Why does my browsers home page keep changing? - General Questions and Answers

This is on a generic a23 q8h tablet, I was also getting popups in the form of fake facebook alerts about some stupid drone company.I deleted 2 apps/plugins/whatever they were and the popups went away but my homepage changes between smartdrone.com, vandroidnews.com and kszz.com.I want to put a boot up someones ass for installing this garbage on these tablets and selling them.

What browser do you use ?
Check the browser settings it may have option to set the desired homepage.

Stock browser, there was also baidu browser installed but i uninstalled with titanium backup.I changed the setting but it gets replaced with one of those three pages.

Tried clearing data of the browser?

I just got a Q88 A33 "generic" tablet and I too get the "default" page and the "home page" in the browser changed to "smartdrone.com". This was/is the behavior on delivery so it is probably part of their installed firmware.
If you have made any progress on how to fix this then please let me know, I will be reading up on Android and how to take a look at the files in the ROM and see if I can find a solution but I am not very familiar with Android so some pointers would be great. For example, would this be the result of some .apk that can simply be removed or is it some shell script or file somewhere in the actual ROM files?

It's because theres a factory installed trojan, yes its baked right into the factory firmware and if you remove it with say an anti-virus program the word DEMO in big red letters will be superimposed on the screen making the tablet useless.I've seen manufacturers offering an apk to 'fix' it but that just re-installs the trojan.Here is a fix that I got from another website and uploaded to my Box account.
Instructions from another forum:
A backup will be made before actual modification are made. To restore the backup, rename SystemUI-backup.apk to SystemUI-A20/A23.apk and restart the corresponding function.
HowTo use:
1. Scan for Device: searches and verifies a connected android device.
2. Scan for Trojan: checks if the trojan responsible for the demo lock is active.
3. If 2. is positive, check the Build.prop to see if you have a A20 or A23 model.
4. A20 FIX or A23 FIX, depending on the results from 3., you choose one of these.
5. The script will reboot the device to recovery mode, manually perform a factory reset.
Definition for Cloudservice / DEMO Trojan:
For clarification let me state that Android by "default" or "origin" is not susceptible to virus' and being built on Linux platform it is "open source" so that is where you get some LAME people and large corporations making these virus' encoded into the devices original configuration [ROM] and NOT NATIVE TO ANDROID.
Perfect example for how we the users can infect our own devices would be the small flashlight apps we all use daily and available for free on Google Play Store... these can factually be classified as "Intrusive Adware" that we install for quick access to our devices camera flash for use as a flashlight and yet we tolerate the pop-ups generated by the app.
Again not NATIVE to Android... this is something we the USERS have put on our devices. Harmless but annoying and same principle.
What is the Cloudservice / DEMO Trojan?
My definition based on learned knowledge as no "official" definition is or most likely will ever be available.
Firstly, in some devices it seems to be in a "sleep" mode until one day it simply "shows up" according to some reports. Our new Tool at TechKnow seeks and destroys the hidden files and configs totally eliminating all traces of the Trojan.
[SPECULATION: it could possibly be incorporated into some downloadable apps in the future. The same basic principle as adware is incorporated into the flashlight apps would suffice. However, it being included in downloadable apps is NOT confirmed and if/when it is the confirmed apps will immediately be reported to their distributor whether Google Play or Amazon App Store etc... by your friends at TechKnow]
It is a truly deceptive application that is hardcoded into the must have system dependent "framework-res.apk" on some of the newer Android devices ROM from the factory. The Trojan can track your app content such as Browser and can lock your device into a "demo" mode which will display large red DEMO text in caps across all your screens. The app is also linked to Baidu.
Baidu, Inc., incorporated on January 18, 2000, a Chinese web services company headquartered in the Baidu Campus in Haidian District in Beijing.
ok.... so you are being tracked and monitored by the Chinese?
but that's not all...
The secondary part to the Virus/Trojan is more of a pain in the :wub: imho than tracking and reporting my web history to an unknown Chinese web service company [for who knows what they seek to learn or truly have access to with this Trojan on your device]...
Click to expand...
Click to collapse
Allwinner Demo Fix: https://app.box.com/s/wpbl5nfrxtjdbgvgrwp2tbgvzlt31oqk

I can't remove Trojan virus from my tablet azpen. A739 ?
Sent from my A739 using XDA Free mobile app

Allwinner Demo Fix
This is how I removed the trojan without getting the red "Demo" letters on the screen http://forum.xda-developers.com/android/help/chinese-tablet-demo-mode-t2853062#post64002423

Related

[Q] How can I test an .apk to see if it's "safe" to install?

Hi,
Sometimes an app (.apk) is either simply not available through Google's store, or it might say "not compatible with your device", etc. There can be various reasons why a person might download a .apk from somewhere other than a "trusted" source.
If this was a file for my PC I could test it in a "sandbox", and I could scan it with both Microsoft Security Essentials and Malware Bytes Antimalware.
On my Android phone(s) I'm not aware of something like the "sandbox" option, and I don't really want to run an "antivirus" program on my phone. Is there an easy way to scan .apk files on the PC to see if they are rogue apps, might send SMS, "phone home", or otherwise mess with other applications or the system software installed on my phone?
Lets give another example: say I thought 15 minutes was not long enough to evaluate a relatively expensive Android game (it certainly isn't!) and I want to test it out first. Let's assume my only option in that case might be an illegally downloaded copy from unknown sources. Of course, we shouldn't do that. But if we did, how could we know if the file is safe and not risk installing some Chinese spyware?
About Android AV programs: anybody know how effective they are? Do some defend against "trojans" - I would think these days trojans are 99% of problems and viruses mostly a relic of the past?
My biggest concern is actually just unwanted crap that runs in the background which eats up battery, makes my phone warm (which I hate), or, perhaps even sends SMS message [this would be even worse because I don't have a text message plan].
EDIT: I see web pages with tiles like "new study finds Android antivirus apps not effective" and articles like this one: http://www.zdnet.com/blog/hardware/...bouncer-does-it-offer-enough-protection/17981
Do we have an easy way to boot Galaxy S3 off of "external" SDCARD instead of internal memory?
Search play store for avast antivirus, completely free, updates daily and works really well (firewall. Anti theft. And many more Features
sony xperia ray ics 4.0.4
stock rom unrooted
I found this website, maybe it can help someone.
h t t p://scan.netqin.com/en/
Maybe someone can post another one...
an easy way to check for safe apk
The easiest way to check for safe apk is to have one gmail account and another "whatever" email account. Then just send the apk from the gmail one to the second account, gmail always find viruses in any apk and stop the process to join the file (virus alert). Bad point is you are limited with the size of the file you wanna send.
Nowadays, even pc antiviruses can detect viruses in apks. I would rather not burden my phone with any android antivirus,since they are literally battery hogs.
sent using my HTC One S
Go here and upload the APK
http://anubis.iseclab.org/
Anubis is a service for analyzing malware.
Submit your Windows executable or Android APK and receive an analysis report telling you what it does. Alternatively, submit a suspicious URL and receive a report that shows you all the activities of the Internet Explorer process when visiting this URL.
Andrubis executes Android apps in a sandbox and provides a detailed report on their behavior, including file access, network access, crypto operations, dynamic code loading and information leaks. In addition to the dynamic analysis in the sandbox, Andrubis also performs static analysis, yielding information on e.g. the app's activities, services, required external libraries and actually required permissions.
Found a good one too
apkscan.nviso.be - give it a try. Drag and drop - wait for the upload - than click SCAN . Wait for a few minutes. That`s all. Unlike ANUBIS it has a resolution at the end of the analysis . Usually helpful.
You can also email the file to [email protected] and it will email the report back in about ten minutes. Virustotal can display some interesting info, for example it said that Lucky Patcher is a "Potentially Infected Hosts File (v)", as reported by VIPRE and AVware.
Virustotal also has an official android app.
The Netqin scanner is also an android mobile app.
Late answer, sure, but I think ClamAV is what you want. You also want its bytecode signature file, and to speed things up, you only want that single file (speeds up things quite a bit).
It is the only offline apk scanner i know of, and as for its efficiency i cannot say, but it seems like it is what you are asking for.
An alternative would be to install something like BlueStacks and remap your "Windows shared folder" (through registry) to the folder you have your apk files in, and then run BitDefender on it. BD is by far the most pernickety AV app out there for Android.
I'll have to check out bitdefender (it's also included on virustotal.com)
apkscan.nviso.be seems to be pretty good at analyzing files for suspicious activity, and it also uploads the file to virustotal for you. Then you can copy the sha256 hash into the virustotal's search, to get all the gory details.
anubis.iseclab.org limits files to 8 megabytes.
Another way to avoid malware is:
when installing an update to an already-installed version of an application, it will 99% of the time prompt you to update an existing app. There's been rare instances where some apps do use a new digital signature (for example when spotify had a big security hole, and for awhile there were two apps by spotify in the app store).
One other way to tell, as a final check when launching the apk for installation on the phone: the icon will not have the right icon. I've installed apps before that I thought came from a trusted source, but the icon was not right. In fact, I was considering not posting this publically, so the "bad dudes" would not update their methods.
Another tool I found:
http://andrototal.org/
Although it might be a duplicate of virustotal.
nintendo1889 said:
Another tool I found:
http://andrototal.org/
Although it might be a duplicate of virustotal.
Click to expand...
Click to collapse
I just tried out this site. To me, it appears to be the most thorough virus testing site that I have seen. It takes some time for it to complete the scans. mainly because it scans the file with about 7 or 8 different scanning engines. Just just have to keep refreshing the page every few minutes to see if the results have updated.
I will be using this one as my go to site for apk scanning.
Just install it on the default emulator in the Android SDK
You can also install your apps on other emulator live bluestacks(best for games), jar of beans(best for rooted app) and windroy(the lightest)
Hit thanks if this helps
nintendo1889 said:
I'll have to check out bitdefender ...
Click to expand...
Click to collapse
Your signature photo ... awesome ... Bad Dudes
By using GDATA security , When you want to install an app the GDATA will scan it befor installing
Sent from my LG-D855 using Tapatalk
Use google scanning service VirusTotal to scan any app, secondly always use secure source. There are many well reputed apk sites but I personally use apklink.com , on this site required apk file is just a click away and its quite easy as well...
be safe & secure
This threads out of date, but it has me thinking I want to use something as mentioned in several replies to OP.
Are there any sites, or apps that can warn me if an .apk (for example) has malware etc.?
Thanks in advance for any help, including a link to another discussion that may have my answer
denise1952 said:
This threads out of date, but it has me thinking I want to use something as mentioned in several replies to OP.
Are there any sites, or apps that can warn me if an .apk (for example) has malware etc.?
Thanks in advance for any help, including a link to another discussion that may have my answer
Click to expand...
Click to collapse
Malwarebytes can detect malware.
Sent from my LGL84VL using Tapatalk
I tried this site and I like it because it goes into a lot of detail after analyzing and sends me a report in email. It was mentioned, and it is still available to use: https://apkscan.nviso.be/
Thank you for the heads up on MB, I use that on my PC and works great
You can use virustotal.

[APP][4.4+] "App manager" - alternative to the default app manger

After so long of developing apps for other people, I've decided to make one 100% by myself, and publish it.
The app is basically an alternative to the default app-manager of Android, and it provides some unique features that helps you manage and uninstall apps quicker and easier.
If you've found this app useful, please support it by sharing/donating/comment on the play store.
Installation link :
APK mirror:
https://www.apkmirror.com/apk/androiddeveloperlb/app-manager/
ApkPure:
https://apkpure.com/app-manager/com.lb.app_manager
Some screenshots
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
So, here's some information about it:
Background
How many times have you tried to uninstall an app but found it annoyingly hard, whether you've forgot its name or it's hidden in a bunch of many apps you have?
Have you ever wanted to uninstall a built in app, which came from the carrier/manufacturer?
Are you a programmer/tester and need to uninstall/reset your apps frequiently?
If so, this is the app for you.
Short description
As I've written ,the purpose of this app is to replace the default app-manager, and ease the uninstallation task as much as possible.
The app is free and supports Android 2.3 and above, but works best from Android 4.0.
The app has ads (banners) but you can easily remove them by donating.
Who is it useful for?
The app is intended for multiple kinds of people:
For the common user, it's easier to perform searches of apps, easier to unisnstall them, and easier to share them.
It's also easier to go to the play store page of the app ,give feedback about it and contact the developers.
For power users, it's easier to uninstall built in apps (AKA "system apps"), like the bloatware that come with the OS.
For developers, QA, and beta testers, it's easier to uninstall/reset the recently installed app, by using widgets.
You can also share apps as APK files, and see the version of the apps.
Features and advantages over other apps
Viewing of app types of apps, and not just those that you can launch (example: plugins, live wallpapers, keyboards,...).
Widgets, for quick uninstallation/reset of the most recently installed app.
Quick uninstallation of apps. For rooted devices, the uninstallation (and other operations) can be silent (in the background)
Easy uninstallation of apps that got admin privilages.
Ability to automatically add app shortcuts when they get installed, no matter how they got installed.
Also the ability to choose which launcher will create the shortcuts.
Easy to use - one click to uninstall. Long click for multi-selection
Context menu options on selected app:
Run
Share Play store link, Amazon AppStore link, or even APK file (no need for Root)
Manage
Open app on the Play store.
Kill background process, or stop the app (needs root)
Quick reset of the app (needs root).
disable/enable app (needs root).
Create shortcut.
Search the app via your search engine or the Internet.
Sort the apps bysize, name, by package name, by date installed, and by date updated
Filter apps by:
System/user apps,
Enabled/disabled apps
Installation path : SD card / internal storage
Ability to uninstall system apps (Root only, and might not work on some cases)
Ability to replace the default uninstaller .
Detailed yet short view of the installed apps, including app name, package name, date insalled and version information.
Safe and automatic deletion of certain folders after uninstallation, that some Android OS versions don't handle for some reason.
Theme chooser, in case you don't like the cards UI.
Hopefully more to come, will be written about on the play store
App translation
https://crowdin.com/project/com-lb-app_manager
Beta testing
Links for the beta testing group:
- https://play.google.com/apps/testing/com.lb.app_manager
Articles
https://web.archive.org/web/2014050...roid/supercharge-your-android-app-management/
http://reviewttb.blogspot.in/2014/04/app-manager-review.html
http://iandroid.co.il/dr-iandroid/archives/16296
http://www.appbrain.com/app/app-manager/com.lb.app_manager
https://www.androidrank.org/application/app_manager/com.lb.app_manager
FAQ
The OS says the app runs in the background, or the app has a notification of its own. Why? Doesn't it consume battery?
The app is triggered by app operation events : uninstall, install, clear-data...
Upon each of those, it saves the state for various purposes, in the background. For example the removed-apps list, and the widget. Those have to be handled right away, so it must be done even if you don't see the app.
In the rest of the time, it does absolutely nothing.
This is why the app is so efficient in battery usage, that you won't see it in the list of battery-consuming apps. Meaning it doesn't even reach the 1% battery usage. I am sure it doesn't even reach 0.001% .
You can hide the notification, but sadly on some Android versions (8.0, but not 8.1 and above) you might see a different notification, that the app might use the battery. You can safely ignore it. I guarantee there is no noticeable difference in battery consumption.
In fact, due to the optimizations I've added for Android 8.0 and above, and because the app's process doesn't get killed so often, it might even be better in battery usage. The reason is that the app always had to listen to app-events, and before Android 8.0, the app got triggered by them, meaning its process started each time if it was killed before. Less CPU, more battery.
I have a Xiaomi device and the app fails to install any kind of app. How come ?
Seems it's an issue that will exist for quite some time, and that it is turned by default on Xiaomi devices and causes various issues (read here for example). This "feature" is called "MIUI optimization" , and for now you can only disable it on the "Developer options".
So, for now, you can overcome this by enabling developer options and there to disable "Turn on MIUI optimization".
Note that once you do this, the OS will reset a lot of apps, mainly in terms of permissions. This includes my app too.
Just a side note: Xiaomi is known as one that breaks a lot of apps, as it creates its own made up rules and permissions, very much against how Android works. This is also why there is a website that speaks about it, here, so for better handling of the app, also white list it from the various permissions Xiaomi has created, too.
Sadly I have no way to handle those things, as long as Xiaomi chooses to make their own non-standard rules.
I don't have a rooted device, but I still want to disable/uninstall a system app. Is it possible?
It's possible... to try, using a PC connected to your device.
I've made a tutorial for this here (old one here ).
If the OS would allow, you could uninstall or at least disable system apps this way.
I think I got some nasty app, which shows ads randomly or takes control of the smartphone in some way (or any other bad behavior that I don't like). Can this app help me find it and neutralize it?
Even though it wasn't originally intended for such a task, I've noticed it helped many people with it. There are multiple reviews telling that it helped them removing such "virus" apps. I've even done it myself on both my device and for my family-relatives.
So the answer is that it might help you. Here's what you can do to try to handle it:
https://forum.xda-developers.com/showpost.php?p=77987186&postcount=543
What are split-APK files? What are "APKS" that are being generated sometimes when sharing apps?
Split apk files (AKA "app bundle" apps) are not meant to be installed just like normal APK files. They are used as you use the app, getting installed by the Play Store, to use only the minimal things you will use on your device, with your Android version, with your CPU architecture, with your locales, with your screen density, and so on...
Not only that, but if you install such files on other configurations, they might not work properly or fail to install.
As far as I know, backup&restore of such apps is not even working on popular backup apps such as Titanium backup.
Currently the app allows to share such apps as APKS files, which is just a zipped file with all of the APK files of the app. This is similar to what's done on various other apps and services (SAI, ApkPure, APK-mirror,...) with various file extensions (APKS, XAPK, APKM,...).
To install them using my app (which supports all files that I've mentioned: APKS, XAPK, APKM ), you can currently do this only from other apps that trigger it. The most common way to do it is directly from file-manager apps, but this should also be possible via chatting apps and others.
If you wish to do it on your via the PC, you can do it too:
use adb command as such:
Code:
adb install-multiple apk1 apk2 ...
Why isn't there a permissions management feature?
For permissions management, I actually planned some management tool, but sadly Google has changed how permissions groups work, and so permissions sometimes go to a different group. For example, before Android P, the permission "WRITE_CALL_LOG" belonged to "Phone" permission group, but from Android P, it moved to "Call log" permission group, which never existed before.
Currently, Google removed all APIs to get which permission group has which permission. Even in the documentation there is no mention anymore which permission group holds which permissions. Not only that, but OEMs sometimes make up their own permission which aren't official in any way (see "auto start" that Xiaomi made, and the reason that "don't-kill-my-app" website exists, for example). I still hope that one day I will be able to get a reliable way to get the correct information, no matter which version of Android the app runs on.
Why isn't there an option to install an old version of an APK when I have a newer one installed?
Apps aren't designed to handle this situation. They are only designed to handle upgrades. So, Google made it impossible to do it starting from Android 7 (read here). If you want to try it anyway, you can do it using PC&adb tool, as written here.
Why isn't there a boot-up management feature? Memory freeing/boosting? CPU usage? RAM usage? Automatic-task-killing? Modify apps ?
Various features of those types are not documented and not recommended to be used. Those can ruin how the apps work, just like OEMs do it sometimes even by default. This can also cause false crashes, or crashes that can't be reported. For users, some of those functions have the false promise by various apps that say it will make reduce battery consumption (search google for "Android task killer myth").
It is not a good thing to alter how apps work and behave, and Google has rules about modifying APKs, so I do not want to take the risk in doing so.
As for viewing information alone, this is something that isn't useful for users, but more for developers who already have them via the various development tools and even apps that specialize about it.
This app was made for users and power users mostly, and I want to make it work properly as much as possible, without worrying that for some devices or at some day things will be broken. I prefer to have as little workarounds as possible.
That's why I decided to stick with things that are more standard, more commonly used, and more available to be used.
I have an SD-card. Why can't I set an installed app to be on it, properly?
Installing an app to the SD-card has various restrictions that determine whether it's possible or not, and how much it will affect how well the app behaves.
To do it here, you have to have a rooted device (or use a PC with adb command as written above), the OS should allow to do it, and the target app should allow to do it.
That being said, you might try your luck via the developer-settings of the OS (check how to enable it on Google for your device), via "force allow apps on external" preference.
Why not share version-name and app-name alone instead of version-code and package-name with others?
Simply put, version-name and app-name are not unique enough, depend on the current locale, can be of any length (so it can be too long) and not restricted by which characters are used (so can be problematic on some OSs).
That's while version-code is always an increasing number, and package-name is always safe to use and is considered as the ID of the app on the Play Store and probably on any app-store.
That being said, I might allow to customize what to share some day, and let users be responsible of possible issues if they might occur.
In the past versions, the app didn't need to run in the background, and didn't need to have usage-stats permission at all. What happened?
In one word: Google . Google has changed the rules:
- For running in the background , the reason is that a lot of types of global events (called "Intents") need to be handled only with an app that has a sticky notification (called "foreground service"). Before Android 8.0, it was possible without this requirement. The app would have been awakened for each such event, handle it and go to sleep, while the OS can kill it if needed. Now it's not possible (read here). Adding to this, is that Google forces all new apps and updated to existing ones to do it for Android 8.0 and above, by the end of the year (read here). This means you should expect more apps to show their notifications, or they will present a weaker functionality.
The good news is that this actually helps with battery usage on Android 8.0 and above. Instead of re-creating the process of App-Manager for each event, the process is already alive, so less CPU will be used. And, since it's already alive, handling it will take less time. So, less CPU and less time, meaning more battery for you. You can also hide the notification if it bothers you.
- For usage-stats permission, before Android 8.0 I could get the exact app-size without any permission. And, before Android 5.0, I could get the recently launched apps with a permission that doesn't require requesting in runtime. Because of the recent changes, this is not possible anymore without usage-stats permission. And, since getting app-size and sorting apps by recently launched - are quite basic features, I decided to request it all in the beginning together with the storage permission that was always a requirement.
Getting the app-size was tricky before Android 8.0, and so I added a fallback in case it's not working for some users, or working too slow for them. It wasn't perfect, but it was all I could do.
The good news about this, is that it's much more efficient than what I did before. Getting app size is super fast, and it will always work because there is now an official way to do it. In fact it's so quick that I've removed the fallback for Android 8.0 and above.
Privacy policy ?
Written on this post.
Thank you!
Very simple and useful app!
newHere:) said:
Thank you!
Very simple and useful app!
Click to expand...
Click to collapse
You're welcomed, and I do hope that it will succeed as I wish to improve it even more and make other useful and cool apps.
cool app,very helpfull for me,because im test so many apps from here and now its much easier to deinstalling,i like it!!!
-CALIBAN666- said:
cool app,very helpfull for me,because im test so many apps from here and now its much easier to deinstalling,i like it!!!
Click to expand...
Click to collapse
Yes, that's actually why I made the app myself, since I am both a developer and a user that tries out many apps.
will try it!! sounds nice
I would like to get some feedback from you people:
1. What is the best feature that you liked on the app?
2. What is the best feature that you'd like to have?
3. In case you have a good English accent, have the ability to record your device, would you like to put your video review?
If so, I will put your video (if it's good enough) on the play store, along with credits (or you put them at the end of the video if you wish).
No ads in the video, please .
AndroidDeveloperLB said:
I would like to get some feedback from you people:
1. What is the best feature that you liked on the app?
2. What is the best feature that you'd like to have?
3. In case you have a good English accent, have the ability to record your device, would you like to put your video review?
If so, I will put your video (if it's good enough) on the play store, along with credits (or you put them at the end of the video if you wish).
No ads in the video, please .
Click to expand...
Click to collapse
Well overall, the app is quite streamline and easy to navigate.
And the making of APK to share file is the best feature that I liked.
It would be nice if the app could have the feature to natively share apks of different apps, from within, using wifi direct, if another device has this installed. Would make it even better.
About the review, I have had some experience with them, so i'll give it a shot tomorrow morning, it's 10 pm here at the moment so I can't prepare and edit now.
I like this, for me the most useful part is the sorting by install and updated. Enough that I did the donation thing to get rid of the ads.
Some suggestions:
Tabs or Drawers / Categories with Tags
- The way this would work is that you can tag apps with categories (each app being able to be tagged with as many categories as the user likes). For instance, I may make a category for frequently used and camera. I would tag my several camera apps with the camera tag, and the one I use most I would also tag with the frequently used tag.
- Then, when searching I could search for the tags as well, such as searching frequently used and all those with that tag would come up.
- Going a step further is the creation of preset tag search tabs. So at the top, or side or wherever it fits best, there may be a place for the Camera Tab Search that I would select it and see all my camera apps.
I think the above feature would make organizing and accessing the apps even more awesome.
The next suggestion is moving towards replacing the stock app manager.
- I use XPosed with Gravity Box. I set up the long press of the home button to launch your App Manager.
- I also use the GEL Settings that changes the Home Button into the Apps Button when you are already on your home screen. It would be awesome if you did the same, but instead made it link to your app.
KNIGHT97 said:
Well overall, the app is quite streamline and easy to navigate.
And the making of APK to share file is the best feature that I liked.
It would be nice if the app could have the feature to natively share apks of different apps, from within, using wifi direct, if another device has this installed. Would make it even better.
About the review, I have had some experience with them, so i'll give it a shot tomorrow morning, it's 10 pm here at the moment so I can't prepare and edit now.
Click to expand...
Click to collapse
Thank you for sharing your opinion.
About sharing via Wifi-Direct, isn't it already possible in case both devices have an app for sharing stuff over Wifi-Direct?
For example, using "SuperBeam" ? I never tested the app or the feature, but I think it's already possible, no?
Some Roms (and I think it includes some stock Roms) even have this built in, as I remember.
Not sure though, if any of those solutions share APK files, or just media files.
Since I don't have multiple devices, I can't check it out, and I'm not sure if I will be able to develop it in a way without any bugs...
AndroidDeveloperLB said:
Thank you for sharing your opinion.
About sharing via Wifi-Direct, isn't it already possible in case both devices have an app for sharing stuff over Wifi-Direct?
For example, using "SuperBeam" ? I never tested the app or the feature, but I think it's already possible, no?
Some Roms (and I think it includes some stock Roms) even have this built in, as I remember.
Not sure though, if any of those solutions share APK files, or just media files.
Since I don't have multiple devices, I can't check it out, and I'm not sure if I will be able to develop it in a way without any bugs...
Click to expand...
Click to collapse
Yeah, many apps have this feature, but I just asked for it because this app already has many different methods of sharing an app, and this could make it even faster and better, due to more streamlined representation of your apps. But if it's hard for you, don't worry, no one's forcing you; you are the Dev, you decide how you app is.
But the functionality is quite great.
maddbomber83 said:
I like this, for me the most useful part is the sorting by install and updated. Enough that I did the donation thing to get rid of the ads.
Some suggestions:
Tabs or Drawers / Categories with Tags
- The way this would work is that you can tag apps with categories (each app being able to be tagged with as many categories as the user likes). For instance, I may make a category for frequently used and camera. I would tag my several camera apps with the camera tag, and the one I use most I would also tag with the frequently used tag.
- Then, when searching I could search for the tags as well, such as searching frequently used and all those with that tag would come up.
- Going a step further is the creation of preset tag search tabs. So at the top, or side or wherever it fits best, there may be a place for the Camera Tab Search that I would select it and see all my camera apps.
I think the above feature would make organizing and accessing the apps even more awesome.
The next suggestion is moving towards replacing the stock app manager.
- I use XPosed with Gravity Box. I set up the long press of the home button to launch your App Manager.
- I also use the GEL Settings that changes the Home Button into the Apps Button when you are already on your home screen. It would be awesome if you did the same, but instead made it link to your app.
Click to expand...
Click to collapse
Thanks for sharing your opinion.
About the tagging suggestion:
Do you mean auto-tagging, or letting the user tag them? or maybe scan the play-store and tagging the apps using the category they were in...?
Currently, it's a rather time consuming thing to add this feature of tagging, especially if I will add a server side storage that will hold the tags of all the users.
It's a very good suggestion, though, and I will keep it in mind for future releases.
For now, if you wish to organize apps, there are plenty of launchers out there that do the job by putting the apps shortcuts into folders . Some, like "everything.me" launcher, will do it for you.
About having tabs of tags, I think it's against the guidelines of Google to have too many tabs (think how annoying it will be when you create many tags). Maybe a navigation drawer is better.
BTW, I also use Nova launcher, and I've tried a lot of launchers.
About replacing the stock app manager, that was my goal, but I still need to handle operations that I didn't find how to deal with, such as clearing the default of apps, getting the size of them correctly, toggling notifications on/off,...
I'm familiar with using XPosed, but didn't use Gravity Box module. I'm not sure what this module does (I've read its description now) ...
I didn't understand what you did with GEL settings. Did you make it so that the home button of the navigation buttons changed to anything you wish on certain cases?
KNIGHT97 said:
Yeah, many apps have this feature, but I just asked for it because this app already has many different methods of sharing an app, and this could make it even faster and better, due to more streamlined representation of your apps. But if it's hard for you, don't worry, no one's forcing you; you are the Dev, you decide how you app is.
But the functionality is quite great.
Click to expand...
Click to collapse
My app only uses the apps that are already installed on your device. That's how Android works (using "send" intents in this case).
For example, if you had "WhatsApp" installed, it will be shown on the dialog I've made, and if "WhatsApp" supports sending APK files, it will also work (sadly I think it doesn't, but I'm pretty sure "Telegram" does).
BTW, the dialog I've made isn't the native one just because I wanted to add some features to it and I also didn't like how slow the default one is.
Can you please check if Wifi-direct is possible for this task, before I consider adding this feature? I will also try it out at the office if I get the chance.
AndroidDeveloperLB said:
My app only uses the apps that are already installed on your device. That's how Android works (using "send" intents in this case).
For example, if you had "WhatsApp" installed, it will be shown on the dialog I've made, and if "WhatsApp" supports sending APK files, it will also work (sadly I think it doesn't, but I'm pretty sure "Telegram" does).
BTW, the dialog I've made isn't the native one just because I wanted to add some features to it and I also didn't like how slow the default one is.
Can you please check if Wifi-direct is possible for this task, before I consider adding this feature? I will also try it out at the office if I get the chance.
Click to expand...
Click to collapse
Yeah, telegram is the only one which would let you send apk files.
But I am not a dev, so I won't be able to check or add things. I am just a tester for the apps and roms and sometimes co-operate with reviews.
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
So I found a small bug, in the sharing menu of the app, aside the regular apps, it also displays apps from music streaming services, but only the ones which allow uploading of content, like grooveshark.
KNIGHT97 said:
Yeah, telegram is the only one which would let you send apk files.
But I am not a dev, so I won't be able to check or add things. I am just a tester for the apps and roms and sometimes co-operate with reviews.
Click to expand...
Click to collapse
About checking it, I didn't mean that you'd develop anything, not even search the internet about it.
I meant installing an app that lets you send files over WIFI-Direct (like the app I've mentioned), open it (not sure, but I think it's needed so that it would be enabled), and then use my app to send the APK via this app.
AndroidDeveloperLB said:
About checking it, I didn't mean that you'd develop anything, not even search the internet about it.
I meant installing an app that lets you send files over WIFI-Direct (like the app I've mentioned), open it (not sure, but I think it's needed so that it would be enabled), and then use my app to send the APK via this app.
Click to expand...
Click to collapse
My bad, got you wrong there.
So I tested with Superbeam(tried other apps too, but just won't show them in share menu) and it works fine. The transfer is carried out normally like choosing a file to be transferred from any other app.
--------------------------------------------------------------------------------------------------------------------------------------------------------
Going to sleep for now. Will test, review and report further tomorrow morning.
KNIGHT97 said:
My bad, got you wrong there.
So I tested with Superbeam(tried other apps too, but just won't show them in share menu) and it works fine. The transfer is carried out normally like choosing a file to be transferred from any other app.
--------------------------------------------------------------------------------------------------------------------------------------------------------
Going to sleep for now. Will test, review and report further tomorrow morning.
Click to expand...
Click to collapse
Not sure I understood :
Did it show up there ?
Did you succeed transferring the APK file using WIFI-Direct?
If so, that's great news. I wonder though how come WIFI-Direct sharing isn't a built in feature on Android.
I think it should be easy as using the Bluetooth.
Also I don't get why Android-Beam uses Bluetooth instead of WIFI-Direct (as done on Samsung's devices). In fact, maybe Google could make the files transfer faster by harnessing both Bluetooth and WIFI-Direct together.
Thanks very handy.... Donated.... And again cause I'm
.. And again
Christiancs1969 said:
Thanks very handy.... Donated.... And again cause I'm
Click to expand...
Click to collapse
Wow. Thanks. :good:
You are the first one who is...
Well one more for luck then.....
Seriously... Its very handy thanks

[Q] What is com.color.android.socialcam?

Hello!
I have a Droid Razr M circa late 2012 (with the stock software, two versions before the most recent update, 4.1.2, 98.18.78.XT907.Verizon.en.US).
Under "Settings -> Apps", I discovered an app that has a very grey icon with a tiny "SD" square at the bottom right, and it is called com.color.android.socialcam . The size is 6.85 MB.
I am trying to determine what that app is.
It appears under "Downloaded", but does not show up under Google Play or Amazon Store. Nor does it show in the full list of the installed up that is accessible from the home screen by pressing on the circle with 6 dots. AppMonsterPro doesn't list it either.
My guesses about its possible origin:
1. A discontinued/abandoned app that is no longer on Google Play
2. An old version of the present app that is renamed (e.g. Socialcam by Autodesk) that lost the link to the newer verison.
3. Some other abandoned app that was a part of the bloatware installed initially, but that was not in the updated version of the system.
4. Similarly to #3 above abandoned portion of the system
5. An app that I downloaded as an apk from a completely different source (I doubt, as I've done such a thing only 2 times that I remember).
6. Malware that got somehow onto my phone.
I've been searching for the answer, and so far my findings can be summarized as follows:
I found that a few people had it on their Android phones. It is not exclusive to Razr M, as it shows up on at least Galaxy S3 (produced at about the same time), but seems to be limited to Verizon.
Some might even had this app preinstalled.
See, e.g. here:
http://forum.xda-developers.com/showthread.php?t=1809314&page=11
http://forums.androidcentral.com/general-help-how/301743-weird-text-message-downloaded-app.html
There is one piece of potentially useful information that found in some of those listings is that it also has name
"Color 1.2.0.8" (see the first link above, in the xda forum).
There are two apps out there for video recording/sharing: "Color" and "Socialcam".
I am not sure if what I found is related to either of those two, but I couldn't seem to find the history of those apps (e.g. if Autodesk acquired or renamed its Socialcam").
Any ideas as for what this app might be?
The phone has never been rooted. With that, is there any way of finding more information about the app from within the phone itself?
Thank you!
St-Ranger said:
Hello!
I have a Droid Razr M circa late 2012 (with the stock software, two versions before the most recent update, 4.1.2, 98.18.78.XT907.Verizon.en.US).
Under "Settings -> Apps", I discovered an app that has a very grey icon with a tiny "SD" square at the bottom right, and it is called com.color.android.socialcam . The size is 6.85 MB.
I am trying to determine what that app is.
It appears under "Downloaded", but does not show up under Google Play or Amazon Store. Nor does it show in the full list of the installed up that is accessible from the home screen by pressing on the circle with 6 dots. AppMonsterPro doesn't list it either.
My guesses about its possible origin:
1. A discontinued/abandoned app that is no longer on Google Play
2. An old version of the present app that is renamed (e.g. Socialcam by Autodesk) that lost the link to the newer verison.
3. Some other abandoned app that was a part of the bloatware installed initially, but that was not in the updated version of the system.
4. Similarly to #3 above abandoned portion of the system
5. An app that I downloaded as an apk from a completely different source (I doubt, as I've done such a thing only 2 times that I remember).
6. Malware that got somehow onto my phone.
I've been searching for the answer, and so far my findings can be summarized as follows:
I found that a few people had it on their Android phones. It is not exclusive to Razr M, as it shows up on at least Galaxy S3 (produced at about the same time), but seems to be limited to Verizon.
Some might even had this app preinstalled.
See, e.g. here:
http://forum.xda-developers.com/showthread.php?t=1809314&page=11
http://forums.androidcentral.com/general-help-how/301743-weird-text-message-downloaded-app.html
There is one piece of potentially useful information that found in some of those listings is that it also has name
"Color 1.2.0.8" (see the first link above, in the xda forum).
There are two apps out there for video recording/sharing: "Color" and "Socialcam".
I am not sure if what I found is related to either of those two, but I couldn't seem to find the history of those apps (e.g. if Autodesk acquired or renamed its Socialcam").
Any ideas as for what this app might be?
The phone has never been rooted. With that, is there any way of finding more information about the app from within the phone itself?
Thank you!
Click to expand...
Click to collapse
the comment here seems to give a little insight as to what it does/did.
bweN diorD said:
the comment here seems to give a little insight as to what it does/did.
Click to expand...
Click to collapse
That's a great find!
Thank you, that "little insight" helped me to unroll the rest of the story.
For those who are interested (and if somebody would have the same question in the future):
forums.androidcentral.com/verizon-galaxy-s-iii/246681-color-app-discontinued-recently.html
mashable.com/2012/10/17/color-shuts-down/
(sorry for the incomplete links - you need to add the http prefix and the rest, due to my newbie status, the system doesn't allow me posting links in the reply [even though I posted links in the original question])
Apparently,
1) By the time I was buying my phone (November-December of 2012), VZW was selling their phones with this defunct bloatware included.
2) They (VZW) quietly "released" this app from being "protected" with the subsequent OTA system update, so that one can "uninstall" it.
However, they kept the app on the phone and didn't delete it. Nor they provided any information to the users that it can be deleted.
Funny, that now, I don't see any way how I can start that app.
So, now I can delete that app without much of concerns.
Thanks again!

Need Help: BEEN Infected by MALWARE Lenovo tab model a5500-hv android version 4.4.2

model number : lenovo a5500-hv
android version: 4.4.2
baseband version: a5500-hv.v34, 2014/05/08 22:28
kernel version: 3.4.67
build number: a5500hv_a442_000_011_140508_row
As shared in subject, my tab ANDROID is infected by malware where multiple issues have starting lately
a) Constant popup message stating" Unfortunately, com.system.update has stopped"
b) Constant popup message stating" Unfortunately, org.snow.down.update has stopped"
c) Constant popup displaying to INSTALL application" com.android.keyguard"
d) Automatic checking (on) in Settings> Security> Allow installation of apps from unknown sources, despite my regular check off( its gets reactivated again). Device Administrators viewed are Android Device Manager (ticked), Daemon Service( twice listed- unchecked).
e) Installed Malwarebytes Anti-malware, upon scanning detected these 11 malwares, which it is unable to delete ( Norton is unable to detect those even). Any open app which I try to use after some seconds are abruptly closed.
Malware name- Path
Android/ Backdoor.Triada.c - /system/priv-app/higher.apk ( File linked to be uninstalled- AppManage)
Android/ Backdoor.Triada.js - /system/priv-app/BCTService.apk ( File linked to be uninstalled- bcct_service)
Android/ Trojan.Rootnik.I - /system/priv-app/Bseting.apk ( File linked to be uninstalled- com.android.sync)
Android/ Trojan.SMSSend.ge - /system/app/com.android.token.apk ( File linked to be uninstalled- com.android.taken)
Android/ Trojan.OveeAd.F - /system/priv-app/com.mws.tqy.vsdp.apk ( File linked to be uninstalled- com.system.update)
Android/ Backdoor.Triada.J - /system/priv-app/com_android_goglemap_services.apk ( File linked to be uninstalled- GoogleMapService)
Android/Trojan.Dropper.Shedun.dc - /system/priv-app/parlmast.apk ( File linked to be uninstalled- GuardService)
Android/Trojan.Dropper.Agent.MJ - /system/priv-apk/Sooner.apk ( File linked to be uninstalled- PhoneService)
Android/Trojan.OveeAd.J - /system/priv-apk/com.tsr.eny.hyu.apk ( File linked to be uninstalled- system.bin)
Android/Trojan.Guerrilla.Q - /system/priv-apk/NAT.apk ( File linked to be uninstalled- SysTool)
Android/Trojan.Triada.m - /system/priv-apk/com.glb.filemanager.apk ( File linked to be uninstalled- UPDATE)
PS: If I try to connect to Internet, app icons are downloaded and auto open displaying porn images.
Please assist to REMOVE the MALWARE INFECTION. Tried FACTORY DATA RESET from Settings, but no help. Tab not rooted.
Solution
Last night i got some pesky malwares. For now i think i removed them. Get Avast and see what it can find. After that try to remove the files from file explorer and the most important thing - go to Settings-Security-Device Administrators. From there remove everything and now from Avast you should be able to remove the infected apps. Hope i helped
Tried cm's stubborn Trojan remover from play store and it did the trick- as in disabled the infected processes but at end took my mail ID with followup request if raised to get the device cleaned from malware. Cross checked from Malwarebytes and kaspersky, and looks seemingly clean with no active culprits. Though not checked with WiFi or data connection through sim.
Sent from my A0001 using XDA-Developers mobile app
Ashish1+1 said:
Tried cm's stubborn Trojan remover from play store and it did the trick- as in disabled the infected processes but at end took my mail ID with followup request if raised to get the device cleaned from malware. Cross checked from Malwarebytes and kaspersky, and looks seemingly clean with no active culprits. Though not checked with WiFi or data connection through sim.
Sent from my A0001 using XDA-Developers mobile app
Click to expand...
Click to collapse
Did it root your phone first? Else I can't see how it would be able to get to those apps installed as system. If so, if it was me, I'd unroot my phone at the very least & uninstall the CM apps since they do not have a good reputation so far as data snooping goes and excessive app permissions etc goes.
eg (from The Capitol Forum)
The apps require extensive access to the devices on which they run, and they are able to harvest a great deal of data about users’ interests, demographics and location. Cheetah Mobile’s business model is not significantly different from the way in which some major American tech companies such as Facebook monetise their free products. However, Cheetah Mobile is different from American tech companies in that its headquarters are located in China and its data servers are primarily located there as well, and its main business partners are major Chinese tech firms. The Chinese government, according to sources, accesses its companies’ data for internal security, economic competitiveness or other purposes. Cheetah Mobile, and similar companies, represents a major point of entry for China to access American app marketplaces and their users to gather information. However, U.S. government officials in national security and intelligence agencies are highly aware of surveillance and hacking both inside and outside China, presumably coming from actors affiliated with the Chinese state.
Click to expand...
Click to collapse
see the alteco report (about investment risks but they ran tests on other apps that didn't do anything, what battery savers don't help!!! :silly: )
https://drive.google.com/file/d/0B_zW4GWDn5wpVDBiLUpDcE9IS0E/view
Now I haven't used the app you quote but if it didn't root your phone then it can't have removed the malware and they are likely up to their old tricks ie the app doesn't really work, they have just been blocked or something. (Ask yourself why aren't there other apps from well known companies that can remove trojans in system on play store?) ANd with their dodgy reputation for ads, & selling user data if it did root your phone you may only be slightly better off!!?? But at least it should only be your user data they are gathering and not your bank account number to try and get ya money like the malware guys!
Anyhow happy for you if you really are free of malware and don't forget to change all your passwords for all accounts, your routers etc else you could be reinfected by the time you read this!
I would reflash the stock ROM to be sure (backup ALL your pics, txts address, whatsapp etc etc)
I would also be interested to know how the app worked, if you can explain it. Did it say it would ROOT your phone? (there is nothing in their write up to say it will, Google would not allow an app that can root on play store, as far as I know) Do you have an app that can read what system apps are installed, like Link2sd? Does that show any of the malicious apk?
Thanks, No I did not root my phone but judging by the way removal came (easy) I too was bit surprised with outcome. No sooner I decided to remove the cm app Trojans and malware again became evident meaning it was just being suppressed in a way not removed and now again came back (when removed).
Sent from my A0001 using XDA-Developers mobile app
Ashish1+1 said:
Thanks, No I did not root my phone but judging by the way removal came (easy) I too was bit surprised with outcome. No sooner I decided to remove the cm app Trojans and malware again became evident meaning it was just being suppressed in a way not removed and now again came back (when removed).
Sent from my A0001 using XDA-Developers mobile app
Click to expand...
Click to collapse
Sorry to hear this. However I think it is possible that the CM app did its job as those malicious apps have probably already rooted your phone, so CM may have just used that root access without informing you, though whether or not other apps like CM app can still use that root, I'm not sure, it depends if its been left "on". I did watch a video on youtube for CM Stubborn Trojan app and the guy had to root his phone first. (You could try some/several of the root checker apps, if you want to know). So lets assume the CM app worked properly and removed trojan as it could get root without giving you a root request notification.
It's entirely possible that your reinfection is from your external SD card or via some other means eg. your router has had some ports opened or some other means. (Sorry I should have said reset router when I said change router password [do this for all routers you use & update firmware & ensure remote access is off (ref. dirty cow) while you are about it too!]
So I would reinstall CM Stubborn Trojan (lets assume it removes malware as it has root, even if it just blocks them it helps us) so you can then reflash official stock ROM for your country (& update to newest version if available), you must flash the FULL stock ROM so all partitions are reflashed. partial stock or custom ROM will not do this & potentially leave you open to reinfection! Reflash the FULL STOCK ROM is the only way to "easily" be sure you have cleaned the malware from your phone. NOTE: just doing a factory reset will NOT remove the malicious apps if they are in operating system folders, this only works for malicious apps in user data areas! Then you must make sure all possible ways you can be reinfected eg via sync, external SD cards or storage, your PC, router etc are cleaned/blocked/reset/updated
If you are not getting updates for your ROM you might want to consider installing a custom ROM (AFTER you have flashed the stock ROM!) from a reliable & trustworthy source, if available for your model, so that you get security patch updates. But you need to research and consider the risks of things like bricks, security etc for yourself first.
Hope this helps you clean your phone
Sometimes, it's times, it's the firmware itself that is infected
IronRoo said:
Did it root your phone first? Else I can't see how it would be able to get to those apps installed as system. If so, if it was me, I'd unroot my phone at the very least & uninstall the CM apps since they do not have a good reputation so far as data snooping goes and excessive app permissions etc goes.
eg (from The Capitol Forum)
see the alteco report (about investment risks but they ran tests on other apps that didn't do anything, what battery savers don't help!!! :silly: )
https://drive.google.com/file/d/0B_zW4GWDn5wpVDBiLUpDcE9IS0E/view
Now I haven't used the app you quote but if it didn't root your phone then it can't have removed the malware and they are likely up to their old tricks ie the app doesn't really work, they have just been blocked or something. (Ask yourself why aren't there other apps from well known companies that can remove trojans in system on play store?) ANd with their dodgy reputation for ads, & selling user data if it did root your phone you may only be slightly better off!!?? But at least it should only be your user data they are gathering and not your bank account number to try and get ya money like the malware guys!
Anyhow happy for you if you really are free of malware and don't forget to change all your passwords for all accounts, your routers etc else you could be reinfected by the time you read this!
I would reflash the stock ROM to be sure (backup ALL your pics, txts address, whatsapp etc etc)
I would also be interested to know how the app worked, if you can explain it. Did it say it would ROOT your phone? (there is nothing in their write up to say it will, Google would not allow an app that can root on play store, as far as I know) Do you have an app that can read what system apps are installed, like Link2sd? Does that show any of the malicious apk?
Click to expand...
Click to collapse
In my case, I have a similar issue - however, it's an infected SYSTEM file - which Malwarebytes spotted (but is unable to remove), and is NOT related to the KingRoot dodgy file. It's actually two different Trojans - both in /system/priv-app (settings.apk and smsservices.apk) - the first is the more problematical. (It's problematical because it's a critical system file/app/service - killing it without a replacement is NOT an option.) How the heck do you replace such a critical system file when it got itself hijacked?
In this case, I would agree with just a complete factory reset or ROM reflash. Like it is simply too much of an issue to try removing and recovering everything. Especially, once it's deep within your system....
Josh Ross said:
In this case, I would agree with just a complete factory reset or ROM reflash. Like it is simply too much of an issue to try removing and recovering everything. Especially, once it's deep within your system....
Click to expand...
Click to collapse
This was what I did finally, I went to service centre and spent bucks. They reloaded the firmware I suppose ( not flashing it) and instantaneously it was as good as new. I think, malware was itself part of original installation like uc browser- it was there. It just activated after some time or may be I clicked on some advertisement while running app and then the hell happened.
Any ways, its working fine, added an adblocker, restricted usage to few apps and keeping my fingers crossed for future.
Sent from my A0001 using XDA-Developers Legacy app
Yeah, the bloatware that you get with some phones nowadays is unbearable. If there is an option, go with a rooted phone, custom ROM, some couple custom solutions for protection and you will be good to go. And they work better than defaults most of the time. Good luck! Hopefully, we will only be hearing good news from you
PGHammer said:
In my case, I have a similar issue - however, it's an infected SYSTEM file - which Malwarebytes spotted (but is unable to remove), and is NOT related to the KingRoot dodgy file. It's actually two different Trojans - both in /system/priv-app (settings.apk and smsservices.apk) - the first is the more problematical. (It's problematical because it's a critical system file/app/service - killing it without a replacement is NOT an option.) How the heck do you replace such a critical system file when it got itself hijacked?
Click to expand...
Click to collapse
I'd reflash stock.

[Privacy] Puttin' Google in the Goolag

Situation:
I have somewhat of a "love-REALLY HATE" relationship with Google apps and ecosystem.
On one hand, they are great at what they do.
On the other, it's like having a spy satellite overhead, given how much telemetry it does.
Question:
I'd like to cut all of the Google apps' internet, location, sensor and background activity access for good when not in use. Or at least spoof whatever personal data is being sent (Device info, location, activities, etc). Any way to do that?
What I've done so far:
My current way-to-go method involves installing RethinkDNS+firewall, then blocking every single one of google apps including Gboard. It sort-of works, but very inconvenient, as I have to manually enable internet access for a particular app and/or service when needed. I also tried edXposed's XluaPrivacy module to cut off access to certain permissions. Again, cumbersome.
After going through F-Droid, I found an app called "Insular", that claims being able to put all of the "big brother" apps (such as Gapps) behind an isolated sandbox, a digital gulag of sorts.
Thanks for the pointer to Insular whose advertising on F-Droid says:
Insular is a FLOSS fork of Island.
With Insular, you can:
Isolate your Big Brother apps
Clone and run multiple accounts simutaniuosly
Freeze or archive apps and prevent any background behaviors
Unfreeze apps on-demand with home screen shortcuts
Re-freeze marked apps with one tap
Hide apps
Selectively enable (or disable) VPN for different group of apps
Prohibit USB access to mitigate attacks with physical access
Click to expand...
Click to collapse
Based on that, I suspect this XDA thread about "Island" may be useful.
[APP][5.0+][BETA] Island - app freezing, privacy protection, parallel accounts​
"Island" is a sandbox environment to clone selected apps and isolate them from accessing your personal data outside the sandbox (including call logs, contacts, photos and etc) even if related permissions are granted. Device-bound data is still accessible (SMS, IMEI and etc).
Isolated app can be frozen on demand, with launcher icon vanish and its background behaviors completely blocked.
Click to expand...
Click to collapse
Totesnochill said:
Question:
I'd like to cut all of the Google apps' internet, location, sensor and background activity access for good when not in use. Or at least spoof whatever personal data is being sent (Device info, location, activities, etc). Any way to do that?
Click to expand...
Click to collapse
Like you, my relationship with Google is strained where I don't set up any Google Account on Android and it works just fine.
I don't have a contacts.db sqlite database for that reason too, so my favorite communication apps are all designed to store their own contacts db internally to the app itself.
I replace Google apps with FOSS equivalents such as NewPipe (or, more recently, Vanced YouTube) for example.
And I spoof my GPS location by default (using Lexa Fake GPS, for example).
Of course, given I don't have a Google Account on my phone, I use the Aurora Store instead of the Google Play Store. Of course, I strive for apps that don't require Google Framework Services (GSF) which Aurora neatly filters out for us.
Since I'm not rooted, I can't delete Google Play Store, but I can disable it, which is almost as good.
And, I use privacy-aware apps for my messenger, calendar, contacts, and dialer apps (many of which come from Simple Mobile Tools' suite which are available on F-Droid).
To keep my WiFi SSID/BSSID/GPS/Strength/etc. out of the hands of Google (& Mozilla and Kismet and Wigle, etc.), I add "_nomap" to the SSID and I turn off the SOHO router SSID broadcast (which "hinders" most cellphones from uploading my BSSID information to Google public servers); but then I have to also turn off "AutoReconnect" on Android 12 and also I have the Developer Options set in Android 12 to randomize the MAC address on EACH connection; however that means I need to set any "static" connections on my LAN from the phone and not with address reservation on the router (which typically utilizes the MAC address).
And it's not just Google we need to keep our data out of their hands, as I even use WhatsApp privacy aware tools such as the WhatsApp dialer and WhatsApp Click to Chat mechanisms (to keep my contacts out of Facebook's hands too).
For offline maps, I use a quick web browser lookup on a privacy browser (such as Tor or Epic or Opera), since the Google address lookup is still the best in the world... (which is the love/hate relationship, right?)... and then I paste the GPS coordinates that the privacy browser found on the maps.google.com web site into a local routing application (such as a shortcut to a browser to google maps on the phone or better yet, to a dedicated offline map program such as OSM And~), and even traffic can be gotten without Google (e.g., Sigalert & 511 apps).
I used to reset the Advertising ID with a homescreen shortcut that could be activated from Windows via a batch file over Wi-Fi, but now with Android 12 we can wipe out the Advertising ID altogether (i.e., reset it to all zeroes). However, I still periodically change my GSF ID and other supposedly unique identifiers.
I'm still trying to figure out the implication of "trackers", so if anyone has more information about them, please advise.
Off hand there must be scores more things I do for privacy, where we probably should have a main thread on this site of all the myriad things people can do to increase their privacy on Android (some of which I've screenshotted for you below).
GalaxyA325G said:
Like you, my relationship with Google is strained where I don't set up any Google Account on Android and it works just fine.
Click to expand...
Click to collapse
Thanks heaps for the very in-depth response. Really opens up on a lot of things I wasnt aware of, and I realized that unlike desktop, when it comes to mobile privacy I'm still a bit behind.
Are there any guides where I can do some reading on the concepts and techniques you've described? Especially regarding contacts.db sqlite database, GPS spoofing and privacy-aware options for accessing WhatsApp.
Also, what are your thoughts on MIcroG?
Totesnochill said:
Thanks heaps for the very in-depth response.
Click to expand...
Click to collapse
I try to put effort into the response so that others can benefit (but nobody ever presses the like button so maybe it's not worth the effort).
For example, when I mentioned I spoof my GPS, I looked up the app I used and linked to it so that you wouldn't have to test a score of apps like I did to find the best one.
Totesnochill said:
Really opens up on a lot of things I wasn't aware of, and I realized that unlike desktop, when it comes to mobile privacy I'm still a bit behind.
Click to expand...
Click to collapse
That was just off the top of my head where there has to be at least a hundred different privacy things I do on Android to distance me from Google that most people don't bother to do.
I admit, sometimes it feels like we're putting a dozen locks on the front door, but in the end, we LEARN a lot about Android in the process.
A lot of the protection is to protect ourselves from others who don't know how to configure their phone, so they are uploading our private information (like our contacts and home locations) to Google databases.
For example, the typical Android phone when it drives by your front door uploads to google your exact location, your signal strength, your unique BSSID and your SSID... where you'll note in my response above I had to do a half dozen things on my phone and router to prevent that from happening (i.e., just adding "_nomap" doesn't work but most people don't realize that because they don't think about it).
Totesnochill said:
Are there any guides where I can do some reading on the concepts and techniques you've described?
Click to expand...
Click to collapse
I'm sure there are plenty.
But I have been in MANY situations where there are none.
Take, for example, changing the GSFID... almost nowhere on the net is that described how to do it. Almost nobody does it, but it can be done if you know how.
I really should write a set of privacy tutorials so that everyone can do it but I have to find the time, and this web site doesn't like text tutorials I found out recently. So they make it a PITA in the end to help people. Sigh.
Totesnochill said:
Especially regarding contacts.db sqlite database, GPS spoofing and privacy-aware options for accessing WhatsApp.
Click to expand...
Click to collapse
If you look at the links I gave you in my response for contacts, gps spoofing and privacy-aware WhatsApp, you'll get a good start.
A quickie is to not have a contacts.sqlite database, which means you need your own contacts.csv or more likely contacts.vcf file, which you can maintain on the PC if you like (works with Excel for example).
Now that you don't have a contacts.db sqlite database, you need to find the contacts and dialer and mms/sms apps that can suck in their own contacts.vcf file, which I pointed you to in the Simple Mobile Tools suite.
For GPS spoofing, I didn't mention you need to turn "Mock Location" on in the Android Developer Options, but that's what most people already do so I assumed you knew that. Once you turn that on, you can just select the mock location app of your choice (where I suggested one above which isn't perfect but none of them are).
That particular app moves your location every few feet and it gets the altitude and it can easily be stopped and started, etc., but I'd like it if it didn't move just "west by 10 feet every minute" but instead if it would follow a pre-determined route that I could give it. So they need a lot more work to be as good as we'd like them to be.
For What'sApp privacy, look at the two apps I linked to in the prior post as they don't need the contacts.sqlite database to work.
Your WhatsApp should only have an icon in your folders for the people you contact and nothing else, IMHO. That's the best privacy you can get, although WhatsApp does decent hashing on the contacts file when it uploads it to their servers - but still - why give them your entire contacts when you only contact 10 people (or whatever) on WhatsApp. Right?
Totesnochill said:
Also, what are your thoughts on MIcroG?
Click to expand...
Click to collapse
Funny you mentioned microG since I installed it for the first time yesterday when I was setting up Vanced Youtube based on this thread.
I generally choose apps that don't use GSF but sometimes you have to use a GSF app (e.g., Zoom meetings), and then it's nice to use MicroG instead of Google Services Framework.
I only installed it yesterday so I really don't know how well it will work for me as I didn't even need to install it to install VancedYoutube. You just need it to log into YouTube but I never do that anyway.
In summary, there's probably a hundred things we do to our phones to set up privacy but I'd have to write each one up in detail to help everyone and that's a lot of work.
Especially if almost nobody reads these threads.
GalaxyA325G said:
I try to put effort into the response so that others can benefit (but nobody ever presses the like button so maybe it's not worth the effort).
In summary, there's probably a hundred things we do to our phones to set up privacy but I'd have to write each one up in detail to help everyone and that's a lot of work.
Click to expand...
Click to collapse
Thank you for doing God's work out there. Ethics like these are what creates the content that keeps the internet from becoming a dumpster fire otherwise. Tutorials and explanations that come from the fellow users are THE best and usually directly on-point.
When I was just starting setting up Linux environment, I wrote "how-to notes" on every successful step. At first it was more like the "sticky notes" to help me remember, but eventually (as the list grew) I started writing these tips in a way as if they were to be read by someone with little background in the subject. What used to be the "Linux notes" file became 10563 lines monstrosity now... So every time I need to answer someone's question I just copypaste from this file.
GalaxyA325G said:
That was just off the top of my head where there has to be at least a hundred different privacy things I do on Android to distance me from Google that most people don't bother to do.
I admit, sometimes it feels like we're putting a dozen locks on the front door, but in the end, we LEARN a lot about Android in the process.
Click to expand...
Click to collapse
Absolutely. I've spent about 2 weeks tweaking my new phone (Nokia X6), trying out different roms/recoveries and app setups. Pissed off a bunch of people in the process - most wouldn't understand that I'm setting up a system to last another 7 years, just like my previous phone (Galaxy Gprime). Not to mention that with the amount of sensitive info on the phone, security and privacy are a legit concern, and worth learning about just how one learns to install and use the lock on the front doors.
Phones became disposable both in software and hardware, and so have the general attitude towards the devices.
My final setup became AOSP PixelPlusUI Rom (comes with about openGapps nano worth of Google stuff) with most other stock apps (contacts , dialer, keyboards, msg etc) removed via ADB and replaced with F-Droid alternatives.
I've also used Rethink DNS with whitelist set up/AppInspector to put Google in the Goolag - no internet access for anything google-related at all times. So far my phone has 253 apps blocked (including almost all of the system apps). Surprisingly, all of the necessary apps off google play store (Whatsapp, FB messenger) still function well. Whenever I need a particular Gservice (like a translator), I just enable access for that (and only that) until I dont need it anymore.
GalaxyA325G said:
If you look at the links I gave you in my response for contacts, gps spoofing and privacy-aware WhatsApp, you'll get a good start.
A quickie is to not have a contacts.sqlite database, which means you need your own contacts.csv or more likely contacts.vcf file, which you can maintain on the PC if you like (works with Excel for example).
Click to expand...
Click to collapse
Thanks! I'm not sure why the links didnt show up at first. I'll give this a look. I've been using "simple mobile tools" for quite a while, and I must say I like how they are completely autonomous and transparent about what prems they need and why.
GalaxyA325G said:
For GPS spoofing, I didn't mention you need to turn "Mock Location" on in the Android Developer Options, but that's what most people already do so I assumed you knew that.
Click to expand...
Click to collapse
I definitely saw the option in the dev settings, but didnt experiment with it. Well, now I know, thanks!
Funny you mentioned microG since I installed it for the first time yesterday when I was setting up Vanced Youtube based on this thread.
I generally choose apps that don't use GSF but sometimes you have to use a GSF app (e.g., Zoom meetings), and then it's nice to use MicroG instead of Google Services Framework.
I only installed it yesterday so I really don't know how well it will work for me as I didn't even need to install it to install VancedYoutube. You just need it to log into YouTube but I never do that anyway.
In summary, there's probably a hundred things we do to our phones to set up privacy but I'd have to write each one up in detail to help everyone and that's a lot of work.
Click to expand...
Click to collapse
I will give microG a try (in a form of LineageOS for MicroG). In fact I did install this rom before but I was a bit confused about what it did and assumed that it is a regular LinOS repack with Gplay store and apps built-in. Time to test again.
Especially if almost nobody reads these threads.
Click to expand...
Click to collapse
Threads like these is how I passed my uni exams. Not even exaggerating XD. Thanks again for a very detailed insightful read!
Hello my friends, very happy to meet good hearted people who think alike about Gugle.
as my name suggests I'm noob still and didn't understand much of discussion but very happy to meet you friends. My love & warm regards to all here. Here is what I did uptill now before I saw this thread :
1> Load GSI/ROM.
2> Load TWRP
3> Load Magisk
4> Load microG
5> Install Service Disabler
5.1> Disable bunch of internal services like telemetry, analytics, location (FusedLocation not possible to disable) for every app (3-rd party & system app), contacts sync etc.
6> Install SD-Maid Pro
6.1> Freeze apps like Gugle Calendar Sync Adapter & Gugle Contacts Sync Adapter
7> Install CIAFirewall Fake VPN & configure it.
8> I use Opera browser for Banking, Youtube, Cab booking, Surfing, Gmail, Food Order etc.
9> Install Aurora Store for general app management & installation
10> For contacts I save all contacts in notepad app, and let all calls purposely bounce then I call back aftter checking whose call it was & state false apologies.
#FYI :- Gugle, Mycrowsowft , eFbee are not really to be blamed, rhey are having to comply with FBI, Phentagon, Central Intelligence Agencies, Interpol, etc. or they have to shut bizness.
GalaxyA325G said:
Like you, my relationship with Google is strained where I don't set up any Google Account on Android and it works just fine.
Click to expand...
Click to collapse
Hi, I’m glad to have found this thread as I’m not happy with how my normal Android phone is spied upon by google. But I’m not technically knowledgeable and I don’t want to risk bricking my phone by trying amateur attempts at rooting, or installing Insular, etc…
So far I have not signed in, I allow only minimum permissions, use Netguard, Aurora and FDroid, and have disabled bloatware. I also force-stop apps as much as possible when not in use, and enable Location and Bluetooth only when needed.
I know this is just an amateur, token attempt to reduce spying - so I may have to eventually buy a degoogled phone.
I’ve also done some of the privacy suggestions in the attachments you posted.
Could you help me with a couple of newbie questions…
1): I might have minimised some personal data harvested by most of the apps I use, but I guess my privacy precautions will have no significant effect on the amount of telemetry collected by google?
2): If my precautions really have no significant effect, I’m wondering if would it make any real difference if I was signed in as I don’t use any of the google backup services anyway?
Thanks.

Categories

Resources