Related
I have noticed these chinese apps some how self installing on my S2.
Any idea how to get to the source of these unauthorized installs? (Lookout & AVG & NetQin don't detect them as malicious or find any reason for how they are getting on there).
Currently using KH3 + CFRoot.
Why do people give so little information when they post?
What Chinese apps? (Please provide a screen shot if the app name is in Chinese) .
This sounds really really bad.
Has this happened to any one else?
It should not be possible for this to happen.
Does your phone have any connection with China or have you installed any Chinese software?
If this is happening then you must have done something yourself to start the process. Nothing can install itself without your consent, unless there's malicious software that's bypassing the system and installing for you, but you would have had to install that first.
So, as above, a lot more information is needed. Personally, I'd just do a complete wipe and hard reset and never install anything from untrusted sources again, including warez, 3rd party app stores and the Chinese Market, which is known to have had dodgy software before now.
My friend got an S2 from China and it was preloaded with all those Chinese apps. Examples include QQ Security Suite and some other apps. I used Titanium Backup to uninstall but after each restart, the app re-appears!
I was surprised that Titanium couldn't uninstall. It says it uninstalled successfully but it just re-appears. The only thing I could do is to do a re-flash to a Hong Kong firmware without all those pre-loaded Chinese apps.
But before you wipe everything, please help us try and find out how it happened?
Again has this happened to any one else? Because I want to know if this could happen to my phone!
Mine also did this on stock rom i would uninstall samsung apps reboot and it would reappear on my menu. Is it possible the rom comes with an auto install script for the preloaded apps?
Sent from my GT-I9100 using XDA App
otester said:
I have noticed these chinese apps some how self installing on my S2.
Any idea how to get to the source of these unauthorized installs? (Lookout & AVG & NetQin don't detect them as malicious or find any reason for how they are getting on there).
Currently using KH3 + CFRoot.
Click to expand...
Click to collapse
If you have CF-Root, you have super user installed. Review your permissions. You can also install LBE privacy guard and set permissions for all apps as well, including many system apps (you'll need to 'untrust' them first).
Sent from my GT-I9100 using XDA App
Sorry for the little information guys, was 5am and very tired
I deleted the second incarnation of the app as soon as I saw it (worried about personal details being taken etc.) however it if it reappears again then I will screenshot it.
Virus scanners don't detect them as malicious, when the program opened (after stealth install) I went through it, albeit in Chinese it looked like a legit program and the menu worked etc.
I have market 3.1.3 installed (got the apk off the internet) and a few apps that got removed from the market place (torrent clients and certain games I couldn't find etc.) so it could well have been put in them.
I'm thinking about a hard reset, not using titan backup to avoid it coming back and a re-flash.
Also my phone has no connection with China (purchased in the UK), this has only happened recently.
Is there any more info needed before reset etc.?
Looks like the suspect apps removed from the market may have been the cause.
Does anybody know if running as root alows all download apps to run with root permissions?
LouisJB said:
Looks like the suspect apps removed from the market may have been the cause.
Does anybody know if running as root alows all download apps to run with root permissions?
Click to expand...
Click to collapse
Issue is the damage seems to have been done, looks like I have no choice but to reflash etc. Need a virus scanner that has root so it can do a deeper scan.
Superuser is a lot like UAC on Windows Vista/7, it will popup and ask you to allow/deny.
Also is there any way to wipe the device while re flashing to ensure this gets removed?
I found a folder on my Internal Storage "QinqiQuan" (Google Image search pinpoints this as one of the apps) which translates in Chinese to English as "Infringement", however the app itself appears to be a legitimate Chinese social app so I'm not sure of my original concern regarding "Infringement" being copyright related etc.
Another few suspicious folders were "the9GameCenter" & "waze".
In future I'll be sticking the Market and official sites, even if that means doing without certain apps that aren't available on my handset/region
Isnt waze a community based sat nav app?
poults said:
Isnt waze a community based sat nav app?
Click to expand...
Click to collapse
The apps themselves appear legitimate, but I didn't authorize the installs which is what worries me.
I wiped internal storage, wiped data and then re-flashed + CFRooted.
Hopefully what ever it was, won't come back
And how about the security in your computer? As we know, you can install an app in your phone via your market account using your computer. Perhaps someone is playing around with your market account. If this is the case, changing your password would be a good idea.
Sent from my GT-I9100 using XDA App
angelomaldito said:
And how about the security in your computer? As we know, you can install an app in your phone via your market account using your computer. Perhaps someone is playing around with your market account. If this is the case, changing your password would be a good idea.
Sent from my GT-I9100 using XDA App
Click to expand...
Click to collapse
Yeah I have changed my password and turned on all the Google security settings, albeit a bit of pain, does give peace of mind
Sent from my GT-I9100 using xda premium
Right now it looks like Cerberus is still great - or should we take a good look at Avast and Kaspersky as well?
Prey got a lot of press hype, but it seems like on android it can't take pictures of the thief? Can cerberus be forced to use the front camera?
Confirmed that Cerberus can take pictures with the front camera. I tested it when I first installed it and it works very well. It even flashes to a bright white screen for a second in case of low light conditions.
Try Androidlost.
I found it much, much better.
Romonster said:
Try Androidlost.
I found it much, much better.
Click to expand...
Click to collapse
What he said
Sent from my SPH-D700 using Tapatalk
Romonster said:
Try Androidlost.
I found it much, much better.
Click to expand...
Click to collapse
Interesting. So you would say this is better than Cerberus? In which ways?
1. It's absolutely free.
2. Uses your Google account, no need to create another account for app and no battery drain.
3. More features- pull last 50 messages and browse/download/delete sdcard contents remotely.
Considering I got Cerberos for free during their giveaway, it's serving me very well. I particularly like the five devices I can track with it; makes me feel better about taking both my phone and tablet into public.
How effective are anti-theft apps?
Do any of these anti-theft apps prevent a factory reset or a ROM flash?
Have any independent comparisons been published?
How does SamsungDive compare to the likes of Prey et al?
I think Avast Mobile Security is a pretty good bet, allows SMS only management, and system installation so goes to the rom.
Respect to flashing the device, I think regardless on any anti theft software (cerberus, androidlost, avast mobile security) you can start the device in Recovery mode and flash a new rom, wipe cache & data and such. That is because the recovery prevails over the operating system because loads first when demanded.
AndroidLost
Win
HairyScot said:
Do any of these anti-theft apps prevent a factory reset or a ROM flash?
Click to expand...
Click to collapse
scandiun said:
I think Avast Mobile Security is a pretty good bet, allows SMS only management, and system installation so goes to the rom.
Respect to flashing the device, I think regardless on any anti theft software (cerberus, androidlost, avast mobile security) you can start the device in Recovery mode and flash a new rom, wipe cache & data and such. That is because the recovery prevails over the operating system because loads first when demanded.
Click to expand...
Click to collapse
With Avast if you allow its root options you can set the phone so that it CANNOT be data reset from the phone menus or recovery. It can block USB Debugging as well so that the phone cannot be wiped and reset that way either. You can also set Anti-Theft as an app with Admin permissions so that it cannot be uninstalled, not to mention it will run in stealth mode when active so that it doesn't appear in your apps list at all. It is also separate from the Anti-virus portion so you can uninstall that and there would be no way to tell the Anti-theft is even present on the phone.
It is amazing that it's still free, but as Avast! stated they make their money off of their PC utilities and plan to keep it free.
MissionImprobable said:
With Avast if you allow its root options you can set the phone so that it CANNOT be data reset from the phone menus or recovery. It can block USB Debugging as well so that the phone cannot be wiped and reset that way either. You can also set Anti-Theft as an app with Admin permissions so that it cannot be uninstalled, not to mention it will run in stealth mode when active so that it doesn't appear in your apps list at all. It is also separate from the Anti-virus portion so you can uninstall that and there would be no way to tell the Anti-theft is even present on the phone.
It is amazing that it's still free, but as Avast! stated they make their money off of their PC utilities and plan to keep it free.
Click to expand...
Click to collapse
Do you mean the phone won't enter on recovery holding power+volup+menu? And that there won't be the option to install update from sdcard?
MissionImprobable said:
With Avast if you allow its root options you can set the phone so that it CANNOT be data reset from the phone menus or recovery. It can block USB Debugging as well so that the phone cannot be wiped and reset that way either. You can also set Anti-Theft as an app with Admin permissions so that it cannot be uninstalled, not to mention it will run in stealth mode when active so that it doesn't appear in your apps list at all. It is also separate from the Anti-virus portion so you can uninstall that and there would be no way to tell the Anti-theft is even present on the phone.
It is amazing that it's still free, but as Avast! stated they make their money off of their PC utilities and plan to keep it free.
Click to expand...
Click to collapse
scandiun said:
Do you mean the phone won't enter on recovery holding power+volup+menu? And that there won't be the option to install update from sdcard?
Click to expand...
Click to collapse
Since I have paid for Avast! on my PC maybe I should use it for my Android devices.
Would be interesting to verify if it can prevent flashing etc.
HairyScot said:
Since I have paid for Avast! on my PC maybe I should use it for my Android devices.
Would be interesting to verify if it can prevent flashing etc.
Click to expand...
Click to collapse
As far as I know, there is no such hardware locking ability on some devices, at least in my SGS2 there is no way to prevent flashing.
does this thing really work? just a newbie here.
You can install cerberus on to the root of your phone to gain two additional features that will result in cerberus still being installed even after a delete/wipe.
Link to cerberus q&a HERE
Just expand the "I have a rooted device. Can I get additional features?" topic and follow instructions
Remember when un-installing cerberus to uninstall it the proper way to avoid problems when flashing it to root, open the app login and disable admin then uninstall
ill have to check that out
Thing is if you lose your phone the best you can hope for is a quick lock via a website to track it down or protect your data (which will already be backed up)
As long as you can secure the phone and data then how much do you really want to catch a thief?
Will check these out though as being able to lock the phone down and ensure it has to be reflashed is good, but unless you use encryption not sure how any of these can really protect the data?
scandiun said:
Do you mean the phone won't enter on recovery holding power+volup+menu? And that there won't be the option to install update from sdcard?
Click to expand...
Click to collapse
I was still able to wipe data and cache after I sent a text to set it as lost, but once the phone restarted the Anti-theft app was still active so that aspect that is common to Cerberus still works at least. I'm about to see if it survives RSD.
Edit: Alrighty. As stated Anti-theft survived wipe/reset so that part holds true, and RSD is unable to function so it is preventing USB debugging access. The only thing that shows that anything out of the ordinary is going on is that you have the option to set one app as admin and it does not appear with the rest of your apps in the app drawer, but as you can name it anything that you want only someone very familiar with Avast/Cerberus would have any reason to suspect that it's an anti-theft app.
One thing that may give it away that the phone is being tracked is that an SMS goes to the device saying that it has been marked lost and depending on your network and when the thief powers off the phone it still may show up in the inbox and they could see it. Considering that many thieves may switch SIMs as soon as they get the phone though, this should be a non-issue and is covered by the forwarding and SIM-tracking portions of the App.
I would like to play with all this further, but as of now it appears that Avast pretty much performs as promised and your phone will still be trackable even if someone does a battery pull and reset. You will have to send an additional Lost SMS if you wish to lock the phone again, but you can send your other commands: SIREN ON, LOCATE, etc and it the phone will react appropriately. The LOCATE command will give you the owner name, Cell ID, Carrier, and new ID. If they change SIM cards the new SIM info will be forwarded to the two numbers you chose as friends during setup. You can do a test to make sure they'll get the message, but I would like to actually try this but my phone is CDMA only so I can't vet that out.
Declaring lost does Automatically power WIFI, GPS, and Data back on as promised. I apparently misspoke about being able to prevent access to recovery. When locked it is impossible to access the system menus on the phone, but as noted it can be wiped and reset from recovery though Avast will survive this and it looks like Cerberus should as well since it utilizes a similar method.
Don't know how much more to ask for from an anti-theft app, especially a free one. The only nice addition would be being able to lock recovery the way you can BIOS, though this may make a savvy thief more likely to toss the phone so maybe it's a good thing that they would be able to flash a new Rom via SD and the phone could still be tracked with them none the wiser.
---------- Post added at 03:58 AM ---------- Previous post was at 03:14 AM ----------
Doallyn said:
Thing is if you lose your phone the best you can hope for is a quick lock via a website to track it down or protect your data (which will already be backed up)
As long as you can secure the phone and data then how much do you really want to catch a thief?
Will check these out though as being able to lock the phone down and ensure it has to be reflashed is good, but unless you use encryption not sure how any of these can really protect the data?
Click to expand...
Click to collapse
All my important data is backed up so that I'm not worried about. As to the thief bit, this app is great. When it becomes clear to thieves that stealing a phone will at best result in them getting a GPS tracker that they need to toss and at worse give them something that actually lands them in jail then thefts will certainly drop off. Apps like this and Cerberus will make phone theft something that's benefits certainly do not outweigh the potential costs.
The reason Avast and Cerberus (or just any other system app) survives a wipe/factory reset is because they are in the System folder... all those apps aren't deleted when you perform a wipe...
But sure enough, if the thief flashes a new ROM from recovery then all apps are gone, nothing will survive that!
Anyway, Avast seems to be the way to go since is free ;-)
Hi,
This is going to be such a "noob" question & I apologize in advance.
I have an Orange UK branded HTC Desire HD running stock firmware & NOT rooted. Since the fairly recent 2.3.5 update with Sense 3.0 I have found that I am regularly seeing Sense restart upon exiting an app and returning to the home screen. This is not related to a particular app, as it can happen when returning to home from ANY app. My wife is seeing the same behaviour on hers too.
Having posted on both HTC's & Orange's Facebook pages, I have been advised in no uncertain terms that as a first step I should perform a factory reset.
This is something that I have not done since I got my DHD (my 1st Android - plenty of hard resets on WM ). I have had a bit of a tidy up - clearing unnecessary data, uninstalling apps I don't use, etc. Pretty much ready to reset (but aware that there is SOME data that I will lose). However, there is one thing that I am unsure about...
I have previously moved a number of apps to the SD card. If I leave them there, will the existing data be recognised upon reinstalling the apps? Or will it cause me problems? Or will the existing data just be orphaned? I.e. should I move all apps back to the phone before performing the reset?
Thanks in Advance
Saving them SD leaves a bit on your phone, so that wont help. Just back them up with your google account!
The apps and system data will be wiped regardless of it being on the sdcard or not. You can perform a manual backup by enabling debugging and using adb to pull the apps from your phone to your computer.
Sent from my Galaxy Nexus
Ok, thanks RTContent. I think that answers my question. So I needn't worry about moving stuff back, which is good.
I have no experience of using ADB. Would this backup just the APKs? Or the settings & user data too?
AlwaysDroid: "Just back them up with your google account" - Not sure I get what you mean. Are you referring to the way Google Play will auto restore apps from your install list? TBH, I was banking on this working correctly. Hopefully it will only reinstall those that were on the device, and not ALL previously installed apps. Especially as some of those were from my tablet only.
Not sure that now is the time to start dabbling with ADB, so will probably just go ahead with the reset and lose non synced app data.
Thanks.
Before purchasing the S3 I read up about it and found one called "Pray anti-theft" which was supposed to be pretty good.
I installed it onto my S3 and it seems in order to track it my phone needs to be connected to the internet with the SIM card in tact..
Who is going to find a phone and leave the SIM card in?
Can anybody recommend a better one?
There is no "anti-theft" thing.
Anyone with good knowledge of android can easily flash a new ROM in your stolen phone and factory reset it which will remove whatever you have installed there.
Avast is imo the best, it can track with gps and when the sim gets replaced you get the simcard number send to a chosen number.
Also with root they can't remove the app, go into settings, and with a factory reset it keeps active.
you can also give commands via sms to your phone.
Send from my GT-I9300 with Tapatalk
Avast antivirus integrates a module that used to be a standalone app called Theft Aware. This installs as a system app (if rooted), hides itself from the app drawer and you can only show it by dialling a PIN in the dialer. It can be set up so it will send an SMS to a trusted number when the SIM card is swapped, and from there you can control the phone by SMS commands. You can request GPS updates, make the phone call you, wipe remotely, turn on a siren... This all works through SMS - no mobile data or wifi necessary, and it works if they ditch your SIM. The recent version also added web-based tracking and control. And it's free! But of course if the thief does a firmware flash you're out of luck. The thing is, I think most petty thieves aren't android experts.
DashingGentleman said:
Avast antivirus integrates a module that used to be a standalone app called Theft Aware. This installs as a system app (if rooted), hides itself from the app drawer and you can only show it by dialling a PIN in the dialer. It can be set up so it will send an SMS to a trusted number when the SIM card is swapped, and from there you can control the phone by SMS commands. You can request GPS updates, make the phone call you, wipe remotely, turn on a siren... This all works through SMS - no mobile data or wifi necessary, and it works if they ditch your SIM. The recent version also added web-based tracking and control. And it's free! But of course if the thief does a firmware flash you're out of luck. The thing is, I think most petty thieves aren't android experts.
Click to expand...
Click to collapse
I would be very surprised if anybody in my area has even heard of rooting
you think Samsung would have some sort of security feature for the best phone on the market.. (a good one, not the one it comes with)
Thanks guys, so on a rooted device I can just install avast from the google store and it will install as a system app?
https://play.google.com/store/apps/details?id=com.lsdroid.cerberus&hl=en
Cerberus. www.cerberusapp.com - you can install the application in the ROM if bootloader is unlocked so it will survive a factory reset (along with it's settings files).
Cerberus can remotely record audio, video and take pictures of the person using it. GPS location, remote lock and wipe. A few euros for a lifetime licence. Cerberus is the plain simple best.
Why not just use Samsung dive that is pre installed. Works perfectly, can track the phone, even on intervals. Can lock the phone, forward calls and texts, and more.
All this works even when the sim is changed.
Sent from my SGS3 on Omega v9.0 using XDA Premium
ticktime said:
There is no "anti-theft" thing.
Anyone with good knowledge of android can easily flash a new ROM in your stolen phone and factory reset it which will remove whatever you have installed there.
Click to expand...
Click to collapse
It is there, don't talk about things you don't know about :good:
---------- Post added at 08:14 PM ---------- Previous post was at 08:02 PM ----------
UrbanDesigns said:
I would be very surprised if anybody in my area has even heard of rooting
you think Samsung would have some sort of security feature for the best phone on the market.. (a good one, not the one it comes with)
Thanks guys, so on a rooted device I can just install avast from the google store and it will install as a system app?
Click to expand...
Click to collapse
It won't install as a system app, but it makes an file that Avast won't be removed when you factory reset the phone, the app will stay installed because of that back-up.
It also blocks usb-debugging, so you can't flash another rom, It will remain protecting your phone whatever they try do delete or modify.
They can't even get into settings
Cerberus doesn't provide that, and needs to be flashed to survive a factory reset, with Avast you aren't even allowed to do actions...
Avast is free, and if rooted it gives you the best protection possible!
I have question , i have rotoped phone and flashed cerberus, if have disabled data connections and phone isnt on wifi . Can i control and track device?
Sent from my XT910 using xda premium
Marwvek said:
I have question , i have rotoped phone and flashed cerberus, if have disabled data connections and phone isnt on wifi . Can i control and track device?
Sent from my XT910 using xda premium
Click to expand...
Click to collapse
I found this for you, which answers many questions and has contact info.
Yes. You can enable Data & Wifi via individual SMS commands.
https://www.cerberusapp.com/help.php
here use "Samsung Dive"
http://www.samsungdive.com/
Actually dont use samsung dive. It pops-out notifications when the device is being tracked, etc., so every thief will know that you are tracking him and will do factory reset.
I'm not saying that you should not set-up this. Do it, but use it as a last resort.
I suggest cerberus, its cheap, easy to hide (however I personally make it a system application using titanium backup, so that it's not shown in normal app managers), and somehow reliable. I miss for it the function to turn on data and wifi automatically after sim-change.
ticktime said:
There is no "anti-theft" thing.
Anyone with good knowledge of android can easily flash a new ROM in your stolen phone and factory reset it which will remove whatever you have installed there.
Click to expand...
Click to collapse
What about remapping the phone's physical keys so the thief will have a lot of trouble on entering the recovery mode?
It's not a 100% safe solution, but pretty decent for forcing the thief to use the phone while he can be tracked by an anti-theft app.
I'm not sure if this can be done on my rooted Galaxy Note, but if it would be possible I'd try.
brdeveloper said:
What about remapping the phone's physical keys so the thief will have a lot of trouble on entering the recovery mode?
It's not a 100% safe solution, but pretty decent for forcing the thief to use the phone while he can be tracked by an anti-theft app.
I'm not sure if this can be done on my rooted Galaxy Note, but if it would be possible I'd try.
Click to expand...
Click to collapse
not possible
Judging from this conversation avast seems to be better than all the others. Has anyone tried using avg antivirus?
If it is only anti theft, then, Android Device Tracker Free is better than all apps in its class.
It can be used as a system app (for rooted devices, for non-rooted devices can be used as a normal app) which will not be affected even if thief wipes the data and it will send sms to your configured mobile number when he tries to change the sim.
It doesn't consume battery. Because, it acts only when sim is replaced.
Link: https://play.google.com/store/apps/details?id=com.appzdevelopers.androiddevicetrackerf
GotYa best anti theft app ever>>https://play.google.com/store/apps/details?id=com.myboyfriendisageek.gotya
Take pic and upload on your mail with location and time.
[email protected] when someone geeks with your phone
Hi folks! Well, I just thought I should stop by and ask cause I can't find anywhere else an answer to my problem.. Here it is:
I have an app that when someone downloads it from the Play Store, recognizes the phone and connects to a server (Internet is needed) so every time I open it I have all my data and my "app activity" shown there. So, here's the thing: I want to sell the phone to a friend of mine, but I don't want (neither does he) to reset to factory because he wants a large amount of the apps I have already intalled and it is part of the price.
So, I ask you: Is there a way to completely remove-uninstall an app and ALL of its data so that there is no way for the app to have MY data displayed, and basically the app is "reseted' to factory, so that my friend can use from scratch?
Thanks!
You can manually clear data for all apps in the settings.
Another solution is that you can backup all your app apks, factory reset and then restore the apks. This would be better because your google account would be removed too. I don't think that you plan on giving your friend access to your google account when you give him your phone.
Sent from my Fanta9stic using Tapatalk 2