Database Users

[Q] "Hello world, PM EasyView!"? Possible malware caught on screenshot?

I recently took a screenshot that revealed another background window behind a warning message window that says "Hello world, PM EasyView!"
Is this some kind of malware? I tried scanning my phone with Lookout Security and it did not detect anything suspicious.
It all began when all of a sudden my stock 2.2.2 Defy's Task Manager kept showing popup messages telling me that my Hotmail app is running for too long and is consuming memory. This never happened before, ie. Task Manager app showing warning messages about apps running for too long. I suspect a malware infestation. Please advise.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

If you are scared that you are infected by malware the only "safe" thing to do is a full data wipe.
You dont have clockworkmod installed do you? Would be helpfull to have a full copy of the system to analyze it. I think clockworkmod would be a perfekt method to get a copy of the whole system.

sorry i don't know how to solve this. maybe it's time for you to change to some other ROMs...

iRegistry said:
If you are scared that you are infected by malware the only "safe" thing to do is a full data wipe.
You dont have clockworkmod installed do you? Would be helpfull to have a full copy of the system to analyze it. I think clockworkmod would be a perfekt method to get a copy of the whole system.
Click to expand...
Click to collapse
Well not exactly scared but I was just wondering about the origin of that "Hello world" message. "PMEasyView"? I wasn't able to find any app or developer by that name among the apps installed on my phone. Just was wondering if anyone here knew thats all. I rooted my phone using SuperOneClick, does it install Clockworkmod too? Or do I have to do it separately?
tomarsenal said:
sorry i don't know how to solve this. maybe it's time for you to change to some other ROMs...
Click to expand...
Click to collapse
I did install CM 7.1(2.3.7) but I didn't quite like it..I mean don't get me wrong..CM 7.1 is awesome but the ADW launcher kept crashing on me, something was eating up the battery way to fast and this is weird but I found that the sound quality(headphone and speaker) had actually deteriorated..maybe I didn't get some settings right but anyways I decided to roll back to the Motorola stock 2.2.2 froyo JRDNEM_U3_3.4.3-36-1.7 and wait until CM9 was out.
Thanks for the replies guys..really appreciate you taking the time.

Anachronizer said:
CM 7.1 is awesome but the ADW launcher kept crashing on me, something was eating up the battery way to fast and this is weird but I found that the sound quality(headphone and speaker) had actually deteriorated..
Click to expand...
Click to collapse
If adw doesn't work for you, you can download another one from the market. I use go launcher and it works without any problems and damn fast. You should give it a try.
Sent from my MB525 using Tapatalk

Well it's typical behavior of mallware - I dont have information, that stock task manager will inform you, that some process is running more than x minutes ... try wipe to factory settings and you'll be sure.

Rooting doesn't install Clockworkmod. You only get superuser after rooting. Install 2nd-init and you get Clockworkmod.
You should start using Droidwall and AVG antivirus pro. Try limit the data freedom running in the background.

Thanks for the replies guys. I think I'll wait for CM9. I do have Droidwall installed and I've scanned my phone thoroughly with Lookout Security but nothing was detected. Is it possible that the firmware posted here, the 2.2.2 India one is somehow infected?
http://forum.xda-developers.com/showthread.php?t=1093352
I took another screenshot of the supposed malware today, this time without the task manager message. I was able to dismiss the task manager message by pressing the search key somehow.

I have seen exactly that same message today. I thought I have been fairly careful about Malware. However, there was an update that was installed from marketplace today.
I wonder if it is possible to look at an update history.

sailfast said:
I have seen exactly that same message today. I thought I have been fairly careful about Malware. However, there was an update that was installed from marketplace today.
I wonder if it is possible to look at an update history.
Click to expand...
Click to collapse
Is the message window in your case appearing under the exact same circumstances as mine? Which ROM are you using? And also if its possible could you do an inventory of the all the apps installed on your phone, then perhaps we can pinpoint the source. Thanks for the reply.

Verizon support and protection - Software on this device has been modified?

I updated a few days ago to mje and had to Reroot my phone. Anyways since then I've been getting this alert in the notification bar. It appears to be a legit vzw app. When I click it, it asks me to scan my phone for malicious stuff. I froze it yesterday and it stopped but I wasn't sure if it's something worth keeping. Anybody else getting this?
MJC

Wow am I the only one?
I had un froze it last night and scanned with it. But last night I had some major battery drain, I look at the stats and this app was at the top with 53%. So I froze it again and won't be un freezing.
MJC

Yeah, if your rooted you definitely need to get rid of that program. Because superuser is a system modification, and it is detecting it as such.
♢NoteIII♢

I've been getting this nonstop since I rooted about an 3 hours ago. I wanted to avoid freezing any apps (cuz I forget later when OTAs come up and don't want to flash/wipe jus to fix it) is there any other ways to fix it? I'm sure other people are getting this when rooting.

Actually, there is. there's a new xposed mod called RootCloak. It's available in the xposed installer download section. What happens is once you activate it, you choose which APK's you want to hide superuser from. It keeps that app from knowing your phone is rooted. I use it for Flixster , because currently Flixster will not stream movies onto a rooted phone. I just found it and it works like a champ!
♢NoteIII♢

I installed root cloak but I don't see that app listed on it, at least not under the same name. Anyone know what I should select to cloak it?
MJC

Do you have tibu? I'll answer as if you just said yes. (I'm sure there are other ways to do this, but this is what I got)
I don't have this app, so I will use Backup Assistant plus as an example. In titanium backup go to the app, and click on it
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
In the window that pops up, click here
Another window will pop up, giving you the package name. This is what you will add
♢NoteIII♢

LeftyGR said:
Do you have tibu? I'll answer as if you just said yes. (I'm sure there are other ways to do this, but this is what I got)
I don't have this app, so I will use Backup Assistant plus as an example. In titanium backup go to the app, and click on it
♢NoteIII♢
Click to expand...
Click to collapse
Never had this issues but I still learned something from the way you explained this. Thanks bud!!
Take a sec and hit thanks if I helped or if you're in a good mood!

Thanks
Com.asurion.android.verizon.vms
I set it up and restarted phone but it still showed modified. I closed it and opened it again and now it's shows device is working normal.
MJC

Chillout2010 said:
I updated a few days ago to mje and had to Reroot my phone. Anyways since then I've been getting this alert in the notification bar. It appears to be a legit vzw app. When I click it, it asks me to scan my phone for malicious stuff. I froze it yesterday and it stopped but I wasn't sure if it's something worth keeping. Anybody else getting this?
MJC
Click to expand...
Click to collapse
That happened to me also just uninstall as long as Knox still says 0×0 your OK.
Retail N3

Chillout2010 said:
I updated a few days ago to mje and had to Reroot my phone. Anyways since then I've been getting this alert in the notification bar. It appears to be a legit vzw app. When I click it, it asks me to scan my phone for malicious stuff. I froze it yesterday and it stopped but I wasn't sure if it's something worth keeping. Anybody else getting this?
MJC
Click to expand...
Click to collapse
I got this last night too, hasn't popped up since, I'm 100% stock (for now) and unrooted
Sent from my SM-N900V using Tapatalk

[SOLVED] Secure Settings crashed error message

Hi I ran into this issue before but I forget how I fixed it. I thought it was from not having enough free space on internal/external SD cards but I cleaned it up a little and it didn't seem to fix it. I also tried force closing, clearing data/cache for app, uninstalling, reinstalled it, and activated as a device administrator successfully but it doesn't open/work with Tasker.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

I had problems with SS when I was using the helper app. But after using Helper Alternative under the SS Helper Tab everything works as it should. I believe it installed SS as a system app so you don't need the Helper app.

TSman74 said:
I had problems with SS when I was using the helper app. But after using Helper Alternative under the SS Helper Tab everything works as it should. I believe it installed SS as a system app so you don't need the Helper app.
Click to expand...
Click to collapse
Thanks for the response! It's fixed now by using ROM Toolbox Pro's app manager to convert it to a system app and then had to restart the phone
Had to do it before after restoring from a backup and it just slipped my mind

No need to use Ron Toolbox. Just go to the SS app, go to the helper tab and click Alternative Helper. SS will do the rest.

TSman74 said:
No need to use Ron Toolbox. Just go to the SS app, go to the helper tab and click Alternative Helper. SS will do the rest.
Click to expand...
Click to collapse
Yeah but Secure Settings couldn't even launch...when selecting it via app drawer it just flashed/disappeared right back to the home screen with the crash notification

lmike6453 said:
Yeah but Secure Settings couldn't even launch...when selecting it via app drawer it just flashed/disappeared right back to the home screen with the crash notification
Click to expand...
Click to collapse
Oh! Missed that part. Let us know if installing it as system app works then.
Edit: See that it solved it. Good

I tried all the above solutions and still not fixed, Secure Settings keeps crashing before start.
Running LG G3 d855 32GB on cm 12.1 , any idea?

[Q] payment method issue in play store

Hello people,
I am having problem making purchases as I can't add any payment method (cc or anything else) when I click on purchase and then continue it starts loading and then nothing appears, just my email and the rest of the window stays blank after the loading icon disappears like in this screenshot:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
my phone model:
it's the stock rom but I rooted my device using the guide on xda-developers with mohan root, (this has nothing to do with the issue,I just had to mention it)
It all started to happen after I used freedom, I uninstalled it in the correct way, I've stopped it then uninstalled it, and I've also reset the hosts file, I tried to add another google account and used it for play store and still had the same issue, and I also use adaway.
I went with the hard reset from the recovery mode and still had he same problem I did not even use freedom after the hard reset.
after thinking of it, it might be caused cus of some apps I've disabled, so here is the list of the disabled apps in my phone:
I have to mention that I've disabled Samsung billing after the hard reset but I've re-enabled it and nothing has changed and i think this has nothing to do with it and this app is related to Samsung applications app which I've also disabled along with KNOX.
how can I solve this problem?

Un install and reinstall the play store, that can fix the problem, that happens when you don't stop freedom service that runs in the background and you uninstall it, play store keeps running with the hacked parameters, the only solution is to remove and reinstall play store.
Send from Tapatalk

syverman said:
Un install and reinstall the play store, that can fix the problem, that happens when you don't stop freedom service that runs in the background and you uninstall it, play store keeps running with the hacked parameters, the only solution is to remove and reinstall play store.
Send from Tapatalk
Click to expand...
Click to collapse
thanks for replying
I've mentioned that I uninstalled freedom in the correct way in my post (by first stopping it and then uninstalling like you said) and I believe I've tried reinstalling play store but I will try it again now after the hard reset.

I disabled play store and re-enabled it, it did not fix the problem, is it the same as uninstalling and re-installing?
I've also disabled and re-enabled google services and google services framework and still the same

Reinstall freedom then, and don't start it, just let it there, and then probe play store
Send from Tapatalk

this did not work either

Extrange, in my phone did the same as you, install freedom, run it, stop it and uninstall it, and then probe my play store and everything works ok, maby yours play services has been corrupted, try installing lucky patcher and from that app install the moded play store to see if that works, if not, I think that your only solution will be flash stock again.
---------
Also look in your Google account that everything is marked enable for sinc
Send from Tapatalk

Google play services Device admin permissions issue

I have a OnePlus 5 with Oxygen OS 9.0.5
Im trying to downgrade Google Play Services, but to do so I have to uninstall updates but it won't let me. So I went to Security & Lock Screen > Device admin apps, but I couldn't find it there. But the I realized there was an active app with admin permission that wasn't showing in the list.
I'm new to xda so I can't post screenshots but in Security & Lock Screen it shows me there is 1 active app under Device admin apps. But when I enter Device admin apps, all the apps listed are deactivated, including find my device.
My question is, how can I uninstall the updates of Google play services? And what is the app that isn't showing in the list?

NicoGunt said:
I have a OnePlus 5 with Oxygen OS 9.0.5
Im trying to downgrade Google Play Services, but to do so I have to uninstall updates but it won't let me. So I went to Security & Lock Screen > Device admin apps, but I couldn't find it there. But the I realized there was an active app with admin permission that wasn't showing in the list.
I'm new to xda so I can't post screenshots but in Security & Lock Screen it shows me there is 1 active app under Device admin apps. But when I enter Device admin apps, all the apps listed are deactivated, including find my device.
My question is, how can I uninstall the updates of Google play services? And what is the app that isn't showing in the list?
Click to expand...
Click to collapse
You should simply install an older version of Google play services from apk mirror, did you tried that?
Is your device rooted and running any mods or magisk modules?
Normally there should be no app active if 0 is shown on the mentioned settings page.

strongst said:
You should simply install an older version of Google play services from apk mirror, did you tried that?
Is your device rooted and running any mods or magisk modules?
Normally there should be no app active if 0 is shown on the mentioned settings page.
Click to expand...
Click to collapse
I alrwady tried to update it with the apk but I can't update an app with an apk if the app is still installed in the phone because the message app not installed pops up. I don't have root. I know there should no app active, but it says 1 app active and I don't know why.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}