FORUMS

Phone installed apps on its own?

1,271 posts
Thanks Meter: 272
 
By raptir, Senior Member on 28th November 2014, 02:05 AM
Post Reply Email Thread
Three apps installed themselves without my intervention:

Cookie Jam
Drippler
RetailMeNot

They didn't come preinstalled, but just installed themselves today. I was able to uninstall them but they keep coming back.

Any idea what's going on? They do not show up under My Apps in the play store, but I can uninstall them through settings. I did a factory reset and didn't install anything and they still come back.
28th November 2014, 02:32 AM |#2  
Mine just did the same thing also. Just got it two days ago too. I've uninstalled them now, and they haven't come back yet, but that is disturbing if you say gotta keeps coming back.

Forgot to mention this, I've already disabled the other app stores except for the Google play store.
28th November 2014, 05:34 AM |#3  
Member
Flag Knoxville, TN
Thanks Meter: 13
 
More
Just happened to me as well. Thought I was the victim of some new exploit.
28th November 2014, 10:01 PM |#4  
Senior Member
Flag Riverside
Thanks Meter: 4
 
More
This just happened to me, and it is driving me nuts. I think I tracked it down to a program called DTIgnite. Somehow, a sight I visited or a link I clicked installed this program which essentially gives the controller a backdoor to install anything they want. I dont recall it being in the file directory before, but its there now and it survives a factory reset. Mine started doing it yesterday and I have done about 2 dozen factory resets trying to narrow down the problem I was able to determine that it only downloads these programs (the same thee mentioned) when the sim card is inserted. Without the sim card, and with an active wifi connection, it does not do it. The moment it gets a carrier signal, it begins downloading those three apps in the background. I went to tomobile and got a new sim card, and it still does it, but not if I put the sim card in a different phone. So it lies within my note 4 not my account or the sim card. Furthermore, if you factory reset without the simcard, DTIgnite does not appear in the file directory. Once it is inserted, DTIGnite downloads itself and then these three programs. This leads me to believe that what ever site I visited or clicked on, rooted my phone. Because, how else would it survive a reset unless it was in the root directory?

Now DTIgnite is an app developed by a firm that tries to market its capabilities to carriers in order to give them backdoor access to phones. I think its possible someone licensed the software and repurposed it to install bloat ware of their own for third party companies for profit.

In anycase, because of my work, I cannot have a compromised phone and must replace it now. Thinking about contacting a lawyer and seeing what can be done to the company that makes DTIgnite


Quote:
Originally Posted by raptir

Three apps installed themselves without my intervention:

Cookie Jam
Drippler
RetailMeNot

They didn't come preinstalled, but just installed themselves today. I was able to uninstall them but they keep coming back.

Any idea what's going on? They do not show up under My Apps in the play store, but I can uninstall them through settings. I did a factory reset and didn't install anything and they still come back.



---------- Post added at 11:01 PM ---------- Previous post was at 10:22 PM ----------

IDIgnite is indeed the problem. I reformated without the Sim, and then without logging into any account I checked the app manager. Within, is DTIgnite, but once it is "turned off" you can insert the sim card and it will not resinstall those three programs. However, this app is not preinstalled which means each one of us clicked on a link that silently downloaded it. Furthermore, I suspect it has been placed in a safe partition on the device or on the ROOT directory itself because it survives a factory reset.

I dont know how to check if my device is rooted, but when I boot in recovery mode it lists me in # manual mode# and I seem to remember the # symbol was significant in the root determination discussion. Again, I am no expert on the matter; so, I can be completly off base here. I recomend you research my findings on your device to see if they are compromised as well.

Now, I just contacted Mandelay Digital, the publically traded company that authors DT Ignite, and let them know that on monday I will consult an attourney regarding there neglegent distribution of their software and have requested they provide steps to uninstall. after my discussion with an attourney, I may come back here to post information regarding a class action if it is feasible.
The Following 4 Users Say Thank You to cirrob For This Useful Post: [ View ] Gift cirrob Ad-Free
28th November 2014, 10:50 PM |#5  
BACARDILIMON's Avatar
Senior Member
Flag MASTIC BEACH NY
Thanks Meter: 2,385
 
More
Well I know you guys have heard this before but porn sites are bad. Lmao. When ya guys click u may be given consent to those other apps to self install. You would have to prove that you did not give consent

BAD ASS NOTE 4
The Following User Says Thank You to BACARDILIMON For This Useful Post: [ View ] Gift BACARDILIMON Ad-Free
28th November 2014, 11:05 PM |#6  
devynbf's Avatar
Senior Member
Thanks Meter: 615
 
More
Quote:
Originally Posted by cirrob

This just happened to me, and it is driving me nuts. I think I tracked it down to a program called DTIgnite. Somehow, a sight I visited or a link I clicked installed this program which essentially gives the controller a backdoor to install anything they want. I dont recall it being in the file directory before, but its there now and it survives a factory reset. Mine started doing it yesterday and I have done about 2 dozen factory resets trying to narrow down the problem I was able to determine that it only downloads these programs (the same thee mentioned) when the sim card is inserted. Without the sim card, and with an active wifi connection, it does not do it. The moment it gets a carrier signal, it begins downloading those three apps in the background. I went to tomobile and got a new sim card, and it still does it, but not if I put the sim card in a different phone. So it lies within my note 4 not my account or the sim card. Furthermore, if you factory reset without the simcard, DTIgnite does not appear in the file directory. Once it is inserted, DTIGnite downloads itself and then these three programs. This leads me to believe that what ever site I visited or clicked on, rooted my phone. Because, how else would it survive a reset unless it was in the root directory?

Now DTIgnite is an app developed by a firm that tries to market its capabilities to carriers in order to give them backdoor access to phones. I think its possible someone licensed the software and repurposed it to install bloat ware of their own for third party companies for profit.

In anycase, because of my work, I cannot have a compromised phone and must replace it now. Thinking about contacting a lawyer and seeing what can be done to the company that makes DTIgnite




---------- Post added at 11:01 PM ---------- Previous post was at 10:22 PM ----------

IDIgnite is indeed the problem. I reformated without the Sim, and then without logging into any account I checked the app manager. Within, is DTIgnite, but once it is "turned off" you can insert the sim card and it will not resinstall those three programs. However, this app is not preinstalled which means each one of us clicked on a link that silently downloaded it. Furthermore, I suspect it has been placed in a safe partition on the device or on the ROOT directory itself because it survives a factory reset.

I dont know how to check if my device is rooted, but when I boot in recovery mode it lists me in # manual mode# and I seem to remember the # symbol was significant in the root determination discussion. Again, I am no expert on the matter; so, I can be completly off base here. I recomend you research my findings on your device to see if they are compromised as well.

Now, I just contacted Mandelay Digital, the publically traded company that authors DT Ignite, and let them know that on monday I will consult an attourney regarding there neglegent distribution of their software and have requested they provide steps to uninstall. after my discussion with an attourney, I may come back here to post information regarding a class action if it is feasible.

It's really not a big deal.
For starters, a random piece of adware did NOT root your device. In order to root, you would need to run commands and codes into your device using a program called ODIN, and unless your phone rebooted, showed a red system menu, then rebooted itself again, it was not rooted. You would also have a root access application like SuperSU or SuperUser.

*****

There's 2 ways to go about fixing the adware...

1. Factory Reset, THEN ODIN back to factory stock, the files (from root accessed files and normal files alike) will be entirely resetted to how the stock .img was created.

2. (Easier way) Root, use Titanium and uninstall the adware application causing the problem. Seeing as I've never had adware on my device, I feel this way would only be a temporary fix.

Needless to say, fix #1 is preffered.

If this is an issue for you (novice problems might I add), use an antivirus designed for your device. There are multiple options in the Play Store.

And a side note for ya, this will not stand up in court, this wouldn't even make it to court; in any way possible. If a lawyer had a nickel for anyone who has ever had adware on their devices that was trying to take a company to court to get some kind of settlement or resolution, lawyers would be very rich people.

You visited a site that infected your device with adware. (Probably pornographic). You'll be wasting your time and money. Based on the fact that you went to the extent to call them and threaten them is even worse, almost childish. They don't care, they probably get calls like that all day, every day.

This is not some random anomaly, it's a virus that was installed into your device due to your Internet browsing / downloading habits.



