I noticed an app shortcut missing from the upper right of my home screen today. I called my GF with same phone and asked her what was in the upper right on hers (I set them up to be similar layout) and she had a blank but couldn't remember what it was either.
I know something was occupying that space and I thought it was useful enough not to move it to one of the side screens, but now I can't remember what it was.
It would sure be nice if there was a log of apps installed/removed that one could access after the fact.
I noticed after one of the updates that pandora went away, but I redownloaded it and it even kept my authentication. I removed slacker a while ago because it kept losing my login info.
I think a list of what we notice missing would be interesting, so please chime in (with missing items, not trolls)
dont have a App-Backup?
Google changed some of their package names. This will cause some icons to disappear, it doesn't necessarily mean it was removed entirely.
yeah u mite just need to add shortcuts again...
I still like the topic of the thread though. If OP could update the post with the apps removed and the reason stated it could be one of XDA's great reference threads.
Noname1 - Violation of terms and security issues
Noname2 - Violation of terms and security issues
http://android-developers.blogspot.com/2010/06/exercising-our-remote-application.html
(no name stated)
That's what kills me, I don't remember.
I thought I would use it frequently so left it in a prominent position, but apparently they wiped my brain along with the app (or shortcut).
I have a stock phone. not rooted.
I haven't found a backup app or screen capture app that works with unrooted phone.
Should we guess what it was? My guess is google voice.
675 Trip said:
It would sure be nice if there was a log of apps installed/removed that one could access after the fact.
Click to expand...
Click to collapse
This won't help now but one does exist, you just have to install it beforehand. There is an app called AppHistory which keeps a list of everything you have installed and removed. I don't backup my apps and have found that useful once or twice to remember an app that I uninstalled and want to try again or something.
I am on the March 5th build of ICS from Quarx, and have only experienced this issue on this ROM, however I have not tried going to another version to see if it's something I viewed/downloaded.
Every once in awhile I get a notification, it looks exactly like a smaller version of the Messaging app's icon. The title says something like "Faster, Better" etc. and once I click on it there is an image of an ad for UC Browser 8. It only happens when I have internet, but all I can do is swipe the notification and wait for it to happen again.
There is a folder in the root of my SD card called Joy. Inside are three more folders: Cache, PopAd, and config. Nothing in Cache, PopAd includes the ADucweb_en.jpg image that pops up. In config there is dk.pro, popAd.config, running.config, and sys.config.
When I delete the folder, it reappears once the ad pops up- which seems to coincide with why I always need internet when the ad pops up.
Any advice on how to handle this? It's annoying and could be simply malware (AVG finds nothing wrong) but it seems to be a total breach of privacy and security that a folder is able to redownload itself continuously against the user's wishes. I'm unaware if this has anything to do with the person/people behind UC Browser 8, but I feel I need to contact them as well for malicious advertising by someone.
I had these same notifications happening, and found those files too. After installing "Addons Detector" I found that these were coming from an app I'd recently installed called "Mission Impossible FREE" (com.letang.game109.en).
I wonder if there's a better way to identify the app that creates a notification. Nearly anonymous notifications seem like an easy spam vector. It'd be nice if a long press on a notification message gave identifying details about it's origin.
-Ben
problem solved
same problem here. thx to another member, i now know how to remove it permanently. when the ad pops up, take note of the game/app that it's advertising. go to market and find its developer. then check and see if you have any of their app/game installed in your phone. just uninstall them and you'll be able to delete the joy folder permanently. and the ad will never pop up again.
the developer that's making these ads in my phone is call LeTang, Inc. i think it's the same for you.
Hi all,
My model SM T330 has begun periodically freezing with whatever app I try to run eventually crashing about 30-60 seconds in. At its best the app simply crashes and dumps me back to the home screen (which often fails to load my shortcuts and widgets). At its worst it will completely freeze when I try to transition to a new app or otherwise try to navigate the UI. I would chalk this up to it getting old but I got lucky and managed to get the home screen to load only to find that an app called "baby angel" had suddenly appeared there (it uses the Android system app icon). I was able to get the applications manager to last long enough to find that this app wasn't listed anywhere (even under "all"). I don't see how it could be an actual system app because I haven't updated my OS (version 5.1.1) in a while (unless it updated itself even after I told it not to) and I couldn't find any reference online to a system app of that name (just a bunch of live wallpapers that I definitely don't have).
At this point I assumed I'd been infected with malware so I ran a full scan with McAfee but it came up with nothing. I find this hard to believe but I'm not sure how to proceed or if the two events are even related. Right now I'm just keeping the Wi-Fi off in case it's being accessed remotely somehow (did I mention my tech literacy is mediocre at best?)
Any advice would be greatly appreciated. If I've left out some important piece of information feel free to ask.
Flash the stock firmware with Odin.
thread title says it all...updated to fire os 7.3.2.1, absolutely ZERO idea what they added/removed/changed.
anyone got patch notes?
the download manager now creates garbage downloads
and it also fails them randomly, it also hides them but still shows them as downloads, if you try to cancel them it crashes.
also the appstore is now 4.10kb which coincidentily is the default size of apps that aren't enabled on the system. the file manager also gets a downgrade, now it crashes, freezes, and sometimes refuses to show you the downloads folder. there also a new version of alexa and theres an imdb tv app that you can't delete. also sometimes apps in the window manager folder won't show up for whatever reason. theres also a "kindle" app that shows up now even when its blocked by pcs. sometimes when you try to update you find out that the build date is actually june 2021
the update button sometimes disappears too... oh and theres an icon on the top right corner of a notification when the app that its for draws over other apps and is currently active. other than that its a complete downgrade from the last version.
Wow - that's quite a list. My experience has been uneventful. Transparent update, download manager continues to work, no new apps, breathing uninpeeded, dog didn't die. YMMV
Couldn't find that one listened anywhere here specifically. I'm pretty sure my phones compromised but I'll probably just get people telling me I'm being paranoid. Just notice a lot of weird stuff going on.
I'll give some examples, but it would be cool if someone else here has an A03s and could give me a full list of the system apps to know for sure if mine has some extra ones that aren't truly factory. Because I've restore it several times and they don't go away.
Like under the apps screen under the basic ones I got apps like Android auto, webview, configapk, customization service, and something called data restore tool, device health services, group sharing, meet, nearby device sharing, quick sharing, quick share, settings..etc. which to my knowledge are pretty normal apps to see on phones right? But I seem unable to control them, if I disable them and go back and check later they mysteriously reenabled again, or after that the permissions lists will be greyed out not being able to do anything. Also there is a app called "permissions controller", as well as ones called "apps", "apps update", "tools", "app recommendations", "settings recommendations"..etc. is that normal? I never noticed that with my old samsung. They are really small file size apps with pretty generic looking icons and they don't let me disable them.
What gets more weird to me though is when I enable the system apps too. I see all kinds of suspicious looking ****.
Like for the android setup, and android system apps there are two of each, and the other two have generic looking icons, also got stuff like configuration restore, audio mirroring, auto hotspot, automation test, bluetooth/bluetooth midi service, call & text on other devices, callbgprovider, camera extensions proxy, carrier login engine, sim tool kit, cell broadcast services, clipboardsaveservice, cmh provider, companion device manager (where I have no idea where my "companion is or how to control it so I must be the one being controlled?", configupdater, csc, dcktimesyncapplication, dynamic system updates, ipservice, enterprise sim pin service, external storage, like 10 different gestural navigation bars, group sharing, iaft, ims service, settings, and logging, input devices, iothiddenmenu, keycustomizationinfobnr, launcher, locale overlay manager, service mode and service mode ril, media and devices, mdmapp, vpndialogs, mmigroup,mmsservice, mobilewips, mtp host, nearby device scanning (2 instances), network diagnostic, nsdswebapp, one handed mode, osulogin, package installer, an app called "people", private share, proxy handler, quick share agent, samsung core services? (is that a real app even? I can disable it but who wants to disable "core" system apps, so touche there if it is a program deployed by a hacker on their app naming skills lol, smart switch agent, 2 instances of software update, system connectivity resources, system uwb/wifi resources, an app called "tasks", tethering, tethering provision and tethering automation, tfstatus/tffunlock always running when I never access them, usbsettings, and theres one called wallpaper services/wallpaper and style that looks really generic which is confusing because I assumed the samsung theme manager just handled all that stuff in one? We also got wearable manager installer running, and sometimes wificalling and wifi direct or work setup will be running when I don't have any of those configured.
Sorry for the huge block of text, I'm sure I missed a bunch i missed because there's some that don't show even when you tap "show system apps", like the skms agent as one example, so got a few general questions for you, so for the file/download system I got a bunch of default apps. There's two different files apps, there's a download manager and download app, and also a storage manager, and ALSO a app called the external storage that always wants to be running but can you explain that if I have no external storage? Is the built in storage space on the a03 called external storage? I even have my drive apps and stuff disabled.
Another things that's suspicious to me is secmediastorage, secvideoengineservice, secsoundpicker, secureelementapplication, media and devices + ext storage. Like why should there be a SECOND video or audio engine running when I'm old school and don't even use cast programs/features or anything like that? In fact it's usually one of the first things I just go ahead and try disable.
