dpbolvw.net - About xda-developers.com

I've noticed a bunch of links coming off of xda-developers.com that end up trying to put me through dpbolvw.net, which i have set to 127.0.0.1 in my hosts so it doesn't work. The link in this post does it http://forum.xda-developers.com/showpost.php?p=6754918&postcount=10

Even though I don't like this, I'm glad you brought it up (it's not just me!!) I thought I had some spyware on my PC when I noticed this the other day. (Same reason - 127.0.0.1 in the hosts file for that domain.)
It's strange as it doesn't appear in the source of the pages.

Related

Offer to Cookers

All this rapid share, yadda yadda is really getting old quick. If at least a few ROM Cookers are interested. I'll setup a space on my server to allow uploads that point back to an HTTP download section. You would be responsible for uploading the file, then posting a link here on XDA that would be a direct download link. The uploads would be handled by a passworded FTP account. I have about 400gig of download to spare per month, which should be more than enough for a bunch of Roms. Either reply here or send me a PM and we can talk.
I can also set it up, so that people can go to a root folder and find all the Roms and just pick the ones they want. Heck I can even store older Roms on the server so if someone wants an old one it will be up there.
1st point, there will be no warez posted.
2nd point, you must be a recognized cooker.
Well Cookers, drop a line and let me know.
It would end up being something like this, with each cooker having his own folder.
http://captfiero.com/videos
This has been done, before, twice.
And both times, the file disappeared, or the person did, within 4 days.
Well, not Jannaa's!!!! I use it aplace4u.biz and it's AMAZING!!
veyka said:
This has been done, before, twice.
And both times, the file disappeared, or the person did, within 4 days.
Click to expand...
Click to collapse
The only reason I could see a person leaving is if Microsoft sent a letter saying they did not like people cooking the roms and throwing a hissy fit. I have went ahead and created the folder on my remote server and am uploading stuff right now. I have not made the ftp account for uploading, however I should be able to allow open access to what I have on there in about 2hrs.
Capt Fiero said:
The only reason I could see a person leaving is if Microsoft sent a letter saying they did not like people cooking the roms and throwing a hissy fit. I have went ahead and created the folder on my remote server and am uploading stuff right now. I have not made the ftp account for uploading, however I should be able to allow open access to what I have on there in about 2hrs.
Click to expand...
Click to collapse
I hate rapidshare as much as the next non premium person, so i hope this gets off the ground. people don't even use aspupload, or whatever its called..
Ok the Basic is up, http://www.captfiero.com/romsYou will have to mouse over the file name if it is too long to show up, and then just look at your tool bar to see the entire name.
If anyone see's a file that should not be there. (copyrighted) Please let me know and I will remove it.
Also if a file is something "YOU" made or prefer me not to have up, let me know and I will remove it.
I will not make the upload address public so if you want files uploaded, you can send me a PM and I will upload it, or if you are an established cooker, I will give you direct upload settings.
hmm
I am sure my chef would love this feature, his connection sucks back home though, so if this is genuine I will start mirroring his stuff here too ... I guess the more mirrors the better, I been mirroring to 4shared and mediafire all this time... seems to work well
Just FYI tho, CRCinAU has at least around 100GB of traffic a day (may be he can correct me on this) ...
zocster said:
I am sure my chef would love this feature, his connection sucks back home though, so if this is genuine I will start mirroring his stuff here too ... I guess the more mirrors the better, I been mirroring to 4shared and mediafire all this time... seems to work well
Just FYI tho, CRCinAU has at least around 100GB of traffic a day (may be he can correct me on this) ...
Click to expand...
Click to collapse
He said something like that somewhere.. If you think, most rom topics get 1k+ hits per day.. and say 100 download.. a 50 meg file, that's 5gig from nowhere..
And when a new rom is out..
Well I have 1200gig total traffic allowed, I use about 400gig a month for Videos and I want to keep about 400gig aside for spikes. That leaves me about 400gig to play with. I can't mirror the entire PPC world, but the latest roms and a few add ons would be fine.
heh - where abouts is this mirror located?
At the moment, my mirroring system is handling the load quite well - I have a total of 5 mirrors around the globe (1 x EU, 3 x US, 1 x AU) and the amount of traffic is much lower than it was a month ago on the one AU server because of the way things are spread out now.
The mirroring scripts will auto-detect where the user is and send them to the nearest server (or if we don't have a server near you, we randomly pick one to share the load).
You'll notice this is why I don't have direct links to anything anymore - it's all to my download script.
Even DeviceUpdate uses this script to custom-generate it's index based on where you are
That being said, as of my typing this, since 28th August, I've served:
Release 12.11 ROMs: 270 @ 40Mb each (10.8Gb)
Release 11.2 ROMs: 38 @ 41Mb each (1.55Gb)
Device Update Sessions: 1,235 (unknown download amount)
That's pretty good for less than 4 days
Some more mirrors would be nice - although mirrors in the US are probably not as helpful as the rest of the world... There's ~1Gb of content to be mirrored and count on ~100Gb per month of traffic in a lazy month.
FYI: Developers thread options: http://forum.xda-developers.com/showthread.php?t=388819
To my knowledge it is a US based server. I am personally in Canada however it seems that US hosts are far cheaper. I'll send ya a PM with the details.

What has happened to cyanogenmod.com?

I was trying to access the site of CyanogenMod and fiound instead yet another fake antivrus page! See attached screenshot.
Has that website definetely gone?
Or what?
I just tested it and the site is up and working perfectly.
as a side note: you aren't using adblock on your chrome?
https://chrome.google.com/webstore/detail/gighmmpiobklfepjocnamgkkbiglidom
have you tried from a different pc? what if your pc has a malware on it... i.e. modified hosts or something
how strange though that something may target cyanogenmod website!
This happens, if you access it from open wi-fi networks or shared IPs (possibly one of the PCs got infected)
Had this on a open network (also on miui-developers) - but in work and at home it works.
I've got the same, just need to confirm the code from pic
My PC ir running Linux Kubuntu 11.04, ethernet link to a Linux based router and I personally configured both.
This doesn't mean that my PC is virus free.
I'm using Google Chrome v12 with AdBlockPlus.
That page came out more than once also with Mozilla Firefox v5 (Linux port) w/o AdBlock.
What I can guess is a form of hijacking (either DNS or the website itself).
By the way, keep in mind that I was being directed to the web site without the "www" domain name, but just "http://cyanogenmod.com/".
Now you'll get redirected to the third domain level with the "www".
So something definitely happened there.

[Q] Torrent/Magnet Links?

Hello XDA Moderators!
First of all I want to apologize if this topic has been already discussed or is it forbidden (I didn't found such restrictions in the rules)
Anyway, since I got my HTC Desire S this forum is the primary source of information for me, and most probably for all the other visitors around.
And especially when it comes to custom rom files there are sometimes troubles with dead links, crappy file sharing sites with stupid limitations, etc.
So I think it will be much more convenient for everyone (devs and users) to use the torrent system via magnet link (combined with QR scan maybe) for all the files that are posted around here. The download speed will be much better and all that have downloaded the file once will contribute by seeding it to the others. And of course via the appropriate client the files can be downloaded directly to the SD Card (this is possible now through the phone web browser, but a lot of steps are required - waiting, human security check forms, etc.). And last but not least one of the greatest advantages is that on single torrent there can be multiple files, that one can pick to download or not (for example all radio images for a specific model, etc.)
Looking forward to your comments.
no interest?
Obviously not...
Well... I do direct download links for ROMs, on several gigabit servers. So it's of no interest here...
P2P systems also require client software, meaning people downloading via their phone might have issues...
But I personally see no need for a different download system, and nobody has ever complained about waiting times or ads for direct uploads
Thank you for this reply
Agreed with above commenters but I can't disagree with OP either.
It's true that torrents may present an issue due to the requirement of a client but a torrent has one huge advantage - integrity.
Torrent clients automatically check the files for integrity. Also, torrents can provided reliable downloads for larger files.
However, I hardly think torrents are relevant here. Torrents are useful only for large files. Most of the files shared on XDA are 500MB at the most. Most ROMs are 100MB and apks are around 1-15MB.
Although RapidShare is annoying, there are other pretty reliable file sharing services like MediaFire. MediaFire is by far my most favorite site for mass file sharing and Dropbox is pretty reliable too although Dropbox has a 10GB/day traffic limit per account.
Check out these sites listed at http://forum.xda-developers.com/showthread.php?t=1210372 for remote uploading to dropbox where you download the file directly to dropbox and then download it from dropbox. Pretty useful if the download speeds are too low.
Curious..
Browser add-ons bring torrent to your normal browser download. Opera has had one for quite some time out of the box. But you can even get a real torrent client for Android now.
And to be frank, as long as the OP provides checksums, the value of integrety should remain. I get eered out downloading from some of these file share sites, plus with all the spammy ads and what not!
Maybe somebody should make an XDA related torrent cache?

Blocking Unwanted Connections with a Hosts File/block ads, banners, 3rd party Cookies

MVPS HOSTS now includes entries for most major parasites, hijackers and unwanted Adware/Spyware programs!
What it does ...
You can use a HOSTS file to block ads, banners, 3rd party Cookies, 3rd party page counters, web bugs, and even most hijackers. This is accomplished by blocking the connection(s) that supplies these little gems. The Hosts file is loaded into memory (cache) at startup, so there is no need to turn on, adjust or change any settings with the exception of the DNS Client service (see below). Windows automatically looks for the existence of a HOSTS file and if found, checks the HOSTS file first for entries to the web page you just requested. The 127.0.0.1 is considered the location of your computer, so when an entry listed in the MVPS HOSTS file is requested on a page you are viewing, your computer thinks 127.0.0.1 is the location of the file. When this file is not located it skips onto the next file and thus the ad server is blocked from loading the banner, Cookie, or some unscrupulous ActiveX, or javascript file.
Example - the following entry 127.0.0.1 ad.doubleclick.net blocks all files supplied by that DoubleClick Server to the web page you are viewing. This also prevents the server from tracking your movements. Why? ... because in certain cases "Ad Servers" like Doubleclick (and many others) will try silently to open a separate connection on the webpage you are viewing, record your movements then yes ... follow you to additional sites you may visit.
Using a well designed HOSTS file can speed the loading of web pages by not having to wait for these ads, annoying banners, hit counters, etc. to load. This also helps to protect your Privacy and Security by blocking sites that may track your viewing habits, also known as "click-thru tracking" or Data Miners. Simply using a HOSTS file is not a cure-all against all the dangers on the Internet, but it does provide another very effective "Layer of Protection".
In case you're wondering ... this all happens in microseconds, which is much faster than trying to fetch a file from half way around the world. Another great feature of the HOSTS file is that it is a two-way file, meaning if some parasite does get into your system (usually bundled with other products) the culprit can not get out (call home) as long as the necessary entries exist. This is why it's important to keep your HOSTS file up to Date. How to get notified of MVPS HOSTS updates.
How to get notified of MVPS HOSTS updates.
This download includes a simple batch file (mvps.bat) that will rename the existing HOSTS file to HOSTS.MVP then copy the included updated HOSTS file to the proper location. For more information please see the Windows version that applies to you ...
Windows 8 requires special instructions - over there see here
Windows 7 requires special instructions - over there see here
Win Vista requires special instructions - over there see here
Manual Install Method - Unzip in a "temp" folder and place in the appropriate installed location:
If you are having trouble downloading or extracting the HOSTS file [click here]
Note: the below locations are for the typical default paths, edit as needed.
Windows 8/7/Vista/XP = C:\WINDOWS\SYSTEM32\DRIVERS\ETC
Windows DNS Client Service
In most cases the DNS Client Service is not needed, it is recommended to turn it off. These instructions are intended for a single (home-user) PC. If your machine is part of a "Domain", check with your IT Dept. before applying this work-around. This especially applies to Laptop users who travel or bring their work machines home. Make sure to reset the Service (if needed) prior to connecting (reboot required) to your work Domain ...
To resolve this issue (manually) open the "Services Editor"
Start | Run (type) "services.msc" (no quotes)
Win8 users - Control Panel > Administrative Tools > Services
Scroll down to "DNS Client", Right-click and select: Properties - click Stop
Click the drop-down arrow for "Startup type"
Select: Manual (recommended) or Disabled click Apply/Ok and restart.
My recommendation easy way to do it:
Hostsman includes an option to turn off the DNS Service [screenshot]
Workaround for using the MVPS HOSTS file and leaving the DNS Client service enabled (set to: Automatic)
If you find after a period of time that your browser seems sluggish with the DNS Client service enabled you can manually flush the DNS cache
Close all browser windows ... open a "Command Prompt" from the Start Menu > All Programs > Accessories > Command Prompt
Win8 users - Charms Bar > Search > (type) command prompt > Select: Command Promt (left pane) Ok the UAC prompt
(type) ipconfig /flushdns (press Enter) Then close the Command Prompt ...
A better Win8/7/Vista/XP workaround would be to add two Registry entries to control the amount of time the DNS cache is saved. (KB318803)
Flush the existing DNS cache (see above)
Start > Run (type) regedit
Win8 users - from the Charms Bar, select: Search (type) run and select Run (left pane) and (type) "regedit" (no quotes)
Navigate to the following location:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters
Click Edit > New > DWORD Value (type) MaxCacheTtl
Click Edit > New > DWORD Value (type) MaxNegativeCacheTtl
Next right-click on the MaxCacheTtl entry (right pane) and select: Modify and change the value to 1
The MaxNegativeCacheTtl entry should already have a value of 0 (leave it that way - see screenshot)
Close Regedit and reboot ...
As usual you should always backup your Registry before editing ... see Regedit Help under "Exporting Registry files"
P.S IT'S NOT MY WORK I JUST SHARE WHAT I FOUND SO PLZ SUPPORT DEVELOPER (MAIN WEB PAGE) IF YOU FOUND IT USEFULL
P.S 2 YOU AND ONLY YOU RESPONSIBLE FOR WHAT YOU DOING WITH YOUR PS
P.S 3 FEEDBACK AND TUBS UP IS REQUIRED
or use adblock for firefox and chrome and tracking lists in internet explorer (which also works on RT) rather than download dodgy 3rd party files with no source code which could just as easily be malware.
SixSixSevenSeven said:
or use adblock for firefox and chrome and tracking lists in internet explorer (which also works on RT) rather than download dodgy 3rd party files with no source code which could just as easily be malware.
Click to expand...
Click to collapse
Or you can just download it, check it and stop posting useless warnings. Although, not sure if you're able to decompile it.
Useless guy said:
Or you can just download it, check it and stop posting useless warnings. Although, not sure if you're able to decompile it.
Click to expand...
Click to collapse
Useless warnings? Come back to me when your computer is ridden in malware from carelessly downloaded files in a few months time.
Guys, calm down. @SixSixSevenSeven is right, though. I'd rather not download any weird files and copy them to my system32 directory, especially if there isn't any source available.
And anyways, isn't discussing this stuff against the rules?
You know, because we're all kinda developers and stuff, and that's how we make our money?
That host file is the exact same method used by android. There no compiling/decrypting/program or malware included. Is a text file ?
Thanks OP, it works as intended. Blocks all ads successfully.
D.O.C said:
That host file is the exact same method used by android. There no compiling/decrypting/program or malware included. Is a text file ?
Thanks OP, it works as intended. Blocks all ads successfully.
Click to expand...
Click to collapse
Yes, it may be the same method, but the hosts files are open source and you have open source apps which do the installation for you.
And I still think this thread is against the rules. ..
Sent from my GT-I9505 using XDA Premium HD app
http://someonewhocares.org/hosts/
Here's the host file I use. Works pretty good - no need for Android apps or anything.
Beatsleigher said:
Yes, it may be the same method, but the hosts files are open source and you have open source apps which do the installation for you.
And I still think this thread is against the rules. ..
Sent from my GT-I9505 using XDA Premium HD app
Click to expand...
Click to collapse
Against what rules
vasiaeva said:
Against what rules
Click to expand...
Click to collapse
Against the XDA rules, which you read and accepted as you created your account
Sent from my GT-I9505 using XDA Premium HD app
Beatsleigher said:
Against the XDA rules, which you read and accepted as you created your account
Sent from my GT-I9505 using XDA Premium HD app
Click to expand...
Click to collapse
Don't worry about XDA there is admins army who watch for that...
But i like you sense of humor :good:
Beatsleigher said:
You know, because we're all kinda developers and stuff, and that's how we make our money?
Click to expand...
Click to collapse
I don't see any developers here
Useless guy said:
I don't see any developers here
Click to expand...
Click to collapse
Thanks man. I guess you don't see me...
Sent from my GT-I9505 using XDA Premium HD app
Guys, there is nothing wrong with this - it's been going on for years in this exact format. Any ad-blocker that you use (apart from browser extensions/add-ons) will use this method.
The hosts file (yes, located in a sub-directory of System32 ) is what your PC looks at for address translation. It's a text file, so you can open it in a text editor (even notepad will do it) and check it there, but other than being used to translate domain names to IP addresses it is not in any way active.
If you're concerned about it I suggest you don't use it. If you're curious about it then open the hosts file and look at the contents. Other than that, it's nothing to worry about.
Beatsleigher said:
Yes, it may be the same method, but the hosts files are open source and you have open source apps which do the installation for you.
And I still think this thread is against the rules. ..
Sent from my GT-I9505 using XDA Premium HD app
Click to expand...
Click to collapse
I really don't know what you are talking about, OP just shared a method to block ads, no application discussion whatsoever, never stated it was a "only method" or anything like it. You are definitively successful at changing topics though.
and BTW, it is not against forum rules.
The only thing that could possibly be against the rules is the fact that ads are getting blocked - but AFAIK XDA has nothing about that.
Perhaps you don't like how it uses a closed source utility (which is actually open source)? Well then you might not like 90% of ROMs on this site - for all we know they set all the text we type in to some Chinese servers.
SilverHedgehog said:
The only thing that could possibly be against the rules is the fact that ads are getting blocked - but AFAIK XDA has nothing about that.
Perhaps you don't like how it uses a closed source utility (which is actually open source)? Well then you might not like 90% of ROMs on this site - for all we know they set all the text we type in to some Chinese servers.
Click to expand...
Click to collapse
What? Dude. I'm a dev myself. I don't care if somethings closed source, as long as it has good enough documentation or unless I know exactly what the program's for...
And for all I know, from the IP address of the XDA servers, they're based in America. The only Chinese servers used in XDA are those of Chinese people wanting us to download their ROMs.
And I don't know what the OP uploaded, as far as U knkw it's a text file. But even text files can contain viruses, just like pictures can, which is why I'm not downloading it and think it could be against the rules. But never mind. If you want to download it, go ahead. I'm not and I'm using AdBlock Plus, which I built from source.
Sent from my GT-I9505 using XDA Premium HD app
Beatsleigher said:
What? Dude. I'm a dev myself. I don't care if somethings closed source, as long as it has good enough documentation or unless I know exactly what the program's for...
And for all I know, from the IP address of the XDA servers, they're based in America. The only Chinese servers used in XDA are those of Chinese people wanting us to download their ROMs.
And I don't know what the OP uploaded, as far as U knkw it's a text file. But even text files can contain viruses, just like pictures can, which is why I'm not downloading it and think it could be against the rules. But never mind. If you want to download it, go ahead. I'm not and I'm using AdBlock Plus, which I built from source.
Sent from my GT-I9505 using XDA Premium HD app
Click to expand...
Click to collapse
You misunderstood me. I'm saying that closed source software could always have backdoors, even if it comes from XDA users.
Even if somebody did find an exploit that somehow executed code in a .txt file, they wouldn't be using it one some kids wanting to block ads, they'd make a lot of cash either by reporting that bug to Microsoft or by selling it on a black market.
Beatsleigher said:
What? Dude. I'm a dev myself. I don't care if somethings closed source, as long as it has good enough documentation or unless I know exactly what the program's for...
And for all I know, from the IP address of the XDA servers, they're based in America. The only Chinese servers used in XDA are those of Chinese people wanting us to download their ROMs.
And I don't know what the OP uploaded, as far as U knkw it's a text file. But even text files can contain viruses, just like pictures can, which is why I'm not downloading it and think it could be against the rules. But never mind. If you want to download it, go ahead. I'm not and I'm using AdBlock Plus, which I built from source.
Sent from my GT-I9505 using XDA Premium HD app
Click to expand...
Click to collapse
Mannn I didn't upload anything. If you check the link in OP its brings you to another XDA thread. Better double check before you say something that you don't now . ..
Sent from my SPH-L900 using Xparent Skyblue Tapatalk 2
vasiaeva said:
Mannn I didn't upload anything. If you check the link in OP its brings you to another XDA thread. Better double check before you say something that you don't now . ..
Sent from my SPH-L900 using Xparent Skyblue Tapatalk 2
Click to expand...
Click to collapse
There is a reason I donb't click on links like that. That is (mainly) because my laptop's dead and I'm using my mum's, which is a really cheapy-sh*tty thing which doesn't even support NX from sides of the CPU (Which means it can't run Windows 8 and/or 8.1).
And the other reason being: I don't trust any files which I, myself, downloaded from somewhere you can't always trust where someone wants me to copy it to my system path.
So, no. I won't check things out that 'I don't know'.
And what was the point of this thread, is if only leads to a different thread?

weird folder in file system: GROWTH_TEST

using MyFiles, saw it in the main file directory.
GROWTH_TEST
was empty, deleted it.
anyone come across this?
Here also but the file is filled with connections blocked log.
raul6 said:
connections blocked log
Click to expand...
Click to collapse
interesting! what creates this log? is this system-related or a specific app?
Filled with following:
com.android.volley.NoConnectionError: java.net.ConnectException: Failed to connect to ureca.samsungapps.com
Me too. Info from Growth-Test Log Text.
com.android.volley.NoConnectionError: java.net.UnknownHostException: Unable to resolve host "ureca.samsungapps.com": No address associated with hostnamecom.android.volley.VolleyError: Network Disconnectedcom.android.volley.VolleyError: Network Disconnected
Sounds like it is a host. Could we be hacked? I have had issues since last august!
L .J.629 said:
Me too. Info from Growth-Test Log Text.
com.android.volley.NoConnectionError: java.net.UnknownHostException: Unable to resolve host "ureca.samsungapps.com": No address associated with hostnamecom.android.volley.VolleyError: Network Disconnectedcom.android.volley.VolleyError: Network Disconnected
Sounds like it is a host. Could we be hacked? I have had issues since last august!
Click to expand...
Click to collapse
It's apparent that it is a log file for an app on the phone.
Could your phone be hacked? if you truly were then you wouldn't see a log file. Let alone a log file saying that something couldn't connect to a samsung server.
If in doubt perform a full factory data reset and set the phone back up without using a backup. Do not install anything on the phone other then updates to what was on the phone originally. Use it like this for half a week to a week... if the log fle appears then it's probly from one of the apps on the phone.
Your issues are probably (80-90% likely until you make a proper new thread asking for help) entirely seperate from this.
Chances are either you have outdated firmware/software, hardware failures/problems, expectation/reality matters, or just need to do a factory data reset. If you choose to do the factory data reset then avoid using a backup to restore apps and settings (cuz if the issue was from an app or setting then the issue is most likely included with the backup).
I found some weird things in Hidden Sys apps as well: "Circular ver1.0" five instances of it 0.0B, "Filled" - also 5 instances, "Gestural Navigation Bar" - 10 times, "Rounded" x4 and some other 0.0 B apps., does anyone know what for are they and why they propagate in so many instances? Thanks in advance.
It was really bothering me that I couldn't find solid information on this. I went pretty deep down the rabbit hole this morning. So far, this is what I've found out:
Worth Noting;
-- If you crawl the subdomains for the logged domain samsungapps,com it's related to Samsung Galaxy Apps.
-- ureca subdomain was registered in 2009 (first Galaxy phone release)
-- "Growth" seems to be related to marketing via the Galaxy Store.
-- There seems to be Knox relations as well. I will speculate further down below.
After sorting through a ton of data, as if it couldn't be safely assumed by the domain, the ureca URL is embedded in the Samsung Apps, Theme Store, and Game Launcher, that I've found so far. Take a look at some interesting strings I found in the APKs;
Package Name
com.samsung.android.themestore
Internal Version
520110303
Displayed Version
5.2.01.10303
]https://ureca.samsungapps.com/collect/billing_usage_log
]https://ureca.samsungapps.com/collect/theme_sa_log
]https://cn-ureca.galaxyappstore.com/collect/theme_sa_log
Package Name
com.sec.android.app.samsungapps
Main Activity
com.sec.android.app.samsungapps.SamsungAppsMainActivity
Internal Version
450509140
Displayed Version
4.5.05.9
]https://ureca.samsungapps.com/collect/iap_usage_log
(There are also iap subdomains @ samsungapps too, fwiw)
BUT, I have no idea what devices these are coming off of. Some APKs are varying wildly. Some report spyware, trojans, etc, too. Most by only 1 AV vendor though. If anyone has more time than me, take a look. Not sure if Knox is the "backdoor", the 'diamond' and 'zirconia' subdomains looked interesting. Or if it's a false hit, the Chinese govt, or if the APKs are from a repo and they're malicious. Didn't look into it in the slightest.
VirusTotal
VirusTotal
www.virustotal.com
Or if anyone already discovered exactly the source of the "GROWTH_TEST" folder, please let me know so I don't revisit this. But I'm pretty sure it's Galaxy Store Market related stuff.
FWIW - Me
Galaxy S10+, OEM Unlocked.
June 1st security update. USA
My Growth Test folder contained 2 files,
appsUsageLog.txt: (1 "volley can't resolve ureca.samsungapps.com")
optin_trace.txt: (1 "volley network error")
You're probably over thinking this.
Pretty sure I've seen it before too.
If you're still running on Pie Karma Firewall will let you monitor and block internet connections.
Shows you which apks are busy sucking up bandwidth and battery.
Scan any questionable apks online with Virustotal.
AM Radio said:
using MyFiles, saw it in the main file directory.
GROWTH_TEST
was empty, deleted it.
anyone come across this?
Click to expand...
Click to collapse
Any updates to this? I too have the Growth_test folder with appGrowthLog.txt in it.
Edit: in the appGrowthLog.txt file says "com.android.volley.NetworkErrorcom.android.volley.VolleyError: Network Disconnected".

Categories

Resources