Question Help. Is this a malware ? - Nokia 5.4

I noticed this strange message popping up on my phone screen .
com.hmdglobal.app.customizationclient.OTAApplication
I want to know if it's a malware or spyware

amstardi said:
I noticed this strange message popping up on my phone screen .
com.hmdglobal.app.customizationclient.OTAApplication
I want to know if it's a malware or spyware
Click to expand...
Click to collapse
"hmdglobal" is the Nokia company and "OTA" means over the air (updates are called OTA because they're sent from their server to your phone "over the air").
So unless the malware has a fake package name, I'd say this app is your updater client that checks for Android Updates

Related

[Q] What is GSU?

What is GSU(GALAXY SECURITY UPDATE)?I have seen it in Samsung Apps.What is that APP?
Kind of an antivirus for Samsung android phones. Does what it says in the description, until proven otherwise, lol. I installed it for a second and then uninstalled it. Doesn't look like i need it.
Sp1tfire said:
Kind of an antivirus for Samsung android phones. Does what it says in the description, until proven otherwise, lol. I installed it for a second and then uninstalled it. Doesn't look like i need it.
Click to expand...
Click to collapse
I have Lookout (free version) ..Should I keep GSU or Uninstall it?
Good Point. As general advice is not to run 2 anti virus progs, I am running avg free, wondering as above.
Si607 said:
Good Point. As general advice is not to run 2 anti virus progs, I am running avg free, wondering as above.
Click to expand...
Click to collapse
oh ya you are right.Forgot about should not run 2 Anti Virus Programs
As per my understanding, GSU (Galaxy Security Update) is just a security update which keeps your phone safe from viruses, trojans & other malware. It is NOT an anti virus program like the AVG Anti Virus. You cannot open or run the GSU...it will just show you the version when clicked, nothing else will happen. It remains in the background. It's something which you can compare with the Windows Security updates that you regularly get from Microsoft. I don't think there is any harm in installing it on our phones, unless proven otherwise. I'm keeping it for the time being.
TheMegastar said:
As per my understanding, GSU (Galaxy Security Update) is just a security update which keeps your phone safe from viruses, trojans & other malware. It is NOT an anti virus program like the AVG Anti Virus. You cannot open or run the GSU...it will just show you the version when clicked, nothing else will happen. It remains in the background. It's something which you can compare with the Windows Security updates that you regularly get from Microsoft. I don't think there is any harm in installing it on our phones, unless proven otherwise. I'm keeping it for the time being.
Click to expand...
Click to collapse
I have Lookout (free version) ..Do you think GSU and Lookout (free version) both installed will be safe?
Raviteja_HYD said:
I have Lookout (free version) ..Do you think GSU and Lookout (free version) both installed will be safe?
Click to expand...
Click to collapse
TheMegaStar already cleared the confusion. Both are not same. One is antivirus and another is security update.
So both can stay together happily
GSU has been a nice and quiet background app, hopefully doing some good on my SGS2.
However after the ICS update, it's been bugging the system. The phone "hangs" quite often and after ca 30sec. an error message appears saying GSU has stopped.
It is no longer listed in my apps and I don't see a way of removing the thing..
Any ideas anyone?
Sarinas said:
GSU has been a nice and quiet background app, hopefully doing some good on my SGS2.
However after the ICS update, it's been bugging the system. The phone "hangs" quite often and after ca 30sec. an error message appears saying GSU has stopped.
It is no longer listed in my apps and I don't see a way of removing the thing..
Any ideas anyone?
Click to expand...
Click to collapse
Get the same since ics
CHEERSupdate.... any news on what to do.. It annoying!!
RobinPWMC said:
Get the same since ics
CHEERSupdate.... any news on what to do.. It annoying!!
Click to expand...
Click to collapse
Same probs here!:silly: any help on the issue gr8tly appreciated

[MIUI 3.11.22] Virus Scanner force close

Hi,
When the virus scanner is called (for an apk installation for example), it's force closed immediatly and it's really annoying.
I can't do anything on the application, if I want to scan my device, it stops working; if I want to change the database, it stops working.
I can't even uninstall it with a root browser (Can't find the .apk)
What can I do?
Contact the apps developer .
Use another scanner .
JJEgan said:
Contact the apps developer .
Use another scanner .
Click to expand...
Click to collapse
a question for you...you seem to be exprienced enough you may have an answer for me
i have used various antivirus programs which really just slowed down my phone. i have never found any malicious software on my device....are these programs effective?
according to this article http://www.theregister.co.uk/2013/12/17/android_anti_malware/
many antivirus programs are incapable of removing any malicious software.
Question is are you likely to install software from dodgy sites hacked apps and the like or residing in China .
If not you are hardly likely to get problems .
Avast i use mainly for its firewall and blocking apps .

