Database Users

[SECURITY ALERT!] DroidDream Malware Found in Official Android Market

Google pulls 56 malicious apps from Android Marketplace
original source: http://blog.mylookout.com/2011/03/s...-found-in-official-android-market-droiddream/
List of malicious Android App that steals your information and download additional craps to your phone
Full list Developed by “Myournet”:
Falling Down
Super Guitar Solo
Super History Eraser
Photo Editor
Super Ringtone Maker
Super Sex Positions
Hot Sexy Videos
Chess
下坠滚球_Falldown
Hilton Sex Sound
Screaming Sexy Japanese Girls
Falling Ball Dodge
Scientific Calculator
Dice Roller
躲避弹球
Advanced Currency Converter
App Uninstaller
几何战机_PewPew
Funny Paint
Spider Man
蜘蛛侠
Full list Developed by “Kingmall2010″:
Bowling Time
Advanced Barcode Scanner
Supre Bluetooth Transfer
Task Killer Pro
Music Box
Sexy Girls: Japanese
Sexy Legs
Advanced File Manager
Magic Strobe Light
致命绝色美腿
墨水坦克Panzer Panic
裸奔先生Mr. Runner
软件强力卸载
Advanced App to SD
Super Stopwatch & Timer
Advanced Compass Leveler
Best password safe
掷骰子
多彩绘画
Full list Developed by “we20090202″:
Finger Race
Piano
Bubble Shoot
Advanced Sound Manager
Magic Hypnotic Spiral
Funny Face
Color Blindness Test
Tie a Tie
Quick Notes
Basketball Shot Now
Quick Delete Contacts
Omok Five in a Row
Super Sexy Ringtones
大家来找茬
桌上曲棍球
投篮高手
Personal warning I'll also include AppsPlanet into those list if I were you.

Any views as to whether installing Norton, MacAfee or similar would have picked these up?

Hey Allgamer,
Thanks for the great post / update!!!
Just wondering how much you are selling your Galaxy S for? Please PM me and let me know.
Thanks,
yiannisthegreek

In case you have installed them.
Google spikes 21 malicious apps with big download counts from the Market
Google just removed some 21 apps from the Market in the last day from a publisher going by Myournet for doing all sorts of naughty things to your device. Offenses include attempting to root your phone, uploading phone information (including IMEI) to who-knows-where, and -- most egregiously -- adding a backdoor that allows additional code to be pulled down and executed.
Click to expand...
Click to collapse
List of his apps (may not be all)
http://www.androidzoom.com/android_developer/myournet_thqw.html
Auzy said:
The source appears to be: http://www.engadget.com/2011/03/02/google-spikes-21-malicious-apps-from-the-market-with-big-downloa/
Click to expand...
Click to collapse
And Mashable
http://mashable.com/2011/03/01/android-malware-apps/
You should ALWAYS read the forum before posting

Rofa1 said:
Any views as to whether installing Norton, MacAfee or similar would have picked these up?
Click to expand...
Click to collapse
Any of the well known Antivirus app for android should have picked it up.
I used to think we'll never need an AntiVirus app for Android... well think again.
after reading the article i downloaded all of them to run a full scan and the results are good
I scanned my phone and it's all clean
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Should one of these apps had been installed already (Photo Editor), is there something else I can do ... other than flashing ?
Thx

AvalonGamer said:
Should one of these apps had been installed already (Photo Editor), is there something else I can do ... other than flashing ?
Thx
Click to expand...
Click to collapse
you can simply un-install it, it doesn't really do anything to your phone until you run the app
and even if you did, uninstalling it will remove the problem
Flashing the phone is a bit over the top it's enough to do a system wipe if you want to be 100% sure, and then restore all your apps from backup, excluding the fake ones

Waiting for ESET to debut on Android platform...

kunjar said:
Waiting for ESET to debut on Android platform...
Click to expand...
Click to collapse
+1
This reminded me to reinstall lookout after fresh flash.

AllGamer said:
you can simply un-install it, it doesn't really do anything to your phone until you run the app
and even if you did, uninstalling it will remove the problem
Click to expand...
Click to collapse
This is actually an incomplete answer.
As noted on Android Police, (I'm new so I can't link there) these apps open a backdoor, which can download additional apps that can do *anything*. The original app doesn't do much on its own. But, removing the infected app will leave behind the additional malware introduced through the backdoor.

Is there anyone who knows if these apps actually worked? What I mean is if the games for example were actually games? The reason I ask is that there is a bubble shoot like game installed on a friends phone which works (not sure if it's the one mentioned above).
So would you be able to recognize that malicious app in that way?
Edit: just noticed on the Lookout Blog that they actively send out a patch to detect these apps (if I read it correctly):
http://blog.mylookout.com/2011/03/s...-found-in-official-android-market-droiddream/
So if you have not yet scanned for those apps, do it now ;-)

Thanks for the information!

