Apps have auto-installed - Lookout says there is no malware - not sure what to do. - Sprint HTC EVO 4G LTE

Here is a pic of what is showing. I know that I didn't install them. They are showed up on two different panels automatically and I don't have auto-add widgets enabled. I just ran Lookout and nothing showed up as an issue. know not to open them, but how did they get there and what is the best way to get rid of them?
Thanks in advance for your help!
5t
[URL=http://imageshack.us/photo/my-images/215/screenshot2012082413544.png/]
Uploaded with ImageShack.us[/URL]
Update - these apps are not being shown in the app drawer...

Mat5t said:
Here is a pic of what is showing. I know that I didn't install them. They are showed up on two different panels automatically and I don't have auto-add widgets enabled. I just ran Lookout and nothing showed up as an issue. know not to open them, but how did they get there and what is the best way to get rid of them?
Thanks in advance for your help!
5t
[URL=http://imageshack.us/photo/my-images/215/screenshot2012082413544.png/]
Uploaded with ImageShack.us[/URL]
Update - these apps are not being shown in the app drawer...
Click to expand...
Click to collapse
try scanning with sophos from play store. if they dont show, after sophos, do hard reset after reset gwallet

I have figured out that this was a result of recently installing the free version of GpsFix.
I thought my Ad Free Android app would stop that kind of thing
Steer clear of that one!
5t
https://play.google.com/store/apps/details?id=com.androidlab.gpsfix&feature=search_result#?t=W251bGwsMSwxLDEsImNvbS5hbmRyb2lkbGFiLmdwc2ZpeCJd

Related

Weird app installing itself?

I noticed that for a few weeks now I'm getting spam type notifications in my notification bar saying things like I've won a free ipad. Was just clearing them out, but now I notice that a shortcut to a "market" has showed up on my homescreen. Can't find anything I didn't install in titanium or my stock application manager. Anyone know what this is and how it gets through my security app. I'm using bit defender. I notice my phones a bit glitchy as well. Widgets aren't wanting to load up. I'd like to figure it out before I do a data wipe.
Usually happens after installing a cracked app. Although I have seen this after installing MP3 Music down loaders as well.
Search for "Airpush detector" in the market then uninstall whatever apps are detected then they shouldn't show up again
Check this out.
http://www.pcworld.com/article/245305/sneaky_mobile_ads_invade_android_phones.html
Thanks for the info. Got em. It was a couple of winter scene live wallpapers.

[Q] Can anyone please tell me where these notifications are coming from?

Hey guys, over the past week and a bit I've been getting these advertising notifications in my notification area.
So far they have been trying to get me to download some games, and im assuming that the notifications are being cause by a game/app i have installed.
It can be pretty tricky to keep track of all the updates i do, and i dont always read the change logs for stuff like this.
So i was hoping that someone would recognise these notifications, and hopefully tell me what game/app they are caused by - so i can uninstall it.
Screen shots attached.
Thanks a lot for any help.
down load air push app from market.
it will tell you what app is causing the notification,then delete it
You can install "Addons Detector" or "AirPush Detector" from the market, they will tell you which application have those notification.
[EDIT: I was writing when thorur published the answer. No intention to steal a good answer ]
These notifications are usually caused by dodgy wallpaper apps or games.
You can download Addons Detector (Market Link) or AirPush Detector (Market Link) to find the source app.
great! thanks a lot for the tips guys, ill check out those apps and try to monitor what is causing the notifications.
Ill let you know how i go.
thanks again.
This happened to me once. It was from an app I downloaded from the Market. I found out it was pushing ads to my notification bar by reading the reviews later on. I removed the app but the notifications kept coming.
I was lucky that I was just about to flash another ROM at the time so doing a full wipe helped solve the problem I guess.
ddoublee,
that's not very encouraging. I uninstalled the app i though was responsible - Sketch Me Pro - But i am stilling getting the advertisements.
So now i need to try to figure out if it is another app causing them - or something else.
probably more trouble than its worth.
cheers.
-------EDIT-----
I have just noticed that all the ads are for games from the same developer - and i have one of these games installed.
RAIDEN-Sky Force Ace is the game i have installed. Hopefully removing it will remove the ads.
Note - the addons (as detected by Addons Detector) for this game are Fortumo and PayPal - listed as developer tools.
So i removed the game, and a lingering notification disapeared immediately.
thanks for your help guys.
Can anyone identify permissions the app would required for sending notifications to the notification bar like this? something to look out for in the future.
cheers.
i would use a custom rom that supports pdroid to get rid of this notifications without deleting games. Also use Droidwall to prevent some games or apps to get access to internet!
Is your phone rooted?
Do you have ClockWorkMod?
A quick solution would be to back up all your contacts and apps and clear the cache/factory reset through ClockWorkMod restore everything and see if you still get the ads pushed.
ddoublee said:
Is your phone rooted?
Do you have ClockWorkMod?
A quick solution would be to back up all your contacts and apps and clear the cache/factory reset through ClockWorkMod restore everything and see if you still get the ads pushed.
Click to expand...
Click to collapse
bro, aku rase tak related.. tue airpush tue..

