Suspicious Apk - Other Tools & General Discussion

Hello,
I hope this is the right forum to ask this question, if not please forgive me.
So I've downloaded this GPS Running pro APK in a magical way not from google play and I've scanned it. The risk rating was suspicious activity detected.
The results are long and a lot of blah blah blah. If you want, you can view it here:
http://apkscan.nviso.be/report/show/e16acb0537fa2a946d6eb3dfa334df32
I'll just copy the highlighted fields:
Code:
Virus Total scan results
VIPRE Adware.AndroidOS.AirPush.a (v)
and
Code:
Information leakage
Network information leakage
Destination 178.250.2.115:80
Tag TAINT_IMEI
Data (ASCII) GET /API/androidevent.php?oursecret=runtastic89635jo&udid=357242043237511&androidID=3ffe1b97467e2dec
Data (RAW) 474554202f4150492f616e64726f69646576656e742e7068703f6f75727365637265743d72756e74617374696338393633356a6f26756469643d33353732343230343332333735313126616e64726f696449443d33666665316239373436376532646563
Operation send
Destination 178.250.2.115:80
Tag TAINT_IMEI
Data (ASCII) GET /atrk/andrdapp?udid=357242043237511&androidID=3ffe1b97467e2dec&macAddress=&type=&storeAppID=&dev
Data (RAW) 474554202f6174726b2f616e6472646170703f756469643d33353732343230343332333735313126616e64726f696449443d33666665316239373436376532646563266d6163416464726573733d26747970653d2673746f726541707049443d26646576
Operation send
SMS information leakage
No SMS information leakage detected.
File information leakage
Path /data/data/com.runtastic.android.pro2/files/.flurrydatasenderblo
Operation write
Tag TAINT_IMEI
Data (ASCII) �H�OOJZV9GLEJ12ZPKRTCWI2K5.1.2AND3ffe1b97467e2dec�W�T7������
Data (RAW) 001b000000000000000000000000000300efbfbd000001480cefbfbd4f4f00144a5a5639474c454a31325a504b5254435749324b0005352e312e32000200000013414e4433666665316239373436376532646563000500147fefbfbd5705efbfbd5437efbfbdefbfbd07efbfbdefbfbdefbfbd1719efbfbd
For the Adware thing, I guess the app push me ads but what the latest thing means? which Information gets leaked?
Is there a way going back If I've installed it?
Thank you guys,
appreciate it.

No reply. *UP*

Related

[mod] How to reduce the threshold for displaying “Low on Space” warnings

or: How to avoid rejected text message errors with lots of free space available
Background:
This post helped me a bunch and alleviated my issue with lost text messages due to "low space" errors. I'm using cMTD + eFOS [forum.cyanogenmod.com/topic/8711-read-this-recovery-and-installing-cyanogenmod6-firerats-cmtd-ennons-fso-gapps/] + magpie [forum.cyanogenmod.com/topic/9731-magpie-2010-12-07] on my nexus one and my "low space" threshold jumped from ~20mb (stock) up to ~40mb with all the mods. Clearly 40mb is more than enough space for receiving text messages [hell 20mb was more than enough, but I digress...]. Since my internal memory is much, much larger than default (~320mb on /data) I've set my threshold to 2% of the total space available instead of the 5% suggested in the post. At this ratio that drops my "low space" threshold down to ~10mb which is what I would expect it to be at by default.
So if you're having issues and need a real solution that isn't "just remove some of your apps so you have more free space" then try this mod. I would suggest making a copy of settings.db just in case you need to go back to default, but really there isn't much that you could break by doing this. Keep in mind that the number you're changing is a percentage and not a fixed number value, so mileage will vary from device to device. Play with the numbers and see what works best for you. The way I tested it was dropping a bunch of dummy files (actually just multiple copies of an .apk, don't forget to delete these when you're done testing ^_~) into /data/local/tmp until the free space message was displayed, then texted myself using gVoice [voice.google.com] and altered the threshold percentage until I got to a comfortable level.
As a side note, it would be *awesome* if there was an option in the Settings > CyanogenMod Settings menu that let us alter this value through a gui so we don't need adb. I would do it, but I have no confidence in my java programming skills =p *hint hint*
Anywho on to the meat of this post...
---------------------
Low on Space – Phone storage space is getting low.
Its a cursed message on my Android HTC Hero, but there is 16MB free on /data partition! I want my email to sync a bit more and I want to receive text messages and I dont want to delete any apps.
You need to have rooted your android device and have the android sdk installed and debugging enabled on your phone. I might package this recipe up into an apk for easy installation.
The default limit is 10% of free space, i’ve reduced mine to 5%, I don’t know if there are any terrible side effects. As you’ve already rooted your phone you’ve already probably voided your warranty
To reduce from 10% to 5% warning from your “adb shell”:
Code:
# sqlite3 /data/data/com.android.providers.settings/databases/settings.db
sqlite> insert into secure (name, value) VALUES('sys_storage_threshold_percentage','5');
sqlite> insert into gservices (name, value) VALUES('sys_storage_threshold_percentage','5');
sqlite> .quit
# reboot
*** don't include the # or sqlite>, those are the console prompts... ***
Some firmwares seem to look for the setting in gservices but the latest android source looks like it looks for it in the secure settings, so i’ve included both for good measure.
---------------------
Note:
reposted (with a few edits) from [bryars.eu/2010/10/how-to-reduce-the-threshold-for-low-on-space-android-warnings/]
Disclaimer:
This is not my work / information / blog, but since it was a huge help to me and I couldn't find the information anywhere else I thought I'd post it here for others to use ^^
Additional information:
If you want more information or a gui to edit the settings.db file, use adb to pull the file from /data/data/com.android.providers.settings/databases/settings.db, edit settings.db using a program like SQlite db browser [blog.dreamcss.com/dev-tools/sqlite-database-browser/], then push the file back to the phone using adb and reboot.
Sorry for reviving an old thread but this is an excellent find, especially on my S-Off Desire when the phone complains about the lack of space at 30 MB!
Apps won't install or update, insufficient storage, 200MB free
Same here, sorry for reviving the thread, maybe I should have started a new one, but this topic has half the answer... this works perfect to stop the notification, but...
I still get the "Insufficient storage available." notification when I try to update or install an app.
I've looked around and searched here and on Google
I have the Galaxy S2 Skyrocket, with 2GB for /data, so it still has 200MB free. I know I've gone app crazy with over 200 apps installed, but that's not the point. I plan to organize and thin them out once I get some time to see which ones I want to stick with, but since there is plenty of space left, that shouldn't be a problem.
This is not related to the other issues I found on the forum (like this one or this one), and I know I can gain some space back by clearing caches and obviously by removing some apps or getting an sd card and moving apps to it. That's not the correct solution, those are all just workarounds.
Any ideas? Based on this topic, it would make sense that there is another key I can add to the database somewhere to lower the same threshold but for installing/updating apps.
@WebGuru, I am also interested in finding a way to lower the point at which my device start telling me insufficient storage. My S-OFF HTC Desire with custom HBOOT has 387MB /data and therefore I get insufficient storage prompts when I have ~35MB of space remaining. Most annoying. I've applied the DB update and I confirm it silences the notification only.
If I find anything useful I'll post it here.
Regards, Martin.
From what I understand the problem with app installs is due to the free space threshold value being hard coded into some aspect of the ROM itself and therefore no DB value exists nor can be created which will allow for adjustments. The issue would have to be taken into account by the ROM developer or by someone willing to hunt down the values and create a custom build with the appropriate fix.
I agree with WebGuru, the topic is still relevant and I have LG G2 5.0.1 16 GB version and have free ~500 MB and receiving insufficient memory. . . Has anyone knows any ROM files for solving this problem?
stupid low storage threshold value
Coolguy981 said:
I agree with WebGuru, the topic is still relevant and I have LG G2 5.0.1 16 GB version and have free ~500 MB and receiving insufficient memory. . . Has anyone knows any ROM files for solving this problem?
Click to expand...
Click to collapse
i think it is still relevant too, because i still experience on several modern devices.
the only possibility i found after hours and hours of crawling the web is to change value sys_storage_threshold_percentage and/or
sys_storage_threshold_max_bytes in /data/data/com.android.providers.settings/databases/settings.db which would be easy enought to do, if this settings.db would still be used and would not be deprecated by now (as far as i have understood).
based on the information i found the standard value is "10" for the percentage which for our modern devices nowadays is unnecessary much. additionally it is quite iphone-y imo to force this value on us without an easy possibliity to customize it to our own preferences/use cases, but that's another story of course. ^^
i would really appreciate any information, suggestion or help on this issue, i am quite desperate by now and have no more ideas where to look or what to try.
thx and greetz,
sUsH667

[Q] How can I access the hidden "Application Data" in my Google Drive?

I found this page[1], which describes a hidden folder in Google Drive that is used by apps to store hidden data that other apps cannot access. How can I access this data myself? If there is no official way to do this (which seems likely), how about an unofficial way? I'm okay if such a method requires a rooted device, such as to get keys or something from an app's data. (Perhaps there's an Xposed module that can intercept these API calls to obtain the required authentication data in a universal manner?)
The reason I don't think there's an official way is because of this page[2] about the Saved Games API, namely this part:
Read/Write isolation
All Saved Games are stored in your players' Google Drive Application Data Folder. This folder can only be read and written by your game - it cannot be viewed or modified by other developers’ games, so there is additional protection against data corruption. In addition, Saved Games are insulated from direct tampering by players so they cannot modify individual Saved Games.
Click to expand...
Click to collapse
I'd like to be able to "tamper" (as Google calls it) with that save data anyway, as it's my own save data after all. Most likely this method would let me access that as well.
Could someone point me in the right direction please? Thank you!
Links:
(Since I haven't made 10 posts yet, it won't let me post external links. It says this is to prevent spam, so considering I'm not spamming, I assume this workaround won't be against the rules, as my use of links isn't the type it's aimed at preventing.)
[1] bit.ly/1GmjZOY
[2] bit.ly/1NLJKdU

[Q] Android inventory app data storage suggestions

Hello,
I'm attempting to make an inventory application. Basically, our company has several devices/equipment that we checkout to other people and our current paper system isn't working out. The devices will each have an NFC tag put on that uniquely identifies it, and the idea is that the Android application on our smartphones (provided by the company) will simply scan it to check in/out the device. It will record the date time, who checked it out, and other information, and we want more than one person to be able to check in/out items at a time.
My problem is figuring out a way to store this data. Our company already pays for a OneDrive for Business account and our initial idea was to simply store the data in an Excel spreadsheet and share it with the people who checkin/checkout the devices (only two people at the moment), then the app would download the spreadsheet, record the new data, and upload it again to OneDrive. Reading and writing the data is easy, but actually pulling the file from OneDrive is where we hit a road bump and now we need another plan.
Are there any free alternatives for data storage of this kind where I would be able to access it through the Android application and update it? We also thought of using Heroku, but through researching I found that directly connecting to the PostgreSQL database they provide within the application is not possible. Of course we want to keep this data secure and only accessible to the people actually checking in/out devices, but we do not need a huge amount of space to store this data. Any suggestions are greatly appreciated.
cyborg99 said:
Hello,
I'm attempting to make an inventory application. Basically, our company has several devices/equipment that we checkout to other people and our current paper system isn't working out. The devices will each have an NFC tag put on that uniquely identifies it, and the idea is that the Android application on our smartphones (provided by the company) will simply scan it to check in/out the device. It will record the date time, who checked it out, and other information, and we want more than one person to be able to check in/out items at a time.
My problem is figuring out a way to store this data. Our company already pays for a OneDrive for Business account and our initial idea was to simply store the data in an Excel spreadsheet and share it with the people who checkin/checkout the devices (only two people at the moment), then the app would download the spreadsheet, record the new data, and upload it again to OneDrive. Reading and writing the data is easy, but actually pulling the file from OneDrive is where we hit a road bump and now we need another plan.
Are there any free alternatives for data storage of this kind where I would be able to access it through the Android application and update it? We also thought of using Heroku, but through researching I found that directly connecting to the PostgreSQL database they provide within the application is not possible. Of course we want to keep this data secure and only accessible to the people actually checking in/out devices, but we do not need a huge amount of space to store this data. Any suggestions are greatly appreciated.
Click to expand...
Click to collapse
Heroku is a good option. You'll have to make an app to run API's that will talk to your app.