I noticed a lot of weird things going on with the display though too, looking really sharp then suddenly almost looking like there's two layers of gui not exactly lined up, like off by a pixels making things look blurrier. Like the one ui home is the default factory launcher right? So why does my phone also have a app called "launcher", plus another hidden launcher or something running in the background? I can't remember the name of it offhand, something GUI..
And I understand the concept of android have a permission controller, and "core apps" but are there actually apps under the system apps named that lol? "permission controller", "samsung core apps" one called "device services"...
also is service mode suppose to be running in the background? I googled into it and know it's a genuine service, but I really don't understand why a lot of these apps are stopping and running or renabling themselves.. It's like I have zero control over my own phone and if I'm just paranoid and they are meant to be just seems like a waste of complete waste of ram/data to me.
****, I was just sitting here thinking for like a few minutes about to post and almost forgot the most suspicious ones I've noticed in last few days. all the "com." overlay apps. I guess I really saw the word "overlay" as something you should be suspicious about until the vpn I recently bought had a feature that is suppose to block web browser based overlays. Then I noticed that MOST of my com. apps are all overlay apps! Lol, ranging from google/samsung to mediatek.
I won't post all of them because there's probably 20 at least but here's a few.
com.mediatek.frameworkresoverlay
com.mediatek.settingsproviderresoverlay
com.mediatek.systemuiresoverlay
com.samsung.android.networkstaack.tethering.overlay
com.samsung.android.smartswitchassistant
com.samsung.android.wifi.p2paware.resources
com.sec.android.app.camerasaver and a camera.app.cameraapp one (camera always running in background even if background and battery saver with restricted settings enabled)
com.google.android.ondevicepersonalization.services (I never used any personalization service or see a personalization app for that matter)
com.google.android.networkstack.tethering.overlay
and there's a bunch of com.google.android.overlay.gmsconfig ones /common geotz/ gsa/ photos/
com.google.android.overlay.modules.captiveportallogin.forframework
plus a overlay broadcastreceiver, ext.services, documentsui, permissioncontroller, and sdksandbox one.. tetheringresoverlay, wcmurlsnetworkstackoverlay, locale overlay manager..etc.
Also I get my service through straight talk which I think uses verizon and I noticed when I go to connections/mobile networks and network operators and uncheck the box "select automatically" that for some reason it only wants to connect to a network operator called "Home". I just thought that was kind of a weird and generic name for a network operator. I tried to use a android hidden settings app to change that because it was blocked out and thought I messed up my phone because I no longer had data and couldn't access the menu through the app anymore, but luckily a reformat fixed it but I'm still dealing with all this crap haha.
Can someone tell me I'm not crazy and there's definitely someone that is accessing and controlling my phone without my permission and what would be the best way to go about dealing with this?
Thanks.
First things fist: Here on XDA we expect you to follow the Forum Rules:
2.5 All members are expected to read and adhere to the XDA rules.
Click to expand...
Click to collapse
If you haven't done that yet, click the link in my signature and do it now.
One of the rules you'll notice is this one:
5. Create a thread topic or post a message only once, this includes external links & streaming media.
As a large forum, we don't need unnecessary clutter. You're free to edit your message as you like, so if you do not receive an answer, revisit your message and see if you can describe your problem better. Not everyone is online at the same time so it might take a while before you receive an answer.
You can bump your unanswered question once every 24 hours
Duplicate threads and posts will be removed
Always post in an existing thread if a topic already exists, before creating a new thread.
Use our search function to find the best forum for your device.
Click to expand...
Click to collapse
You've copied this post at least once. We'll be removing the duplicate.
Now on to your question...
It is my opinion that the problem may not be with what you are observing, but with your assumptions. In the duplicate thread, you assume two possibilities:
You're being hacked
Your paranoia is justified
Have you thought there may be a third or even fourth option? Such as, maybe you don't understand that much about Android, you don't recognize what you see, you're assuming it's malicious, which combined with your own confirmation bias, has led you to the conclusion that foul play is afoot?
Nothing you have described sounds in any way abnormal. You have a Samsung device running OneUI (Samsung's framework overlaid on top of Android) that is powered by a Mediatek chipset. Everything you describe sounds completely normal to me, with over 10 years of experience in Android, most of that with Samsung devices.
My conclusion, to be frank: You are not being hacked, and your paranoia is unfounded.
OP your post gave me a headache trying to read it.
So...
Have it reflash to the stock firmware if you really think it's behaving erratically and a factory reset doesn't work. Change Google password and all others.
Then be careful what you install.
Don't put in foreign thumb drives or let others use it.