Strange Malware on my device - General Questions and Answers

Hi all.
I need some help / info on this. I have googled but found nothing similar to this.
I have a rooted Google Pixel 2 Running the stock December Pie firmware (latest at the time of writing)
Recently i noticed that apps that are already installed on my phone are reinstalling themselves silently.
I use MobileGO on my PC to manage my phone and it keeps showing that apps have been installed when they haven't updated via Play Store... and i have not side loaded them either.
At first i though it to be an error with MobileGO but it happens to random apps almost daily so i decided to extract the apps to pc and compare the hash values of the "updated" versions against the same verion number extracted from the play store and of course they are different. Something is modifying my installed apps but there no other symptoms.
I want to find out what is causing this rather than just do a reset or re flash however im not sure where to start as this is symptom less i wouldn't have even noticed if not for managing the phone via the pc
I also want to look for what has been modified in these version that are now on my phone can anyone with apk reversing experience please help me compare for differences or a common modification between the files ?

Related

[Q] kobo vox: install google market?

hey all,
first post, apologies if this might be in the wrong place.
i've just picked up the kobo vox, and it's awesome, but i can't figure out how to get the android market running. i've got the apk installed, but the device doesn't give me the option to add a google account. the kobo vox explicitly says it supports the android marketplace, so i'm hoping i'm doing something wrong.
thanks!
I'm in the same state. I've looked about and managed to use some of Cyanogen's packages to install a few core stuff like the framework and the market app itself, but trying to run the Market asks me to register a Google account, which always fails saying there was a connection issue. On a further reboot android.process.acore decided to crash every five seconds and I had to reset the device to factory settings.
This kinda sucks because the device is fairly solid, but the default "market" is a joke. I'm already annoyed by the fairly large amount of preinstalled apps (which can't be uninstalled, as usual), but not having proper Market access would probably be a deal killer.
Please use the Q&A Forum for questions Thanks
Moving to Q&A
What about Rooting?
I have run into the same problem. I think that before you can install the full android market we will have to Root the tablet. Has anyone tried the Gingerbreak.apk? Or is there some other way to Root the tablet?
Syncmaster700nf said:
I have run into the same problem. I think that before you can install the full android market we will have to Root the tablet. Has anyone tried the Gingerbreak.apk? Or is there some other way to Root the tablet?
Click to expand...
Click to collapse
I've tried GingerBreak on my Kobo Vox and it seems to have installed, however I'm not certain the SU access is working properly. When I try repairing permissions in ROM Manager, I get the message "An Error occured trying to run priviledged commands!". It also fails when I try to backup my ROM.
This is honestly the first Android device I've ever owned so I'm not certain that I'm doing everything correctly. I did make sure to allow SuperUser permissions to ROM Manager, but I'm still getting errors. Any help from a Veteran Android user would be appreciated.
Can't get past the Android Login
After rooting and installing Busybox I was able to install the Android Market but every time I try to login the app will not connect to the Market to confirm my ID, it seems to time out. Any Ideas on what I can try?
Turns out my inability to repair permissions was simply due to me not having busybox installed. I can attest that GingerBreak does successfully root the tablet.
I'm hoping I can find a way to install Clockwordmod recovery in order to install the google apps from CM7. I tried simply copying the files into place without success.
So, did you manage to install busybox? What version and where?
Tell me if you manage to install the recovery, the vox don't seem to have one by default.
If we manage to install all the google app and the googleframeworkservice, that would make the tablet a lot better and give the possibility to install the android market.
I was able to install busybox 4.3 /system/xbin. I do not know about a recovery mode but I did manage to put the tablet into "Safe Mode" after it do stock in a loop at bootup but I am not sure how I did it. According to user help you can not update the firmware from the SDcard.
Have you tried to install Clockwordmod?
I managed to install the googleserviceframework, but I need to install some other thing that don't want to install.
I also manage to install youtube (the real one) and it work great, I just can't sign in...
In the accounts & sync settings section, I can create a google account, but It can't communicate with the google server to set up the account, it give me the error:
"Can't establish a reliable data connection to the server."
It's probably cause by some app that I didn't manage to install yet, like "onetimeinitializer", "googlepartnersetup" and some other...
I've managed to install Busybox, but have yet been unsuccessful installing the Google Framework.
I was able to install the Clockwordmod, but I have yet to find a phone or tablet on it's list that is compatible with the Kobo Vox. I'm going to do my research to see if any phones or tablets have similar specs to the Vox and see if that will work. So far I've just been picking at random and trying it.
Try the B & N Nook Color - same CPU, Memory & screen size.
That was my first thought. Unfortunately no luck. With a couple of them I can seem to get them start loading as if they're going into an update but it always errors out. I'm now just systematically going through the list and driving every version.
If you attempt to install a version of Clockwork made for another device, you'll brick it.
Don't forget that after dropping in the files to the various system directories, you also have to set permit permissions properly.
Also, would be good to request a Kobo Vox forum here: http://forum.xda-developers.com/showthread.php?t=1301121
If anyone in this thread is actually a developer who knows how to compile and so forth, Koush has a brief guide to porting Clockwork:
http://www.koushikdutta.com/2010/10/porting-clockwork-recovery-to-new.html
Manual Configuration is a must have option. Thanks
wow, pretty lame that the android market seems not to be supported despite it being touted as an official feature
on a side note, has anyone figured out how to change or remove that default dock (without rooting)? it's kind of a pain in the ass.
I've installed a couple dozen different clockwork of recoveries so far and haven't bricked it yet but maybe I should quit while I'm ahead. I'd rather not brick my shiny new Kobo.
Need Kernal Version & Build Number
I have to return my Kobo Vox because the speaker is not working. Under Privacy Settings I have done a Factory Data Reset but I am still showing the Super Icon. Does anyone have a copy of the original firmware or know how to unroot the device?
jakeopolis said:
wow, pretty lame that the android market seems not to be supported despite it being touted as an official feature
on a side note, has anyone figured out how to change or remove that default dock (without rooting)? it's kind of a pain in the ass.
Click to expand...
Click to collapse
Official marketing material says apps but doesn't say Android Market. Some media outlets misquoted and wrote Market falsely.
Sent from my Nook Color!
Syncmaster700nf said:
I have to return my Kobo Vox because the speaker is not working. Under Privacy Settings I have done a Factory Data Reset but I am still showing the Super Icon. Does anyone have a copy of the original firmware or know how to unroot the device?
Click to expand...
Click to collapse
Factory Reset just clears the data partition but doesn't reset the system partition.
Until someone properly compiles a custom recovery or finds a stock reset file, there's no safe way back.
Sent from my Nook Color!