GC and CC logs of Mozilla (Firefox ? ) consuming huge amount of space

I have previously posted this question in the Samsung S7 Edge section here http://forum.xda-developers.com/s7-edge/help/gc-cc-logs-mozilla-consuming-huge-space-t3397783 but didn't get any response. It is possible that the topic didn't get any attention as it is in the wrong section and I also feared that my problem could be due to malware and some other security bugs.
My problem started when I was suddenly told that my S7 is running out space without any new huge apps being installed. I tracked down the sudden lose of storage space to a folder named "memory-reports" inside the default Download folder. The folder content comprise multiple logfiles with each file sizes averaging 30mbs, and the number of files gradually increase and eventually hogging over 3gigs of storage space. I deleted the entire folder with the logfiles but the folder appeared again with similar logfiles.
after Googling around, I found the description of the logfiles here https://developer.mozilla.org/en-US/...GC_and_CC_logs. it seem to relate to Mozilla Firefox and I doubt this problem is specific to Samsung S7 Edge although this is the phone I am using now and the problem only occurred to me for the first time recently. couldn't find any mention of similar issue anywhere else via Google, but maybe some of you guys are better at digging them up. Seeking some comments, suggestions as to what cause, possible solutions...
NOTE: My phone is NOT rooted. the logfiles are still being generated periodically and have to be deleted to recover the space. deleting them don;t seem to affect the operation of any apps and especially FIREFOX, which is the only connection I can find with mention of those logfiles name with MOZILLA. The problem seem unique to me at the moment as I still couldn't find any reference on Google to them. Any head-up suggestion on possible reason and ways to track down exactly which apps, background process are generating the log files are certainly welcomed.
I am experiencing the same issue on my Motorola Nexus 6.
Thanks for this. I was facing the same problem. I just deleted the files. It didn't seem to hurt firefox. ]

Privacy concern with a dubious app

Any help will be much appreciated.
I have to install an app which I don't trust, but which requires too many permissions, which obviously I am not keen on giving the app. For reasons beyond my control, I can't name the app (it's a work thing).
My idea is to create a new user on the phone, (OnePlus2) and install the app for that user only. Would this stop it from being able to access the data under my own user, and restrict it to only read the data available for the new user for which it is installed?
It requires permission to: (just incase this info helps)
Draw over other apps
Take pictures and videos
Find accounts on the device
Approximate location, precise location
Read SMS/MMS, Send & View SMS/MMS
Modify or delete contents of USB storage
Read contents of USB storage
Read phone status and Identity
Any other solution I should look at? Or will this work just fine?
Cheers!
No way I would install that. Not on a device I use. Unless I had full control over the source code for the apks. I could see some uses.
But to answer your question, I think that should work. I don't have much experience with the details of extra users on the device bit you can look it up on the Google developer site.
That should be enough.
For good measure, I Tried Doing this on my Moto G4 Plus. I created a new user and installed Drupe and Textra. And here is what happened.
1. The New User did not have access to my contacts, call records or SMS
2. The old user could not see these two apps.
since the gallery is tied to photos on the Moto, the users could not see each other's photos.
UPDATE: I just saw an app on another thread that may work for you. - https://forum.xda-developers.com/android/apps-games/closed-beta-test-incoming-companion-app-t3366295

Categories

Resources