How to remove and consequences
First i manyally uninstalled the "Advanced Barcode Scanner" of KingMall2010.
Second i scanned my device with Kasparsky and Lookout, both didn't find any threads.
In the end i performed a reset to factory settings and a format of my SD-card.
Can anyone please tell me if this actions are sufficient to completely whipe this malware of my device?
Also i would like to know if this malware actively sent my private data to servers, or that it just opened a backdoor for later use. And if my data is already sent, what are the consequences and which actions should i take to do something about it.

traumaheli said:
First i manyally uninstalled the "Advanced Barcode Scanner" of KingMall2010.
Second i scanned my device with Kasparsky and Lookout, both didn't find any threads.
In the end i performed a reset to factory settings and a format of my SD-card.
Can anyone please tell me if this actions are sufficient to completely whipe this malware of my device?
Also i would like to know if this malware actively sent my private data to servers, or that it just opened a backdoor for later use. And if my data is already sent, what are the consequences and which actions should i take to do something about it.
Click to expand...
Click to collapse
What you've done so far seems sufficient enough to clear the malware from your phone system. Even if it copied a backup on your SD card (internal & external) if you've wiped both then it should be ok.
In regards to already leaked data, I would immediately change my passwords to gmail, emails, facebook, ebay etc or any other site that you may have used on your phone.

silverstorm said:
What you've done so far seems sufficient enough to clear the malware from your phone system. Even if it copied a backup on your SD card (internal & external) if you've wiped both then it should be ok.
In regards to already leaked data, I would immediately change my passwords to gmail, emails, facebook, ebay etc or any other site that you may have used on your phone.
Click to expand...
Click to collapse
Thanks for your quick reaction. It makes me a little more comfortable. Indeed i already changed my password's.
I already called my phone provider, but apparently could not tell me whether the IMSI (international mobile subscription identity) and SIM card serial number are sufficient information to clone my SIM card. This is the information that would be sent by the malware to remote servers.
Therefor after work i go to get a new SIM card. It's better to be safe than sory after all.

I'm still not convinced on running a constant anti-malware app on my phone. Even with a good processor, my cpu cycles are a precious resource to keep my phone running light and fast.
How heavy on system performance is lookout? Does it only activate and scan when new material is installed?

Lookout scans when u download or install any app on your phone, i havent noticed it running unless im installing

Intlstyle said:
Lookout scans when u download or install any app on your phone, i havent noticed it running unless im installing
Click to expand...
Click to collapse
yes, it only runs after you install a new app from market
i installed it after reading about the news, before that, i had no reason to worry about the stuff i download from the official android market

Much thanks for the heads up on this issue!

my question is what is the deal with app planet? i have it installed on my phone along with another app mentioned on the list...why would app planet be something to be worried about???
(P.S. im about five minutes away from wipeing my phone spottless clean thx for the Alert!!!!!)

Track N Remote Control your G-Note online - Free Service by Samsung

Track Your Galaxy Note online with samsung server.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Since I am using this service from day one, but i have never read a word regarding this on XDA forum. so writing a guide who are not aware to this service.
Priorly with SGS i have tried, but was not available to my country(india), but this time with Note we are lucky.
To activate this service
First Go here
http://samsungdive.com
and register your account(free)
- Now on mobile go to setting-Location n security - Find My mobile
1.check SIM card change alert
2.click on alert msg recipient - Now login with credential, you have register on above mentioned samsung site. - and add recipient mobile number (your other number / family number) on which you will get notification, if SIM will changed.
3.check Remote control
Now when you visit samsungdive.com n login, you will see your register device there, (see Image above)
Click on your device.
You will see this
Now you can track your mobile. It have all function which available with many costly applications on market like
-tracking on map (to check location)
-Ring mobile (to find device in nearby location)
-Forward msgs
-call logs
-wipe out device etc
Hope it will be useful to G-Note user.

I didn't know about this! Thanks!

Samsung Dive is an excellent tool.
it also helps with few other things.
The other day i misplaced my note under my desk and i went online and made it ring( it rings even in silent mode )

Sounds great! I will have to check this out. I have been using SeekDroid since it came out, but this might be a more fool proof way, since I have had issues with Seekdroid while running practice tests. Thanks!

Doesn't seem to work in the US. Saying my ZIP is not enough digits and I don't see the setting on the phone menu to "find my mobile."
Edit: nevermind, deleted the optional address information. Still not working yet...added +10000000000 (0's are my phone number) since I'm in the US....
Edit 2: I previously had a SGSII on my Samsung account. Perhaps it's trying to locate that device (hehe, the new owner is probably panicking).
How can I delete that device and add my Note?
Edit 3: Nevermind, figured out how to add the Note here:
https://v2.samsungdive.com/help/guideRemoteControls.do
Doesn't say how to delete a device I no longer own though....

thanks for this
Although find my mobile worked fine with me "lock mobile" and "ring mobile" didn't although it is showing as succeeded on the web
any idea?

ericshmerick said:
Doesn't seem to work in the US. Saying my ZIP is not enough digits and I don't see the setting on the phone menu to "find my mobile."
Edit: nevermind, deleted the optional address information. Still not working yet...added +10000000000 (0's are my phone number) since I'm in the US....
Edit 2: I previously had a SGSII on my Samsung account. Perhaps it's trying to locate that device (hehe, the new owner is probably panicking).
How can I delete that device and add my Note?
Edit 3: Nevermind, figured out how to add the Note here:
https://v2.samsungdive.com/help/guideRemoteControls.do
Doesn't say how to delete a device I no longer own though....
Click to expand...
Click to collapse
I think if u signout of samsung dive account in your phone , it dissappears.
Not so sure. will test it.

drgopoos said:
I think if u signout of samsung dive account in your phone , it dissappears.
Not so sure. will test it.
Click to expand...
Click to collapse
The FAQ says to delete (disable) the feature on your phone before selling it.
I factory reset it so it had to be disabled as the phone re-formatted.
Oh well. Works on my Note but I hope I don't wipe some guy's SGSII that I sold it to lol.

this is a really good tool, i played around with it for a while and its an asset

guys lock screen and all is working for you ?
any specific apk should be installed?
what ROM are you using ?

Thank you very much! It's working like a charm

THANK YOU!!
I saw this in the settings and wondered from where on the net one can control it.
@ArticCat: Are your phone's data/wifi enabled? 'Cause it needs to communicate with the servers.

Noooooo
No no no no nooooooooo, definitley not, couldnt bear the thought of knowing i was been tracked at any moment, dont like the idea of that software, like the people upstairs dont already have their beady eyes on us, how do we know samsung wouldnt make this info available to the government for some corrupt scheme. big no from me...

graemeg said:
No no no no nooooooooo, definitley not, couldnt bear the thought of knowing i was been tracked at any moment, dont like the idea of that software, like the people upstairs dont already have their beady eyes on us, how do we know samsung wouldnt make this info available to the government for some corrupt scheme. big no from me...
Click to expand...
Click to collapse
Tinfoilhat and all, but any and all cell companies know where you are 24x7. Hint: they could give two ****s.
I, on the other hand, want to wipe my phone if I lose it, so I'm in. Samsung can watch me drive around all they want but I'd be willing to bet they have better things to do, like make Touchwiz more bloated and the like.

ericshmerick said:
Tinfoilhat and all, but any and all cell companies know where you are 24x7. Hint: they could give two ****s.
I, on the other hand, want to wipe my phone if I lose it, so I'm in. Samsung can watch me drive around all they want but I'd be willing to bet they have better things to do, like make Touchwiz more bloated and the like.
Click to expand...
Click to collapse
Sent from my GT-N7000 using Tapatalk

ericshmerick said:
Tinfoilhat and all, but any and all cell companies know where you are 24x7. Hint: they could give two ****s.
I, on the other hand, want to wipe my phone if I lose it, so I'm in. Samsung can watch me drive around all they want but I'd be willing to bet they have better things to do, like make Touchwiz more bloated and the like.
Click to expand...
Click to collapse
To continue on his point, I trust Samsung more than the guy who accidentally/purposefully acquires my phone with all my personal info on it. WIPE WIPE WIPE!

Works great, I had this with my galaxy s and now the note ;-)
And it works very good, I am in sweden.
Sent from my GT-N7000 using Tapatalk

Thanks!
But does this affect battery life in anyway?
Sent from my GT-N7000 using Tapatalk

Thanks! This looks awesome. I will try this once I get back home from work.
Thanked & Rated 5 Stars...

Got it to work in USA. Thanks for posting this.

[App + Tutorial] Samsung Milk Music + Samsung Account

*ROOT ONLY* US & International Bypass on how to use fully functioning Milk Music (Samsung) on any device :
As you probably know, Milk Music is Samsung's free, stylish radio akin to Pandora, and Slacker. Milk Music is actually powered by Slacker Radio itself. There's a catch in order to use it
however, you must have a Samsung device. I'm going to show you how to pose as a Samsung Galaxy S4 to bypass the limitations and use Milk Music.
1. Download and install Milk Music from here : http://d-h.st/ADR
2. Download and install SamsungAccount from here : http://d-h.st/PGq (Only needed to enable explicit songs and sync stations)
3. Make an account using the SamsungAccount app located in Settings > Accounts. (IF YOU WANT TO ENABLE EXPLICIT SONGS AND HAVE THE ABILITY TO SYNC STATIONS! HIGHLY RECOMMENDED!)
4. Open up your favorite text editor, and navigate to your build.prop file and open it, make a backup.
5. Modify these lines as follows...
ro.product.model=Nexus 5
ro.product.brand=google
ro.product.manufacturer=LG
TO
ro.product.model=Galaxy S4
ro.product.brand=Samsung
ro.product.manufacturer=Samsung
5a. Reboot as normal and launch Milk Music!
CONTINUE ONLY IF YOU DO NOT LIVE IN THE USA!
6. This normally only works for people with an IP address in the United States range. However there's a free VPN service called Spotflux on the App Store. Download and enable it and launch
Milk. I'm from the United States, so I wasn't able to test this but there is no logical reason this should not work as the VPN gives you an IP from the US. If it doesn't work from here, post
in this thread and I will try to help you to the best of my ability.
Notes* :
1. You are allowed six skips an hour per station.
2. The app may lock up and crash occasionally. Just force close and clear data. You'll lose all information unless you've followed step 2 above.
3. Don't forget to seed your station with artists and songs that you like so you are more likely to find what you want to hear.
4. You can change audio quality from the default Standard quality to High Quality in the settings of Milk Music.
(I'm sure I forgot something but this is the gist of the thread, and should be all you need to run this, if I missed something or messed up I will fix it as soon as I realize/ it is brought
to my attention.)
Credits :
My bro Juan for ripping the .apk for me from his S3
Samsung
Slacker Radio
Screenshot :
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Saved just in case. Don't worry OP is messy I know, I suck with playing with the BBCode.

First
Haha
Well i am not a fan of samsung but till thanks.
Made it like a kinda bump your thread a bit so that people who really want thhis guide/mod or really awaited it could find it :silly:
Anyways good work :highfive:

Additional notes : anything that relies on build . prop settings to detect things like FKU or GooManagers TWRP installer will not work until original build . prop is restored. I'm looking for a way to make it so it's spoofed only for Milk Music and not the entire system. Thanks.
Sent from my Galaxy S4 using Tapatalk

TheLastSidekick said:
Additional notes : anything that relies on build . prop settings to detect things like FKU or GooManagers TWRP installer will not work until original build . prop is restored. I'm looking for a way to make it so it's spoofed only for Milk Music and not the entire system. Thanks.
Sent from my Galaxy S4 using Tapatalk
Click to expand...
Click to collapse
their is a paid app in the play store that will spoof your device and allow you to backup your old device profile. However it's based on build.props from other people who have backed up their device...there were 3 "S3' profiles and one of them worked I listened to mik music a lot on my LG G Pro using this app However it did bork bluetooth and create a bluetooth enable loop..so DO NOT TURN ON BLUETOOTH using this app until you spoof back. Bluetooth will work fine after that.
Off topic; thanked OP for samsung account apk. needed it for S5 S-Translate on Note 3

This is very cool. Please forgive me if this is not supposed to be posted here. Before this I saw an xposed module called Chocolate Milk which is supposed to allow you to use Milk Music as well. Has anyone here tried Chocolate Milk and if so, which method would be easier to use Milk Music and does changing the information in the build prop affect your device in any other way? Please forgive the noob question.
Thanks

Chocolate Milk 1.0 currently from the Xposed Module repository works perfectly and will negate having to spoof the build.prop I will upload and link to it for posterity.
The Nexus 5 advocate (Team Inferno)

new version 1.1. can no longer install.

I haven't used this app in a very long time. I will see if there's a way to install the latest version.

Installed Chocolate Milk 1.0 and the APKs above and it works perfect. Tried the newer versions and it would not log in.

Hey guys I keep getting this even with chocolate milk installed :/ suggestions?
Sent from my Nexus 5 using Tapatalk

niv3d said:
Hey guys I keep getting this even with chocolate milk installed :/ suggestions?
Sent from my Nexus 5 using Tapatalk
Click to expand...
Click to collapse
If Chocolate Milk hasn't been updated yet, you're sadly going to have to modify your build.prop using the original method. I'd recommend spoofing as the S5 so that most apps will still appears in the Play Store.

niv3d said:
Hey guys I keep getting this even with chocolate milk installed :/ suggestions?
Sent from my Nexus 5 using Tapatalk
Click to expand...
Click to collapse
Did you use Chocolate Milk 1.0 and the links provided in OP? Also have you activated the Chocolate Milk module and rebooted?

trrubicon06 said:
Did you use Chocolate Milk 1.0 and the links provided in OP? Also have you activated the Chocolate Milk module and rebooted?
Click to expand...
Click to collapse
Yes I have done exactly all of those things :/ still not working
Sent from my Nexus 5 using Tapatalk

niv3d said:
Yes I have done exactly all of those things :/ still not working
Sent from my Nexus 5 using Tapatalk
Click to expand...
Click to collapse
Hmm. I had issues when I was using the newer apks and the newer chocolate milk. But, once I installed the apks from this post and the 1.0 module, it worked. I would try uninstalling and trying again. Make sure xposed is working properly and that the module is activated. Then install the other apps. Make sure you create a Samsung account as well.

problems editing build.prop
I can edit my build.prop but it will not save, no matter what program i use. I have an lg g3, rooted. I know this is a nexus thread but whatever. Whenever i delete the model name it only lets me input "galaxy" past that the letters are unseen. Same with when i try to put in. Samsung to replace LGE it only allows me to enter in "sam". Any ideas? It also wont let me save.

As an alternate method of getting Samsung Milk on your device, here's a thread with a patched APK. No root required, no build.prop editing required either. Just sideload the patched app:
http://forum.xda-developers.com/android/apps-games/milk-music-devices-root-required-t2847943
http://nexus5.wonderhowto.com/how-t...music-app-any-android-no-root-needed-0158456/
As an aside, has anyone seen a way to get the new "Milk VIDEO" app onto non-Samsung devices? Via an Xposed mod or patch? Even a source for the APK itself would be nice:
https://play.google.com/store/apps/details?id=com.samsung.milk.milkvideo

FoferX said:
As an alternate method of getting Samsung Milk on your device, here's a thread with a patched APK. No root required, no build.prop editing required either. Just sideload the patched app:
http://forum.xda-developers.com/android/apps-games/milk-music-devices-root-required-t2847943
http://nexus5.wonderhowto.com/how-t...music-app-any-android-no-root-needed-0158456/
As an aside, has anyone seen a way to get the new "Milk VIDEO" app onto non-Samsung devices? Via an Xposed mod or patch? Even a source for the APK itself would be nice:
https://play.google.com/store/apps/details?id=com.samsung.milk.milkvideo
Click to expand...
Click to collapse
check the comments there's a link to a working Milk Video apk, no samsung account needed:
link

TheLastSidekick said:
*ROOT ONLY* US & International Bypass on how to use fully functioning Milk Music (Samsung) on any device :
As you probably know, Milk Music is Samsung's free, stylish radio akin to Pandora, and Slacker. Milk Music is actually powered by Slacker Radio itself. There's a catch in order to use it
however, you must have a Samsung device. I'm going to show you how to pose as a Samsung Galaxy S4 to bypass the limitations and use Milk Music.
1. Download and install Milk Music from here : http://d-h.st/ADR
2. Download and install SamsungAccount from here : http://d-h.st/PGq (Only needed to enable explicit songs and sync stations)
3. Make an account using the SamsungAccount app located in Settings > Accounts. (IF YOU WANT TO ENABLE EXPLICIT SONGS AND HAVE THE ABILITY TO SYNC STATIONS! HIGHLY RECOMMENDED!)
4. Open up your favorite text editor, and navigate to your build.prop file and open it, make a backup.
5. Modify these lines as follows...
ro.product.model=Nexus 5
ro.product.brand=google
ro.product.manufacturer=LG
TO
ro.product.model=Galaxy S4
ro.product.brand=Samsung
ro.product.manufacturer=Samsung
5a. Reboot as normal and launch Milk Music!
CONTINUE ONLY IF YOU DO NOT LIVE IN THE USA!
6. This normally only works for people with an IP address in the United States range. However there's a free VPN service called Spotflux on the App Store. Download and enable it and launch
Milk. I'm from the United States, so I wasn't able to test this but there is no logical reason this should not work as the VPN gives you an IP from the US. If it doesn't work from here, post
in this thread and I will try to help you to the best of my ability.
Notes* :
1. You are allowed six skips an hour per station.
2. The app may lock up and crash occasionally. Just force close and clear data. You'll lose all information unless you've followed step 2 above.
3. Don't forget to seed your station with artists and songs that you like so you are more likely to find what you want to hear.
4. You can change audio quality from the default Standard quality to High Quality in the settings of Milk Music.
(I'm sure I forgot something but this is the gist of the thread, and should be all you need to run this, if I missed something or messed up I will fix it as soon as I realize/ it is brought
to my attention.)
Credits :
My bro Juan for ripping the .apk for me from his S3
Samsung
Slacker Radio
Screenshot :
Click to expand...
Click to collapse
This is working for me finally thanks

Will having $am$ung build affect anything else, like Gmail, play store?

Kill com.samsung.android.intelligenceservice

Can I kill this service and it's startup?
Intelligence Service
com.samsung.android.intelligenceservice
What does it really do?

kgyirhj said:
com.samsung.android.intelligenceservice
What does it really do?
Click to expand...
Click to collapse
Well it could be
1) A surveillance monitor for the Carrier IQ package that the NSA has had carriers install on 300 million phones
2) A training aid for would be Mensa members
3) Some random Samsung service that isn't on my S5
You didn't give us any details or context, so it's difficult to say what the service does. It isn't on my S5 so it's not universal. It may be regional, carrier specific or some Samsung bloatware that doesn't live on my phone anymore.
You can kill the process, which will cause something to quit working. Probably nothing critical but it's hard to be certain when we don't know what it does. If you have xPrivacy, see what permissions it asks for. Otberwise you could just freeze or disable it and see what effect it has on your phone.
If you tell us what firmware version and carrier you use, perhaps someone else who uses the same firmware /carrier will comment.
.

kgyirhj said:
Can I kill this service and it's startup?
Intelligence Service
com.samsung.android.intelligenceservice
What does it really do?
Click to expand...
Click to collapse
It checks the IQ of the user. The phone shuts down below 90. Mine does not boot anymore ?
Sent from my SM-G900F using XDA Premium 4 mobile app

fffft said:
Well it could be
1) A surveillance monitor for the Carrier IQ package that the NSA has had carriers install on 300 million phones
2) A training aid for would be Mensa members
3) Some random Samsung service that isn't on my S5
You didn't give us any details or context, so it's difficult to say what the service does. It isn't on my S5 so it's not universal. It may be regional, carrier specific or some Samsung bloatware that doesn't live on my phone anymore.
You can kill the process, which will cause something to quit working. Probably nothing critical but it's hard to be certain when we don't know what it does. If you have xPrivacy, see what permissions it asks for. Otberwise you could just freeze or disable it and see what effect it has on your phone.
If you tell us what firmware version and carrier you use, perhaps someone else who uses the same firmware /carrier will comment.
.
Click to expand...
Click to collapse
All I know about this service is what I have written here.
It's name is "intelligence service"
and the file is com.samsung.android.intelligenceservice
The reason I started this thread is to get more infomration about what this is as google search does not give much about it.
Phone is SM-G900F
I found some new info using another program to monitor services..
"Receiver
com.samsung.android.intelligenceservice.useranalysis.UserAnalysisBroadcastReceiver handels action android.intent.action.BOOT_COMPLETED with priority 0"
And a second one also named "intelligence service"
"com.samsung.android.intelligenceservice.useranalysis.analyzer.CarAnalyzer handels action android.intent.action.BOOT_COMPLETED with priority 0"

This service isn't on my phone. And as you said, a cursory Google search doesn't tell us much, so we can't tell you anything about it either. Unless you, or someone else that has it provides more information.
At a guess it's just part of some Samsung bloatware. If you disable it, then the associated bloatware app will stop working. If you want to learn more, then look at xprivacy, a root enabled file browser or perhaps Settings > Applications > App ops and find out what app (apk) the service originates from. Then post the apk or at least provide the app's name and what permissions it asks for.
.

And the winning entry is..
1) A surveillance monitor for the Carrier IQ package that the NSA has had carriers install on 300 million phones
I had a few minutes to spare, so I did a proper Google search. The upshot of which is that a lot of people claim that this is a Carrier IQ component. So the service is aptly named. Carrier IQ is a spyware rootkit installed by Verizon, Sprint, etc to capture extensive demographics on what you do with your phone, including keystoke logging. For the carrier to serve you better of course. Or to help the NSA spy on you, depending on who you choose to believe.
Invasive in either scenario, which is why it isn't on my phone.
More reading if you are interested:
http://www.xda-developers.com/android/the-rootkit-of-all-evil-ciq/
http://forum.xda-developers.com/showthread.php?t=2266241&page=2
http://goo.gl/td1w4n
https://www.bloglovin.com/blog/post/5233323/2639029999
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
.

fffft said:
And the winning entry is..
1) A surveillance monitor for the Carrier IQ package that the NSA has had carriers install on 300 million phones
I had a few minutes to spare, so I did a proper Google search. The upshot of which is that a lot of people claim that this is a Carrier IQ component. So the service is aptly named. Carrier IQ is a spyware rootkit installed by Verizon, Sprint, etc to capture extensive demographics on what you do with your phone, including keystoke logging. For the carrier to serve you better of course. Or to help the NSA spy on you, depending on who you choose to believe.
Invasive in either scenario, which is why it isn't on my phone.
More reading if you are interested:
http://www.xda-developers.com/android/the-rootkit-of-all-evil-ciq/
http://forum.xda-developers.com/showthread.php?t=2266241&page=2
http://goo.gl/td1w4n
https://www.bloglovin.com/blog/post/5233323/2639029999
.
Click to expand...
Click to collapse
Somebody is in a bit of a pickle then.

This is also on my handset too

here also.. been reading a bit and found this app:
http://forum.xda-developers.com/showpost.php?p=17612559&postcount=109
and it looks it works for S3:
http://forum.xda-developers.com/showpost.php?p=28662155&postcount=4
could it work for S5 also?