SECURITY POLICY UPDATES in Google Play Store

just got an update in Google Play Store for something called "SECURITY POLICY UPDATES" and the publisher is Samsung OTA Software Update. anyone know how safe this update is in general and how deadly it is for a towelroot'd device?
dimm0k said:
just got an update in Google Play Store for something called "SECURITY POLICY UPDATES" and the publisher is Samsung OTA Software Update. anyone know how safe this update is in general and how deadly it is for a towelroot'd device?
Click to expand...
Click to collapse
well i first tried to uninstall the updates which was easy enough but tha playstore just updated it the next day withought my permission. so what i did at that point was to freeze the app with sd maid pro. also i changed the autostart to off for it. now it is turned off in the app manager. privacy mode still works as well as google wallet so for me im not seeing any negatives from shutting it off. at least not as of yet
also status is still official
ashraf sharif said:
well i first tried to uninstall the updates which was easy enough but tha playstore just updated it the next day withought my permission. so what i did at that point was to freeze the app with sd maid pro. also i changed the autostart to off for it. now it is turned off in the app manager. privacy mode still works as well as google wallet so for me im not seeing any negatives from shutting it off. at least not as of yet
also status is still official
Click to expand...
Click to collapse
Hrmm, I have Play Store not to update automatically and haven't had it update automatically yet, which I suppose is why it stuck out for me. I've frozen the app as well to get the update out of my face, but I'm curious since you said it updated itself automatically. You've managed to maintain root even after the update invaded?
I saw this on my rooted GS5 as well. I just froze the security policy app using Titanium Backup. As expected, the update disappeared from Play Store. Would like to know what this does before applying it....
Security Enhancements for Android Policy update
Samsung Electronics Co., Ltd. ("Samsung") offers an automatic update service for its Security Enhanced for Android (SE for Android) policies to enhance security for your device.
These continuous and automatically updates can help to avoid or counteract new malicious code, software bugs, and other security risks on your device, and improve overall software performance.
The updates may add new security policies and delete any existing policies, if necessary. The service may detect and delete downloaded software which contains malware.
Updates are performed wirelessly, without a USB connection, and you may incur a mobile data charge from your carrier.For the update service, the following User information is necessary and will be collected.
Your device's unique identification number, model name, carrier code, security policy records, your device's current software version, MCC (Mobile Country Code), MNC (Mobile Network Code)
The collected information is only used internally by Samsung pursuant to our privacy policy. Unless stated otherwise herein, your data will be collected, processed and used in accordance with Samsung's Privacy Policy at [https:account.samsung.com/membership.pp]. By installing the update, you agree to the terms of our privacy policy.
In another word.....Do not install this.
The Sickness said:
Security Enhancements for Android Policy update
Samsung Electronics Co., Ltd. ("Samsung") offers an automatic update service for its Security Enhanced for Android (SE for Android) policies to enhance security for your device.
These continuous and automatically updates can help to avoid or counteract new malicious code, software bugs, and other security risks on your device, and improve overall software performance.
The updates may add new security policies and delete any existing policies, if necessary. The service may detect and delete downloaded software which contains malware.
Updates are performed wirelessly, without a USB connection, and you may incur a mobile data charge from your carrier.For the update service, the following User information is necessary and will be collected.
Your device's unique identification number, model name, carrier code, security policy records, your device's current software version, MCC (Mobile Country Code), MNC (Mobile Network Code)
The collected information is only used internally by Samsung pursuant to our privacy policy. Unless stated otherwise herein, your data will be collected, processed and used in accordance with Samsung's Privacy Policy at [https:account.samsung.com/membership.pp]. By installing the update, you agree to the terms of our privacy policy.
In another word.....Do not install this.
Click to expand...
Click to collapse
that's pretty much the only information that's turned up when you search for this... to me it sounds like it MAY break towelroot, but wanted to make sure just in case so that one isn't left exposed unnecessarily.
I had one of my users ask about this last night. All Knox is removed from my roms.....but, as soon as he connected his Gear to it, it (policy update) was installed to his phone.
He deleted the apk and hasn't had any problems since
Is it safe to disable it from the application manager?
Dat Noob said:
Is it safe to disable it from the application manager?
Click to expand...
Click to collapse
Yes. Or delete it
The Sickness said:
Yes. Or delete it
Click to expand...
Click to collapse
Thanks, I did everything to remove it but the option to remove notifications is grayed out, so it always shows up on the play store asking to update. Tried using SD Maid but the only option available was to kill the application. Freezing and deleting weren't available. Is there anything I can do that doesn't require rooting?
Edit: After reading a little on the forums, I've decided to just install it. So far no issues. At least it finally made me upgrade to SD Maid Pro.
Use Rom Toolbox to delete it.
The Sickness said:
Use Rom Toolbox to delete it.
Click to expand...
Click to collapse
What's the apk name? Never saw this before. I prolly deleted it without realizing it.
Sent from my SM-G900T using Tapatalk
elesbb said:
What's the apk name? Never saw this before. I prolly deleted it without realizing it.
Sent from my SM-G900T using Tapatalk
Click to expand...
Click to collapse
you'll find it as "Security policy updates SPD_v2_1406_3_1" in TiBackup. The APK name is SPDClient.apk

[Q] How to remove aggressive Security software?

I recently bought a Lenovo s820 it was not until I got the phone did I realize that it has its own security software but its the most aggressive software I've ever come across.
The software is called secureit a chinese app created by Lenovo, I rooted my phone to uninstall bloatware most of it being in chinese so I decided to remove the security app but it put a message up on the screen "an android icon and message" telling me of a security error, the message and icon where transparent and not removeable, I had no choice but to find the app again and reinstall but not until after it blocked my sim card.
The app scans everything that you do on the phone, every app install requires your permission, every call is scanned as it tells you your call is secure and its always working in the background. The menu is also in chinese and there does not seem to be many ways to customize how it functions.
So is there a way to remove it without it bricking my phone or throwing up security warnings?

Is there spyware on my device?

For the longest time, possibly since buying the phone, I felt my phone has ghost vibrations. Eventually I decided to install a notification logger. I then realized that for some reason Download Manager is downloading an image, and it's always the same image. I don't know where it's downloading it from, but I copied the image filename and pasted it into my Google photos and turns out it's a photo of my ID.
Now I'm really scared that there may be spyware on my device.. Is there a way to find out who is calling Download Manager or from where the file is being downloaded?
Have you try to fully reset your phone?
Sh!t, I would factory default in a heartbeat and carefully look at the apps I reinstall, especially those with "access to photos" permissions. This is serious.
That being said, it's an Android phone by Huawei, so yes, you are spied on both by Google and Huawei
I think US politics against Huawei and general fear mongering is getting out of control. If people are that paranoid about big-brother then stop using tech, coincidentally the only proven and factual case of spying and massive over-reach has been the US government, not China.
enrique71 said:
I think US politics against Huawei and general fear mongering is getting out of control. If people are that paranoid about big-brother then stop using tech, coincidentally the only proven and factual case of spying and massive over-reach has been the US government, not China.
Click to expand...
Click to collapse
Chill....that was a joke if you notice that emoji.
enrique71 said:
I think US politics against Huawei and general fear mongering is getting out of control. If people are that paranoid about big-brother then stop using tech, coincidentally the only proven and factual case of spying and massive over-reach has been the US government, not China.
Click to expand...
Click to collapse
I think a Huawei employee stole some testing robot from T-Mobile. LOL or allegedly did.
TheAddict94 said:
For the longest time, possibly since buying the phone, I felt my phone has ghost vibrations. Eventually I decided to install a notification logger. I then realized that for some reason Download Manager is downloading an image, and it's always the same image. I don't know where it's downloading it from, but I copied the image filename and pasted it into my Google photos and turns out it's a photo of my ID.
Now I'm really scared that there may be spyware on my device.. Is there a way to find out who is calling Download Manager or from where the file is being downloaded?
Click to expand...
Click to collapse
Google, Huawei, Samsung, wat ever brand, know you better than ur parent, especially Google, it know where u work, where u eat, where u sleep, what road u took ... you name it.
These make me think of movie "Terminator", may be one day Google is Skynet
.
I got ghost vibrations as well it starten when 8 downloaded an GIF
Where do you think Huawei got a copy of your ID from? Do you think your phone went into your wallet while you were asleep and stole it? And after stealing your ID why would Huawei want to download it onto your phone?
The spyware you suggest sounds both increadibly sophisticated and amazingly stupid.
If you actually are seeing anything remotely similar to what you describe it is likely activity by a third party app you installed and that you gave a copy of your ID to.
Huawei Wallet is the only Huawei App I know of that might store a copy of your ID but you would actually need to provide a copy of it first.
I don't think is spyware either. In my case I have OneDrive syncing some files (mostly personal stuff), so what I see in a notification logger is exactly as you describe: Download Manager downloading randomly downloading some files to your device.
There are 'phantom notifications' happening on a regular basis. They disappear before your very eyes. I think they are all Huawei subsystem actions that somehow trigger a notification but not fully... What the OP is claiming is pretty insane, though. Can you clarify? At some point in time, you had to have used your phone to take a picture of your ID - right? I mean, the camera didn't do that by itself. Was it a banking app? Was it trying to buy bitcoins? Was it applying for your porn permit in the U.K.? Was it your dissasociative schizoid fragmented personality betraying you again? Are you the anomaly? Do you live at the CERN facility? Did Dolly wear braces in Moonraker in the timeline where your picture ID was taken?
Okay, I've made some progress with trying to figure out the culprit. It's somehow related to Google Photos. I never downloaded any photos except that one (the photo was taken on a different device and I used the download option to keep it on my device for a banking app).
I uninstalled the banking app and disabled GPhotos (can't uninstall it), the issue persisted. I was worried because it was my ID and I assigned malicious intent to some unknown third party. I've re-enabled GPhotos.
Now, I've downloaded two more photos, this time just food pics. And now I get three times the ghost notifications. One for the ID, and two for the food.
Good news - it's likely not malicious intent.
Bad news - it's somehow related to Google Photos and/or Huawei. It's a bug that still occurred after I disabled both the download manager (it enabled itself) and Google Photos (it didn't enable itself, and even with clean data the issue occurred).
TheAddict94 said:
Okay, I've made some progress with trying to figure out the culprit. It's somehow related to Google Photos. I never downloaded any photos except that one (the photo was taken on a different device and I used the download option to keep it on my device for a banking app).
I uninstalled the banking app and disabled GPhotos (can't uninstall it), the issue persisted. I was worried because it was my ID and I assigned malicious intent to some unknown third party. I've re-enabled GPhotos.
Now, I've downloaded two more photos, this time just food pics. And now I get three times the ghost notifications. One for the ID, and two for the food.
Good news - it's likely not malicious intent.
Bad news - it's somehow related to Google Photos and/or Huawei. It's a bug that still occurred after I disabled both the download manager (it enabled itself) and Google Photos (it didn't enable itself, and even with clean data the issue occurred).
Click to expand...
Click to collapse
I have exactly the same, some how download manager service kills and restart and b8ving the ghost notifications
Yeah it's called Huawei ID, login and let it upload all your contacts and messages to a Chinese server. ?
Sent from my HUAWEI LYA-L09 using XDA Labs
Darkat70 said:
Yeah it's called Huawei ID, login and let it upload all your contacts and messages to a Chinese server. ?
Click to expand...
Click to collapse
How is it differ from Google backup?
BTW, if you don't want Huawei ID, get the Canadian version. It was disabled.
Amowagou said:
How is it differ from Google backup?
BTW, if you don't want Huawei ID, get the Canadian version. It was disabled.
Click to expand...
Click to collapse
LoL not much really, Google are probably worse.
Sent from my HUAWEI LYA-L09 using XDA Labs
Darkat70 said:
LoL not much really, Google are probably worse.
Click to expand...
Click to collapse
Yeah, no.
I too am certain my mate 20 Pro is spying on me, it randomly says call ended even when iv not been in a call. I don't have any control of weather 'hey google' is active when the screen is dark, the option is greyed out in the off position but my phone regularly lights up from dark into Google assistant when nobody in the room said ’hey google’ or anything like it. I also cannot delete or retrain my voice pattern. Both options that should normally be buttons are no longer clickable links.
Stickybudd said:
I too am certain my mate 20 Pro is spying on me, it randomly says call ended even when iv not been in a call. I don't have any control of weather 'hey google' is active when the screen is dark, the option is greyed out in the off position but my phone regularly lights up from dark into Google assistant when nobody in the room said ’hey google’ or anything like it. I also cannot delete or retrain my voice pattern. Both options that should normally be buttons are no longer clickable links.
Click to expand...
Click to collapse
Seems like there's something horribly wrong with your device. Maybe you should do a factory reset
ChongoDroid said:
Yeah, no.
Click to expand...
Click to collapse
Eerr Yes
Google Maps Timeline, where you have been, how long you were there, Google Opinion Rewards, I visited McDonald's the next day I got a survey asking which restaurant I'd been to which had McDonald's as an answer, this has happened when I parked outside JB hi-fi and other locations too.
Then there's Google assistant listening to what we do, which they probably analysis just like Alexa
https://www.news.com.au/technology/...u/news-story/d1fc9557a03909f9b845fb9003434e22
So tell me that Google are not big brother, watching our every move.
Sent from my HUAWEI LYA-L09 using XDA Labs

Categories

Resources