This lockscreen replacement is caused by an ad from DU Quick Charge
I am pretty sure that this lockscreen was added to the app "ES App Locker". Many User-Revievs are stating that this app comes with lots of unwanted ads and lockscreen-replacements.
See this review:
This is what they are answering to most people:
So you either have the option to ...
We don't compare apples with peaches. But it's always a good idea to be careful what you install. True, Google Play is to be considered one of the safest sources for Android apps. Still, some malware sneaks in every now and then. So you should use some common sense before hitting the "Install" button.
Things to look at include (but might not be restricted ...
I am sorry but you totally misinterpret the scanner results.
In both cases one of 61 scanners has detected something - that looks more like a false-positive. Additionally the scanners that detected something are uncommon. Not one of the major virus scanners detects anything on the samples. Rescan it some days later and if nothing has changed the chance is ...
It is unlikely for WhatsApp to need root privileges, and impossible for zygote to ask for it.
Zygote is an essential system component that is started by init process itself while booting, so it does implicitly inherit root privileges.
Matter of fact, zygote is responsible for starting every other app, be it system apps or other apps.
Having said that, ...
Based on the troubleshooting OP did following my advices, the culprit appeared to be a system app as a malware named System Locker
with package name com.tihomobi.lockframe.syslocker. The issue appears to be a result of a system update, per some users of the device.
As usual with a system app, if you get to use the Disable option under Settings → Apps → ...
No, it's not a good or advisable idea.
Explanation and some background:
Force-stopping apps is not intended for "routine use", but for "emergency purposes" (eg. if an app runs out of control and cannot be stopped otherwise, or if an issue causes you to clear cache and delete data from a misbehaving app). Generally spoken, it's neither a "...
For people like me who hate ES Explorer doing this but can't move away from it right now(because of its loads of features!):
We can disable this unnecessary feature:
Go to Es Explorer Tools and disable charging boost.
This will remove the annoying ad screen you see when you plugin the charging cable.
It is possible to have malware on Android, although these usually 'infect' a device through downloading and installing apps from un-reputable and/or warez sites. When installing any app you should review the permissions and not blindly download/install an app simply because it looks ok.
It is possible that the message you received is from a malicious app or ...
XPrivacyLua is a module for Xposed framework which does exactly what you need. It is free and open source. Works on rooted devices. It's the successor of XPrivacy.
Install Xposed from here:
You can then download the XPrivacyLua module from the Xposed repo through the Xposed Manager app, or manually ...
A Reddit user has started to collect together the apps that have included this 'feature'/adware.
The list currently contains:
ES File explorer (by ES Global) Removed
ES App Locker (by ES Global)
KittyPlay Wallpapers Ringtones
GO apps (Go Weather, Keyboard, SMS, Next Browser)
TouchPal Suite (Anything made by them)
It is possible for there to be malicious apps on Google Play. However, there are a number of things that you can do to protect yourself:
Check the permissions that an app requests when installing. If it looks excessive for what the app does, then you can email the developer and ask why they need the permissions they ask for. Most developers should be happy ...
The folder is created by (at least 1) apps developed by DoMobile Lab. As a hint, when you remove all numbers from the folder name, it spells /.domobile.
As a proof, after installing AppLock and running it, there will be /domobile and /.d1o1m0o7b1i1le folders on the SD Card root folder.
I don't think it is a virus, and it might be really important for ...
It seems ES File Explorer does this now - I have had it installed for years, but today I saw DU Quick Charge pop up and it seems to be tied with an update of ES File Explorer. I uninstalled it and the malware is gone.
In addition to the possibility that bmdixon raised of malware, I'd like to add that it's entirely possible that it's not even necessarily malware, but rather instead social engineering type adware trying to get you to install malware or buy something useless. You often see those types of pop up messages on websites for Windows users, and this sounds very ...
Based on the information given, it's indeed caused by the latest update (9 July 2016) of ES File Explorer. From some of recent reviews,
This new version has a new issues, whenever I open the ES file explorer it's showing some errors in Chinese language. It's affecting other apps too... (link)
Latest was a series of Chinese toast notifications being ...
I will start this with the most funniest thing the malware developer did. The developer who created this malware with label Android 6.0 Marshmallow, version 6.0(6) and package name com.xtrlee.fiehan, didn't bother with an Activity or an overlay (was trendy) or with a lock screen (the latest trend as of now) either. They decided to employ a full screen Toast (...
ad-type.google.com redirect adware has been most stubborn malware on the internet now.
Step 2: Install Malwarebytes Anti-malware for android
This should inhibit the infection.
If Problem persists go ahead with next step
Step 3: Your router might be infected too.
Ask your ISP(internet service provider)...
Every now and then (and it's getting more and more frequently), I get a notification that some app tried to install itself (!) but was blocked because it's from "unknown sources", and it's prompting me to disable the "block install from unknown sources" check from Settings.
It's not a notification but a dialog and it looks like this:
(Click image to ...
Nothing to worry about, unless you have downloaded an app suggested by the pop-up.
In More detail:
It's an old issue. You visit a normal website, and suddenly you see pop-ups telling you that your phone has a virus.
It's called scareware. It's basically "ads" which scare you into downloading their "anti-virus" apps. Many times, ...
Using my Google Activity History, i spotted a few activity entries of my Barcode Scanner app which didn't belong there as I didn't use the app at the time.
Uninstalling the app resolved the problem. In my case, the com.qrcodescanner.barcodescanner] was the culprit.
Edit: The app has been pulled from the store since.
The most recent 1-star reviews confirm ...
Anyone who has any experience programming and working on both Android and iOS apps can tell you that there are most certainly malicious apps on the Play store. Here's the deal:
In order to publish your app to Apple's App store you have to submit it to Apple for review. Oh, and you also have to pay them $99 per year and jump through some other hoops. ...
According to the official Twitter feed, their website is having problems right now. Try it again later.
MightyText is a reputable piece of software, so while we can't say for sure what they're doing with your information (like any other closed-source software), you shouldn't assume it's malware just because it's not working as it should.
See also this Venn ...
The question was asked back in 2012 but given that no Android version constraint is given I would like to suggest a solution, which as of now is helpful for Android 5.0 and above.
Install App Manager from F-Droid. Launch it, start searching your package name using the search/lens icon and your app would show up.
(Click image to see enlarged version)
Android 4 & 5
When the advertisement shows up, press the app switch button to display the recents menu (if the advertisement is full-screen and cover your soft buttons, swiping down from the top of the screen will make it appear).
It will show the name of the app displaying the advertisement.
From there, long press on the app and chose "app info&...
This is to provide additional evidence that ES Explorer is another culprit, from the family of ES apps
Network Monitoring: How to Get Started and Why You Should Consider it, a post which appeared on XDA portal yesterday confirms this using Fiddler- The free web debugging proxy for any browser, system or platform
The XDA post explains, set up of Fiddler, ...
It is entirely possible for a malicious app to become available through it. However, the same can be said for any other software distribution system. The App Store is not immune to sneaky devs either.
Never assume that any software distributor offers 100% safe software. Whether you're using Windows, OSX, iOS, Android, Linux, Unix, FreeBSD, or any OS, the ...
I am one of the co-founders of Heyzap. I wanted to clarify a few things and see if I could help.
Firstly this is not intentional in any way. Heyzap is an in game Ad network and those Ads should only be showing up in the game developer we directly work with.
The problem is caused by a faulty integration either by the developers or due to an old SDK, this is ...
It seems to be an App which opens that dialog (over a webpage...).
Try to boot into safe mode:
Press and hold the power button until the power menu appears.
Hold down 'Reboot'. (On phones which do not have the option to reboot press and hold 'Power off')
Then your phone will reboot into safe mode. That means all your apps are deactivated for this session....