Seva Lapsha at Work & around

Software Architect, Project Lead

Android adware removal story

leave a comment »

Yesterday started getting random spam ads on my OnePlus 2​:

  • overlay ads of certain popular junk games,
  • fake desktop icons linking to Google Play Store of same games,
  • fake missed calls linking to there.

It was virtually impossible to figure out the responsible processes without additional tools, mainly due to the hiding tactics of the adware.

To start I tried few most popular adware removers from the store, but they either didn’t detect anything, or crashed during the scan (maybe the adware killed them while they were running).

The first success was brought by Addons Detector (with all advanced detectors enabled). After another fake icon appearance it traced it to com.google.googlesearch (“Search”) which comes with AirPush component.

airpushdetector

Then I googled and found the package at AVG Threat Labs Android App Reports and used AVG to find one more malware process com.android.main.view (“Processor”) which was reported to have AirPlus in it.

The processes were installed as system apps. So the easiest way out was to use Titanium Backup Root Pro I already had installed (my phone is rooted).

After that I tried to dig further to understand how these processes appeared on my phone in the first place. I didn’t install any new apps recently, neither run any updates on root enabled apps. So the adware probably was here, but didn’t expose itself for few months.

I’m very conservative to give root access to software without trust research, but don’t rule out the chance that the junk could be injected with one of the few Aptoide originated apps I experimented with few months ago.

However, since AVG also identified 2 preinstalled bloatware apps to come with other dirty ad frameworks, my current hypothesis is that AirPush crap was on the phone from the very beginning, patiently waiting for its time to activate.

Written by Seva

2015-12-09 (December 9) at 05:33:07

Crescent

leave a comment »

Was waiting for darkness in childhood.
Expecting excitement and sense.
Leading a crew to the murk woods –
A tribe of Indian friends.

Watching the deepness of draw-well.
Wingless angelical croon.
Searching for wizards to marvel,
If any can take to the Moon.

Crescent, brother Moon,
Crescent Moon.
Crescent, brother Moon,
Brother Moon.

Was hiding in magical aspens,
From grandpa with punishing scourge.
Raising the clock hands all upwards,
So Night can take me and purge.

My lovely faith, Autumn.
The Sun is dreamlike and spoof.
Eight angels are flying from bottom,
Like birdies up to the roof.

Crescent, brother Moon,
Crescent Moon.
Crescent, brother Moon,
Brother Moon.

http://www.youtube.com/watch?v=giGO4EpHnhI

Written by Seva

2014-09-05 (September 5) at 01:38:26

Posted in Uncategorized

Cycle of knowledge

leave a comment »

0 – ignore
1 – try
2 – repeat
3 – assume
4 – ensure
5 – conclude
6 – utilize
7 – canonize
8 –  accustom
9 – neglect
10 – forget

Written by Seva

2014-07-04 (July 4) at 10:42:37

Posted in future, leisure, thought

Serenity Night

with one comment

Roofs of the houses shake under the load of the days,
Empyrean shepherd depastures the clouds.
City spreads fire in the night with buckshot of flames,
But night is intense, its power is hard.

To those, who are going to sleep,
The wish of sweet dreams.
Tranquility night.
To those, who are going to sleep,
The wish of quiet peace.
Serenity night.

I waited for it, and here, this season has come,
Those who stayed silent, abandoned to stay.
Those who have nothing to wait, are saddling the ride,
No overtake, no more overtake.

To those, who are going to sleep,
The wish of sweet dreams.
Tranquility night.
To those, who are going to sleep,
The wish of quiet peace.
Serenity night.

The neighbors are coming, imagined the clop of the hoofs,
It can’t let them sleep, harassing their dreams.
Those who have nothing to wait are hitting the route.
Those who are saved, those are redeemed.

To those, who are going to sleep,
The wish of sweet dreams.
Tranquility night.
To those, who are going to sleep,
The wish of quiet peace.
Serenity night.

Written by Seva

2014-02-26 (February 26) at 03:28:51

Posted in leisure, past, thought

Simplicity versus Stupidity

with 2 comments

Similar to the Einstein’s simplicity razor –

Everything should be as simple as it can be, but not simpler.

I came up with a stupidity razor –

Always think as much as you can, but not more than enough.

Written by Seva

2013-10-02 (October 2) at 10:29:12

Posted in thought

Tagged with , , , ,

Opinion and Self

leave a comment »

Sometimes in the internet people ask general questions of comparison, e.g. “What is the best something – one thing or another thing?”.

Sometimes the responder tends to play an all knowing guru and tries to give a general and wide range covering answer. Even start their story with “there is no best”.

Read the rest of this entry »

Written by Seva

2013-06-23 (June 23) at 09:07:55

Posted in thought

Le

leave a comment »

Few months ago I suddenly noticed that many popular brands have -le suffix in their names. Beatles, Deep Purple, Oracle, Apple, Google… Any more examples?

Written by Seva

2013-06-14 (June 14) at 10:30:43

Posted in future, leisure, past, thought

Follow

Get every new post delivered to your Inbox.

Join 784 other followers