Wifi and Mobile Network are getting activated automatically everytime, on my Moto G - Security Discussion

Hi There,
I am facing a very major issue with my Motorola Moto G recently (May not be Device Specific though): The WiFi & Mobile Network of my phone are getting turned on automatically. Every time I deactivate both, but get activated again & again even after repetitive deactivation. Even though the mobile data status is showing “Off”, it still gets activated in the background. This not only is draining away my battery but also causing a loss in my mobile currency balance, because the mobile data is consuming bandwidth. I believe this is a Virus or Malware Attack.
I installed CM Mobile Security antivirus as well as Avast Mobile Security which I believe are 2 of the most popular antivirus programs in Google Play store. CM Mobile Security detected a virus or threat called "Towelroot". When it removed or quarantined it, the issue got fixed at that point of time. But when I booted my phone to recovery, for some reason (Even though I selected "Normal Power-up"), I started facing this issue again. This time I scanned my phone again with both the Antivirus programs, but neither of the 2 have fixed the issue. So the virus called "Towelroot" may or may not be the culprit. I was wondering if the virus that was previously quarantined by CM Mobile Security has somehow got access to my Phone again, but when I checked the quarantine, I found that it was still present in the quarantine. I searched a lot in internet, as to how to fix this issue. But I didn't get any solution. Currently I have put my phone on "Flight Mode" to avoid getting my mobile balance cut unnecessarily.
I am totally helpless now. Please please help me addressing this issue, as it's a very major issue.
Any help from anyone will be highly appreciated.
Thanks in advance.

Have you tried to reset the phone ?
Wipe system/data/cache, that should help. If that does not help, then you're facing another issue.
NOTE: If you're going to wipe it, you're gonna all things on your phone(sms, contacts, apps, images on phone internal memory etc). Your SD card will not be touched.
Sent from my GT-S5360 using XDA Free mobile app

Ya I have already tried that. I also did a complete factory reset, like as I already mentioned. Initially after doing the factory reset it worked, but after some time the same issue started showing up.. ..
And may i know what "Another Issue" are you talking about? Is it a virus or a trojan ?? If so just to let you know I have scanned my device with almost all the top AV programs, but none has detected any vulnerabilities or threats.
Please reply.

Check here.
By the looks of it, it is a trojan that happens by rooting ? (May be bs, since it can be from anything and just give it permission)
EDIT: Try to re-install the rom(just follow instructions here http://forum.xda-developers.com/showthread.php?t=2854688 ). Since the problem lies in your linux(android) code this should work
Sent from my GT-S5360

I believe towelroot is actually program used here on xda. Check forums. Sounds like your experiancing carriers ability to flex their powers over your phone. If you have root and have root Explorer or file Explorer take a look into your files on device that are normally hidden from you. When you do restore only temporarily erases situation. They will be right back in your phone creating blocks to further prevent you from getting root. Most carriers are fixed with Google now and have little implant bugs in about 80 % of your apps. When you do something they don't like which could possibly give you opportunity to hack and Redbone or block them they quickly attempt to closer all of your avenues. I've been balding then forever. Seems like I am at a stalemate with them but they have about 6 gigs worth of junk (security) on my phone that prevents me from even song some of the basic stuff. I delete it and it's back in about 1 second. Heres link. . Towel root by respectable developer.
http://forum.xda-developers.com/sitesearch.php?q=towelroot
MasterBrick SCH-I545, XdA mobile app...

Hi, i am facing a similar issue with moto g. During the day it's connected on wifi so there is no issue but during night I turn off wifi and mobile data. When I check my phone in the morning, mobile data is on and data/bandwidth has been consumed from my account. This has been happening since past few days now. Have tried resetting the phone, but that also doesn't help.

Hi, did you find any fix.... same issue here. please help me. Thank you...
Hi, did you find any fix.... same issue here. please help me. Thank you...

Yes, I found a solution for this issue you just download addon didector app it work many smart phones

rahi444 said:
Hi, did you find any fix.... same issue here. please help me. Thank you...
Click to expand...
Click to collapse
Your system could be compromised but probably more likely a rogue app or pup (potentially unwanted program). You can use an antivrus with the PUP set to ON or try an app like permission dog ref
https://www.cnet.com/au/how-to/how-to-check-your-android-device-for-rogue-apps/

Related

[Q] Internet Explorer problem

Hi everyone,
I have a problem with Internet Explorer on my HD7
Since yesterday, Internet Explorer refuses to open from the start screen or Apps list. Clicking on web links in emails does not work, clicking on pinned web pages does not work. Live tiles, Emails, RSS feeds, texts, Phone calls etc. work as expected. I have downloaded several third party browsers which work as expected.
I have checked using 3G and Wifi connections, and soft reset multiple times to no avail
I have searched and have not seen anyone else reporting this problem which leads me to suspect it's a device specific software problem. I was following my normal morning routine yesterday, reading the emails with new and updated posts from XDA when it suddenly stopped opening the links in the emails. I tried opening up Internet Explorer and this too failed. The animation transition starts to take place when pushing the I.E. tile, and then it comes back to the start screen.
I am running 7720 and have not played around with the phone or changed anything to cause this problem.
Does anyone have any suggestions or thoughts before I go ahead and press the "Reset your phone" button ??
Thanks in advance,
Garrickus
Work around
Hi,
Got the same problem with no available solution till now.
I just have a workaround for you, disable in settings the "open links in new tab" and you should be able to use IE9 again afterwards.
Tabs will not work though.
I even read somewhere that hard reseting device will not solve the problem !!??
Do it or not and tell me if you find something.
Regards,
Thomas
Thanks
tlefeuvre said:
Hi,
Got the same problem with no available solution till now.
I just have a workaround for you, disable in settings the "open links in new tab" and you should be able to use IE9 again afterwards.
Tabs will not work though.
I even read somewhere that hard reseting device will not solve the problem !!??
Do it or not and tell me if you find something.
Regards,
Thomas
Click to expand...
Click to collapse
Thanks Thomas
I can confirm your solution does indeed work as you describe, and yes, tabs are now broken
I'm curious as to your firmware version and operator, as there may be a link ?
You say you read "somewhere" that hard resetting the phone doesn't fix the problem , (I haven't as yet done so myself, as I'm currently compiling word docs of Internet Explorer favourites etc. and uploading them to Skydrive so I can restore them later ) which implies someone else has also encountered this problem ?
If a hard reset doesn't work for me (I'm waiting on the weekend to do this as it'll probably take hours ) then I'm seriously thinking of upgrading the sdhc card to a 32gb one and flashing a custom rom
I'll keep you updated.
And once again, thank you for taking the time to reply , with well over a hundred views, I was beginning to think I was invisible
Garrickus
i would flash a custom rom (you have the requirements), its easy to do (just search for it) and the advantages of it are great. you would never want to go back to an official rom again.
I haven't heard of this problem before, and don't have a direct fix - I'd need to examine your phones in some detail to do so.
However, if you have a full-unlocked phone, or you have WP7 Root Tools, I'm releasing an app that can configure your phone to use a third-party app as the default beowser (on my phone, I'm currently using IE+, for example). There are some caveats - not all browsers will be supported, and not all of IE's features work on third-party browsers - but it should work to let you open links sent in emails or SMS or apps. They have tabs too (in fact, IE+ has better tab management than IE9; one reason I use it).
Glad to see it partially solved your problem ;-)
My device is a Samsung Omnia 7 with latest firmware and mango installed (do not have the disapearing keyboard fix).
I suspect either windowbreak interop unlock method or windows phone manager to be the culprit with our tabs problem. Are you interop unlocked ? Have you installed Windows Phone Manager ? Have you sideloaded any app ?
Sent from my OMNIA7 using Board Express
Thanks
GoodDayToDie said:
I haven't heard of this problem before, and don't have a direct fix - I'd need to examine your phones in some detail to do so.
However, if you have a full-unlocked phone, or you have WP7 Root Tools, I'm releasing an app that can configure your phone to use a third-party app as the default beowser (on my phone, I'm currently using IE+, for example). There are some caveats - not all browsers will be supported, and not all of IE's features work on third-party browsers - but it should work to let you open links sent in emails or SMS or apps. They have tabs too (in fact, IE+ has better tab management than IE9; one reason I use it).
Click to expand...
Click to collapse
Funnily enough, I hadn't heard of this problem either, before it manifested itself on my phone so it can't be widespread.
I'd love to allow you (you Windows Phone Guru ) access to my phone, if it would help me and the community, but, it's my main device and your too far away to visit
I have a stock phone so I doubt there is any kind of dump or something I can do to provide more clarification on the problem, but it's very real and very annoying
I had a quick search for "IE+" in the marketplace, but didn't see it. Could you provide a link please ? Or did you sideload it ?
If the hard reset doesn't work, my carrier has said they will swop it out for a refurbished unit, so I have a couple of options.
If I get my act together by the weekend, I might upload a video of the problem to YouTube for information purposes.
Also, my phone has been exhibiting some strangeness for a while now. Occasionally freezing up, then unfreezing itself. Internet Explorer freezing when the loading bar reaches 4/5's distance, and taking ages to finish loading. Some tiles (third party only) losing their images but not the text, or backing out of an app to the Start screen resulting in all the tiles being empty for a few seconds before filling in. Start screen flashing green and crackly looking. None of them particularly bothered me too much till now.
I'll keep you all posted.
Garrickus
Thanks
tlefeuvre said:
Glad to see it partially solved your problem ;-)
My device is a Samsung Omnia 7 with latest firmware and mango installed (do not have the disapearing keyboard fix).
I suspect either windowbreak interop unlock method or windows phone manager to be the culprit with our tabs problem. Are you interop unlocked ? Have you installed Windows Phone Manager ? Have you sideloaded any app ?
Sent from my OMNIA7 using Board Express
Click to expand...
Click to collapse
Yes, thank you. I was beginning to go mad with it lol.
I too am running Mango without the disappearing keyboard fix, but I am not windows broken, iterop or any other kind of unlock, or used any kind of programs other than Zune, so we don't have that in common I'm afraid.
Thanks anyway
Garrickus
IE+ is being published to the Marketplace this week, I think. There's a pre-release build of it available on this forum, but I'm not sure if that version supports the required behavior for be-the-default-browser support. I'm looking at other apps too (requires decompiling them, unless I can get a chance to talk to the developer, but that's usually easy).
However, if your phone isn't interop-unlocked, you wouldn't be able to use the switcher anyhow, though. It requires TCB (or "root") permissions, because it needs to write to the registry. It's possible to interop-unlock your phone (I have an HD7 myself), but you'd need to downgrade the firmware first.
The list of bugs you're experienced sounds like it *might* actually be some kind of defective hardware. The usual problem is the internal microSD card that is used for storage on the phone being defective or coming loose. There are a few other possibilities too, though. Unfortunately, trying to fix them yourself is likely to void your warranty, with no guarantee of success.
Video uploaded to Youtube
Hi all,
So my problem persists, and I am due to hard reset the phone to see if that solves the issue in the next couple of days. Before I do so however, I have uploaded a video showing the problem to Youtube for information purposes.
Lets see if anyone else is having the same problem, and if a solution exists.
Here's the link to the video
http://youtu.be/L0YIkCybvhg
If the hard reset doesn't work, my carrier have said they will swop the unit for a refurbished one. Does anyone have any experiences of this ? Are they like new ? Or beaten up a bit ?
Regards
Garrickus
More people reporting the problem on Microsoft answers forum
Hi everyone,
I checked the Microsoft answers forum and it seems Others are reporting the issue as well
I counted at least half a dozen posts with the same problem as myself here
http://answers.microsoft.com/en-us/...one&CurrentScope.Filter=&askingquestion=false
So far, the only advice offered is to hard reset the phone, with some users reporting this solved their issue. One user reported that although it solved their issue, now their phone tile doesn't work
Regards
Garrickus
After hard reset
Hey everyone,
So I hard reset my phone on Thursday
and as a result, Internet Explorer now works again as it should
I decided not to restore a backup, and set up the phone manually (which took about 3 hours ).
A couple of things I've noticed since -
Battery life seems massively improved , now reporting over a days use on a full battery. I'll keep an eye on this as before I was only getting about 14 hours.
Another thing I've noticed is the keyboard. Now when I type, it highlights the word it thinks I want to use in bold, and it definitely didn't do that before
I'll keep you all posted on how things go over the next couple of weeks, if any of the problems I reported show up again, but, fingers crossed, it's all good for now, and loving my phone again.
Thanks for all your input.
Garrickus
Have a question... Does Hard resetting the device keep the os updates ?? (Mango, etc..) Or do you have to apply them again afterwards ?
Thanks for your answer
Thomas
Sent from my OMNIA7 using Board Express
tlefeuvre said:
Have a question... Does Hard resetting the device keep the os updates ?? (Mango, etc..) Or do you have to apply them again afterwards ?
Thanks for your answer
Thomas
Sent from my OMNIA7 using Board Express
Click to expand...
Click to collapse
Yes it does.
Thanks !! Another and last question, does hard resetting keep the phone windowbreak interop unlocked ?
Sent from my MID74C using XDA
Too bad. I have this problem too. Last night after connect to public wi-fi and enter username & password in automatic IE pop-up.
You can't open IE if your setting of "Open links from other apps in" is "A new tab". If change this settings to "The current tab" you can open multi-IE for multi-tab but can't use normal tab.
I think I will HR my device too.
tlefeuvre said:
Thanks !! Another and last question, does hard resetting keep the phone windowbreak interop unlocked ?
Sent from my MID74C using XDA
Click to expand...
Click to collapse
No, interop unlocked will go away.
I am facing similar issue. I guess I know when it started (but not sure about it)
I had opened Google Search app. I was searching some images. In results displayed, I clicked 1 imgage. It opened Internet Explorer. When I tried to open "Tab" from Menu to close tab and exit IE, IE was simply not getting close and it was opening continously. I finally pressed Power button to switch off phone. After phone was restarted, I observed that while internet explorer is open and I open the tabs, it shows absolutely nothing, it doesn't show the tab for the page that is currently open or none of the other tabs that are open. Rather it shows Blank page with symbol to add new tab. But even new tab is not getting added. I tried several reboot on phone but somehow "Tab" thing is broken. I am also having feeling that Internet Explorer running in the backround that will not close even after a restart.
I dont want to Hard Rest Phone, but I think its only Solution for now. Hope MS fix this issue in WP7.8.

