• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

ES File Explorer: possible malware (dianxin folder)

Search This thread

mortaest

Member
Jan 7, 2014
38
16
Hi,

Since ES File Explorer's last update (via Google Play), a weird folder named "dianxin" appeared on my phone's internal memory.
After some researches, I found out:
-Dianxin is a chinese custom rom (which is weird because I have a stock rom and no root)
-ES File Explorer's last version is causing its apparition (some XDA Developpers' member said it here: http://forum.xda-developers.com/xperia-z5/help/dianxin-folder-t3346358/post66082381#post66082381)

I looked into my father's phone who also use ES File Explorer and that folder was present.

Does anyone has any info about that? I think it's extremely suspicious, plus, that app is used by loads of people (2 millions users).
Should I use another File Manager?
 
  • Like
Reactions: haism007

magearden

Member
Jun 11, 2015
7
0
51
Same here, after installing the latest version of ES File Explorer earlier this morning the dianxin folder appeared, I tried deleting it only to have it reappear hours later, extremely frustrating and suspicious. If you read some of the latest reviews left on the Google Play Store, you'll notice that a few have also spotted this and some have even said that their AV flagged the latest version of ES File Explorer as a threat. I immediately uninstalled ES File Explorer and did a soft factory reset, and haven't seen the folder since, I'm now reluctant to reinstall ES after this, I'll just have to wait for further explanation on this or use a different file manager instead :/ I'm wondering how this even got through the approval process at all, hopefully someone can shed some light on this :/


Sent from my iPhone using Tapatalk
 
Last edited:

ECKŌGEEK

New member
Mar 31, 2016
1
0
Paluan
Same Here :(

Hi,

Since ES File Explorer's last update (via Google Play), a weird folder named "dianxin" appeared on my phone's internal memory.
After some researches, I found out:
-Dianxin is a chinese custom rom (which is weird because I have a stock rom and no root)
-ES File Explorer's last version is causing its apparition (some XDA Developpers' member said it here: http://forum.xda-developers.com/xperia-z5/help/dianxin-folder-t3346358/post66082381#post66082381)

I looked into my father's phone who also use ES File Explorer and that folder was present.

Does anyone has any info about that? I think it's extremely suspicious, plus, that app is used by loads of people (2 millions users).
Should I use another File Manager?


I also use ES File Explorer and this folder "Dianxin" shows up .. It is suspicious because i search the folder name and the result is it is a chinese custom rom I think it is a malware I delete it and It didnt show up again by now
 

mortaest

Member
Jan 7, 2014
38
16
I've checked into that dianxin folder and I found 2 files: the 1st one is an .0 file but I couldn't open it as other .0 files I've tested.
The 2nd one is named "journal" and I could open it with a text editor:

"libcore.io.DiskLruCache
1
1
1

CLEAN e8dd70db5163eccfbe80f53c786ae2a2980"

Any idea what it could be?
 

rjm831

Senior Member
Apr 3, 2016
174
130
Santa Cruz
I've had the same problem ... & I have never set App Notifications on. I simply found an earlier version archived online & installed it. Hopefully ES will fix the problem, but until they do, please don't update.
 
  • Like
Reactions: nitin.chobhe

mortaest

Member
Jan 7, 2014
38
16
Nothing much? It's kind of suspicious and nobody knows what this folder does on the internal memory
I signaled to google, I contacted the developers, I wrote a bad review explaining the situation and I wrote a thread here. I think it's everything I can do. I'll try other file managers till we have an answer
 

FunSucker

Senior Member
Nov 10, 2013
336
175
Paris Van Java
It was already unchecked and it doesn't prevent from creating the dianxin folder
Hmm oke. I found new permissions in latest version about dianxin (attachment) and some other permissions about baidu server..
Im still used ES for now, cause im not sure this is a malware or what.
You can try to used any app for kill that unwanted permissions, if you really want to still using ES.

Just opinion :)
 

Attachments

  • Screenshot_2016-04-04-12-24-36.png
    Screenshot_2016-04-04-12-24-36.png
    43.6 KB · Views: 3,580

mortaest

Member
Jan 7, 2014
38
16
Thanks, I was trying other file managers when I finally got an answer from the developers:

"Hi, Thanks for your concern. As you may noticed that, in order to keep contact with users, we add message box page at the homepage, and dianxin folder is where cache files store. In the next version, we will move this folder into .estrongs. In case you are interested, dianxin is dessert in Chinese. Greeting from team."

False alarm it seems
 

alexacm

Member
Nov 3, 2012
41
5
los angeles
Thanks, I was trying other file managers when I finally got an answer from the developers:

"Hi, Thanks for your concern. As you may noticed that, in order to keep contact with users, we add message box page at the homepage, and dianxin folder is where cache files store. In the next version, we will move this folder into .estrongs. In case you are interested, dianxin is dessert in Chinese. Greeting from team."

False alarm it seems

Yeah it's a special chinese desert.... a windows trojan? check this avast forum https://forum.avast.com/index.php?topic=147023.0
 

mcguolo

Senior Member
Jun 12, 2012
125
23
Yeah it's a special chinese desert.... a windows trojan? check this avast forum https://forum.avast.com/index.php?topic=147023.0
I don't think that only using the same name is enough to say the ES team put a malware in their file explorer. But the thing *is* suspicious. What troubles me most is that if they put this folder into .estrong folder, nobody would notice, malware or not. As for me, it's quite the time to uninstall ES file explorer and look for something different, as they are integrating too many useless (for me) features; some of them (like new home-page and new app installation notification) are also annoying.
 
  • Like
Reactions: xxsanioutlawxx

DGL2033

Member
May 2, 2016
37
18
Hi,
I have some serious information concerning e-file manager but am new here. Although I have visited many times over the last several years, I can't post links yet. Google Citizens Lab,Baidu browser, and there is one short report, but you want the indepth analysis which is ten times longer. Half way down that report is the relevant information on all EStrong products. Look up my profile if you need help.

Edit:

Finally I can post a link to the research on Baidu and also concerning ES File explorer as well as a boat load of other apps using Baidu analytics or ad SDKs. Over 500 apps in playstore had one or more.
https://citizenlab.org/2016/02/privacy-security-issues-baidu-browser/

Read the whole report, and the response from Baidu which is a three page PDF listed in the article.
 
Last edited:

marcgo

Senior Member
Feb 4, 2010
54
6
bye, ES file manager

I don't think that only using the same name is enough to say the ES team put a malware in their file explorer. But the thing *is* suspicious. What troubles me most is that if they put this folder into .estrong folder, nobody would notice, malware or not. As for me, it's quite the time to uninstall ES file explorer and look for something different, as they are integrating too many useless (for me) features; some of them (like new home-page and new app installation notification) are also annoying.

I am totally with you on this. as a long time ES file manager Pro user, I'm done with them. This little thing is enough to cause me to dump their product, which has been implementing features that detract from my usability. It may seem like nothing much, but I don't need my file browser to contact a Chinese server to tell me what's going on with my files. Nothing much is what Estrongs is going to get from me now.
Also, as an android developer of a major product, you'd think that EStrong would be visible in this forum to address concerns.
 
  • Like
Reactions: hgmichna

mcguolo

Senior Member
Jun 12, 2012
125
23
So even Es file manager PRO has these annoying features... unbelievable! In these days I'm giving Solid Explorer a try, but there are many other alternative apps, like Fx File Explorer, Cabinet, Amaze, and many other.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 6
    Thanks, I was trying other file managers when I finally got an answer from the developers:

    "Hi, Thanks for your concern. As you may noticed that, in order to keep contact with users, we add message box page at the homepage, and dianxin folder is where cache files store. In the next version, we will move this folder into .estrongs. In case you are interested, dianxin is dessert in Chinese. Greeting from team."

    False alarm it seems
    4
    Go to ES File Explorer settings menu - tap on "Notification Settings" - Uncheck "Notify me of app permissions". And then deleted the Diaxin folder. Reboot your devices.
    2
    AVOID using ES File Explorer ( latest version 4.2.6.2.1): it's known since years that it collects data and sends them to Chinese server.
    1
    Hi,

    Since ES File Explorer's last update (via Google Play), a weird folder named "dianxin" appeared on my phone's internal memory.
    After some researches, I found out:
    -Dianxin is a chinese custom rom (which is weird because I have a stock rom and no root)
    -ES File Explorer's last version is causing its apparition (some XDA Developpers' member said it here: http://forum.xda-developers.com/xperia-z5/help/dianxin-folder-t3346358/post66082381#post66082381)

    I looked into my father's phone who also use ES File Explorer and that folder was present.

    Does anyone has any info about that? I think it's extremely suspicious, plus, that app is used by loads of people (2 millions users).
    Should I use another File Manager?
    1
    I also used es file explorer but didn't find any "diaxin folder" or this really my favourite app but i hear that or is it true that it is collect data or spyware , Malware etc ? (Should i use latest version or previous old one? (I have 4.2.3.0.2 premium mod) i appreciate your response. Thank you
    To add to that what @jwoegerbauer correctly stated above here's the one I use and that's certainly a more than decent alternative developed by @HootanParsa :
    It has its own Q&A / FAQ maintained by @IronTechmonkey :