Bootloop after updating apps like Telegram?

Maybe this is a very stupid question but I really have no idea why this problem occurs
My phone (HTC One S Ville mit Resurrection Remix (Android 5.1)) worked perfectly fine until last Friday.
At this date a new update of Telegram Messenger was released. I installed it and while installation of this app my phone did a restart and got stuck in a bootloop.
I restored using TWRP and retried - same problem. I also deleted the app and its data to do a fresh install - bootloop after installation.
Furthermore I noticed the exactly same behavior for the last update of WiGLE. All other apps could be updated to their latest versions without problems.
I used Google Play to update these apps.
What could be a problem for that? Is android just too old to these apps or could there be a collision with something installed on my phone/the ROM? How can I debug this?
I am not an android expert and I am very thankful for any kind of help :')
Thank you! =)
Same Problem with LG G2 mini / Android 6
Hello,
I'm facing the similar problems since a few days. Running Resurrection 6.0.1 on LG G2 Mini.
It started with installing maxdome-app at thursday, last week. Phone went into bootloop.
Wiping and or deinstalling the app in safe-mode did not work. So I restored to an older backup. This worked some time but ran into bootloop after a while ( I do not know what I've done exactly to get into this, this time).
I tried around a little. One part was a fresh install of cyanogenmod 13. This worked some time and I could find out that installing telegramm messenger had the bootloop-effect repeatable.
Sorry for not giving any help to the thread-creator but I hope we can give any more information to each other or anyone else can help?
Right now I am installing apps and backing up all the time to get some half-working system, but better ideas would be appreciated
Good to know that I am not alone
I figured out that there are a few more apps causing the bootloop. Here is a list:
WiGLE Wardriving
Telegram Messenger
pr0gramm.com app
Playstore Changelog (XPosed Module)
Statusbar Download Progress (XPosed Module)
Maxdome
I already updated Xposed Framework, Google Play Services and Google WebView to prevent incompatibilities. Problem still exists.
I updated everything as far as possible and made a backup using TWRP so I can restore my OS at any point. Further you could backup your apps using Titanium Backup. I it worth its price!
I started facing a similar problem of app updates causing bootloops on my device which was running CandySix ROM / 6.0.1. Apps causing bootlooping included Greenify and Nova Launcher. I had another device which has a factory 6.0.1 ROM rooted with Xposed and that device didn't have bootloop issues with these same versions of apps. Fortunately I was able to update the first device to a LineageOS 14.1 7.1.2 ROM and once again continue using the latest version of apps without bootlooping issues - but I never did understand exactly what was causing the bootlooping problem. That was a rather frustrating experience.
When the first bootloop happened, I was updating one single app, so I knew it was probably the one I should roll back to the previous version to fix the problem - so I didn't have to resort to a full TWRP restore.
How did you do a rollback of an app while you are in a bootloop? I would be glad to know that
Unfortunately my Device One S Ville does not get any updates anymore
In my case I can boot to custom recovery/TWRP to delete the app apk from the its /data/app folder - which basically prevents it from running when I reboot the phone. I also use an apk extractor app to save the apk of all apps I install and I also use Titanium Backup - so between those two I have copies of the older apk versions to install. You can also find older apk versions on apkmirror.com.
Depending on the severity of the bootloop, you can also connect your phone to a PC and use adb to disable/uninstall the app causing the problem if you know which one it is.
-kw said:
How did you do a rollback of an app while you are in a bootloop? I would be glad to know that
Unfortunately my Device One S Ville does not get any updates anymore
Click to expand...
Click to collapse
Thank you for your explanation! This sounds a bit more stressful to me than rather restore via TWRP but could me more time efficient for larger ROMs. I will keep this in mind
Thanks and can confirm that deleting the app folder/apk via twrp can help. I got back into my android 6 again. For me seems more that DavDroid caused it (but Telegram was suspicious, too).
DavDroid mentioned in the last update on 4th November, that they released a workaround against crash and bootloops on some custom roms
Depending on how old your TWRP backup is, restoring from TWRP is an option. But often I have not made a backup in a while or made many recent changes that I didn't want to lose, so the other ways I suggested are more time efficient in some cases.
-kw said:
Thank you for your explanation! This sounds a bit more stressful to me than rather restore via TWRP but could me more time efficient for larger ROMs. I will keep this in mind
Click to expand...
Click to collapse
Upgrade to Android 7
I can add EDS app to the non-working programs.
As far as I could install Telegram (same Version) by downloading .apk I suspect the problem is something depending with playstore. This would explain the many affected apps. But of course I don't know it for sure.
Inspired from divineBliss I upgraded to Android 7 (LineageOS 14.1) and could install everything as I wanted without problems so far. Thanks for that. Looks good, but I will wait some days after I'm convinced.
@-kw: did you try the following link for upgrading to higher android-version?
https://forum.xda-developers.com/htc-one-s/development/7-1-lineage14-1-htc-one-s-ville-t3540981
Glad you were able to update ROMs and escape the bootlooping problem
I have been running LineageOS 14.1 for about a month now without any bootlooping issues due to app updates - so I expect you won't have any issues. I did cause some dread time consuming to resolve bootlooping due to some bad substratum themes, but that's a different issue altogether .
michibr said:
I can add EDS app to the non-working programs.
As far as I could install Telegram (same Version) by downloading .apk I suspect the problem is something depending with playstore. This would explain the many affected apps. But of course I don't know it for sure.
Inspired from divineBliss I upgraded to Android 7 (LineageOS 14.1) and could install everything as I wanted without problems so far. Thanks for that. Looks good, but I will wait some days after I'm convinced.
@-kw: did you try the following link for upgrading to higher android-version?
https://forum.xda-developers.com/htc-one-s/development/7-1-lineage14-1-htc-one-s-ville-t3540981
Click to expand...
Click to collapse
@michibr:
I am very pleased with my Resurrection ROM; but this is stuck on Android 5.1. I will give a new ROM a try when I have the time for that
At this time it seems like this is the only solution of escaping the bootloop-problem
FYI
I updated to Android 7.1 RR and now I can update all my Apps without problems
I am sorry that this is the only solution I can provide, but still better than nothing
Hi all,
I'm having exactly the same problem, it all started with FB, then some other apps.
I had to reboot into Safe Mode to uninstall those apps.
I'm running on cm12.1 and I have my own reason not to upgrade to higher Android.
Am hoping someone can come out with a solution.
For now, here's my list of apps:
- Facebook (Facebook Lite is fine)
- Telegram
- Bluemail
- Local telco app
I am sorry to inform you that I did a lot of research and was not able to find any other solution than upgrading to a higher android.
The problem is with appt2 someone reported it in google's issue tracker and someone from goole descriped it in detail here's it :-
CyanogenMod has this function getPkgName (https://github.com/CyanogenMod/android_frameworks_base/blob/cm-13.0/libs/androidfw/AssetManager.cpp). It creates a ResXMLTree on the stack and points it at a buffer from an asset without making a copy. Then it closes the asset before the ResXMLTree is destroyed.
For apps built by aapt, this is benign. However, aapt2 produces UTF-8 string pools, which cause the ResXMLTree's ResStringPool(mStrings)'s mCache to become non-null in ResStringPool::stringAt (https://github.com/CyanogenMod/android_frameworks_base/blob/cm-13.0/libs/androidfw/ResourceTypes.cpp). Then ResStringPool::uninit dereferences mHeader (which is now dangling), and a crash ensues.
This crash shows up in different ways. On one Cyanogen OS device, the launcher crashes when an app built with aapt2 has been installed, but only if the manifest is large (probably due to how deallocation happens for small vs large blobs). On another device, system_server crashes at boot if an aapt2-built app is installed.
We're attempting to work around this with a custom build of aapt2 that always produces a UTF-16 string pool for the manifest. Results so far are promising.
Can this be patched somehow at the OS via xposed for all of the roms that won't get updated?
The fix for this issue is available here (CM13):
https://forum.xda-developers.com/showpost.php?p=74636021&postcount=216
CM12.1:
The fix for this issue is available here (12.1):
https://forum.xda-developers.com/showpost.php?p=74842530&postcount=464
Is this .zip patch for any device with any Lollipop 5.1.1 ROM?
Because I just installed it and my HTC one X with Resurrection Remix ROM (Lollipop 5.1.1) goes black after the HTC logo.
lescht said:
The fix for this issue is available here (CM13):
https://forum.xda-developers.com/showpost.php?p=74636021&postcount=216
CM12.1:
The fix for this issue is available here (12.1):
https://forum.xda-developers.com/showpost.php?p=74842530&postcount=464
Click to expand...
Click to collapse
Hello what is about cm11 kitkat 4.4.4 sameissue but no fix-
could anyone make a fix? Please help.

Cannot install APK files?

I have Android 7.0 on my Note 5. I'm trying to install an older version of Gmail (I have the Unknown Sources thing already turned on) . I have tried downloading the APK files from various sites, but every time I click "install" it always says it can't install the file because it's corrupt.
I've had a few updates since getting the Note (it's been about a year now since I got it from AT&T) and I think one of those updates may be what's causing it to stop installing the APKs. Obviously other changes have been made under the hood, but it has to be the OS because I could install APKs when I first got the phone (back when it had Marshmallow on it).
I've tried wiping the cache and even doing a factory reset and it still won't install the APK file. I've tried several APK files and I keep getting the same response; App not installed. The package appears to be corrupt.
What's really odd is yesterday I was reading an article and it mentioned installing a APK for Google Now integration with Nova Launcher. I thought what the heck and downloaded the APK. It installed without any problems. I got this APK from the same place (APKMirror) I was getting the older APK versions of Gmail. I wonder why this one worked and the Gmail ones didn't?
If anyone could help me out I would appreciate it.
Thanks.
I managed to install an older version of ES File Explorer this morning. I got it from the APKMirror webite. Unfortunately, none of the Gmail APKs will work. Obviously I can still install APK files, so I'm going to have to search around on some other sites and see if I can find a good one for Gmail.

"Files has stopped" Issue

Hi there. I've just upgraded my phone to Oreo and I have this issue with the 'Files' app (not the My Files app). Whenever the Files app is launched to pick a file (e.g. attach a file in Gmail or select a photo in Snapseed) the Files app will immediately crash with a 'Files has stopped' error.
I have tried booting the phone into safe mode and tried attaching a file in Gmail, which worked perfectly. So my guess is that a third-party app is causing the persistent crash. However, my phone has several apps and trying to identify the culprit app(s) will be too much of a hassle.
Does anyone else have the same issue after upgrading to Oreo and have a solution to it (other than factory resetting)?
Any help will be greatly appreciated. Thanks in advance.
Probably there's a bug somewhere. So you could do any of the following:
1. Wait for an update
2. Do a factory reset
Apart from these two, I don't see other options.
RossTeagan said:
Probably there's a bug somewhere. So you could do any of the following:
1. Wait for an update
2. Do a factory reset
Apart from these two, I don't see other options.
Click to expand...
Click to collapse
Hmmm well alright, thanks for your help
I have the same problem with my NOTE8, after the March Update, this problem started to appear.
Got in touch with the guys from MyFiles and after few e-mails, they say:
''I checked your log files and found out some error.
But these are regardless of MyFiles so cannot handle it anymore by our side.
com.android.documentsui has problem and it seems to be below apk''
Went here: android.stackexchange.com/questions/187501/what-is-com-android-documentsui
And I believe its a major software glitch that has to be corrected by google/android/samsung...
As others have suggested this may be due to the app nit working with Oreo.
I use FX explorer app from play store, it works with every version of android I have ever used including S8× exynos Oreo
As well as being a great file explorer / management app it can be used to navigate to a specific file to attach etc.
https://play.google.com/store/apps/details?id=nextapp.fx
Hi, sorry I forgot to update. I don't know what happened, but I think after a minor software update, the issue resolved on its own.
Nevertheless, thanks for all your insights and advice on this matter
My files stopped on my android galaxy phone
Hello dear,
Hope you are fine.
Dear, I have a problem with my samsung phone which is : "My Files Stopped Working..". Could you help me resolving this problem please??
Also, I have another question, if I want to do system update or software update for my phone, does it affect my files, folders, pictures, videos, etc... Or it just update the phone system??
If you know about these problems, please help me.. And thanks alot.

Rooting Samsung Galaxy Express GT18730T - Android is v4.1.2

I have followed many suggestions, but have failed so far. ONE of many difficulties is that I can not get the phone to download iRoot APKs, so did it on my PC instead, and succeeded in copying them into the Phone's DOWNLOADS (quite visible on my PC) but the phone does NOT show them when I open Downloads - so I can not try to install them to see if they will root the phone. A solution to rooting would be welcome; as also how to make those APKs visible in the phone.
I downloaded and installed File Manager App and that revealed the files copied in. One problem solved. They would not install until I had changed Settings to allow APK's from unknown sources to be installed. Second problem solved. Rooting was solved by installing iRoot. Third problem solved. But even then I could not dispose of unwanted system Apps, till I downloaded and installed NoBloat Free; Fourth problem solved. Then Application Manager offered to uninstall updates, with the warning that the app would be replaced by the factory version, but went ahead and uninstalled the app anyway. Fifth Problem solved. HOWEVER, even though Application Manager now only shows a handful of apps, the screens are still cluttered with many icons I was hoping to be rid off. Can someone tell me how to remove the already uninstalled apps from the screens ?

Categories

Resources