addon detector

Hello All
Still kinda new with the Android OS, I have recently experienced some strange icons on my home page, anyway, it seems that a lot of spam (I'm just guessing) comes with DLd stuff.
So I DLd a app called addon detector and I'm not exactly sure how to use it so does anyone know how to use this app? I ran the scan function but I still got a unwanted icon so theres evidently more to this then just running a scan
Anyway, all help is greatly appreciated!! Thanks
https://play.google.com/store/apps/...SwxLDMsImNvbS5kZW5wZXIuYWRkb25zZGV0ZWN0b3IiXQ
n2bowling said:
Hello All
Still kinda new with the Android OS, I have recently experienced some strange icons on my home page, anyway, it seems that a lot of spam (I'm just guessing) comes with DLd stuff.
So I DLd a app called addon detector and I'm not exactly sure how to use it so does anyone know how to use this app? I ran the scan function but I still got a unwanted icon so theres evidently more to this then just running a scan
Anyway, all help is greatly appreciated!! Thanks
https://play.google.com/store/apps/...SwxLDMsImNvbS5kZW5wZXIuYWRkb25zZGV0ZWN0b3IiXQ
Click to expand...
Click to collapse
Download Airpush from the market. Run it. It will tell you what app is the problem and you can choose to uninstal it
Sent from my SAMSUNG-SGH-I717 using xda premium
After you run a scan select the "Addons" button. In the filter box above select "Push Notifications". This will tell you the apps pushing notifications to your notification bar. You will need to uninstall the causing app.
The other filters will meen very little to most.
Now strange icons on your home page is something totally different. Tell us about these icons.
Install an app called Airblocker. It will block all airpush ads without having to uninstall anything.

[Q] Help Leadboltads virus on Galaxy S4

Hi All
Since a day I have a sort of leadbolt virus that opens my browser and shows the website like below:
ad.leadboltads.net with Top Apps/Offers of the Day
This happens when I download something from the playstore or when I delete apps.
It Makes crazy and I have tried some things alrdy so fix it without any succes.
- Downloaded and installed virusscannen, no succes
- Downloaded and installed ad detector, found a app with leadbolt, deleted it but didn't solve the problem
Hopefully someone can help me too fix this annoying problem
Me too!!!
This is so annoying! My browser keeps opening to the leadbolts site with a bunch of apps on it....Please someone help!
+1. From where come this shlt ?
Shaundiesel said:
Me too!!!
This is so annoying! My browser keeps opening to the leadbolts site with a bunch of apps on it....Please someone help!
Click to expand...
Click to collapse
I'm also having the problem and have not found a solution yet.
The only difference for me is I have adaway installed so the webpage never gets to display. Just opens the browser.
I've tried different ad detector apps from google play, but nothing is fixed this problem. Almost ready to reflash the rom and start from scratch.
UPDATE: I fixed the problem.
When the browser hijacking occurred, it happened after installing or updating a program from any source. Google Play, Amazon or a standalone APK. That meant the virus had control over my installer.
Using Lookout's Ad Detector, I identified some potential culprits (Go Launcher EX being at the top of the list) and uninstalled them. That didn't work.
What actually fixed the problem was resetting the defaults for all the apps. Settings > More > Application Manager. Hit the menu key and choose Reset app preferences.
You don't loose any data. You just get prompted for choosing a default app when you run certain applications. I choose to use Lookout's installer instead of the default android installer when I got prompted to install updates.
Haven't had the issue since. Hope this helps.
markmi300 said:
What actually fixed the problem was resetting the defaults for all the apps. Settings > More > Application Manager. Hit the menu key and choose Reset app preferences.
You don't loose any data. You just get prompted for choosing a default app when you run certain applications. I choose to use Lookout's installer instead of the default android installer when I got prompted to install updates.
Haven't had the issue since.
Click to expand...
Click to collapse
Hi everybody. (First sorry for my english but I speak french)
This is a solution but it workn't very good.
After the downloading and installation from a update or a program, AndroƮd ask me if I want to finish the task with the default browser or Chrome ? So I can't see this f*cking page more but I must always put my choice between the 2 browsers.
I thank you for your solutions....
+1 to lookout fixing. Had the same problem, ripped it right out.
Sent from carbon note 2 on XDA premium app
shbaldw said:
+1 to lookout fixing. Had the same problem, ripped it right out.
Sent from carbon note 2 on XDA premium app
Click to expand...
Click to collapse
Glad I was able to help.
See the solution at
http://forum.xda-developers.com/showthread.php?t=2525965
#@!%&#! 'ad.leadboltads.net' Malware
shbaldw said:
+1 to lookout fixing. Had the same problem, ripped it right out.
Click to expand...
Click to collapse
Lookout Security & Antivirus found mine in ChargeBar Free Edition,
ChargeBar came embedded in the NottachTrix 2.3.0 ROM.
I installed it (NottachTrix) and it (ChargeBar) didn't update for 3 months, then, BANG.
I've deleted ChargeBar's update, moved it from system apps to apps, deleted it, and the browser pop open 'ad.leadboltads.net' still persists.
Lookout Security & Antivirus can not find the new location of the malware, they do not have a forum.
By the very definition and behaviour, this is malware, and, ChargeBar (Asgard Casino Apps) is involved in the distribution of malware.
Asgard Casino Apps distributes 34 apps that behave this way.
They are using Google to distribute this malware, abet, that app is benign in its origin, its a pipeline, or conduit for malware.
Sneaky F##kers aren`t they.........
#1) I would like to get this crap off my phone.
#2) I need to bring this to Google's attention, and have the developer and apps banned from the Play store.
Sooo, starting with #1,,,how do I get this crap off my phone!
NOTE:
I will be linking to this post in the NottachTrix post, I'm asking the developers to to move ChargeBar from the ROM zip.
My MBAM forum post: https://forums.malwarebytes.org/index.php?showtopic=138306#entry764184

10193 10194 Android

I set a data usage limit in my phone, because I was using a lot of data. After doing it, it alerted me that my mobile data was about to go over and cut off. So scrolled down and discovered these 2 "Android " (looked like the little green Android robot ) and they are named "10193" & "10194" 10194 runs in the foreground all the time and 10193 runs in the background all the time. I was told these are "Kaspersky Mobile Security or Parental Control Monitor" I'm 34yrs old and my parents don't monitor me, please help...
Sent from my SCH-R530M using XDA Premium 4 mobile app
Do you have Kaspersky installed?
veeman said:
Do you have Kaspersky installed?
Click to expand...
Click to collapse
I do not think I did or ever had I looked at all the appsI have installed via play store under the all section of "my apps" and do not see it.
Why do you say it is Kaspersky? My phone has been having some really weird things happening to it. I went though 3 batteries in 2 months, its been using a ton of data. My data just reset on 10/29/13 and it is already at 5gb. Also we have been finding "duplicate processes" running in the application manager. I really don't know what to do, I have installed Avast, Look out, and some other antivirus apps nothing has helped. Reset a few times and it will help it for a little bit and then boom its right back
victhesunshine said:
I do not think I did or ever had I looked at all the appsI have installed via play store under the all section of "my apps" and do not see it.
Why do you say it is Kaspersky? My phone has been having some really weird things happening to it. I went though 3 batteries in 2 months, its been using a ton of data. My data just reset on 10/29/13 and it is already at 5gb. Also we have been finding "duplicate processes" running in the application manager. I really don't know what to do, I have installed Avast, Look out, and some other antivirus apps nothing has helped. Reset a few times and it will help it for a little bit and then boom its right back
Click to expand...
Click to collapse
I recommend wiping completely and start fresh with a new ROM. You could also install an app like Data Manager and see which app is using the most data and uninstall. Also, do not install apps that you download off the internet. Only download from reputable sources like the Play Store and Amazon app store.
veeman said:
I recommend wiping completely and start fresh with a new ROM. You could also install an app like Data Manager and see which app is using the most data and uninstall. Also, do not install apps that you download off the internet. Only download from reputable sources like the Play Store and Amazon app store.
Click to expand...
Click to collapse
this is going to sound crazy, but i just got that phone back up and running in January. But that is what I did,,,
The reason I said Kaspersky is because this guy I know said he "googled " those numbers and symptoms a
and deemed it that. IT did have a spy wear type thing on it but it was not Kaspersky. It was one that was
sent from a website and it has to be removed via the website. I don't remember the name. Anyhow I have
long since ditched that phone and on to bigger and better things. But w/ that phone it has sparked an interest
in this whole "development/modification" thing! Thanks for you help and advice and sorry it took me so long to
get back to you! Be blessed!:laugh:
Hi Everyone, I know this is a very old thread, but I want to give out a solution because I just encountered this 10194 app as well.
I would like to post this for future reference to other people who will encounter this since I've done searching around about this but I can't find any solution.
To remove this app you must:
1. Open Settings and tap [Security] or [Security and Finger Print] or any other name it might now posses.
2. Under this settings entry, you'll see [Device Administrators], tap that
3. Inside [Device Administrators] you'll see that there is a blank application containing a space as well and the indicator should be ticked, that means this app has administrator access to your phone, it has access to calls, messages, email accounts, etc. See: here
4. Tap this app and [Deactivate] or [De-authorize] it
5. Now go back to the main settings list and navigate to [Apps] or [Applications]
6. Tap the app and you can now uninstall it.
I highly recommend changing your passwords for any account that might have been on that phone, there is a high possibility that this app has gathered information on you.
This includes phone call lists, phone call recordings, your contacts, your messages, notes, emails, etc.
This is a speculation of course and will highly depend on the amount of data this application has passed to wherever it connected to but it is safe to assume that you have been infected by malware and your previous information has been compromised.

Categories

Resources