*****
When you see **** on the ground, rather than yelling at it and rolling around in it, just pick it up and be done.
The Following User Says Thank You to devynbf For This Useful Post: [ View ] Gift devynbf Ad-Free
29th November 2014, 02:12 AM |#7  
Senior Member
Thanks Meter: 23
 
More
Same thing happened to me today. I formatted the phone using TWRP and reinstalled stock using Odin. The sim was still in the phone. As soon as the phone connected to the cell network these apps came back!

Next try was to reflash stock with the sim out. The apps were not there. After routing the phone I uninstalled /system/priv-app/Ignite_TMO.apk which is the package for IDIgnite. Thankfully, these apps have not returned since.

What I found odd was that even stock image did not remove these. I did ensure that the microsd card was also not present in the phone so these apps are definitely stored in the internal partition somewhere.
29th November 2014, 03:13 AM |#8  
Member
Flag Knoxville, TN
Thanks Meter: 13
 
More
Why are we assuming this is an exploit rather than something T-Mobile shipped in a recent ROM update or in the original image in order to install these bloatware apps?
29th November 2014, 03:55 AM |#9  
MarkP80nj's Avatar
Senior Member
Flag Bayville
Thanks Meter: 47
 
More
I think it might be in the ank4, because I just got these when flashing an ank4 Rom.
I know for sure I didn't have them before.

Sent from my SM-N910T using Tapatalk
29th November 2014, 05:59 AM |#10  
Junior Member
Flag Southfield
Thanks Meter: 0
 
More
Unauthorized Apps Downloaded to T-Mobile Samsung Note 4.
I have a T-Mobile Samsung Note 4 which updated on Wednesday, November 26, 2014. Just a few minutes ago, I turned my phone off, then turned it on again and noticed on the status/notification bar a triangle with exclamation mark... and when I pulled down screen it was for 2 apps warning that these apps have high permissions. I did not add these apps and when I looked at my apps I noticed the same 3 listed here were installed on my phone. Cookie Jam (high permissions), RetailMeNot (high permissions) and Drippler. I uninstalled from the Google Play Store. Before uninstalling, I planned to give a 1 star review for all 3 apps downloaded on my phone informing people of these apps, but there was no option for me to review these apps although these apps have reviews from other users. I didn't pay attention to the first two that I uninstalled but when I selected uninstall for the Drippler app, there was a warning "This app was not installed by Google Play Store. Do you want to Uninstall it". After this happened I did uncheck the "Unknown Sources" box under the security option for third party apps. I'm very disappointed that this has happened. I have had too much trouble with this phone and really feel that it was a waste of purchase. The first one I bought was broken and this is the second one exchanged in the store and it has many issues. I only downloaded 1 app (MOOC app) a few hours before this happened, but these didn't download until after I turned my phone off, then back on. The MOOC app listed links to several MOOCs online, and only had 4 reviews. If these same apps are being downloaded to other T-Mobile Note 4 users could this be from a link or a problem with the phone. What are the chances of several people accessing the same link? Does this mean the phone is hacked? If the "Unknown Sources" box is checked, will this stop the downloads without permission? Someone please help. This is an edited response to the above-written. After I wrote the response, I picked up my phone and noticed the Virus Scanner (CM Security) icon was in status bar. It showed there was 1 vulnerability called BroadAnywhere. I searched it on Google and found that it is a very bad virus... Once the virus was cleaned from my phone it seems to be working well. It hasn't been long but so far it seems ok and the apps haven't come back, nor the permissions (which did come back once after deleting apps) and well as a couple other things before the virus scan. Hopefully this will clear the problem. If not, I'll give update.


Quote:
Originally Posted by raptir

Three apps installed themselves without my intervention:

Cookie Jam
Drippler
RetailMeNot

They didn't come preinstalled, but just installed themselves today. I was able to uninstall them but they keep coming back.

Any idea what's going on? They do not show up under My Apps in the play store, but I can uninstall them through settings. I did a factory reset and didn't install anything and they still come back.

29th November 2014, 07:59 AM |#11  
cire253's Avatar
Senior Member
Flag Puyallup
Thanks Meter: 2
 
More
I noticed this happened to me as well,but it only happened after I updated my note to the new update. My wife's phone has not been updated and she doesn't have the app in her applications, so my assumption is it was packages in with the new update.

Sent from my SM-N910T using XDA Free mobile app
Post Reply Subscribe to Thread

Guest Quick Reply (no urls or BBcode)
Message:
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes