Introducing XDA:DevCon – A Conference For Developers By Developers
XDA Developers Android and Mobile Development Forum
Forgot your password?
 
Post Reply+
Tip us?
 
clockcycle
Old
#1  
clockcycle's Avatar
Senior Member - OP
Thanks Meter 334
Posts: 1,747
Join Date: Dec 2007
Location: Miami, FL
Question [Q] Android Trojan(s)?

Ok, I've never seen this or had this issue before. So I am not sure what is causing it.

I installed my usual apps after flashing Mr. X's stock+root-CIQ Tmo T989 rom.

First app I usually download and run before anything is Adfree. Then Astro file manager to restore APKs. But I realized that this method left me with some older versions of the apps and they wouldn't have their market links. Yes, I could run Titanium Backup to fix them..

Anyways, suddenly I get a star icon on my notification bar. I look at it and it sends me to a website claiming I won a tablet and to chose.

This is one of the links, don't visit it, I just posted it for reference;

Code:
http://com-user.mobi/galaxy/usa/go.php?t202kw=usipad31&uid=REMOVED
So I decided to wipe and flash again and go through the same process to see if perhaps catch who's the culprit..

It happens again this time with a plus icon..

The star icon has happened twice on different occasions, only in the last week, and after installing a recent update to Adfree.

These are the apps I have installed;

Adfree
Astro
3G Watchdog
AT&T Smart Wi-Fi
Barcode Scanner
Beautiful Widgets
Bloat Freezer Free
GasBuddy
Google Voice
Quick Boot
QuickPic
RealCalc
Root Explorer
ScanLive
ShopSavvy
Speed Test
Tapatalk
Ubuntu Regular TTF
Zillow


Has this happen to anyone? Any idea what's causing this or how to catch / prevent it?

I've had one app actually hijack my my stock browser and change the search engine to some smartsearch type site, like it does to normal windows browsers.. lol


Thanks,

-CC
Disclaimer: The information contained herein is made for educational purposes only. If you decide to access linked third-party web sites or make use of said information, you do so at your own risk. The information may be changed without notice and is not guaranteed to be complete, correct, timely, current or up-to-date.

 
iok1
Old
#2  
iok1's Avatar
Senior Member
Thanks Meter 531
Posts: 1,965
Join Date: Feb 2012
Location: Helsingborg
Default I've had one

I've had the same one, (it's some kind of advertising). I tracked it to some gosms theme. My suggestion:
1. Wipe (with backup of all the apps)
2. Restore ONE App
3. Reboot. (since the ad appeared everytime i rebooted my phone)
4. Repeat 2 & 3 until you see the ad
5. Uninstall latest restored app or complain to developer.

Hope i helped


Thanks to Yorzua for the sig pic
Device info:
 
Code:
Samsung Galaxy GIO                        HTC Sensation
Rom: Debiandroid                          ViperS
Recovery: PX Recovery 0.3.6               4EXT

Tablet: Nexus 7
Rom: CM10/PA
Recovery: TWRP
 
stylez
Old
#3  
stylez's Avatar
Moderator Committee - Assistant Forum Admin
Thanks Meter 466
Posts: 9,778
Join Date: May 2008
Location: XDA Server Likes: The Art of War Hates: Cowards
AirPush Detector

Ad Detector

AirPush should find the culprit.

MAKO / Grouper : RootBox


 
Post Reply+
Tags
trojan, virus
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Go to top of page...