ES File Explorer: possible malware (dianxin folder) - Android Q&A, Help & Troubleshooting

Hi,
Since ES File Explorer's last update (via Google Play), a weird folder named "dianxin" appeared on my phone's internal memory.
After some researches, I found out:
-Dianxin is a chinese custom rom (which is weird because I have a stock rom and no root)
-ES File Explorer's last version is causing its apparition (some XDA Developpers' member said it here: http://forum.xda-developers.com/xperia-z5/help/dianxin-folder-t3346358/post66082381#post66082381)
I looked into my father's phone who also use ES File Explorer and that folder was present.
Does anyone has any info about that? I think it's extremely suspicious, plus, that app is used by loads of people (2 millions users).
Should I use another File Manager?

Same here, after installing the latest version of ES File Explorer earlier this morning the dianxin folder appeared, I tried deleting it only to have it reappear hours later, extremely frustrating and suspicious. If you read some of the latest reviews left on the Google Play Store, you'll notice that a few have also spotted this and some have even said that their AV flagged the latest version of ES File Explorer as a threat. I immediately uninstalled ES File Explorer and did a soft factory reset, and haven't seen the folder since, I'm now reluctant to reinstall ES after this, I'll just have to wait for further explanation on this or use a different file manager instead :/ I'm wondering how this even got through the approval process at all, hopefully someone can shed some light on this :/
Sent from my iPhone using Tapatalk

Same Here
mortaest said:
Hi,
Since ES File Explorer's last update (via Google Play), a weird folder named "dianxin" appeared on my phone's internal memory.
After some researches, I found out:
-Dianxin is a chinese custom rom (which is weird because I have a stock rom and no root)
-ES File Explorer's last version is causing its apparition (some XDA Developpers' member said it here: http://forum.xda-developers.com/xperia-z5/help/dianxin-folder-t3346358/post66082381#post66082381)
I looked into my father's phone who also use ES File Explorer and that folder was present.
Does anyone has any info about that? I think it's extremely suspicious, plus, that app is used by loads of people (2 millions users).
Should I use another File Manager?
Click to expand...
Click to collapse
I also use ES File Explorer and this folder "Dianxin" shows up .. It is suspicious because i search the folder name and the result is it is a chinese custom rom I think it is a malware I delete it and It didnt show up again by now

I've checked into that dianxin folder and I found 2 files: the 1st one is an .0 file but I couldn't open it as other .0 files I've tested.
The 2nd one is named "journal" and I could open it with a text editor:
"libcore.io.DiskLruCache
1
1
1
CLEAN e8dd70db5163eccfbe80f53c786ae2a2980"
Any idea what it could be?

Nexus 6 here, not rooted and stock, latest version of ES Explorer and no dianxin folder on my device.

I have it again on my stock G2 with latest ES, after deleting it yesterday.

Same here dianxin folder present.
I've uninstalled this crap app ES explorer

Go to ES File Explorer settings menu - tap on "Notification Settings" - Uncheck "Notify me of app permissions". And then deleted the Diaxin folder. Reboot your devices.

I've had the same problem ... & I have never set App Notifications on. I simply found an earlier version archived online & installed it. Hopefully ES will fix the problem, but until they do, please don't update.

FunSucker said:
Go to ES File Explorer settings menu - tap on "Notification Settings" - Uncheck "Notify me of app permissions". And then deleted the Diaxin folder. Reboot your devices.
Click to expand...
Click to collapse
It was already unchecked and it doesn't prevent from creating the dianxin folder

let it alone..its nothing much..
if u don't feel safe then use other explorers..

Nothing much? It's kind of suspicious and nobody knows what this folder does on the internal memory
I signaled to google, I contacted the developers, I wrote a bad review explaining the situation and I wrote a thread here. I think it's everything I can do. I'll try other file managers till we have an answer

mortaest said:
It was already unchecked and it doesn't prevent from creating the dianxin folder
Click to expand...
Click to collapse
Hmm oke. I found new permissions in latest version about dianxin (attachment) and some other permissions about baidu server..
Im still used ES for now, cause im not sure this is a malware or what.
You can try to used any app for kill that unwanted permissions, if you really want to still using ES.
Just opinion

Thanks, I was trying other file managers when I finally got an answer from the developers:
"Hi, Thanks for your concern. As you may noticed that, in order to keep contact with users, we add message box page at the homepage, and dianxin folder is where cache files store. In the next version, we will move this folder into .estrongs. In case you are interested, dianxin is dessert in Chinese. Greeting from team."
False alarm it seems

mortaest said:
Thanks, I was trying other file managers when I finally got an answer from the developers:
"Hi, Thanks for your concern. As you may noticed that, in order to keep contact with users, we add message box page at the homepage, and dianxin folder is where cache files store. In the next version, we will move this folder into .estrongs. In case you are interested, dianxin is dessert in Chinese. Greeting from team."
False alarm it seems
Click to expand...
Click to collapse
Yeah it's a special chinese desert.... a windows trojan? check this avast forum https://forum.avast.com/index.php?topic=147023.0

alexacm said:
Yeah it's a special chinese desert.... a windows trojan? check this avast forum https://forum.avast.com/index.php?topic=147023.0
Click to expand...
Click to collapse
I don't think that only using the same name is enough to say the ES team put a malware in their file explorer. But the thing *is* suspicious. What troubles me most is that if they put this folder into .estrong folder, nobody would notice, malware or not. As for me, it's quite the time to uninstall ES file explorer and look for something different, as they are integrating too many useless (for me) features; some of them (like new home-page and new app installation notification) are also annoying.

Hi,
I have some serious information concerning e-file manager but am new here. Although I have visited many times over the last several years, I can't post links yet. Google Citizens Lab,Baidu browser, and there is one short report, but you want the indepth analysis which is ten times longer. Half way down that report is the relevant information on all EStrong products. Look up my profile if you need help.
Edit:
Finally I can post a link to the research on Baidu and also concerning ES File explorer as well as a boat load of other apps using Baidu analytics or ad SDKs. Over 500 apps in playstore had one or more.
https://citizenlab.org/2016/02/privacy-security-issues-baidu-browser/
Read the whole report, and the response from Baidu which is a three page PDF listed in the article.

bye, ES file manager
mcguolo said:
I don't think that only using the same name is enough to say the ES team put a malware in their file explorer. But the thing *is* suspicious. What troubles me most is that if they put this folder into .estrong folder, nobody would notice, malware or not. As for me, it's quite the time to uninstall ES file explorer and look for something different, as they are integrating too many useless (for me) features; some of them (like new home-page and new app installation notification) are also annoying.
Click to expand...
Click to collapse
I am totally with you on this. as a long time ES file manager Pro user, I'm done with them. This little thing is enough to cause me to dump their product, which has been implementing features that detract from my usability. It may seem like nothing much, but I don't need my file browser to contact a Chinese server to tell me what's going on with my files. Nothing much is what Estrongs is going to get from me now.
Also, as an android developer of a major product, you'd think that EStrong would be visible in this forum to address concerns.

So even Es file manager PRO has these annoying features... unbelievable! In these days I'm giving Solid Explorer a try, but there are many other alternative apps, like Fx File Explorer, Cabinet, Amaze, and many other.

New "feature" !!!!!!!!!!
"charging boost" !!!

Related

Does anyone remember this?????

I am looking for the file explorer.exe that allows you to delete files from the rom. It was posted awhile back and I just recently lost due to a HDD crash. I believe is was included in one of the old WM5 roms but was also posted as a download also. I used to drag it to the Windows Directory and actually overwrite the built in explorer. I have searched and searched and cannot find it. Can someone please help....
Thanks
try resco explorer, it lets you overwrite the rom BUT it is a commercial program and requires registration. I believe a trial version is available.
Thanks I own that also. But the one I was referring to was created by someone on here. I thought it was Dr. Putt but I could be wrong. I just dragged the file over to the windows directory and it overwrote the windows file explorer. I have to keep looking. But that you for the response.....
Rob
I also only use Resco, but I recall hearing that TotalCommander could do what you're looking for. Not sure if TC is free or commercial, just chiming in...
if you dont want the original file explorer, why dont you just delete the .ink file out of startmenu? this will remove the old explorer icon from programs menu.
It's not that I don't like it there. The version I am refering to actually let you delete things stored in the rom. With resco thanks for all your suggestions though!
If you do run across it drop me a line....
Thanks

AstroFileManager ?'s

rooted
bamf 1.6.3
ok i know this isn't an astro fourm but any advice would be appreciated.
in astro file manager Ver 2.5.2, navigating to /data returns (directory is empty) there are other directories which i expect to have files or sub directs that return the same result. is this a free Vs. pro issue. am i missing something?
i like the app but don't want to upgrade if this is glitch of the app.
additionally there is "busy" icon rotating around in the lower portion of the window whenever i open astro and continues to rotates as busy continuously
thanks
mark
would another app with similar functionality be recommended?
Buy Root Explorer
Sent from my T-Bolt
second root explorer. its well worth the $2 or whatever it costs. astro doesn't show anything because it cant access the rooted portion of your phone, only the sd card
I'm pretty sure I've gotten Astro into the Root of my phone... Maybe I'm imagining things.
BAMF includes an adblock. The free Astro usually has ads on the bottom. You see the busy icon because the ad is never downloaded.
Astro also shows my /data directory as empty. Root Explorer sees everything just fine.
ERIFNOMI said:
I'm pretty sure I've gotten Astro into the Root of my phone... Maybe I'm imagining things.
Click to expand...
Click to collapse
I use root explorer but once when I flashed a Rom it wouldn't install from titanium backup or the market so I had to use Astro and it worked just fine replacing files in the system, I changed the boot animation and the Adobe file to get Hulu to work on my X.
ERIFNOMI said:
I'm pretty sure I've gotten Astro into the Root of my phone... Maybe I'm imagining things.
Click to expand...
Click to collapse
if you could share how thatd be great. farthest ive gotten it is to show / which should be root... but only three folders. two are empty and one is sd card
You need root explorer. Astro rocks for the simple things. Moving files around, creating new folders and emptying your ever full "download" folder into things you want to keep, and deleting things you don't. It will allow you to view pictures, and video directly inside it. And has a nicer look and feel than root explorer. However, it won't get you into that data or system folder like RE will. I use astro for mundane tasks, and RE for it's extraction abilities, and data folder. Both are nice to have.
astro is cool for simply moving files around and exploring files. But if you wanna see whats on your phone, buy root explorer. Its pretty amazing.
But...pair astro and root explorer...then its ok. But you would have to mount r/w with root explorer before using astro...which is a drag.

prime built-in file manager can't see files

Here one, why can't the prime (4.03) stock, file manager, can't see the mp3 files,
on a usb hard drive, but file manager HD tablet can. ? ? ?
Is there something that needs to be tick on ? OR, it just lacking ?
Thanks
bump... please
Probably lacking. I don't remember any problems (with system files unhidden) except that it only can open stuff via association, not open and ask "This looks like $MIME, what ya want?"
I can recommend ES file explorer. Its free and has all the options you need.
ES File explorer really sux, fails large file copies if device goes to sleep, freezes the notification of the copy until you restart the app. Also had numerous other issues with it. You already found the only alternative that I have been able to use successfully, HD file manager. ES needs to be updated to allow you to use it full res and better compatibility with ICS.

Unable to open files from a network share, using ES Explorer Pro

Any time I try to open a text file, or other files such as cbr's, I get gerror messages that the file can't be found locally. Or when I try to install apps from apk's, I get an error that the file failed to copy. I'm not sure why this is, as I have never had these issues with ES Explorer Pro on any other devices. Usually I just tap the file I want to open, it caches locally and then opens. With the Mediapad I have to copy the files over to the tablet before I can use them. Which can take a long time if it requires several files.
Is there anything I can do to fix this, by changing permissions or whatever?
The same use case works fine for me but with FX File Explorer. Which is, imo, way better than ES. ES started fine, it was one of the first but went to the wrong direction, becoming over bloaded.
Sent from my CMR-W09 using Tapatalk

Is this Android bug? An app can make a file without files and media permission

I am from Indonesia. One application from a locally popular market place called Tokopedia is able to create a file in /Music folder without files and media permission. The file name is au_uu_SzH34yR2.mp3. There are numerous postings in several discussion forum questioning the file. No one has any idea about the file. Some said that the Zomato app also created the file in the same folder. In SoundCloud there are many files with the same exact name.
I just found out that this Tokopedia app creates the file every time it runs although I only allow Phone permission. It can be found in my /Music folder in my two phones. One is Poco X3 NFC with Android 11 and another is Samsung A7 2018 with Android 10.
Anybody has any idea about the file? Is it possible for an application to create a file without the files and media permission? Or is it because the Phone permission?
Trashware apps are a dime a dozen.
If you have any doubts about it or don't like what's it doing, ditch it.
Keep shopping and social apps off the phone. If they need to run as an app on the device, you don't need them. Nothing but trouble.

Categories

Resources