ask-th.bin automatically downloaded to my phone? - Galaxy Note 3 General

Hey Guys,
I have the Galaxy Note 3. Just turned the screen on to use it and noticed a file that was listed as "download complete" in the notifications.
That file is ask-th.bin
The contents of the bin file are text, a php file. It is as follows:
Code:
<?php
include('/var/www/cgi-bin/mte/php/mt.php');
$mt = new MT(31, '/var/www/cgi-bin/mte/mt-config.cgi');
$mt->view();
?>
From what I can find out from googling some of the terms there, it is part of Movable type? I have no idea which app downloaded it, nor do I know how I can go about finding out what app caused that to happen. Definitely fishy behavior. Kinda feeling like I'm being hacked or something.
Once I saw this, I force closed the download manager app (which is the one that came up when I clickheld the download notification and chose "app info")
I am posting this here incase anyone else googles the terms above. Maybe this thread will come up, and maybe power in numbers can figure out wtf that's about...
Thanks

Related

Notification Error

I recently tried to start PicselBrowser.exe from a location other than the default one. It failed and I put it back into it`s default directory and uninstalled/reinstalled it. Now every time I turn on my Apache (WM5) it tells me ''Notification Error'' ''Cannot execute /Storage Card/PicselBrowser.exe'' which is the directory that I mentioned that I had failed to start the program from. Does anyone know how I can stop this message? Thanks.
Any ideas?
Does anyone know of a forum somewhere that would be better suited for this question?
koadansc said:
I recently tried to start PicselBrowser.exe from a location other than the default one. It failed and I put it back into it`s default directory and uninstalled/reinstalled it. Now every time I turn on my Apache (WM5) it tells me ''Notification Error'' ''Cannot execute /Storage Card/PicselBrowser.exe'' which is the directory that I mentioned that I had failed to start the program from. Does anyone know how I can stop this message? Thanks.
Click to expand...
Click to collapse
Yes, that is a little easy to solve. I had that trouble a while back with another application I was messing with. Here is the solution.
Look into Windows>Start Up folder. In there you will probably see a .lnk file pointing to the OLD PicselBrowser.exe. Since you already moved the OLD PicselBrowser.exe file to a NEW location, then put it back in the same place. Your PPC thinks it is already a NEW file despite the fact that you returned the very same file to its ORIGINAL location. The solution is to replace that .lnk file by creating a shorcut of the NEW PicselBrowser.exe file in another folder, then rename that file to the same name as the one found in Windows>Start Up folder. The next step is a simple cut and paste to replace the lnk file.
The uninstall process probably leaves behind the OLD lnk file or notification to launch the NEW picselbrowser.exe file. So in reality, the lnk file is still searching for the OLD PicselBrowser.exe file. Despite the Uninstall procedure that you performed.
I hope I made it clear for you. Let us know if it works.
Good luck.
---
Thanks for the reply, I am a newb when it comes to technical PPC stuff. I looked in my startup folder and several others and found the following:
poutlook.lnk
sddaemon.lnk
Services.lnk
SpbMobileShell.lnk
None of these appear to be Picsel Browser, I also looked on my Storage Card, nata. Any other ideas? Thanks again!
koadansc said:
Now every time I turn on my Apache (WM5) it tells me ''Notification Error'' ''Cannot execute /Storage Card/PicselBrowser.exe'' which is the directory that I mentioned that I had failed to start the program from. Does anyone know how I can stop this message? Thanks.
Click to expand...
Click to collapse
Ohhhhhhhhh. I have another thoery and again very simple.
What kind of SD Card are you using? I would guess a 4GB one, isn't it? Basically what is happening is that, the built-in SD Card reader of your PPC is not fast enough to read the entire contents of the SD card when you turn it ON. To solve this issue, there should be an option from within Picsel Browser to delay its startup upon turning your device ON.
An alternative solution is to install Picsel Browser in the Main Memory rather than the SD Card.
Another alternative solution is to use a Lower Memory SD Card, say a 2GB SD Card, for faster read.
As a last resort, if you have MemMaid or a powerful Notifications Manager, just delete the pesky notification manually. Why does Picsel Browser need to be read every time you turn your device ON anyway?
Hope this helps.
---
Actually, I am running a 2 GB MiniSD Card and to be honest, I dont know why it is trying to activate PicselBrowser.exe each time I turn on the device. Let me clarify that it is not coming on every time that I do a soft reset, it is every time I press the power button on top of the device. Also, I got this same message when I first tried to run PicselBrowser in it's not default location, which is why I moved it back. Why it has been attempting that operation ever since is a complete mystery to me. Thanks for your help though. I would be clueless without you.
I guess the only thing to try now is delete the notification manually using a Notifications manager. BACKUP 1st is the RULE, before deleting an kind of Notifications.
Another extreme solution is Hard Reset and install from scratch. I know sounds horrifying specially if you have tons of stuff.
---
I'm getting exactly the same error for 'wakeup.exe' for Wisbar Advanced Desktop at the minute, I know that there has been a lot of discussion over at the lakeridge forums but most people have solved the problem by reinstalling several times.
EDIT: i think I may have fixed my problem. try installing picsel browser again without uninstalling it on your pocket pc. See if you get the message about 'all other previous versions will be deleted' just tap yes and continue to install it again. Then see what happens.
(And just as i thought i fixed it, the message appeared again)
I tried to install Picsel Browser over the existing install several times and it did nothing to the error message. I don't know what else to try, any more ideas?
Please, this is really annoying every time I turn on my phone. Any ideas?
I sitll get the same with WAD.
Hey, I fixed this problem simply by copying (NOT CUTTING) the file in question (in my case PicselBrowser.exe) to the directory that it was telling me it could not start from. Hope this helps. Cheers
koadansc said:
Hey, I fixed this problem simply by copying (NOT CUTTING) the file in question (in my case PicselBrowser.exe) to the directory that it was telling me it could not start from. Hope this helps. Cheers
Click to expand...
Click to collapse
im having this ploblem too...
please.. after deleted the app PicselBrowser... i deleted manualy the others folder files about PicselBrowser..
so i dont have this PicselBrowser.exe to move or put in other place...
can u upload the PicselBrowser.exe file...
that we need to fix this error
thanx
execute picselbrowser.exe from the installed location and delete the one wich is generating errors. It worked for me

Edit Lockscreen Text - Not Carrier Text - CM7

Apologies in advance if I am posting in the wrong section.
I've been talking to some people over on the CM forums about this and we haven't found an answer yet.
If you look in my screenshot, right below the alarm, my name is on my lockscreen. This was put here using an old setting on CyanogenMod 6.1.2 on my HTC Evo 4g. You did this on CM6 by going to Settings > Location & Security. Then there was a checkbox to "Show Custom Message". You then put in text!
Does anyone know which file stores this value on CM7/Android 2.3? I've pulled the eri.xml file from my phone and I can edit my carrier text but I have not been able to find my name. I like being able to edit that text and I wanted to update it to something new but the settings no longer exist under CM7. Thanks for looking!
I have found a ton of utils for editing carrier text but nothing for the text pointed to in the red arrow.
.
.
.
.
.
.
.
*bump*
re
Not the answer you are looking for here but wouldnt it be easier and less annoying and stressful to just flash back to the rom where you could change it, change it to what you want and then flash back ?
that is if i am understanding you correctly and your name shows up now of course with the new rom...
i would think if you changed your name to whatever you wanted then you could go back to the new rom and it would appear the way you want it.
I'm going to give that a try tomorrow. Not sure if it sticks through an upgrade or not but worth a try. Im just curious at this point what confit file it is. Wish there was a filemon or similar tool for Android. Although, if can dump all the files off the phone before and after I should be able to do comparisons....hrm. Project for tomorrow.
OK, finally took the time to work on this a little further.
I reflashed CM6, booted and confirmed there was no lockscreen text. Took a nandroid and copied off the system.img
I then put a lockscreen text in - used a custom phrase that would not be in any of the config files normally. Rebooted, took a nandroid and copied off this system.img.
Extracted both system.img files using unyaffs.
I did a binary and CRC comparison off all the files, no differences. So apparently this setting is stored somewhere else. Hrm......
AHA. Found the little bugger finally.
Had to pull the data.img and extract that. The setting is located in
/data/com.android.providers.settings/databases/settings.db
lock_screen_custom_msgTESTTEXT
lock_screen_show_custome_msg1
These are the two options that I found. So, now to see if I can safely edit that DB file and modify the text on CM7. I already have the text on my screen so the data fields are in the DB file already so I suspect I can just edit that file and then replace it on my phone.
Hm. Editing is no good. Blew away all my settings and I not longer can enable any lockscreen.
Hah. Got it! Using ADB works. Instructions:
adb shell
sqlite3 /data/data/com.android.providers.settings/databases/settings.db
.tables (you should see a secure table listed)
.header on
.mode column
select * from secure;
Now scroll through the results. Find the "lock_screen_custom_m" item under name. Note the ID number to the left. Write the ID number down.
update secure set value='your custom message here' where _ID=NN;
NN is the ID number you wrote down.
.quit
Reboot your phone.
There you go, just in case anyone else is interested.
jdostal said:
Hah. Got it! Using ADB works. Instructions:
adb shell
sqlite3 /data/data/com.android.providers.settings/databases/settings.db
.tables (you should see a secure table listed)
.header on
.mode column
select * from secure;
Now scroll through the results. Find the "lock_screen_custom_m" item under name. Note the ID number to the left. Write the ID number down.
update secure set value='your custom message here' where _ID=NN;
NN is the ID number you wrote down.
.quit
Reboot your phone.
There you go, just in case anyone else is interested.
Click to expand...
Click to collapse
Nice find!
I used a derivative of your method to reset the alarm notification on the GB lockscreen when the buggy POS alarm app G-Alarm left it there after removing all the alarms and uninstalling it.
That one is in system instead of secure, and it can be set to a blank string per http://developer.android.com/reference/android/provider/Settings.System.html#NEXT_ALARM_FORMATTED to clear it
Neat! Glad it could help someone out.
jdostal said:
Neat! Glad it could help someone out.
Click to expand...
Click to collapse
Yup, much appreciated! Also great to learn how to edit databases on Android.
Also, I didn't have a USB cable so I did it with the terminal editor. For convenience (i.e. having a real keyboard) I used Webkey for PC access to my phone and its built-in terminal editor to make the changes.
That sounds painful!
I don't know where I read the guide, but definitely use ADB. With ADB you can basically connect to the shell on your phone from your PC through a command prompt. Makes doing this sort of thing MUCH easier!
jdostal said:
That sounds painful!
I don't know where I read the guide, but definitely use ADB. With ADB you can basically connect to the shell on your phone from your PC through a command prompt. Makes doing this sort of thing MUCH easier!
Click to expand...
Click to collapse
Did you miss the part where I didn't have a USB cable?

Nova Launcher: recovering deleted file from home screen

I do this on impulse: deleting spam from an application that I've installed. Now I want it back, (no solid reason). I really believe it has been deleted for good and there's no cache system for this. Let me know if there is a process to find the orgin or the deleted file. I'll keep using my file manager to search my phone for something until I get a better option.
*browseing the forums found simular post but not the phone, let me know if there is an answer here or you've got one to tell*

Random mysterious files appearing in Downloads folder

I keep experiencing mysterious, extensionless files that appear in my downloads folder. Sometimes one, sometimes more. I have confirmed that they only appear after I open the Snapchat app, even for just a brief second.
When I open the files as text I get random Chinese characters that don't seem to want to be decoded.
What are these files? And how do I remove them for good? I can hide them, but they reappear under different names.
Is there any way to either
A) prevent an app from creating files in the download folder
B) change the directory where Snapchat creates these files
C) stop Snapchat from making these files altogether
I am using Snapchat Beta on an unrooted Droid Turbo 5.1
SOLUTION: Using es file explorer, I highlighted the unwanted files and selected Menu > Hide. They're gone now and they don't seem to be coming back even though I've been using Snapchat numerous times per day. Still, if anyone knows why these files exist, how to get rid of them, or how to prevent an app from creating a file like this in the first place, this information would be appreciated.
Thx bruhs
It may very well be spyware, like the one at mspy dot com, or a government spyware app distributed via Snapchat.
Based on the file sizes people are reporting and the way it changes, I'd say this file in particular is probably an encrypted log file for a key logger. That is: It is everything you've typed, and it's sent to the one who's spying on your phone activity.
Hint: Hiding the file won't solve the problem (for the person who's being spied on anyway...).

What are mbstgo, mbstph, smssdk, sharesdk

What are these folders in /sdcard/:
mbstgo, mbstph, smssdk, sharesdk ?
I don't remember seeing them till recently. I googled them but did not find useful information. Malware?
Related to specific apps I guess (example for smssdk). I don't have them on my device.
Do you have files into these folders?
It seems that mbstgo is created by Wifi File Transfer: http://forum.xda-developers.com/android/help/folders-gift-myrecord-mbstgo-mbstph-t2918141
Thank you.
I don't have "wifi file transfer" or anything similar installed so I'm going to rename them and if nothing bad happens will delete them
Just worried they were some kind of system files that would cause android to go haywire on my phone.
Edit:
For some one else who may need to know, smssdk, sharesdk, cn.smssdk are from zmodo, an app to view cc wireless cameras that I recently installed.
Isn't there a way to view files and folders properties or something else in Android to see which app created them, or who controls them? Google is not an efficient way to find out.
Files in /sdcard are public to all user so you cannot know which folder belongs to which app.

Categories

Resources