FORUMS

Earthquake Early Warning in Your Pocket

Probably all of us reading this have a smartphone in our pocket. For many of us, the … more

Sony: The OEM You Want To Save

In our recent Discuss article, we asked you readers on which OEM you would like to help. While the … more

How to Lock and Protect Your Apps – XDA Xposed Tuesday

The smartphone revolution has passed. Everybody has mobile apps. Some of … more

Which OEM Would You Like to Help?

Most manufacturers have moments of greatness and moments of decadence, and in the past few years … more

Suspicious file? passback-1.js automatically downloaded without update request?

58 posts
Thanks Meter: 5
 
By AndroidFreud, Member on 18th August 2013, 09:37 PM
Post Reply Subscribe to Thread Email Thread
So, I got this notification today on my Xperia Z saying
Passback-1.js
Download complete

Now I got this with absolutely no update request at all from my end and I hadn't also recently installed any new app from the PlayStore

Just holding down on the notification to see the App Info says ' Download Manager 4.2.2. something

Google search shows absolutely nothing on this file and I was wondering if anyone else got this or know if it's a legit file?

C6602 running 4.2.2 Build number: 10.3.1.A.0.244

Any help is appreciated! Thanks!


Sent from my C6602 using xda app-developers app
Last edited by AndroidFreud; 18th August 2013 at 09:42 PM.
 
 
19th August 2013, 06:24 AM |#2  
Junior Member
Thanks Meter: 0
 
More
Just got the same... Passback.js .. Very suspicious... Running CM10.1

Quote:
Originally Posted by AndroidFreud

So, I got this notification today on my Xperia Z saying
Passback-1.js
Download complete

Now I got this with absolutely no update request at all from my end and I hadn't also recently installed any new app from the PlayStore

Just holding down on the notification to see the App Info says ' Download Manager 4.2.2. something

Google search shows absolutely nothing on this file and I was wondering if anyone else got this or know if it's a legit file?

C6602 running 4.2.2 Build number: 10.3.1.A.0.244

Any help is appreciated! Thanks!


Sent from my C6602 using xda app-developers app

19th August 2013, 08:32 AM |#3  
Junior Member
Thanks Meter: 0
 
More
This is what it looks like - and the file.... It happened during the night so not using the phone...

Click image for larger version

Name:	Screenshot_2013-08-19-07-24-54.jpg
Views:	795
Size:	21.5 KB
ID:	2198598
passback.js.zip
19th August 2013, 12:42 PM |#4  
Account currently disabled
Flag straya kienttt
Thanks Meter: 476
 
More
hmm, its a javascript unpacker...thats all i got from google
19th August 2013, 07:45 PM |#5  
OP Member
Thanks Meter: 5
 
More
Yeah, figured by the.js extension.
Is there any way for any one to see what's inside this JavaScript and what it does.
So weird! And my antivirus isn't picking up anything on it either!

Edit: Just wanted to add, I think the file I got has a suffix -1 because the first time it downloaded I just disregarded the download without clicking on it. Which means it persistently downloaded the file again and renamed it to passback-1.js
If I remember correctly the first file that was downloaded is the same name as attached (passback.js)

Sent from my C6602 using xda app-developers app
Last edited by AndroidFreud; 20th August 2013 at 07:56 AM.
20th August 2013, 07:22 AM |#6  
Junior Member
Thanks Meter: 3
 
More
Strange, the same file was downloaded this morning on my Xperia Z.. Same fw
20th August 2013, 07:58 AM |#7  
OP Member
Thanks Meter: 5
 
More
Anyone find anything online on this file as yet?

Sent from my C6602 using xda app-developers app
20th August 2013, 10:28 AM |#8  
Junior Member
Thanks Meter: 0
 
More
I also got this file on.my htc one, deleted it and got it also as passback-1.js.
Has anyone got information maybe also in other forums? Thanks
21st August 2013, 08:45 AM |#9  
Junior Member
Thanks Meter: 2
 
More
The same behavior. Noticed today downloaded passback.js and passback-1.js.
Samsung Galaxy S4 (stock firmware).
I didn't install any new software recently.
And no information on Internet.
21st August 2013, 01:38 PM |#10  
Junior Member
Thanks Meter: 0
 
More
Two Websites here,

One points to an ad on a forum on bf-france

And the other is some project called powerpass on google code.

I'm on CM 10.2 and never got this.
Post Reply Subscribe to Thread
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes