which one owners of your device recommend.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .