Hot answers tagged

66

This lockscreen replacement is caused by an ad from DU Quick Charge I am pretty sure that this lockscreen was added to the app "ES App Locker". Many User-Revievs are stating that this app comes with lots of unwanted ads and lockscreen-replacements. See this review: This is what they are answering to most people: So you either have the option to turn ...


34

We don't compare apples with peaches. But it's always a good idea to be careful what you install. True, Google Play is to be considered one of the safest sources for Android apps. Still, some malware sneaks in every now and then. So you should use some common sense before hitting the "Install" button. Things to look at include (but might not be restricted ...


30

It is unlikely for WhatsApp to need root privileges, and impossible for zygote to ask for it. Zygote is an essential system component that is started by init process itself while booting, so it does implicitly inherit root privileges. Matter of fact, zygote is responsible for starting every other app, be it system apps or other apps. Having said that, ...


27

Definitely looks like a case of AirPush. This is a particularly invasive form of in-app advertising that uses the notification bar, even if the app utilizing it is not actively running. Technicaly it's not malware but adware, although the way it manifests itself certainly blurs the line between the two. The only way to stop these ads from appearing in your ...


25

TL;DR: No, it's not a good or advisable idea. Explanation and some background: Force-stopping apps is not intended for "routine use", but for "emergency purposes" (eg. if an app runs out of control and cannot be stopped otherwise, or if an issue causes you to clear cache and delete data from a misbehaving app). Generally spoken, it's neither a "...


22

On your phone's home launcher, go to menu --> settings --> applications and look for anything that contains "Carrier IQ", "IQ", or possibly "com.carrieriq.iqagent" If you are rooted, it appears that this app will check and see if it exists on your phone. The paid license key will also let you remove it from your phone. This app was made by Trevor Eckhart, ...


19

Whisper Systems has come out with a custom ROM that has this exact feature: http://www.whispersys.com/permissions.html. As DarthNoodles mentions, it has to be done at the system level rather than the app level, which is how it is implemented in WhisperCore. The current version isn't able to block all of the permissions available on Android, but they are ...


17

There's a similar question which covers some of this: Security risks of rooting your android smartphone. However, since it doesn't really explain how you manage access to the root user, I'll expand on that here. When you root your device, you basically always (technically I suppose you don't have to, but you should) install the Superuser application along ...


16

CyanogenMod 7.1 has exactly this feature, but without faking data, only failing, if the app accesses the API. Proposition for faking the IMEI was rejected. Faking other data, like contacts, is currently under discussion.


15

/data/system/dropbox is not part of the cloud storage provider "Dropbox". It is part of the Android OS DropBoxManager (not related at all to "Dropbox", just happen to have the same name). This puts data from application crashes and kernel logs and such in this log directory. I know the market uses this directory (See #4) as well, probably to report ...


15

For people like me who hate ES Explorer doing this but can't move away from it right now(because of its loads of features!): We can disable this unnecessary feature: Go to Es Explorer Tools and disable charging boost. This will remove the annoying ad screen you see when you plugin the charging cable.


14

It is possible to have malware on Android, although these usually 'infect' a device through downloading and installing apps from un-reputable and/or warez sites. When installing any app you should review the permissions and not blindly download/install an app simply because it looks ok. It is possible that the message you received is from a malicious app or ...


14

No, it's not a virus. The notification is triggered by advertisements on the webpage. Just don't click "OK" and ignore it.


14

A Reddit user has started to collect together the apps that have included this 'feature'/adware. The list currently contains: Xender ES File explorer (by ES Global) Removed ES App Locker (by ES Global) KittyPlay Wallpapers Ringtones GO apps (Go Weather, Keyboard, SMS, Next Browser) TouchPal Suite (Anything made by them) Z Camera HiFont TrustGo Battery ...


13

XPrivacyLua is a module for Xposed framework which does exactly what you need. It is free and open source. Works on rooted devices. It's the successor of XPrivacy. Install Xposed from here: https://forum.xda-developers.com/showthread.php?t=3034811 You can then download the XPrivacyLua module from the Xposed repo through the Xposed Manager app, or manually ...


13

This is too big for a comment, so here goes: Both articles cite one and the same McAfee report. McAfee is a security products vendor, hardly an impartial observer to the malware scene. McAfee does not have products which for iOS devices, but they most certainly do for Android devices. And paid, too. Turns out they might have for both platforms. I can't be ...


13

Based on the troubleshooting OP did following my advices, the culprit appeared to be a system app as a malware named System Locker with package name com.tihomobi.lockframe.syslocker. The issue appears to be a result of a system update, per some users of the device. As usual with a system app, if you get to use the Disable option under Settings → ...


12

It is possible for there to be malicious apps on Google Play. However, there are a number of things that you can do to protect yourself: Check the permissions that an app requests when installing. If it looks excessive for what the app does, then you can email the developer and ask why they need the permissions they ask for. Most developers should be happy ...


12

The folder is created by (at least 1) apps developed by DoMobile Lab. As a hint, when you remove all numbers from the folder name, it spells /.domobile. As a proof, after installing AppLock and running it, there will be /domobile and /.d1o1m0o7b1i1le folders on the SD Card root folder. I don't think it is a virus, and it might be really important for ...


12

It seems ES File Explorer does this now - I have had it installed for years, but today I saw DU Quick Charge pop up and it seems to be tied with an update of ES File Explorer. I uninstalled it and the malware is gone.


10

With root privilege, a malware app can certainly do heavy damage, but it doesn't work like that. Just because an app is on a rooted device, it doesn't mean it gets root privilege automatically. With modern rooting standards, you'll have to permit it. When an app requests root access, a pop-up from SuperUser or SuperSU app appears asking to allow it or not. ...


10

In addition to the possibility that bmdixon raised of malware, I'd like to add that it's entirely possible that it's not even necessarily malware, but rather instead social engineering type adware trying to get you to install malware or buy something useless. You often see those types of pop up messages on websites for Windows users, and this sounds very ...


9

Not an absolute solution to your problem, but there is an app in the android market which caters to your needs. It also necessarily requires better knowledge about permissions and also a rooted device. Permissions Denied is an app which allows you to effectively control the permissions that apps which are installed onto your phone, via the market or some ...


9

The easiest way, without using any specialized tools is just to visit that app's page in the Play Store (website, not app). All apps in the Play Store have their package name as part of their URL, so you can just take your package name and prefix it with https://play.google.com/details?id= to get https://play.google.com/store/apps/details?id=com....


9

Here is a possible solution. My son had recently unwittingly installed AppCaster on our home PC, and this was causing the apps to be pushed to my phone. I uninstalled it from the Programs and Features under Control Panel, where AppCaster goes by the name "Mobile App Sync".


9

Based on the information given, it's indeed caused by the latest update (9 July 2016) of ES File Explorer. From some of recent reviews, This new version has a new issues, whenever I open the ES file explorer it's showing some errors in Chinese language. It's affecting other apps too... (link) Latest was a series of Chinese toast notifications being ...


8

The overall outlook is not so great for you, AFAIK. The Market has content filtering, check the Settings in the Market app. For the browser, that's a wholly different kettle of fish. The built-in browser doesn't have any kind of filtering available. 3rd party browsers might, but they'll be trivial to sidestep (by simply opening the built-in browser). ...


8

Find the "evil app" There are several Detectors available: Airpush Detector Airblocker - Airpush blok Addons Detector TrustGo Ad-Detektor Lookout Ad Network Detector So what to do when the evil app is identified? Leave a comment on the Playstore: rate very low, and point out: "ATTENTION! Invasive ads (Airpush)!!!" Report to Google: As the playstore ...


8

I did some searching due to the other answer and found someone on XDA claiming that this is a Market/Play bug, and you're seeing it because the Market thinks one of your apps is actually that OJSC Mobile app. Even better, I found this just-published story on The Verge: Samsung has several pieces of software that it installs on it devices but that aren't ...


8

There's nothing malicious here. A developer uploaded an app to the play store that has the same package name as a system app from your phone. The new play store update tweaked the detection of system apps and it linked the apps. This will probably resolved soon. No need to bring the big guns. Lookout and other "antivirus" tools don't show anything ...


Only top voted, non community-wiki answers of a minimum length are eligible