Same here
fffft said:
Well it could be
1) A surveillance monitor for the Carrier IQ package that the NSA has had carriers install on 300 million phones
2) A training aid for would be Mensa members
3) Some random Samsung service that isn't on my S5
You didn't give us any details or context, so it's difficult to say what the service does. It isn't on my S5 so it's not universal. It may be regional, carrier specific or some Samsung bloatware that doesn't live on my phone anymore.
You can kill the process, which will cause something to quit working. Probably nothing critical but it's hard to be certain when we don't know what it does. If you have xPrivacy, see what permissions it asks for. Otberwise you could just freeze or disable it and see what effect it has on your phone.
If you tell us what firmware version and carrier you use, perhaps someone else who uses the same firmware /carrier will comment.
.
Click to expand...
Click to collapse
I have the the same issue, Intelligence Service just popped up in my sys apps too. AT&T
I have a Samsung S5 A900 4.42 I'm at the end of a trial for Samsung. (You think I'd at least get the update sooner! lol) I don't use xPrivacy.
---------- Post added at 11:49 AM ---------- Previous post was at 11:10 AM ----------
harlgal said:
I have the the same issue, Intelligence Service just popped up in my sys apps too. AT&T
I have a Samsung S5 A900 4.42 I'm at the end of a trial for Samsung. (You think I'd at least get the update sooner! lol) I don't use xPrivacy.
Click to expand...
Click to collapse
I think it's the Isis (Softcard) Wallet, pretty sure it is. I just re-enabled it to start using my Serve card.

Connecting to Mac/PC
hi there,
I had a problem after installing amazing "Blaze Kernel "Onto G900w8 S5 running Xtresolite Rom v 1.5 is that phone is not connecting to Pc or mac through kies or Andriod file transfer which used to connect without any problems. Kids or other softwares just keep on trying with no success. I guess there might be some settings that need to corrected to get connectivity. tried both file or camera transfer modes on S5 but no connections.
One Amazing thing i noticed in performance and battery life with this kernel is that my Antutu benchmark scores went up to 43456 from 40435 and is the maximum reached so far...Simply Amazing..
PLEASE HELP!!!!! with connection problems would be highly appreciated.

so what's the verdict on this??

No verdict, most of these kids are no lifers and posting garbage. Still awaiting a fix...

DaddyChaddie said:
No verdict, most of these kids are no lifers and posting garbage. Still awaiting a fix...
Click to expand...
Click to collapse
What the hell are you talking about?

Note 4 same problem
I use battery doctor and lately it's been hard to charge and running quite slow then when I went to optimize it it had all these weird apps iv never seen before and majority of them say they have permission to record audio take my photos use any of my information and so on most of them I can force stop but they just open back up also since this is happen when ever I plug my charger in it makes a weird beep sound after the normal beep that occurs when plugging it in to charge

Ive always just uninstalled this app along with several other useless and suspicious looking apps samsung likes to load our devices with.

I have had my phone for over 12 months. I am very aware that I am being monitored for no reason and so , have kept tabs on my phones files and apps. Only today have I seen a file called Intelligence Service and so, wanted to find out what it was. It wasnt there 4 weeks ago. 4 weeks ago I had other odd files that I couldnt delete. My phone does what it wants: answers calls and hangs up, opens apps, closes other apps, filters internet and when Im on a call I will hear people talking on the line as if its an echo but they arent saying the same thing I am. I often hear voices coming out of the speaker. It reboots when it wants to. My data runs out too quickly no matter how I use it....when I take photos it gets hot like the info is being transfered. My phone has a magnetic charge, too. The phone runs with a slight delay as if its being relayed. Smart phones and idiot phones arent safe. I used my old basic nokia last week. It too was being controled remotely. It doesnt matter what u do.
Com.Sec is a sucurity company. Com.Sec.android may be innocent. If u have files that just say Com.Sec get rid. Com.Sec Investigations, Omnitron. Look them up.

I've just installed the SuperMan ROM and see a newer version of this service, com.samsung.android.intelligenceservice2.
The ROM also left (or brought) over com.samsung.fresco.logging (Fresco Intelligence Service). Apparently nobody knows what that is.
Let's see what the developer says about the two enabled logging/intelligence services in his ROM.

Android 5.1 safe to remove apps

Here is my list of apps that I have frozen. I'm on sprint so, all Verizon junk has been frozen. If you are on any other network, be cautious to remove apps related to that network. Also, if you use any of the Google apps, such as documents, you obviously do not want to freeze them. Same goes for other apps.
So fat everything has been working great.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Not really sure if I would consider Google Device Policy bloat
https://support.google.com/a/users/answer/190930?hl=en
Sent from my Nexus 6

Maybe not bloat maybe more like a foot

Wow. Why not just buy a dumb phone?
---------- Post added at 07:51 PM ---------- Previous post was at 07:49 PM ----------
I mean, isn't android system webview required just to surf the net?
---------- Post added at 07:52 PM ---------- Previous post was at 07:51 PM ----------
What do you actually use on your phone?

If you would have listed what you enabled, I think the list would have been shorter.
Just out of curiosity, you write above that you disabled all Verizon junk, but going through the list, it makes me think whether you even use the N6 in daily life.
Some apps are really necessary, but you should definitely not disable "Android Web View" because this is regular updated to maintain compatibility (not sure whether also bugs are fixed with it)

Well to be fair. It is a pretty good list. I freeze many of the same programs he has because I will never use them. I'm not going to ever Cloud Print or the Google launcher or use Chrome or Gmail because I have my own programs for that I don't need them ever to run. Ever.
My issue was freezing things that may affect your security.
Sent from my Nexus 6

Hahaha. You guys are funny. I use my phone everyday. I spent a bunch of time texting, emailing, making phone calls, browsing the web, watching videos, Skype/Viber, Pandora via Bluetooth. Sure I don't play games and don't use much of what Google preinstalled, but that that doesn't mean the phone is useless. All I can say is that my battery life is simply amazing.

That's a lot..

Android System WebView is the wrapper that apps use to load webpages in the app. I would not disable that...
EDIT: Second thought, this whole list blows.

what a joke of a list. i've only removed the Verizon/Sprint crap and a few of the languages i'll never use.
i'm getting ~2 days of use while still using it normally. i get disabling/freezing/uninstalling gmail when you use another app, but killing half the services that make it actually useful is ridiculous.

So what's the point of buying a Google phone if you're gonna disable Google?

Beast84 said:
So what's the point of buying a Google phone if you're gonna disable Google?
Click to expand...
Click to collapse
Have a phone that is easy to unlock and root? I don't watch movies on my phone at least not from google, I use google mail but not a fan of their app, I do not like the newsstand, etc etc etc. Why would I want these services/ or apps ever to run if I am never going to use them
I use the play store ,
I think he went a bit overboard on the list but it is nice to know IF you want to turn these off you "can" :good:

Does anyone know if there's a way I can transfer some of these Google system apps to user apps and delete them? Not the important ones as much as apps like Fit and stuff like that.

HipHopOtaku said:
Does anyone know if there's a way I can transfer some of these Google system apps to user apps and delete them? Not the important ones as much as apps like Fit and stuff like that.
Click to expand...
Click to collapse
No need to move them.
You could delete them with Root Explorer
But I would suggest you back them up and delete them with Titanium Backup
Sent from my Nexus 6

stas333 said:
.....All I can say is that my battery life is simply amazing.
http://forum.xda-developers.com/nexus-6/general/disabling-google-play-services-guide-t2999821
Click to expand...
Click to collapse
I think it is a good Idea to disable apps and services when they are not used.
But of course everybody has his own idea.
I am using Gmail and Keep and the Daydreams and instead of Photo's I installed the good old KitkatGallery.apk.
For me your list is an example. But the list rather long because of the use of screenshots.
For everybody who wants to disable not used software I made your list with text only.
Disabled by stas333
Android System Webview - Work Assistent
Backup - Basic Daydreams
CaptivePortalLogin - Cell Broadcasts - Cloud Print
com.android.providers.partnerbookmarks.
com.android.sharedstoragebackup
com.android.wallpapercropper
com.qualcomm.atfwd
com.qualcom.qti.rcsimsbootstraputil
com.verizon.permissions.appdirectedsms (provider)
Device configurations - Policy
Docs - Drive - Earth - Email - Exchange Services - Fit - Gmail
Google Backup Transport - Connectivity Services
Google Hindi - Japanese - Korean - Pinyin Input
Google One Time Init
Google Play Books - Games - Movies&TV - Music - Newsstand - Text-to-speech Engin
Google+ - Hangouts - Keep
HMTL Viewer - Input Devices - Live Wallpaper Picker
Market Feedback Agent - Music FX - News & Weather - Nfc Service
Photo's - Print Spooler - RECSService
Setup Wizard - Sheets - Slides - SmartcardService
Sound Search for Google Play
Tags - Talkback - Trusted Face - VpnDialogs - Wallet

so I removed VZW Backup app with TitaniumBackup and now I am getting "buacontactadapter has stopped working" whenever I uninstall an app...
i assume because it was tied to Google's app backup process?
can i fix this or can someone upload their apk for me so i can reinstall?
edit: i rebooted and tested, notification went away. oh well

Yes you typically backup something before you delete it unless you're 100% sure, otherwise you have no emergency button [emoji722]
Sent from my Nexus 6

DebianDog said:
Yes you typically backup something before you delete it unless you're 100% sure, otherwise you have no emergency button [emoji722]
Sent from my Nexus 6
Click to expand...
Click to collapse
it seems it was just a glitch where google was pinging the backup file and when it didnt match the VZW app, it resulted in an error.
a reboot got rid of the issue. i should have know and understood this. there is no way a vzw backup on an att phone would cause google software issues.

this thread is comical. op should look up the definition of bloat. disabling android core system apps does not constitute removing "bloat". thought this would be informative, instead it was entertaining

indianajonze said:
this thread is comical. op should look up the definition of bloat. disabling android core system apps does not constitute removing "bloat". thought this would be informative, instead it was entertaining
Click to expand...
Click to collapse
to me its bloat since i dont use any of that junk