[GUIDE]How to find your Android Device AFTER it has been stolen

Well lets assume your android device has been stolen! Good lord !! . Not to worry, this guide should hopefully help you recover it. Even if its a thief.
PS: This contents of this read may bear resemblance to the reddit thread i created
A about two weeks ago (17th April to be exact) one of my friend lost his Samsung GT-I9003 from his dorm room at 0200hrs. Today when i was scanning my latitude, i saw him position a few hundred meters from me. Problem is, we are on a university campus. 500+ students, staff, kitchen, cleaning - basically lot of people. I suggested we check Google Latitiude's location history and sure enough for the past 15 days, the phone's location is spread all over the campus.
Premise of the crime
The phone is ON and is connecting to the Wi-Fi.
The phone is still tied to the primary gmail account and is thus reporting location.
The SIM has been removed or changed since the original number is now switched off
The person does not have good knowledge of using a smart phone (maybe helping staff)
Steps we have taken
Since we assume it is in the possession of either a student or helping staff we don't want to startle him.
Tried Plan-B on my phone. However the location it was reporting was the same as Google Latitude.
The phone does have Where is my Droid installed but the web interface says invalid email ID. So that option is ruled out unless you have pre configured Where is my Droid previously.
How we found the phone
After Where is my Droid failed us, we started looking for other applications. We found this application called Android Lost. Unfortunately we hit a dead end when we realised that it needs to be activated by sending an SMS. Since we dont know the phone number, or that there is even any SIM card in the phone, that application also seemed useless.But turns out the developer of Android Lost has also made a nifty app called AndroidLost Jumpstart which is can trigger Android Lost without the need of an SMS.
According to the description
This app will wake up the registration process on the androidlost app when ever a phone call is made, an SMS received, battery is low, a package is added, removed or changed.
Click to expand...
Click to collapse
So we got android lost installed. Trust me, its a life saver. We got calls logs, sms, pictures, voice recordings. We tracked the person with the help of this.
Hope this helps anyone in the future!
maverick340 said:
Well lets assume your android device has been stolen! Good lord !! . Not to worry, this guide should hopefully help you recover it. Even if its a thief.
PS: This contents of this read may bear resemblance to the reddit thread i created
A about two weeks ago (17th April to be exact) one of my friend lost his Samsung GT-I9003 from his dorm room at 0200hrs. Today when i was scanning my latitude, i saw him position a few hundred meters from me. Problem is, we are on a university campus. 500+ students, staff, kitchen, cleaning - basically lot of people. I suggested we check Google Latitiude's location history and sure enough for the past 15 days, the phone's location is spread all over the campus.
Premise of the crime
The phone is ON and is connecting to the Wi-Fi.
The phone is still tied to the primary gmail account and is thus reporting location.
The SIM has been removed or changed since the original number is now switched off
The person does not have good knowledge of using a smart phone (maybe helping staff)
Steps we have taken
Since we assume it is in the possession of either a student or helping staff we don't want to startle him.
Tried Plan-B on my phone. However the location it was reporting was the same as Google Latitude.
The phone does have Where is my Droid installed but the web interface says invalid email ID. So that option is ruled out unless you have pre configured Where is my Droid previously.
How we found the phone
After Where is my Droid failed us, we started looking for other applications. We found this application called Android Lost. Unfortunately we hit a dead end when we realised that it needs to be activated by sending an SMS. Since we dont know the phone number, or that there is even any SIM card in the phone, that application also seemed useless.But turns out the developer of Android Lost has also made a nifty app called AndroidLost Jumpstart which is can trigger Android Lost without the need of an SMS.
According to the description
So we got android lost installed. Trust me, its a life saver. We got calls logs, sms, pictures, voice recordings. We tracked the person with the help of this.
Hope this helps anyone in the future!
Click to expand...
Click to collapse
Or install Avast anti theft before your phone gets stolen ;D never the less, very useful, thank you.
Sent from my GT-I9100 using XDA
okmijnlp said:
Or install Avast anti theft before your phone gets stolen ;D never the less, very useful, thank you.
Sent from my GT-I9100 using XDA
Click to expand...
Click to collapse
yep always good to be safe before hand. After this incident lot of my friends have installed or gotten some security app.
Although, aren't security suite like Avast, McAfee and overkill for finding lost phones?
And who was the thief?
Sent from my LG Optimus 2x with xda premium app
another possibility is to instal Cerberus App
Hi everyone. I have recently been the victim of theft for my nexus 7. I had the device locked with the pattern so there is no way that the thief could get into it unless they do a software reset from the recovery mode. The thing is, either way there is no way i would be able to recover it because if in fact they do a factory reset my lookout security would be uninstalled and my nexus would be lost forever, also if they can't get through the pattern and find a way to connect to Wi-Fi, it will still be lost forever. I have read about installing lookout in the system/app folder of a rooted device so its not easily uninstalled by normal means or factory reset. But do you think it is possible to have android lost and lookout pre-configured and installed in the system/app folder so that even if the device is factory reset, the credentials will remain?
is it factory-reset proof?
Just a quick little question: How did you get the phone to register on Android Lost? I can't get a friend's phone to be recognized in the web app, after installing the Jumpstart and another app...
Thank you
Very good contribution, gratz! i will follow your steps in case my android get stolen!
How did it fail?
You say that "after Where's my Droid failed us"...what do you mean by that...how did it "fail"? I would like to know before installing it. What exactly happened that it "failed" you?
Thanks
Losing a phone is irritating
I lost my phone sometime back. I didn't have the time to do research and maybe these apps weren't available at the time of theft. I got the SIM de-activated and tried to track my phone via IMEI number.
So, a few questions
1. Have they changed its IMEI number ?
2. Have they removed my Google account ?
This pretty much messes it up. If you can't track it via IMEI nor can you use any network then its as good as history. These were the only remaining identification tags that could have got your phone back and the thief would know of it. The moment I called on my own number he switched it off. He logged into my account and posted crap(not that I knew any of it had it not been for my friend who reported some strange FB and Twitter status) as if it wasn't enough that he had my phone.
One of the most disturbing things that they can do is play with the IMEI. Older phones were more susceptible to that kind of thing but a Nexus ? P990 ? GT19100? I thought they were much harder to hack. Not only can you NOT track your phone but also lose all other alternatives because the phone is now linked to another google account. I was searching for a post that would walk me through a process of changing the google account currently associated with the phone. In an attempt to understand if this indeed was the case. I wanted to try this app so badly but now I blew it off, my only chance.
Hardware based identification is the only way to go about fixing this issue. Any low level process that runs off some hard coded tag independent of software control known only to the owner of the phone. I just don't know what other options are left with person who lost it. I think there is no other way.
Time for a new phone, I guess
Edit: I guess I was right about that. They had done a hard reset but the IMEI associated with my account is intact. So there are two ways of messing it up. One, you change the IMEI(which sounds ridiculously dumb). Second, you change the primary account(more believable). How stupid of me to think of the first one
i think if a android phone is lost and a guy with a bit knowledge of flashin roms gets it then we might have to forget our phone.. if the phone has screen lock the guy can reset the phone through stock recovery and all security apps like where's my droid,avast etc get wiped off.. i personally don't install any anti-theft apps. i beleive in being EXTRA CAREFUL than installing any anti theft apps
And you are damn right bro, its good to be careful than putting all your believe in one anti-THEFT software which can easily get wiped off.
Sent from my GT-I9300 using xda premium
That's useful, thanks !
How did you get the Logs.
Hi Maverik,
My phone was robbed yesterday & the SIM card was removed,
I wanted to know how were you able to get the call logs, pics etc of your lost phone to ........
Very useful! Thanks!
we have Find My Phone
you can have a try
Find My Phone - find your misplaced phone/stolen phone/lost phone easily
https://play.google.com/store/apps/details?id=com.phonefindandlock
Thanks for share your experience with AndroidLost.
Inviato dal mio K00E utilizzando Tapatalk
AndroFind is the best
i highly recommend AndroFind to find stolen phone.
you can find it in android market :good:
Hi, but It's possible to find any kind of phone also with older Android version?
Thanks!

[Q] Got infected and my mobile is remote controlled while on Internet

Hello
10 months ago I switched from iPhone 5 to Sony Xperia Z1 Compact mobile (not rooted), with Android 4.4.4.
The phone was running great, I also tested it for developing some simple android projects. I enabled USB debugging and checked "allow installation from unknown sources".
But always keeping in mind that Android is not secure. And choosing carefully what to install. But I was also trusting CM Security as a protection.
1 month ago, I turned ON wifi and I was trying to open my email app to see if there is any new mail.
After the device connected to internet, I saw someone was scrolling controlling my screen and navigating. After he found the "CM Security" app he tried to uninstall it.
Luckily I was very concentrated at what was going on, so I clicked on the side of the screen to prevent it. He tried again to do the same thing, so I run and switched off my home wifi rooter in time.
After the internet was gone the mobile was returned behaving normally. So during connected to internet the phone was taking both commands from me and the attacker.
For my fortune I always leave OFF wifi, mobile data and Bluetooth when I don't need them.
Anyway I made a hard reset. I did it without using the Safe Mode.
The problem was solved.
I hoped that it happened because I connected to many unsecure public wifi networks during my trips out of country last month!
Since the "master/hard reset" I installed only applications very very popular and I never connected anymore to any public wifi.
Also I never enabled the USB debugging and never checked "allow installation from unknown sources".
So I was using my phone normally, until yesterday. It was protected through CM Security, AVAST, and CM Cleaner.
But here it comes again!!! I connected through the 3G internet and again the phone was remote controled.
So today I did a hard reset but this time in SAFE MODE.
Please can you suggest me what other can I do?
StevenTerman said:
Hello
10 months ago I switched from iPhone 5 to Sony Xperia Z1 Compact mobile (not rooted), with Android 4.4.4.
The phone was running great, I also tested it for developing some simple android projects. I enabled USB debugging and checked "allow installation from unknown sources".
But always keeping in mind that Android is not secure. And choosing carefully what to install. But I was also trusting CM Security as a protection.
1 month ago, I turned ON wifi and I was trying to open my email app to see if there is any new mail.
After the device connected to internet, I saw someone was scrolling controlling my screen and navigating. After he found the "CM Security" app he tried to uninstall it.
Luckily I was very concentrated at what was going on, so I clicked on the side of the screen to prevent it. He tried again to do the same thing, so I run and switched off my home wifi rooter in time.
After the internet was gone the mobile was returned behaving normally. So during connected to internet the phone was taking both commands from me and the attacker.
For my fortune I always leave OFF wifi, mobile data and Bluetooth when I don't need them.
Anyway I made a hard reset. I did it without using the Safe Mode.
The problem was solved.
I hoped that it happened because I connected to many unsecure public wifi networks during my trips out of country last month!
Since the "master/hard reset" I installed only applications very very popular and I never connected anymore to any public wifi.
Also I never enabled the USB debugging and never checked "allow installation from unknown sources".
So I was using my phone normally, until yesterday. It was protected through CM Security, AVAST, and CM Cleaner.
But here it comes again!!! I connected through the 3G internet and again the phone was remote controled.
So today I did a hard reset but this time in SAFE MODE.
Please can you suggest me what other can I do?
Click to expand...
Click to collapse
Hi, just a thought....maybe someone has your Google account, and that way has also access to your phone. I suggest you to create a new account, reset your phone, and use the newly created account for your phone (and keep it secret). Also, if and when you are going to use a public wifi, use also a vpn. Hope you'll solve the issue.
setmov said:
Hi, just a thought....maybe someone has your Google account, and that way has also access to your phone. I suggest you to create a new account, reset your phone, and use the newly created account for your phone (and keep it secret). Also, if and when you are going to use a public wifi, use also a vpn. Hope you'll solve the issue.
Click to expand...
Click to collapse
Hello and thank you for your time and help.
After it happened the first time and hard reseted the phone, I created a new gmail account.
So this second time it shouldn't have happened if the email was the reason.
setmov said:
Hi, just a thought....maybe someone has your Google account, and that way has also access to your phone. I suggest you to create a new account, reset your phone, and use the newly created account for your phone (and keep it secret). Also, if and when you are going to use a public wifi, use also a vpn. Hope you'll solve the issue.
Click to expand...
Click to collapse
I'm curious. How would anyone control the device remotely if they have access to one of the google accounts on the device?
shifter7 said:
I'm curious. How would anyone control the device remotely if they have access to one of the google accounts on the device?
Click to expand...
Click to collapse
Well, one of the "options" would be to push the installation of a "malicious" app through the "great" remote install feature in the store. The app installation would proceed without you knowing it. It's known that the Play Store is, sadly, vulnerable to malicious apps. It happened in the past and it will happen in the future. There is also ways to hack a phone through an update....some apps can gain root without even ask for it when you're updating your os. This is because the Android Package Management Service (PMS) and the way it handles the os update. It will allow a seemingly harmless malicious app to acquire significant capabilities without user consent once they upgrade to a newer version of Android. I can go on, but I suggest you to make a research by yourself. There is a lot to read on the internet and here on XDA. You can start from here: http://www.informatics.indiana.edu/xw7/papers/privilegescalationthroughandroidupdating.pdf
Try this application when you update your OS:
https://play.google.com/store/apps/details?id=com.iu.seccheck&hl=en
Do you know that installing system updates could result in your Android device being hacked? Recent investigation found six such vulnerabilities (called Pileup flaws) in Android OS. When you upgrade your device, a seemingly harmless app can exploit these vulnerabilities to get access of your voicemails, user credentials, call logs, notifications of other apps, Google Voice messages, etc. This security app scans your device to detect those malicious apps and guides you uninstall them once detected.
Generic security apps (e.g., Lookout, Avast!, Norton, etc.) cannot be easily tuned to detect Pileup threats.
I don't know if you updated recently your OS but it can be used in the future.
setmov said:
Well, one of the "options" would be to push the installation of a "malicious" app through the "great" remote install feature in the store. The app installation would proceed without you knowing it. It's known that the Play Store is, sadly, vulnerable to malicious apps. It happened in the past and it will happen in the future. There is also ways to hack a phone through an update....some apps can gain root without even ask for it when you're updating your os. This is because the Android Package Management Service (PMS) and the way it handles the os update. It will allow a seemingly harmless malicious app to acquire significant capabilities without user consent once they upgrade to a newer version of Android. I can go on, but I suggest you to make a research by yourself. There is a lot to read on the internet and here on XDA. You can start from here: http://www.informatics.indiana.edu/xw7/papers/privilegescalationthroughandroidupdating.pdf
Click to expand...
Click to collapse
Thank you for the explanation/clarification.
And that whitepaper, pretty scary stuff.
Pretty obvious too, but didn't think it could go that far.
Oh dear....
StevenTerman said:
Hello
10 months ago I switched from iPhone 5 to Sony Xperia Z1 Compact mobile (not rooted), with Android 4.4.4.
The phone was running great, I also tested it for developing some simple android projects. I enabled USB debugging and checked "allow installation from unknown sources".
But always keeping in mind that Android is not secure. And choosing carefully what to install. But I was also trusting CM Security as a protection.
1 month ago, I turned ON wifi and I was trying to open my email app to see if there is any new mail.
After the device connected to internet, I saw someone was scrolling controlling my screen and navigating. After he found the "CM Security" app he tried to uninstall it.
Luckily I was very concentrated at what was going on, so I clicked on the side of the screen to prevent it. He tried again to do the same thing, so I run and switched off my home wifi rooter in time.
After the internet was gone the mobile was returned behaving normally. So during connected to internet the phone was taking both commands from me and the attacker.
For my fortune I always leave OFF wifi, mobile data and Bluetooth when I don't need them.
Anyway I made a hard reset. I did it without using the Safe Mode.
The problem was solved.
I hoped that it happened because I connected to many unsecure public wifi networks during my trips out of country last month!
Since the "master/hard reset" I installed only applications very very popular and I never connected anymore to any public wifi.
Also I never enabled the USB debugging and never checked "allow installation from unknown sources".
So I was using my phone normally, until yesterday. It was protected through CM Security, AVAST, and CM Cleaner.
But here it comes again!!! I connected through the 3G internet and again the phone was remote controled.
So today I did a hard reset but this time in SAFE MODE.
Please can you suggest me what other can I do?
Click to expand...
Click to collapse
Oh no! Did you create a BackUp before you did this?
I think the good members of this forum fell victims to an Apple troll. The key to his unscientific fiction is this: 10 months ago I switched from Iphone to Xperia and I knew android was insecure. He also claims he is a developer, but his phone is not rooted. 10 months ago Xperia z1c did not have kitkat on newly released units and the announcement for kitkat update was made on March 19 of last year. If he bought his phone 10 months ago, he couldn't have kitkat. Most likely the troll googled the date of the announcement and this is how it became a part of this fairytale. Also note that when he says he noticed his phone was taken over, he ran to shut off his wifi router. Why not shut off wifi on the phone, especially that he says the phone was accepting his commands? Now, suppose it is true that the phone was taken over through his e-mail account, then what's the probability of this happening again with a new account? Well, the underlying message is: people, don't switch from iphones to android, android is not secure, it is only good if you don't connect to the internet.
Mr. Cook, next time hire someone with higher IQ, so that your pitch sticks...
Tell you what, optimumpro, the bold letters gave it away for me. We're tech-Support here - so, why bold letters? Just advertisers are in the habit of using bold letters all over the place.
no further questions
optimumpro said:
I think the good members of this forum fell victims to an Apple troll. The key to his unscientific fiction is this: 10 months ago I switched from Iphone to Xperia and I knew android was insecure. He also claims he is a developer, but his phone is not rooted. 10 months ago Xperia z1c did not have kitkat on newly released units and the announcement for kitkat update was made on March 19 of last year. If he bought his phone 10 months ago, he couldn't have kitkat. Most likely the troll googled the date of the announcement and this is how it became a part of this fairytale. Also note that when he says he noticed his phone was taken over, he ran to shut off his wifi router. Why not shut off wifi on the phone, especially that he says the phone was accepting his commands? Now, suppose it is true that the phone was taken over through his e-mail account, then what's the probability of this happening again with a new account? Well, the underlying message is: people, don't switch from iphones to android, android is not secure, it is only good if you don't connect to the internet.
Mr. Cook, next time hire someone with higher IQ, so that your pitch sticks...
Click to expand...
Click to collapse
Hahaha, I love your way optimum....I am the first that fells, if your theory is right, but, even if I am the first, I am not going to buy this ****ty apple phone....and will keep my android....hmmm who knows...maybe blackberry?

Unknown activity HTC ONE M9

I have unknown activity on my phone.
Along with numerous "unknown" outgoing calls with no number shown on my device (and 2 other M9 phones on the same plan) or any number registering on my carrier's system (when I called R, they said their system did show connected calls lasting various amounts of time, the could not determine what number the calls were going to), there's also a call in the log going to "(unknown)" "***,144***"
Anybody have any clue what's going on? R gave the bs answer that all 3 of us were calling our VM, even while we were sleeping. However, the times we did check our VM, the number did register on the phones and with the carrier's system.
Thanks!
Im adding a question. My M9 was unlocked without my knowledge. I'm guessing that ***,144*** might be the secret unlock code. IS there a way I can determine if it's been rooted as well?
--
squidstings said:
I have unknown activity on my phone.
Along with numerous "unknown" outgoing calls with no number shown on my device (and 2 other M9 phones on the same plan) or any number registering on my carrier's system (when I called R, they said their system did show connected calls lasting various amounts of time, the could not determine what number the calls were going to), there's also a call in the log going to "(unknown)" "***,144***"
Anybody have any clue what's going on? R gave the bs answer that all 3 of us were calling our VM, even while we were sleeping. However, the times we did check our VM, the number did register on the phones and with the carrier's system.
Thanks!
Click to expand...
Click to collapse
Interesting issue. I am not sure about the rooting. You are probably going to need to ask experts around here. Hopefully, they can help you with that. As for security, you could try checking if you have any suspicious apps running in the background or installed (You might be using same GPS or another app for example). It could be that one of the malicious apps had access to your calls which lead to them outputting calls to somewhere. You could try disconnecting your internet for a day and see if the calls persist (That is probably not an option for you, but it is an idea). Additionally, you could try a factory reset on one of the phones and see if the problem is still there.
squidstings said:
Im adding a question. My M9 was unlocked without my knowledge. I'm guessing that ***,144*** might be the secret unlock code. IS there a way I can determine if it's been rooted as well?
Click to expand...
Click to collapse
just saw this,
https://www.xda-developers.com/htc-says-the-ads-in-its-keyboard-are-a-mistake-fix-icoming/
which reminded me of your issue, though I don't suppose it's linked, but it does make you wonder WTF HTC are up to!
Anyhow with your issue I wasn't going to answer as I don't know the answer but my thoughts may help in some small way. I don't thank the 144 is a phone developers code to "root" or turn of security in some way as that would not show on your provides call logs as they stay internal to the phone (mostly). Also I don't think it's adware callng a premium number as your phone company says it does not register properly, so nobody will be paid.
That only leaves a more malicious form of hacking, I would say. So maybe that code does enable your data to be sent but untrckable over a network. That suggests to me it's possibly your actual network (who are R? What country, is it?) or maybe even your government if you are an activist or something? Though more likely is a criminal or business competitor, assuming the other people affected are business colleagues. So could be your boss trying to snoop on you all, if not HTC or the Chinese Communist Party aparatus!
What to do? As Ross says disconnecting is probably not practicable. If you have malicious activity they probably are using data as well as calls. So I would install a firewall to block most apps and log attempted connections (normally have to pay for this) then check IP addresses tell see if they are legit. However this may not show anything as data may go via root. So setting up a proxy to route traffic to your PC and use a sniffing program to see traffic or at least I P addresses.
You can download root checking apps from play store. Also check your security settings any app with admin rights? Also use a good antivirus you might get lucky, but even if negative you may still be infected.
Only way to really clean your system is to reinstall your OS, though a factory reset will fix often. But first you need to know how you were all compromised and fix that else it will just return, I would think it's most likely your local work network, (but could be your provider R or even something else you connect to in sore way eg Bluetooth, or an app you all have (you can boot into safe mode to disable 3rd party apps, but with HTC system apps possibly containing apps that use the Baidu apk etc that still has a possible backdoor unpatched (as far as I know) safe mode will not help white those!)
You might have to look into freezing/uninstalling all HTC installed apps.
IronRoo said:
just saw this,
https://www.xda-developers.com/htc-says-the-ads-in-its-keyboard-are-a-mistake-fix-icoming/
which reminded me of your issue, though I don't suppose it's linked, but it does make you wonder WTF HTC are up to!
Anyhow with your issue I wasn't going to answer as I don't know the answer but my thoughts may help in some small way. I don't thank the 144 is a phone developers code to "root" or turn of security in some way as that would not show on your provides call logs as they stay internal to the phone (mostly). Also I don't think it's adware callng a premium number as your phone company says it does not register properly, so nobody will be paid.
That only leaves a more malicious form of hacking, I would say. So maybe that code does enable your data to be sent but untrckable over a network. That suggests to me it's possibly your actual network (who are R? What country, is it?) or maybe even your government if you are an activist or something? Though more likely is a criminal or business competitor, assuming the other people affected are business colleagues. So could be your boss trying to snoop on you all, if not HTC or the Chinese Communist Party aparatus!
You might have to look into freezing/uninstalling all HTC installed apps.
Click to expand...
Click to collapse
Thank you!
Rogers, Canada. But I've switched carriers within the last few days.
I've actually done the FR 5 times now. Disabeling the pre-installed "Gmail" (I think it's more Google thn HTC related seems to have stopped the calls. I've disabled as much as I could.
so here's the kicker. I'm literally nobody! On disability, no exciting employment history and those In my family who have, aren't in contact, nor do I have contact info. And it was my wife and daughter who had the other phones, but mine was central i think. daughters phone was locked. So nothing so exciting. Which is why I even bothered asking lol
squidstings said:
Thank you!
Rogers, Canada. But I've switched carriers within the last few days.
I've actually done the FR 5 times now. Disabeling the pre-installed "Gmail" (I think it's more Google thn HTC related seems to have stopped the calls. I've disabled as much as I could.
Click to expand...
Click to collapse
Ah! Rogers Canada should be a well controlled and trustworthy provider, so probably not them, though a rogue employee or having their network compromised can't be ruled out.
Also if official Gmail app it should be safe though it does have some quite intrusive permissions like full network access, view confidential info etc, but all are legit if you want the full functionality of Gmail. But it shouldn't have access to place phone calls, so should not be able to create the behaviour you describe.
That leaves a rouge app, but you would all need to have it I suppose, HTC app (or system behavior) or local hack ie via your router or via your PC. A good anti virus should find rogue app on phone and similarly on PC. HTC system apps hard to spot without doing the firewall etc etc. So I would also be double checking your local router for firmware update and resetting it with a new strong password, to prevent possible return, so to any Bluetooth devices.
Hope it doesn't return! All the best
been a while but, just how does one get a "," in the phone keyboard? long press * for P, but no ",".
Now that time has passed and more people might be awake and less likely to make excuses, I'm wondering if this issue can be solved, or at lest thought about intelligently. Maybe someone who knows how it CAN happen, instead of trying to find ways I'm mistaken. this was on THREE SEPARATE PHONES in 2 separate cities.
squidstings said:
been a while but, just how does one get a "," in the phone keyboard? long press * for P, but no ",".
Now that time has passed and more people might be awake and less likely to make excuses, I'm wondering if this issue can be solved, or at lest thought about intelligently. Maybe someone who knows how it CAN happen, instead of trying to find ways I'm mistaken. this was on THREE SEPARATE PHONES in 2 separate cities.
Click to expand...
Click to collapse
Check with a root app to see if your device is rooted
check permissions also you can take back permissions with a app on fdroid
unknown app check with virus total or
IF someone has root on your phone they can do what they want and when they want
a app that has call access they can transfer information over a phone connection which can be anything
The troubling thing here is that your phone was unlocked w/o you which implies root access
IF you bought your phone new you might not be anybody but to be put in perspective amazon lets you steal $500 if you use another id and they say it is not you so you do not lose out
but if it is used this can be from the previous user.
The best thing to do if it does not stop is to upgrade the software on the phone if you have already done that then use a Root firewall or change to a rom here on xda (you can all change making the transition easier).
Applied Protocol said:
Check with a root app to see if your device is rooted
check permissions also you can take back permissions with a app on fdroid
unknown app check with virus total or
IF someone has root on your phone they can do what they want and when they want
a app that has call access they can transfer information over a phone connection which can be anything
The troubling thing here is that your phone was unlocked w/o you which implies root access
IF you bought your phone new you might not be anybody but to be put in perspective amazon lets you steal $500 if you use another id and they say it is not you so you do not lose out
but if it is used this can be from the previous user.
The best thing to do if it does not stop is to upgrade the software on the phone if you have already done that then use a Root firewall or change to a rom here on xda (you can all change making the transition easier).
Click to expand...
Click to collapse
Thank you for taking the issue seriously and not trying to force kool aid down my throat (if carrier was "trust"worthy, THEY would have solved it).
It didn't show root. 2 of 3 m9s were mysteriously unlocked. the 3rd did prompt for a code, but did also show those "unknown #" calls. However, I'm still stuck on the code. I can't even enter a ",". Didn't check the other units for it, but it's still the only unanswered issue that could explain the unlock (aside from your suggestion). No one's even heard of it, but programmers are known for adding backdoors. If anyone's got a new, s-on unit and feels like trying it, that's about the only way to get an answer.
It's dead now anyways. Battery won't charge unless powered off and went from 24+hours regular standby to about 3 hours with extreme powersave on, overnight and doesn't extend with usb power. usb data comm isn't even recognized. All 3 have failed actually (different ways) so I'm going back to my m7 which still works great. Except, it says s-on but works with different carriers and I can't even enter the code I paid for (no prompt. is there another way?)
So, here's the tinfoil hat part. Although I'm nobody, This all started around the time of the '16 election. when I was arguing with a youtube account named (not looking to attract attention so no name, but you know it) for the person who came 2nd.
Thank you for your help. It's a shame it's pooched before solving the issue. But hopefully, the code will be solved.
But any help entering my sim unlock code a different way would be appreciated. But if other carrier sims work, should root be doable while showing s-on?
Thanks a TON!!
squidstings said:
Thank you for taking the issue seriously and not trying to force kool aid down my throat (if carrier was "trust"worthy, THEY would have solved it).
No one's even heard of it, but programmers are known for adding backdoors. If anyone's got a new, s-on unit and feels like trying it, that's about the only way to get an answer.
Click to expand...
Click to collapse
It would seem in your case that it is a setting change that was made and not comparable to other phones. Probably what we are talking about is a connection to a command server. S-on is a protection so that one cannot change the state of certain partitions namely the recovery boot and system however their are ways to get around this. You would need to get a root app to do that.
As a general rule you need to prove something is going on and funny numbers are a indication but nobody in the security community would touch it because it is very open. What you need to do however is
Get a copy of the calls use pcap and
check your firmware with the standard HTC firmware
this will show you what the phone call is doing and will help the android community overall (improved security)
Also programmers do not try to add backdoors they try to have a good product it is the hacking/security teams of _________ that do that. This being a programmer myself.

PLEASE HELP! Unknown Trojan Destroy My Family

Hello friends and users of XDA forum. First I'm from Hong Kong and join XDA for more than 10 years, please accept my apprologize my poor english.
The story started from 6 years ago, during these days I changed over 20 phones. The first time I changed my mobile phone was image files and viedo files that I captured from IP cam some sensitive captures disappeared. Initially, I thought the problem of my LG-E988. So, I brought a new Phone LG-(forgot) DS. For the first few days. It looks perfectly fine, but the problems came back again. I beliveryed that it may caused by virus/malware/trojan, so I tried almost all different virus scanner avaliable, nothing was found. And sometimes I lost email, SMS message and GPS turned on by itself. I also saw the mobile screen changed itself, even took photos and videos. I told these to my family, because I have parkinson desease. So they believe I have organic psychosis and send me to hospital. Then I was trapped in hospital half a year because my wife lie and doctor did not believe what actually happened.
Over these 6 years, my computers all affected similar trojan (bootkit), It still there after fresh installed once infected. The mobile and computer can work offline, all photos and video files that copied in or out of computer / mobile will be damaged. These forum for mobile, so I concentrate on mobile trojan's issue, if you need solutions how I solve the problem, please feel free to ask.
I don't have much information about the trojan, but i have some clues can share.
(1) the trojan is not an apk nor zip package that installed by TWRP or any recovery.
(2) the trojan seems can be "inject" to any andriod systems and any brand, any model.
(3) the mobile seems must be opened physically. it must be injected into different partitions.
(4) Sometimes it works by root the mobile and install any ROM and the trojan will gone.
(5) I recently fixed a Samsung SM-A715F and I found an encrypted partition in adb shell.
(6) some files are set to some permissions even root can not copy, open, or chmod.
(7) the trojan will not infect other mobiles at same network or NFC, Bluetooth, Wifi.
(8) again, the trojan and see/listen using camera in realtime, see what you are doing, see your position, listen to background noise, the word you are typing or take full control of your phone, heat up your cpu and even turn your roaming on and transmit hundred of giga byte data.
I'm a programmer that I can write a little java program, root my mobile and install my favourite ROM, but not able to trace / detect / delete such trojan and where the data goes. Any expert can help me to doing that? It destory my family by capture something that my wife should not see. I still have a LG V20 and a honor 8A (JAT-L29) are infected. Please what to do next, or what you need.
Thanks for every one and sorry for my poor english.
boyfriend3088 said:
Hello friends and users of XDA forum. First I'm from Hong Kong and join XDA for more than 10 years, please accept my apprologize my poor english.
The story started from 6 years ago, during these days I changed over 20 phones. The first time I changed my mobile phone was image files and viedo files that I captured from IP cam some sensitive captures disappeared. Initially, I thought the problem of my LG-E988. So, I brought a new Phone LG-(forgot) DS. For the first few days. It looks perfectly fine, but the problems came back again. I beliveryed that it may caused by virus/malware/trojan, so I tried almost all different virus scanner avaliable, nothing was found. And sometimes I lost email, SMS message and GPS turned on by itself. I also saw the mobile screen changed itself, even took photos and videos. I told these to my family, because I have parkinson desease. So they believe I have organic psychosis and send me to hospital. Then I was trapped in hospital half a year because my wife lie and doctor did not believe what actually happened.
Over these 6 years, my computers all affected similar trojan (bootkit), It still there after fresh installed once infected. The mobile and computer can work offline, all photos and video files that copied in or out of computer / mobile will be damaged. These forum for mobile, so I concentrate on mobile trojan's issue, if you need solutions how I solve the problem, please feel free to ask.
I don't have much information about the trojan, but i have some clues can share.
(1) the trojan is not an apk nor zip package that installed by TWRP or any recovery.
(2) the trojan seems can be "inject" to any andriod systems and any brand, any model.
(3) the mobile seems must be opened physically. it must be injected into different partitions.
(4) Sometimes it works by root the mobile and install any ROM and the trojan will gone.
(5) I recently fixed a Samsung SM-A715F and I found an encrypted partition in adb shell.
(6) some files are set to some permissions even root can not copy, open, or chmod.
(7) the trojan will not infect other mobiles at same network or NFC, Bluetooth, Wifi.
(8) again, the trojan and see/listen using camera in realtime, see what you are doing, see your position, listen to background noise, the word you are typing or take full control of your phone, heat up your cpu and even turn your roaming on and transmit hundred of giga byte data.
I'm a programmer that I can write a little java program, root my mobile and install my favourite ROM, but not able to trace / detect / delete such trojan and where the data goes. Any expert can help me to doing that? It destory my family by capture something that my wife should not see. I still have a LG V20 and a honor 8A (JAT-L29) are infected. Please what to do next, or what you need.
Thanks for every one and sorry for my poor english.
Click to expand...
Click to collapse
It sounds to me that your computer is the main problem and I assume you connect the phone to it so the phone gets infected.
Regarding computer and virus the best thing to do is to format and reinstall the Operative System.
Regarding the phone, hard reset and no more problem.
mobnoob said:
It sounds to me that your computer is the main problem and I assume you connect the phone to it so the phone gets infected.
Regarding computer and virus the best thing to do is to format and reinstall the Operative System.
Regarding the phone, hard reset and no more problem.
Click to expand...
Click to collapse
Thanks for the reply. Nope, plug-in into a computer won't infect the phone, but if debug turn on, it might be ture. But I'm 100% sure hard / factory reset, wipe cache won't clean the trojan. I did it million times with no apps was installed but still clear the trojan. it's not done by install an apk. according to infected 20+ phones, 80% of the phone's cover were openned. I believe they downloaded "EEPROM" boot partition and add a small portion of code. If I root the phone, sometimes i can see an unknown encrypted partition. And administrator can't access most of the files on root. The only solution is root the phone and wipe everything then, put stock rom from other sources install, but it's risky. Any others methods or suggestion to check or verify the ROMs are original stock ROM?
Please help me! Thanks!
#The attach file is rooted phone /root_files, but most file can't be copied.
1. A Factory Reset - as its name implies - simply turns device into state when it was shipped by manufacturer, means all user-data / user-apps get wiped, system apps get reset to their original state if they got upgraded.
2. Wiping the Cache deletes only temporary system data, but not temporary user-app data.
Hence it should be obvious these 2 named actions will eliminate a trojan or other malware the Android device got infected with. But with the help of an activated Google Play Store they can re-install themselves.
Trojans ( hidden apps ) can easily get found on Android device.
FYI:
What all types of Trojans have in common is that they can only get onto the end device with the help of the user.
Trojans are not only found in email attachments. They can also piggyback on supposedly free programs. Therefore, it is once again important not to use dubious sources for software downloads such as codec packs or cracked programs, even if you might save a few bucks. The damage that can be caused by Trojans often exceeds the value of the software if it had been purchased regularly.
By the way, a Trojan should not be confused with a virus. Viruses reproduce independently, while a Trojan is merely a door opener - but with potentially devastating consequences.

Categories

Resources