Help, Possible My Phone Remotely Used - myTouch 4G Q&A, Help & Troubleshooting

Hello Everyone,
I have this strange question/concern. I was using my phone today, opened up my browser to goto google and I noticed in the left corner, that icon that shows you are downloading a app. I thought this to be weird, so I clicked on the top task bar and it said the file completed downloading and it was called "babylon9_setup.exe".
This freaked me out, so I went to settings, then applications, then manage applications...clicked on the downloaded tab...and that file was not there!
So, next I went to root explorer, then to "sdcard" folder, then scrolled down to the "download" folder...and the "babylon9_setup.exe" file was there.
I searched on google but could not find anything. I have deleted it, but this has me thinking, if its possible someone might have control of phone and they downloaded this app to my phone.
So...two things. What is this app "babylon9_setup.exe" and is it possible someone has control of my phone. If answer is yes, how can I tell?
Thanks so much for any help,
Brian

fst2011 said:
Hello Everyone,
I have this strange question/concern. I was using my phone today, opened up my browser to goto google and I noticed in the left corner, that icon that shows you are downloading a app. I thought this to be weird, so I clicked on the top task bar and it said the file completed downloading and it was called "babylon9_setup.exe".
This freaked me out, so I went to settings, then applications, then manage applications...clicked on the downloaded tab...and that file was not there!
So, next I went to root explorer, then to "sdcard" folder, then scrolled down to the "download" folder...and the "babylon9_setup.exe" file was there.
I searched on google but could not find anything. I have deleted it, but this has me thinking, if its possible someone might have control of phone and they downloaded this app to my phone.
So...two things. What is this app "babylon9_setup.exe" and is it possible someone has control of my phone. If answer is yes, how can I tell?
Thanks so much for any help,
Brian
Click to expand...
Click to collapse
You're wise to be suspicious. I read an article that said that by getting you to download a simple file a remote user can access any file on the phone as long as they have the path/filename.
This happened to me when trying to download an mp3 from an untrusted source. They changed my google account password.
I would restore a nandroid backup and change your google account password just to be safe.
I'll try to find the article.
Sent from my HTC Glacier

Here it is. Video included.
http://www.androidpolice.com/2010/1...d-allows-unauthorized-remote-sd-card-access/#
Sent from my HTC Glacier

must be some kinda of javascirpt virus injection thingy designed to take over windows machine. the up side is, .exe won't do any harm to android(linux) OS.

leo221 said:
must be some kinda of javascirpt virus injection thingy designed to take over windows machine. the up side is, .exe won't do any harm to android(linux) OS.
Click to expand...
Click to collapse
Did you look at the link I posted right above you? There's a video.
Sent from my HTC Glacier

Related

Wallpaper location?

I was having trouble finding decent (HD) or there abouts wallpapers for the d2. Im about to sbf and cant seem to locate my current wallpaper again on the web, when I got it, I just long touched on the screen and chose save as wallpaper. Trying to backup all my stuff and for the life of me I cant find this dang file on my phone/sd card. Anyone know where its located? Thanks.
Sent from my DROID2 using XDA App
I'm curious where/how the wallpapers are stored as well. Just for kicks, I went to Google Images, searched dragon, and pressed and held a file named red-dragon.jpg, then selected Set as Wallpaper. Using Root Explorer, I went through every folder on my phone, excluding the ~/sdcard, searching for "red-dragon," ".jpg," and "dragon.jpg." None of which gave me any results.
So, sorry to say, but I think the D2 really likes to hide your wallpaper. :/
Did you know that you can actually google how to boil water? In any case, google is your best friend. Rarely picky and almost never down...anyways, back to topic:
I recommend googling: current wallpaper location android. The first hit helped me a little bit into it. It seems there is this folder called data that you can only access once you rooted your device. Since Im in no need to do so and myself new to android I leave you to do whatever you want with this information.
Im also sure that you will need a root file explorer...only guesses though.
Sent from my MotoA953 using XDA App
oTToToTenTanz said:
Did you know that you can actually google how to boil water? In any case, google is your best friend. Rarely picky and almost never down...anyways, back to topic:
I recommend googling: current wallpaper location android. The first hit helped me a little bit into it. It seems there is this folder called data that you can only access once you rooted your device. Since Im in no need to do so and myself new to android I leave you to do whatever you want with this information.
Im also sure that you will need a root file explorer...only guesses though.
Sent from my MotoA953 using XDA App
Click to expand...
Click to collapse
Maybe you were too busy being smug to read my post, so I'll just give you the tl:dr version.
I searched through the entire /data folder with Root Explorer for ".jpg" and found nothing when I was using a "red-dragon.jpg" as my background.
Thanks for your mastery of searching on Google though.
I am not rooted but whenever I save wallpapers from the internet on my phone they end up in a folder titled downloads..that shows up in my gallery and when I look at mt sd card..check to cee if you have a folder titled that as well
Sent from my DROID2 using Tapatalk
I think the system puts things like that in a database file. I have my walpaper of a picture I took but it is no where on the phone. It is defined in an xml file but where actually stored i think it is in a DB file. Sorry I can not make the "thumb keyboard" do commas.
Sent from my DROID2 using XDA App
chrstdvd said:
I think the system puts things like that in a database file. I have my walpaper of a picture I took but it is no where on the phone. It is defined in an xml file but where actually stored i think it is in a DB file. Sorry I can not make the "thumb keyboard" do commas.
Sent from my DROID2 using XDA App
Click to expand...
Click to collapse
I'm going to investigate this hunch further. I'll search the /system folder for all .xml files or database files. I can't say I'm an expert on the matter though, so... No promises on results.
Answer
allyouhave said:
Maybe you were too busy being smug to read my post, so I'll just give you the tl:dr version.
I searched through the entire /data folder with Root Explorer for ".jpg" and found nothing when I was using a "red-dragon.jpg" as my background.
Thanks for your mastery of searching on Google though.
Click to expand...
Click to collapse
I don't know if you are still looking for this, but if others stumble on this like I did, here's the answer. in the /data/data/com.android.settings/files/ folder there is a file called wallpaper (no extensions). it is actually a jpg file (if you copy it somewhere else and add a .jpg at the end you'll be able to see it)
@tsachi Here is my question: I would like all these lovely wallpapers I downloaded to show up in the dialog when I press Menu...wallpaper then hit the wallpaper button. The same default papers are always there and I would like to move my downloaded wallpapers to where ever that is.
tsachi said:
I don't know if you are still looking for this, but if others stumble on this like I did, here's the answer. in the /data/data/com.android.settings/files/ folder there is a file called wallpaper (no extensions). it is actually a jpg file (if you copy it somewhere else and add a .jpg at the end you'll be able to see it)
Click to expand...
Click to collapse
Thanks tsachi. I was able to confirm this. I couldn't see the contents of /data with ES File Explorer, but I was able to do this through adb:
Code:
su
cd /data/data/com.android.settings/files/
cp wallpaper /mnt/sdcard/Pictures/wallpaper/wallpaper.jpg
exit
exit
Then I was able to look at it in any image viewer.
Not directly related, but I used adbWireless so that I wouldn't need to connect the usb cable and I'm using MultiPicture Live Wallpaper as my wallpaper switcher.
Samsung Galaxy Tab 10.1 (3G / GT-P7500)
wall paper location
i got mine at
system\framework\framework-res\res\drawable-hdpi
Hey there,
I wanted to set my Wallpaper manually to avoid cropping when choosing a file in the gallery.
On my Nexus 10 running Android 4.2.1 the wallpaper is found at:
"/data/system/users/0/wallpaper"
The file has no ending but is a jpg file (as sad by others).
If you want to exchange the file with yours remember to set the right permissions.
I dont know exactly how they have to be, but if you give all users at least read access it should work.
After a reboot the new Wallpaper should be set.
My wallpaper now has a resolution of 3966x2560 and there are no black bars anywhere. The system seem so crop it on the fly.
Confirmed on JB 4.2, the location is
/data/system/users/0/wallpaper
Copy wallaper to somewhere else and change its extension to wallpaper.jpg and you are done.
oTToToTenTanz said:
Did you know that you can actually google how to boil water? In any case, google is your best friend. Rarely picky and almost never down...anyways, back to topic:
I recommend googling: current wallpaper location android. The first hit helped me a little bit into it. It seems there is this folder called data that you can only access once you rooted your device. Since Im in no need to do so and myself new to android I leave you to do whatever you want with this information.
Im also sure that you will need a root file explorer...only guesses though.
Sent from my MotoA953 using XDA App
Click to expand...
Click to collapse
i actually found this THREAD using google , so that was a bit harsh
Hello
Sent from my LG-P760 using XDA Premium 4 mobile app
Thanks, I found it and replaced it there. Anyone got any idea where to find the lockscreen image so I can do the same?

How to clear downloads

Did a bunch of downloads with Chrome over the last two weeks... is there any way to clear the downloads app?
I am not seeing any way, but deleting one at a time.
Thanks
Sent from my Nexus 7 using Tapatalk 2
There's a tick box next to each of the downloads, but you have to press on each one of them and then delete.
You cold also use any file explorer and go to /sdcard/Download. All the files that are downloaded by chrome are stored in there
Jon565G said:
There's a tick box next to each of the downloads, but you have to press on each one of them and then delete.
You cold also use any file explorer and go to /sdcard/Download. All the files that are downloaded by chrome are stored in there
Click to expand...
Click to collapse
I'm pretty sure that deleting them won't do anything to the list of downloads in the downloads app. The only way as far as I know, as Jon said, is to manually press each one.
cyr0s said:
I'm pretty sure that deleting them won't do anything to the list of downloads in the downloads app. The only way as far as I know, as Jon said, is to manually press each one.
Click to expand...
Click to collapse
I know that they can be manually checked off. Sucky solution, really.
Just disabled the app... So far no problems.
go to the main phone setting, apps, all, download manager.. now clear data. do the same with downloads(if there is data there). all you downlosds will be cleared.

[Q] It seems my Samsung tablet was hit by some kind of malware, how to check?

The symptom is, each time I switch on my tablet, I receive a notification in lower right corner promoting something like lucky draw, game, etc. If I click on the notification, it automatically starts downloading apk. The apk is always named like yyyymmddxxxxxxxxxxx.apk. I never run those apks, I guess they are not friendly. How can I check which app I installed is doing this?
olivex said:
The symptom is, each time I switch on my tablet, I receive a notification in lower right corner promoting something like lucky draw, game, etc. If I click on the notification, it automatically starts downloading apk. The apk is always named like yyyymmddxxxxxxxxxxx.apk. I never run those apks, I guess they are not friendly. How can I check which app I installed is doing this?
Click to expand...
Click to collapse
First check what you have installed recently. Could be one of those apps give spam notifications. I saw something similar on my bro-in-law phone and that was because he installed some kind of "enhancement" program to make his phone run more efficient (it didn't help bytheway).
Also, since you didn't say what OS you're running, 4.0+ has the option to disable notifications when you go to settings>applications>app name. If you find its an app you need, then that might help.
If you thinks its beyond this, then install lookout or norton from the market.
It's not malware, they're called push notification ads. Just download "Ad Blocker" (root required) from the market and it will tell you which app(s) is doing this. You can also choose to delete it from within the app.
Pretty handy.
-*Sent from my T-Mobile GS3*-
nakedninja42 said:
First check what you have installed recently. Could be one of those apps give spam notifications. I saw something similar on my bro-in-law phone and that was because he installed some kind of "enhancement" program to make his phone run more efficient (it didn't help bytheway).
Also, since you didn't say what OS you're running, 4.0+ has the option to disable notifications when you go to settings>applications>app name. If you find its an app you need, then that might help.
If you thinks its beyond this, then install lookout or norton from the market.
Click to expand...
Click to collapse
Yes it is 4.0.4. l'll check in settings and reply.
OTAw said:
It's not malware, they're called push notification ads. Just download "Ad Blocker" (root required) from the market and it will tell you which app(s) is doing this. You can also choose to delete it from within the app.
Pretty handy.
-*Sent from my T-Mobile GS3*-
Click to expand...
Click to collapse
yes it just push notification ad. The problem is I don't know which app is doing this, and do not want to root my device. Is there another way to identify ?
olivex said:
yes it just push notification ad. The problem is I don't know which app is doing this, and do not want to root my device. Is there another way to identify ?
Click to expand...
Click to collapse
Try installing "Air Push Detector" from the market.
my tablet is using 4.0.4 but i cannot find the setting you mentioned. in settings-application-application name, there is no notification setting.
i tried but there is no app found. i still get notification ad.
olivex said:
i tried but there is no app found. i still get notification ad.
Click to expand...
Click to collapse
Can you upload a screenshot of this notification ad for us? Maybe even a list of your downloaded apps?
--> dominating your screen from my t-mobile gs3, powered by: FreeGS3 R7 "Resurrection"
OTAw said:
Can you upload a screenshot of this notification ad for us? Maybe even a list of your downloaded apps?
--> dominating your screen from my t-mobile gs3, powered by: FreeGS3 R7 "Resurrection"
Click to expand...
Click to collapse
I don't have it now, I will load it when I get it next time.
However I have the list of apps I installed because I sent it to the author of push detector. How can I send it to you? I just don't want to post it here.
I have another finding, which seems odd to me: I set the home page of chrome to be blank, and I double checked that, but each time I open the browser it always opens a search page with a lot of informations (looks like a portal but I don't like it). How can I know which app replaces my home page with such rubish?
Is it possible the 3G provider does this kind of things? (notification ads and home replacement)?
olivex said:
I don't have it now, I will load it when I get it next time.
However I have the list of apps I installed because I sent it to the author of push detector. How can I send it to you? I just don't want to post it here.
I have another finding, which seems odd to me: I set the home page of chrome to be blank, and I double checked that, but each time I open the browser it always opens a search page with a lot of informations (looks like a portal but I don't like it). How can I know which app replaces my home page with such rubish?
Is it possible the 3G provider does this kind of things? (notification ads and home replacement)?
Click to expand...
Click to collapse
No, your network provider would have nothing to do with push notification ads or homepage replacement. And as for setting your homepage in Google chrome, are you talking about the desktop version? Because I don't believe you can make that selection on the mobile version, unless I'm missing something?
BTW, you can send that list to me in a PM if you'd like.
--> dominating your screen from my t-mobile gs3, powered by: FreeGS3 R7 "Resurrection"
Try this app, it will tell you every app that has a shady ad network and you can delete it. A friend of mine had an app that was creating a ton of shortcuts all over her home screens.
https://play.google.com/store/apps/details?id=com.lookout.addetector&hl=en
OTAw said:
No, your network provider would have nothing to do with push notification ads or homepage replacement. And as for setting your homepage in Google chrome, are you talking about the desktop version? Because I don't believe you can make that selection on the mobile version, unless I'm missing something?
BTW, you can send that list to me in a PM if you'd like.
--> dominating your screen from my t-mobile gs3, powered by: FreeGS3 R7 "Resurrection"
Click to expand...
Click to collapse
In Chrome settings you can set your home page. But it seems it's the 3G provider that replaces the home page for me.
I will send you the app list. Thanks.
mrsbelpit said:
Try this app, it will tell you every app that has a shady ad network and you can delete it. A friend of mine had an app that was creating a ton of shortcuts all over her home screens.
https://play.google.com/store/apps/details?id=com.lookout.addetector&hl=en
Click to expand...
Click to collapse
Thanks. I will try it and post result here.
mrsbelpit said:
Try this app, it will tell you every app that has a shady ad network and you can delete it. A friend of mine had an app that was creating a ton of shortcuts all over her home screens.
https://play.google.com/store/apps/details?id=com.lookout.addetector&hl=en
Click to expand...
Click to collapse
I tried it but it also couldnt find the notification ad. It did find apps that have bi-app ads but they are numerous.
olivex said:
The symptom is, each time I switch on my tablet, I receive a notification in lower right corner promoting something like lucky draw, game, etc. If I click on the notification, it automatically starts downloading apk. The apk is always named like yyyymmddxxxxxxxxxxx.apk. I never run those apks, I guess they are not friendly. How can I check which app I installed is doing this?
Click to expand...
Click to collapse
Rooted?
why don't you backup with Titanium Backup then backup everything
then Flash Stock ROM using ODIN
Sent from my GT-P7500 using xda premium
abihakim said:
Rooted?
why don't you backup with Titanium Backup then backup everything
then Flash Stock ROM using ODIN
Sent from my GT-P7500 using xda premium
Click to expand...
Click to collapse
No it's not rooted.

Getting weird system pop-up, please help

I had this on my old Z1, and now I have a note 4 and it's on it as well... Every few days I get a pop-up on my phone with a Chinese word (screen shot will be added), and despite all my efforts with anti-virus / anti-malware apps, it persists. I found nothing on it online... I used Google translate to try to make sense of this pop-up, all it says is " 堰" which translates into "weir". I used es file Explorer to search my entire phone for that Chinese word, it came up with nothing. I deleted all apps that I thought were suspicious, and still nothing. Could someone help me with this? It's driving me insane. Thank you.
Could it be an app that you had both on your z1 and have it on your new device as well? How about doing a factory reset and then if your problem persists? The only logical course I can think of is to install your apps incrementally and seeing when this starts again. Also, try to keep unknown sources and verify apps on under security. Hope that leads you in the right direction.
I've deleted almost all third party apps, did a factory reset, even flashed a new ROM from sammobile... It still happens. This problem started when I put my old memory card from my Z1 on the note 4. But I've switched it for a new one, and flashed the new ROM after that (and wiped data, and cache), and still no luck. I'm beginning to think it may have been a virus that implants itself to system files or something... I'm a noob though, I need some developer brain power for this
It could be a message from your SIM card or network.
iR¡[email protected]!* from Galaxy Note 4 via Tapatalk
Yes I agree with Jimmyness. Go get a new SIM card, assuming you moved the SIM from your old phone. You've changed everything else.
Alright, I'll give it a shot and let you guys know... Thanks
Jimmyness said:
I had this on my old Z1, and now I have a note 4 and it's on it as well... Every few days I get a pop-up on my phone with a Chinese word (screen shot will be added), and despite all my efforts with anti-virus / anti-malware apps, it persists. I found nothing on it online... I used Google translate to try to make sense of this pop-up, all it says is " 堰" which translates into "weir". I used es file Explorer to search my entire phone for that Chinese word, it came up with nothing. I deleted all apps that I thought were suspicious, and still nothing. Could someone help me with this? It's driving me insane. Thank you.
Click to expand...
Click to collapse
To see which app this pop-up message is belong to, try the following:
install Shortcut Master app > Menu > Capture Shortcut.
That shortcut master app... I'm not sure exactly what it's supposed to do.
Sent from my SM-N910C using XDA Free mobile app
rcobourn said:
Yes I agree with Jimmyness. Go get a new SIM card, assuming you moved the SIM from your old phone. You've changed everything else.
Click to expand...
Click to collapse
I swapped my sim like you guys said... Unfortunately the thing came up again. What's happeninggggg what is thisssss!?
Sent from my SM-N910C using XDA Free mobile app
What service provider are you using? Does this happen after a factory reset before you add your Google account? In thinking you are letting an app install after you reset.
Jimmyness said:
That shortcut master app... I'm not sure exactly what it's supposed to do.
Sent from my SM-N910C using XDA Free mobile app
Click to expand...
Click to collapse
It captures the shortcut of the popup shown on the screen.
That way you will know which app that popup is belong to.

Question Remove filemanager and suggestion on what to use

Hi,
I recently set up my new phone and copied from my oneplus 6.
Everything worked well but the filemanager from op6 is somehow transfered and I cant remove it, and I cant find it among the apps.
The app is inactivated so I guess it doesnt disturb anything but it would be nice to get rid of it.
And also, I need suggestions on what filemanager-app to use. (to be able to for example, transfer from drive to phone.)
Paendrag said:
Hi,
I recently set up my new phone and copied from my oneplus 6.
Everything worked well but the filemanager from op6 is somehow transfered and I cant remove it, and I cant find it among the apps.
The app is inactivated so I guess it doesnt disturb anything but it would be nice to get rid of it.
And also, I need suggestions on what filemanager-app to use. (to be able to for example, transfer from drive to phone.)
Click to expand...
Click to collapse
Xplore by lonelycatsgame is a great dual pane file manager and all I've ever used for years.
Are you sure it was transferred from the OP6 and not the Android default file manager? It's called just "Files" (with a light blue folder icon), as opposed to the "Files by Google" (bloatware) application.
I was asking about the same thing in another thread, because the Google app really sucks, and I couldn't figure out how to get the default file manager to show up in the app drawer. Personally I'm using Material Manager at the moment. Have to give Tulsadiver's suggestion a try as well now.
corpsus said:
I'm using Material Manager
Click to expand...
Click to collapse
I have tried using an app called, "Files Shortcut" from the playstore. Which essentially launches the same Files app. Instead of using actibity launcher, this has been a solution for me. You could try this.
Paendrag said:
m drive to phone
Click to expand...
Click to collapse
Did you try using MiXplorer? Its available on xda
File Manger + à very handy file manger use it myself
hemanth.k said:
I have tried using an app called, "Files Shortcut" from the playstore. Which essentially launches the same Files app. Instead of using actibity launcher, this has been a solution for me. You could try this.
Click to expand...
Click to collapse
Oh perfect! This was exactly what I was looking for, as the default file explorer is totally good enough for me. It's lightweight, sleek and it can handle network storage, which Files by Google can't! Thanks for the tip!
Thanks.
The same goes for me.
Thanks everybody for your input.
Solid explorer is my choice. Have used it for many years. Never found anything better. Dual pane, supports cloud storage.

Categories

Resources