FORUMS

Webview Update on Android M Dev Preview

Google has announced an update to the Webview implementations on the upcoming Android M … more

Android M Brings Granular Permission Controls

Google I/O 2015 is underway,  and Sundar Pichai opened the event with the usual … more

Watch the Google I/O 2015 Livestream Here

Google’s annual I/O 2015 Developer Conference is about to go live from Moscone West in … more

OnePlus Plans To Take Back #NeverSettle From Verizon

#NeverSettleBack in 2014, this seemingly innocent and kind of … more
Post Reply Subscribe to Thread Email Thread

Suspicious file? passback-1.js automatically downloaded without update request?

18th August 2013, 09:37 PM |#1  
OP Member
Thanks Meter: 5
 
More
So, I got this notification today on my Xperia Z saying
Passback-1.js
Download complete

Now I got this with absolutely no update request at all from my end and I hadn't also recently installed any new app from the PlayStore

Just holding down on the notification to see the App Info says ' Download Manager 4.2.2. something

Google search shows absolutely nothing on this file and I was wondering if anyone else got this or know if it's a legit file?

C6602 running 4.2.2 Build number: 10.3.1.A.0.244

Any help is appreciated! Thanks!


Sent from my C6602 using xda app-developers app
Last edited by AndroidFreud; 18th August 2013 at 09:42 PM.
 
 
19th August 2013, 06:24 AM |#2  
Junior Member
Thanks Meter: 0
 
More
Just got the same... Passback.js .. Very suspicious... Running CM10.1

Quote:
Originally Posted by AndroidFreud

So, I got this notification today on my Xperia Z saying
Passback-1.js
Download complete

Now I got this with absolutely no update request at all from my end and I hadn't also recently installed any new app from the PlayStore

Just holding down on the notification to see the App Info says ' Download Manager 4.2.2. something

Google search shows absolutely nothing on this file and I was wondering if anyone else got this or know if it's a legit file?

C6602 running 4.2.2 Build number: 10.3.1.A.0.244

Any help is appreciated! Thanks!


Sent from my C6602 using xda app-developers app

19th August 2013, 08:32 AM |#3  
Junior Member
Thanks Meter: 0
 
More
This is what it looks like - and the file.... It happened during the night so not using the phone...

Click image for larger version

Name:	Screenshot_2013-08-19-07-24-54.jpg
Views:	795
Size:	21.5 KB
ID:	2198598
passback.js.zip
19th August 2013, 12:42 PM |#4  
Account currently disabled
Flag straya kienttt
Thanks Meter: 474
 
More
hmm, its a javascript unpacker...thats all i got from google
19th August 2013, 07:45 PM |#5  
OP Member
Thanks Meter: 5
 
More
Yeah, figured by the.js extension.
Is there any way for any one to see what's inside this JavaScript and what it does.
So weird! And my antivirus isn't picking up anything on it either!

Edit: Just wanted to add, I think the file I got has a suffix -1 because the first time it downloaded I just disregarded the download without clicking on it. Which means it persistently downloaded the file again and renamed it to passback-1.js
If I remember correctly the first file that was downloaded is the same name as attached (passback.js)

Sent from my C6602 using xda app-developers app
Last edited by AndroidFreud; 20th August 2013 at 07:56 AM.
20th August 2013, 07:22 AM |#6  
Junior Member
Thanks Meter: 3
 
More
Strange, the same file was downloaded this morning on my Xperia Z.. Same fw
20th August 2013, 07:58 AM |#7  
OP Member
Thanks Meter: 5
 
More
Anyone find anything online on this file as yet?

Sent from my C6602 using xda app-developers app
20th August 2013, 10:28 AM |#8  
Junior Member
Thanks Meter: 0
 
More
I also got this file on.my htc one, deleted it and got it also as passback-1.js.
Has anyone got information maybe also in other forums? Thanks
21st August 2013, 08:45 AM |#9  
Junior Member
Thanks Meter: 2
 
More
The same behavior. Noticed today downloaded passback.js and passback-1.js.
Samsung Galaxy S4 (stock firmware).
I didn't install any new software recently.
And no information on Internet.
21st August 2013, 01:38 PM |#10  
Junior Member
Thanks Meter: 0
 
More
Two Websites here,

One points to an ad on a forum on bf-france

And the other is some project called powerpass on google code.

I'm on CM 10.2 and never got this.
Post Reply Subscribe to Thread
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes