yashsingh1/xdaforums huggingface dataset:
[Nexus S General] DKYang:
Luckily I don't download every app. Especially those that use the word sexy.
[Nexus S General] zorak950:
But those are the best ones!
[Nexus S General] heinrich:
Thanks for the heads up. Thankfully I didn't download any of those. To the point of the android app market becoming like apple, I'd resist that. Freedom is why I stopped using my iPhone and got a nexus s
[Nexus S General] CB620:
most of these apps sound like porn anyway so who ever downloaded should have a virus or whatever the case may be. use your computer lol not your precious android.
[Nexus S General] AllGamer:
not all of them, there are many legit apps and "useful" apps that were hacked, and then injected with the trojan, then release back to the market for free

like PewPew for example it's a legit game, but this is a fake version that works too, or too well, as it will download the trojan meanwhile you play the game

in the PewPew case, they didn't even rename the app

many of those other apps are just the same originals but renamed with the added payload inside
[Nexus S General] SpookyTunes:
Analysis posted by Jon Larimer:

blogs.iss.net/archive/Examining%20the%20recent.html

An Update on Android Market Security

googlemobile.blogspot.com/2011/03/update-on-android-market-security.html
[Wildfire General] Mille_RS:
Hi Everybody...!!!!!

I am a new member and greetings to all in the hope that joint forces may be able to resolve some of the problems that plague so many of all users of HTC phones. Before I started writing this mail, I went through the forum and I got roughly the answer to my question but not quite, so I'll ask you again the same question:

Is the new version UNREVOKED expelled for HTC Android Wildfire 2.2.1? And is there a battery with higher capacity because this phone is definitely a need for it ... something big like a brick, for example ...:D:D:D

I know that on this subject already discussed, but no harm in asking that one more time...:cool:
[Wildfire General] 3xeno:
I am surprised you have only 'roughly' got your answer after going through so many threads on this topic, but, I'll state it anyway.

Unrevoked does NOT root the Wildfire on Official 2.2.1, and, there's no ETA on when the new version will be released.

As for batteries, officially, I dont think there is any high capacity battery, but, there are unofficially many high capacity batteries, (which are brick shaped, BTW, and require a new back cover). However, since they are cheap and non-official, users are not really experiencing great benefits using them.

Refer this thread here for your battery query, it will help:

http://xdaforums.com/showthread.php?t=926183
[Wildfire General] Mille_RS:
Ok I unerstand we must wait....

In meantime I surfed the Net and found this:

http://www.batteryupgrade.com/shopB...Xyde8sKcCFQY03wodiRhyBw#/shopGroupId/14014528

This is not a cheap battery and it's worth to try...

If someone got this battery please give some info so I can buy it (or NOT)....
[Captivate Q&A, Help & Troubleshooting] Caliesv:
[Q] Does anyone know how to make a short cut to home screen to turn on/off the mobile AP? Screen shot below.

Edit:: nevermind, figured it out. I just used a widget :)
[Milestone XT720 General] AllGamer:
Google pulls 56 malicious apps from Android Marketplace

original source: http://blog.mylookout.com/2011/03/s...-found-in-official-android-market-droiddream/

List of malicious Android App that steals your information and download additional craps to your phone

Full list Developed by “Myournet”:

Falling Down

Super Guitar Solo

Super History Eraser

Photo Editor

Super Ringtone Maker

Super Sex Positions

Hot Sexy Videos

Chess

下坠滚球_Falldown

Hilton Sex Sound

Screaming Sexy Japanese Girls

Falling Ball Dodge

Scientific Calculator

Dice Roller

躲避弹球

Advanced Currency Converter

App Uninstaller

几何战机_PewPew

Funny Paint

Spider Man

蜘蛛侠

Full list Developed by “Kingmall2010″:

Bowling Time

Advanced Barcode Scanner

Supre Bluetooth Transfer

Task Killer Pro

Music Box

Sexy Girls: Japanese

Sexy Legs

Advanced File Manager

Magic Strobe Light

致命绝色美腿

墨水坦克Panzer Panic

裸奔先生Mr. Runner

软件强力卸载

Advanced App to SD

Super Stopwatch & Timer

Advanced Compass Leveler

Best password safe

掷骰子

多彩绘画

Full list Developed by “we20090202″:

Finger Race

Piano

Bubble Shoot

Advanced Sound Manager

Magic Hypnotic Spiral

Funny Face

Color Blindness Test

Tie a Tie

Quick Notes

Basketball Shot Now

Quick Delete Contacts

Omok Five in a Row

Super Sexy Ringtones

大家来找茬

桌上曲棍球

投篮高手

Personal warning I'll also include AppsPlanet into those list if I were you.
[Milestone XT720 General] syrenz:
Some of them seem like the standard spammy, suspicious apps that I naturally avoid, but some of them actually look like popular apps - i.e. the advanced stuff, app uninstaller. Fortunately I don't have any of those stuff on my phone though. And if I'm putting something up from non- android market like over here on XDA perhaps, that I'm suspicious of I tend to scan it first (both on my PC and then on my mobile as well). And even on market I prefer to download apps that have many downloads and comments. Can't be too careful.

What's that pewpew thing? Not the same as this:https://market.android.com/details?id=com.jyaif.pewpew&feature=search_result is it?
[Milestone XT720 General] AllGamer:
yes, it's that one, but seems like there was a fake copy of it floating in market

i was afraid too when i saw it, as i did install the legit one, but wasn't sure about the developers name
[Milestone XT720 General] syrenz:
Yeah, that's the only thing that I installed so I was worried for a moment there.
[Milestone XT720 General] Mioze7Ae:
The original source is reddit.

http://www.reddit.com/r/Android/comments/fvepu/someone_just_ripped_off_21_popular_free_apps_from/

The whole market is just plain broken and it's a nightmare. It's embarrassing that the author of one of the apps has been complaining through every means possible to google for over a week to get pirated copies of his software taken down (he didn't realize they were injected with malignant code though). So, finally someone notices the developer name looks fishy for one of these apps and is curious to take a look inside the files and sees rageagainstthecage, pokes further, is horrified consults others and posts to reddit. Android Police picks it up and the story starts to spread and then finally google pays attention.

Google really needs to respond. The market.android.com website is so freaking buggy. Imagine if someone figures out how to use web install to push infected crap onto peoples phones. It almost makes you pray to Motorola to also signature check /system. Almost.
[Milestone XT720 General] syrenz:
What's the deal with raceagainstthecage? Isn't that what we used to root XT720?
[Milestone XT720 General] Mioze7Ae:
Indeed. We use rageagainstthecage to install superuser and then we use superuser instead of rageagainstthecage to get root afterwards. Superuser is designed to be well behaved and everything else is built to cooperate and behave with superuser. The trojaned apps use rageagainstthecage to basically do whatever they want. It doesn't use superuser, so you don't see any notifications.
[Milestone XT720 General] AllGamer:
that's for all the info Mioze7Ae

that's very insightful
[Milestone XT720 General] ronnbon:
As far as I see I did not install one of these apps- but I would like to know anyway what should be done if one did install a malicious app- just remove it? Or better reflash the rom?:(

Theres already a thread for a patch here at xda:

http://xdaforums.com/showthread.php?t=977154

And somebody developed an apk to search for an infection and to create a so-called stop file to prevent infections in future.

DroidDreamKiller
[Milestone XT720 General] Vistaus:
Is this really checked thoroughly?

'Cause I know at least Finger Race isn't malware at all.
[Milestone XT720 General] 3rdstring:
I think clone apps were showing up. You really have to pay attention to the developer
[Milestone XT720 General] AllGamer:
exactly many legit apps and games

were cloned, then injected with Trojan, and then release back to android market.

it confuses the hell out of people
[Milestone XT720 General] Mioze7Ae:
Apparently droiddream creates a /system/bin/profile as part of it's install process (doesn't exist otherwise). Creating that file tricks the current version of "droiddream" into thinking it's already been installed. The apps have been pulled from the market, so you won't be able to install it anyway without sideloading and you should always be cautious about that. I don't think /system/bin/profile trick will do much if anything to prevent the next version of this attack. Working around /system/bin/profile existing is trivial.

What would be better is some way to prevent rageagainstthecage. Once we've got root and superuser, we don't need rageagainstthecage anymore. Finding a new kernel exploit would be a slightly bigger hurdle for the bad guys. Too bad we can't patch our kernels. Thanks, moto for protecting the end users. /s
[Milestone XT720 General] Vistaus:
Then why didn't I have problems with Finger Race? Please explain.

And if it really was malware, then I should've already had problems when I first started to using it on Symbian and Nokia would've removed it from the Ovi Store by now.

But still, even with the Android-version, I don't have any problems with it. So please explain.
[Milestone XT720 General] AllGamer:
because the version that you have is probably the legit one, and not the imitation

the imitation is identical in every way, except that it has additional malware added in

also the stuff that it does to your phone, is in the background, you will never know about it, just like a windows malware, once on, it takes a lot of work, or a full wipe to remove
[Milestone XT720 General] easye420:
Just so everyone's aware, they found about 50 more apps with malware. http://blog.mylookout.com/2011/05/s...ew-malware-from-the-developers-of-droiddream/
[Milestone XT720 General] appagom:
Well, I've been saying since it started that google should fix the rage exploit, and that we should even be hoping/asking for it. I usually got flamed as a moron by noobs saying I clearly didn't even know what rage was for, haha. Of course I was using a device that didn't have a locked bootloader at the time, so root kernels were an option. Still root can be obtained from flashing the non-kernel part of the ROM too. These exploits are a mixed blessing. They ARE a major security hole on Google's part.

Anyway.. when I have to go through 15 apps to find one good one that works on my phone, sometimes I wish I had an iphone and less free stuff. Guess I better delete that super sex positions app now ;)
[Galaxy S I9000 General] AllGamer:
Google pulls 56 malicious apps from Android Marketplace

original source: http://blog.mylookout.com/2011/03/s...-found-in-official-android-market-droiddream/

List of malicious Android App that steals your information and download additional craps to your phone

Full list Developed by “Myournet”:

Falling Down

Super Guitar Solo

Super History Eraser

Photo Editor

Super Ringtone Maker

Super Sex Positions

Hot Sexy Videos

Chess

下坠滚球_Falldown

Hilton Sex Sound

Screaming Sexy Japanese Girls

Falling Ball Dodge

Scientific Calculator

Dice Roller

躲避弹球

Advanced Currency Converter

App Uninstaller

几何战机_PewPew

Funny Paint

Spider Man

蜘蛛侠

Full list Developed by “Kingmall2010″:

Bowling Time

Advanced Barcode Scanner

Supre Bluetooth Transfer

Task Killer Pro

Music Box

Sexy Girls: Japanese

Sexy Legs

Advanced File Manager

Magic Strobe Light

致命绝色美腿

墨水坦克Panzer Panic

裸奔先生Mr. Runner

软件强力卸载

Advanced App to SD

Super Stopwatch & Timer

Advanced Compass Leveler

Best password safe

掷骰子

多彩绘画

Full list Developed by “we20090202″:

Finger Race

Piano

Bubble Shoot

Advanced Sound Manager

Magic Hypnotic Spiral

Funny Face

Color Blindness Test

Tie a Tie

Quick Notes

Basketball Shot Now

Quick Delete Contacts

Omok Five in a Row

Super Sexy Ringtones

大家来找茬

桌上曲棍球

投篮高手

Personal warning I'll also include AppsPlanet into those list if I were you.
[Galaxy S I9000 General] Rofa1:
Any views as to whether installing Norton, MacAfee or similar would have picked these up?
[Galaxy S I9000 General] yiannisthegreek:
Hey Allgamer,

Thanks for the great post / update!!!

Just wondering how much you are selling your Galaxy S for? Please PM me and let me know.

Thanks,

yiannisthegreek
[Galaxy S I9000 General] Tehpriest:
In case you have installed them.

List of his apps (may not be all)

http://www.androidzoom.com/android_developer/myournet_thqw.html

And Mashable

http://mashable.com/2011/03/01/android-malware-apps/

You should

ALWAYS

read the forum before posting
[Galaxy S I9000 General] AllGamer:
Any of the well known Antivirus app for android should have picked it up.

I used to think we'll never need an AntiVirus app for Android... well think again.

after reading the article i downloaded all of them to run a full scan and the results are good

I scanned my phone and it's all clean
[Galaxy S I9000 General] AvalonGamer:
Should one of these apps had been installed already (Photo Editor), is there something else I can do ... other than flashing ?

Thx
[Galaxy S I9000 General] AllGamer:
you can simply un-install it, it doesn't really do anything to your phone until you run the app

and even if you did, uninstalling it will remove the problem

Flashing the phone is a bit over the top :p it's enough to do a system wipe if you want to be 100% sure, and then restore all your apps from backup, excluding the fake ones
[Galaxy S I9000 General] kunjar:
Waiting for ESET to debut on Android platform...
[Galaxy S I9000 General] hansonator:
+1 :)

This reminded me to reinstall lookout after fresh flash. :D
[Galaxy S I9000 General] MightyDrakeC:
This is actually an incomplete answer.

As noted on Android Police, (I'm new so I can't link there) these apps open a backdoor, which can download additional apps that can do *anything*. The original app doesn't do much on its own. But, removing the infected app will leave behind the additional malware introduced through the backdoor.
[Galaxy S I9000 General] uncletaz:
Is there anyone who knows if these apps actually worked? What I mean is if the games for example were actually games? The reason I ask is that there is a bubble shoot like game installed on a friends phone which works (not sure if it's the one mentioned above).

So would you be able to recognize that malicious app in that way?

Edit: just noticed on the Lookout Blog that they actively send out a patch to detect these apps (if I read it correctly):

http://blog.mylookout.com/2011/03/s...-found-in-official-android-market-droiddream/

So if you have not yet scanned for those apps, do it now ;-)
[Galaxy S I9000 General] genkdama:
Thanks for the information!
[Galaxy S I9000 General] traumaheli:
How to remove and consequences

First i manyally uninstalled the "Advanced Barcode Scanner" of KingMall2010.

Second i scanned my device with Kasparsky and Lookout, both didn't find any threads.

In the end i performed a reset to factory settings and a format of my SD-card.

Can anyone please tell me if this actions are sufficient to completely whipe this malware of my device?

Also i would like to know if this malware actively sent my private data to servers, or that it just opened a backdoor for later use. And if my data is already sent, what are the consequences and which actions should i take to do something about it.
[Galaxy S I9000 General] silverstorm:
What you've done so far seems sufficient enough to clear the malware from your phone system. Even if it copied a backup on your SD card (internal & external) if you've wiped both then it should be ok.

In regards to already leaked data, I would immediately change my passwords to gmail, emails, facebook, ebay etc or any other site that you may have used on your phone.
[Galaxy S I9000 General] traumaheli:
Thanks for your quick reaction. It makes me a little more comfortable. Indeed i already changed my password's.

I already called my phone provider, but apparently could not tell me whether the IMSI (international mobile subscription identity) and SIM card serial number are sufficient information to clone my SIM card. This is the information that would be sent by the malware to remote servers.

Therefor after work i go to get a new SIM card. It's better to be safe than sory after all.
[Galaxy S I9000 General] SirBrass:
I'm still not convinced on running a constant anti-malware app on my phone. Even with a good processor, my cpu cycles are a precious resource to keep my phone running light and fast.

How heavy on system performance is lookout? Does it only activate and scan when new material is installed?
[Galaxy S I9000 General] Intlstyle:
Lookout scans when u download or install any app on your phone, i havent noticed it running unless im installing
[Galaxy S I9000 General] AllGamer:
yes, it only runs after you install a new app from market

i installed it after reading about the news, before that, i had no reason to worry about the stuff i download from the official android market
[Galaxy S I9000 General] MrFrankfromCM:
Much thanks for the heads up on this issue!
[Galaxy S I9000 General] tizocalamilla:
my question is what is the deal with app planet? i have it installed on my phone along with another app mentioned on the list...why would app planet be something to be worried about???

(P.S. im about five minutes away from wipeing my phone spottless clean thx for the Alert!!!!!)
[Galaxy S I9000 General] someonemx:
thanks for the tip.

@Insanity rom thread an update zip has been uploaded to solve this malaware issue.
[Galaxy S I9000 General] bluxart:
I just went through my girlfriends phone and she has a "Shoot Bubble." Is the malware version just "Bubble Shoot", or did the writer get mixed up?
[Galaxy S I9000 General] jdb78:
Lookout needs a lot of permissions - kind of scary talking about possible backdoors and stuff, isn't it?

EDIT: now I know what those permissions are needed for. It is able to backup your contact data and almost everything to mylookout.com - still not sure if I would want to do that but a scan gave me "no malware or spyware apps found".
[Galaxy S I9000 General] uncletaz:
Scan with Lookout and you will know soon enough. I dont think it is the one though.
[Galaxy S I9000 General] jdb78:
oops, sorry, clicked "quote" instead of "edit", please delete this post, thx!
[Galaxy S I9000 General] Darkstriker:
I posted it before in a thread in Android Dev:

These applications use the rage-against-the-cage exploit that was discovered by z4ziggy. Android 2.2.1 (the basis of nearly all custom ROMs for the I9000) is patched against this security hole and even if you downloaded and installed and ran these applications you should be safe because they cannot get root-access and thus cannot do any of the malware-activities listed.

See androidsec.net
[Galaxy S I9000 General] bastinou1984:
Do you mean that, for example, my htc hd2 with a nand android rom 2.2.1 is safe even if I installed one of these?
[Galaxy S I9000 General] stor3x:
Lucky me, i've never use one of those apps. Anywaus, i was in 2.2.1
[Galaxy S I9000 General] aadis:
thanks for information
[Galaxy S I9000 General] nkte5207:
lookout mobile security showed normal result.. luckily :)
[Galaxy S I9000 General] neotux:
thanx for the tip !
[Galaxy S I9000 General] _JKay_:
So these Malware apps only harm the 2.2 and not 2.2.1 android phones?

I really do not like the idea of the Kill Switch feature by Google!!!

Can it be disabled? If not I think I will try to make an Market on/off switch widget or does it already exist?.
[Galaxy S I9000 General] Sine.:
Patch for all pre-Gingerbread phones

Roddericks has wrote a patch again DroidDream for all pre-Gingerbread phones :

[Patch]Malware Exploit for all pre-Gingerbread phones

There is also an apk wrote by cyansmoker to do this : https://market.android.com/details?id=com.voilaweb.mobile.droiddreamkiller

@Allgamer : add this to the OP?
[Galaxy S I9000 General] Axemun:
"Screaming Sexy Japanese Girls" Wow its a good thing i gave that app a miss.
[Galaxy S I9000 General] linuxnubee:
@bluxart

The app..... Is warez summit not tollerated or discussed on xda

From my knowledge nearly all warez is a virus trojan spambot or all types of nasty stuff designed to steal your identity on whatever platform its on ie windows linux right through android.

Best steeer clear of it
[Galaxy S I9000 General] DanDroidian:
Would these scanners pick up App Planet as malware?
[Galaxy S I9000 General] wowscortcher:
Thanks for the awarness tip off :D
[Galaxy S I9000 General] linuxnubee:
simply put

simply put no it wont nor everything from that place will even if you av uptodate, because it dont come with googles excellent android police who remove files with malicious code in them just look for myournet articles good read google took down 22 or 21 ish apps from this usr n abusr within five mins of being notified (wow great response there google) and are or have sorting patches for damage this little scrote done. DEVS KNOWS WHERE YOUR APPS ARE FROM LOL

USE PLAYSTORE ONLY MORE SECURE AND TRUSTED THAN ANYTHING.
[Galaxy S I9000 General] plageran:
Tips!

Things you can do is setup scanning time's, ie 00:00. by that time most of our devices are plugged to charge and were asleep.

Secondly if you have a boot up scan, reboot your device after your alarm in the morning, by the time you're ready to leave, the scan should be done and you will have a "clean device" [most likely ram]

most av's will detect the infection before download or before installation. mine picked it up from google play store so......

I dunno I haven't downloaded anything lately. Check the screenshot:
[Android Software Development] ConstantineXVI:
Building an app that tracks your music plays Last.fm-style; is there anywhere with a list of the Intents different players send out w/ metadata on a track change? Ex: Sense uses

com.htc.music.metachanged

. Looking for 3rd-party (non-bundled) players in particular.
[HD2 Android Q&A, Help & Troubleshooting and Genera] kamrangun:
i copy my files from pc to sd card via usb ,but in asto and es file explore they dont show up !!!!

what should i do ?
[HD2 Android Q&A, Help & Troubleshooting and Genera] huggs:
They should show up after you reboot your phone. Or you can use the USB mass storage option in MAGLDR, or use the mount usb storage option under mounts and storage in clockwork recovery.

-HD2 Android-
[HD2 Android Q&A, Help & Troubleshooting and Genera] Richy99:
its not advisable to use the mass storage mode in magldr as it can cause cxorrupted files
[HD2 Android Q&A, Help & Troubleshooting and Genera] huggs:
That's what I've read around the forums too. Should've mentioned it myself, didn't think to, probably because it has never corrupted any of my files. Thanks for pointing it out :cool:

-HD2 Android-
[HD2 Android Q&A, Help & Troubleshooting and Genera] paolo.dc:
What version of Android do you use?
[HD2 Android Q&A, Help & Troubleshooting and Genera] kamrangun:
i use 2.2 version ,but this error is sometime ...for example i copy 3 files in the sd card ,when i unplug the usb and check es explorer they werent there ,,,about 1 hour later i use htc sync and do nothing ,after it when i check es explorer again the 3 files were there :D .....

what do u think ?
[HD2 Android Q&A, Help & Troubleshooting and Genera] paolo.dc:
No for version I meant who made the build (like mdj, core, DL,....) and version.

I have a problem with one build that cannot transfer data where all the others can.

Do you use the "set usb as disk" and when finished you "set usb as charge only" on the phone?

Did you try another build to see if it does the same?