Develop Bugs

How does Android protect itself from rogue apps?

I'm expecting delivery of the Desire soon, having had a range of WM5, WM6 and WM6.1 handsets so far. Now one of the big problems I experienced with WM was the inability of the OS to protect itself from deep-level rogue code -one app from the Windows Marketplace screwed the last phone considerably, leading to a series of crashes, black screens with ominous warnings about not powering off correctly and so on. Thankfully I had Sprite Backup to haul back a working fileset. On the whole it felt as wobbly as a Win98 install with the wrong version of several core files.
How does the Android OS protect itself from rogue stuff? (especially the newest 2.1 release in the Desire, if it's any different from earlier versions). Does it sandbox the apps and do some heavy brokering of any multitasking? There are thousands of apps to try and I'd rather not knacker things up if one turns out to be a bit flaky...
I've used Linux for years (have mostly had Kubuntu for the past 2yrs, though used to run Suse, Slackware and ZipSlack) and have busted a Linux install just by adding the nVidia kernel drivers - I think that was within a minute of first boot in that case. I know that root access is needed for these sorts of mods - what's the score there on Android handsets?
BTW - couldn't find anything about this on the Search, and am dropping it here because I'm getting the Desire - apologies to Mods if it belongs somewhere else!

- in the market you will see bad ratings and comments if an app is really malicious (obviously the developers can't edit/delete comments from the market)
- apps don't have root access so they can't alter data on the system partition.
- apps need to have permission declared in order to have access to some functions, for example if an app is sending text messages, or modifying contact data you will see this when you install the app

Thanks. I always treat the user ratings with a pinch of salt - the one that messed my Raphael up was a 4*-rated app! I think the thing there was that WM doesn't protect the OS in any special way, and I'm glad that Android is using partitions. Sounds just like a standard Linux distro in that respect, most of which will create 3 partitions unless told otherwise.

Yeah I guess if the app has no root access, then no serious harm can be done to the phone.
Also, try to create a habbit of checking what permissions the app has before installing it. That shows just before installing, or press Menu and then Security. For example, a Game will not need access to contacts, or make calls... etc.
Before I install something I heard nothing about, I always scroll users comments and look for low ratings and see what they have to say about it. But remember that old comments (good or bad) sometimes don't count as apps get updated.
The Market should show when the application was last updated by the developer. I think Apple store already shows that.

Cheers! I'll check it out just as soon as the new phone gets here! Normally I'm dead paranoid about stuff, and don't let anything out to play unless I'm sure - maybe I'm letting one bad installation colour things a bit too much...

[Q] REAL hacking.

Hello there to all the souls of the xda forums.
im new to wp7. never used one before like 3 days ago. i like it, great device my surround is. but im not here to tell you about how good it is. we all know its good.
im here to ask if theres any real hacking going on with this thing yet. im looking for at least some kind of command line.
from there i could use tools such as aircrack, nmap, metasploit, SET, etc.
ive had an iphone for about 3 years, booting iOS and Android. i am used to hacking from that, but at the same time i know there a bigger user base for those devices, so theres more devs for it. i just wanted to know if anyone has already started on such a project before i dedicate alot of my time to developing this for you all.
BTW i am not interested in pirating apps, cracking apps

With enough effort, command-line interface *might* be possible - the OS technically supports such things - but the underlying core is Windows CE. Even less so than NT, CE really isn't meant for a CLI; apps are written with the intent of being run on a graphical interface. Also, having no POSIX compatibility and only partial Win32 compatibility, a lot of apps that you're used to from the desktop (or from POSIX-based phone OSs like iOS and Android) aren't going to be available.
That said, if you want to get started in the WP7 hacking space, there's certainly plenty to do. One project that I have on the back burner until I get some more urgent stuff out of the way is a SSH client. There are a number of things that are required here. First of all, we have homebrew Socket support, but the official SDK lacks it so you'd need to use a native Homebrew DLL. Second, there's no official command line interface, so you'd need to write one. The second point is all sorts of fun, since what you're really writing is a terminal emulator.
Other interesting projects include getting a unified cross-platform approach to writing to the filesystem, or even reading from all of it (instead of the relatively small portions currently accessible) or figuring out how to make third-party apps run in the background.

thanks man. I think I'll work on getting a full file browser for the phone. That should happen , i think, before anything else. As far as a terminal emu, it sounds like its going to be more of a chalange for me. Again, I'm used to more Linux and UNIX systems than I am windows. I had to reinstall windows 7 onto a partition just so I could sync the phone with the Zune software Microsoft insisted I use.
So is anyone currently working on the file browser? Has there been any progress with it? If so, who should I contact so I can help?

sea_bass said:
thanks man. I think I'll work on getting a full file browser for the phone. That should happen , i think, before anything else. As far as a terminal emu, it sounds like its going to be more of a chalange for me. Again, I'm used to more Linux and UNIX systems than I am windows. I had to reinstall windows 7 onto a partition just so I could sync the phone with the Zune software Microsoft insisted I use.
So is anyone currently working on the file browser? Has there been any progress with it? If so, who should I contact so I can help?
Click to expand...
Click to collapse
TouchXplorer. Do a bit of searching. A lot of homebrew has already been in the works.

thesecondsfade said:
TouchXplorer. Do a bit of searching. A lot of homebrew has already been in the works.
Click to expand...
Click to collapse
Thanks. Just found that page

Contact from Kin Developers

About 2 weeks ago, I took johnkussack's advice (I think it was him) and went to LinkedIn to try t be friends with anyone who came up on the search for "kin phone". In the invite email, I just said that I noticed they worked on the Kin phones and would like to ask them a few questions on how one could write to the phone. I have had 3 responses in the last 2 days.
Guy1: didn't know because he worked on the UI for the Kin Studio
Guy2: kindly told me he couldn't release an unauthorized build and that he would be breaking the law by doing so.
Guy3: This guy worked on the phone for over a year. He first told me I was breaking the DCMA by hacking/reverse engineering Kin, regardless of intent. Then he said this important thing:
"You are absolutely right in assuming that the device is locked; in fact, it has a hardware lock that is common to many such devices. When the devices roll of the manufacturing line the programming fuses are blown (literally) preventing any further programming of the device. This is all handled by hardware so unless you find a flaw with that you are out of luck."
So if this is true (sounds like it is), the "dream" is over. Hopefully there is some way that someone out there can find.
If I get more responses, I will post them here. Don't ask me to go back to these three who already replied and asked them more questions, I think I made some of them mad.

Hmmmm... I don't know whether or not the KIN models will accept OTA updates so that's a good question to ask. If OTA updates are possible then it's inherently possible to change the software. I wonder...

Yes, it was me the one who said about "linkedin".
But i also said "in one word NDA". You should known even before ask that the signed NDA are also legal contracts, so i prevented before asking them.
On the DCMA, yes.. on the USA. Outside the big country, the legal question is different and may not operate with that law. (if ever). If they provide a normal (legal?) way to unbrick my factory mode here, or to use the phone options, then i wait for the cost for it.
And everyone knew that hardware was not the way, just at the moment where first flash attempt failed. "Dream" is doable by software, if anything is to be done.
What i don't get is why to ask for rom rom roooooms, where we need drivers drivers driveeeeers... or sdk's. We won't get it anyway from MS, but no flashing means a rom is futile, non useful,crap pack of bytes.

But i also said "in one word NDA". You should known even before ask that the signed NDA are also legal contracts, so i prevented before asking them.
Click to expand...
Click to collapse
I figured I just take a shot in the dark; hope for the best and expect the worst. Since the phone and suuport from MS was discontinued, maybe the NDAs would be voided.
And everyone knew that hardware was not the way, just at the moment where first flash attempt failed. "Dream" is doable by software, if anything is to be done.
Click to expand...
Click to collapse
Good to know you still think there's a way.
What i don't get is why to ask for rom rom roooooms, where we need drivers drivers driveeeeers... or sdk's. We won't get it anyway from MS, but no flashing means a rom is futile, non useful,crap pack of bytes.
Click to expand...
Click to collapse
I just asked if "there is a way to get around the write lock". Had I known ahead of time to ask about drivers or SDKs, I would have put that in the msg.

I strongly believe that we could operate with the device,softwarewise. there is proof that the kin NAND memory (for now on, called "Storage" as label) is writeable. Not sure on the Rom part.
Of course, i mean.. just use it as a normal writable storage memory.
I posted how it could be done and would do it myself but, again, i bricked my phone, and available ones (through bidding sites) are so expensive to buy another one just for this (+ $150). Don't see a way to get it internationally again.
And even doing it, i'm not sure about what could be done just writing on the storage mem....

If the fuse byte is burn't should not it have prevented you from bricking?

kintwouser said:
If the fuse byte is burn't should not it have prevented you from bricking?
Click to expand...
Click to collapse
Nvitem bricked, not flashing bricked. You can succesfully write to the NVItems memory. But i guess it's just configuration memory and not the one "fused".

I just want to mention that jailbreaking a phone is NOT illegal in the United States! Geohot hacked the iphone... Apple went after him... Apple lost.
Also blowing the programming fuses seems a little fishy to me actually. No other phone does that. The majority of other phones have been flashed. I just think it would be pretty odd for a company to do that so that they no longer could update it. I am not sure I believe him. If this really was true... then why wouldn't Apple or Sony be doing it? This also doesn't make sense since Microsoft actually originally intended on putting WP7 on this as well as allowing apps for it. Check this article out:
http://www.intomobile.com/2010/05/12/kin-windows-phone-7-a-lot-closer-than-we-thought/

you must understand, its not possible to blow fuses in the hardware, it would be a top news story if they were able to keep the OS running in complience with the flash memory without it crashing. Obviously that was a lie to discourage us, and i dont even think that was a real kin developer, because microsoft clearly stated that all kin developers would be moved to WP7 or another programming section. And it doesnt matter if its legal or not to jailbrake phones, if we are porting a new OS, we wouldnt have modified the original OS, which is what jailbraking means. Most likely the OS is hidden deep in the flash memory with a write - protection. If you think its saying access denied because they said the fuses were blown, its wrong. They must just have a password or code that needs to be sent continuasly to the phone to access files. If the fuses were blown, then nothing would be able to be accessed by zune, because it would be impossible to reach the memory.

soninja8 said:
Most likely the OS is hidden deep in the flash memory with a write - protection. If you think its saying access denied because they said the fuses were blown, its wrong. They must just have a password or code that needs to be sent continuasly to the phone to access files. If the fuses were blown, then nothing would be able to be accessed by zune, because it would be impossible to reach the memory.
Click to expand...
Click to collapse
Not my expertise field, but this mobiles can (and in fact they do) have several memories, storing the OS in the ROM memory and all the data on the NAND memory (our "8gb" storage).
Zune software has protocols to query for available storages (requiring its label/id) and is allowed to write/read to it. If you dare to click on update version (at least in the 1st version I tried) it expressed that the option was not "available" to that device without web requesting data, apparently.
So.. in the nand flash we may only have the equivalent of a SD Card. And my last wince PDA showed that as /Storage too, apart from main wince ROM.

You can format the nand memory using win explorer if in fact it is the 8gig storage. I did this and it deleted all pics,albums etc. It was interesting to note that we cannot copy or view these pics without an access error but it does let me delete them.
I just wan't to be able to get my pics off this piece of crap without emailing them.

I posted it once. You are able to:
- Query storage properties (label, size, id,...)
- Query storage folders
- Query folder files.
- Query tracks / albums / playlist / images / anyZuneSupportedFile
- Delete * file (whatever)
- Format the storage
You are "unable" to:
- Upload (create) a file into the device
- Download a file from the device.
MTP protocol tools allows you to do so, from command line (not quite sure if they are available on Win32 OS's), but... fails to operate with this device when it comes to the "unavailable" operations.

I am curious as to which former developers you contacted?
I was doing some research and noticed that Microsoft acquired the company Danger, Inc. After Microsoft purchased them, the former president of Danger went to develop Android (later acquired by Google). One thing I read was that most of Dangers employees left after being purchased by Microsoft. Apparently these people don't like Microsoft all that much! I also looked into it a little more and found one of the founders of Danger who had a twitter account. Of course all of his tweets were via a "KIN". Thought that was interesting. It seems to me that these former Danger employees would be interested in helping out if they don't hold to high of an esteem for the big "M".

seems like this is your first "inside the move" trying-to-hack/reverse a thing, so i will say:
people involved doesnt wanna risk through legal issues, even if they were pissed off, just for "some kids" to have a driver or rom. NDA are strong there, and they could either sign them or leave (if leaving, they don't have the interesting things).
At most you would get bad-mood or good-luck comments, and ocassionaly (very uncommon), leaks (wont happen here).

yeah, they purchased danger for an amazing 500 million dollars, which they later developed the kin with it, they were planning to put windows phone 7 on it, but they were to behind and released it with the old windows CE, then the former developer moved to work on a free source OS, later called android. Google wanted to get android while it was cheap, so they bought that company, and made the old developer as 2nd engineer.

Maybe not worth yet, but we should get more *info* about the SBL mode (aka "Ms Pink Bootstrap), as coinflipper said that it was the way to flash OS or parts (like radio's).
I have been trying even OMA wap WBXML bootstrap examples with it, but as we dont know if our phone is standard, it's like looking for a water drop in the sea of possibilities.
We do not need a guide on how to do something, but what-to-do with it.

Maybe, JUST MAYBE, we could design a program like bitpim. I am a mac user and when I used bitpim with my enV touch, I used to edit all sorts of files. Examples would be phone info, server info etc. We could make a program like that to get the info. I know programming may be hard, but its worth a shot. I hate the OS on this phone, ESPECIALLY WHEN YOU PIN APPS! THEY LOOK HORRIBLE

Kinuser1 said:
Maybe, JUST MAYBE, we could design a program like bitpim. I am a mac user and when I used bitpim with my enV touch, I used to edit all sorts of files.
Click to expand...
Click to collapse
We can't. If we have not the protocols or the supported phone features (protocols, drivers, documentation,...) you cannot guess it and put it into visual basic (or Xcode) and then by *magic*get the program you want.

i will admit that i know very little about protocols and drivers but i would like to point out that bitpim is open source, and that the code can be found here ->
http-//sourceforge.net/scm/?type=svn&group_id=75211 (change "-" to ":")
i seem to recall bitpim already having limited support for the kin, but perhaps with a little research and a little code tweaking we can find ways to improve it? i'm not sure how feasable it is as i have very little experience with programming for phones/usb devices, but it's just a thought.

slimeq said:
i will admit that i know very little about protocols and drivers but i would like to point out that bitpim is open source, and that the code can be found here ->
http-//sourceforge.net/scm/?type=svn&group_id=75211 (change "-" to ":")
i seem to recall bitpim already having limited support for the kin, but perhaps with a little research and a little code tweaking we can find ways to improve it? i'm not sure how feasable it is as i have very little experience with programming for phones/usb devices, but it's just a thought.
Click to expand...
Click to collapse
We can't. If we have not the protocols or the supported phone features (protocols, drivers, documentation,...) you cannot guess it and put it into visual basic (or Xcode) and then by *magic*get the program you want.
Click to expand...
Click to collapse
The above applies to any software you want. Unless you magically found documentation or files (like OP), there's no way to. So f#cked.
The thing is always the same, tweaking tweaking... what to tweak, huh?

[Q] Is 'Droid working strictly for us (and not for Google) possible?

Hi, guys!
Before I pose my question: I am really in awe of projects in the Open Source community style and this is soooooo good to see and experience (my other hobby is Sat TV "hacking" and so on... )!!!!!!!!!! :good: So, endless thanx and respect(!!!!) to all involved!!!!!!!!!!
Context: recently I managed to S-OFF my HTC Desire with 'Droid 2.2.2, then somehow I rooted it, 4EXT recovery/backup (if memory serves, the "touch" one) is in, in recovery mode I flashed the latest MIUI ROM (sorry if I misspelled it) with JB 4.1.2, improved the "radio" and so on... The one or two things that do not work - that I noticed - was no sending SMSs and poor video recording and reproduction. So, the search is continuing!
My question is - before I attempt the flashing of Paranoid Android ROM (how fitting, regarding my question! ) - is there a ROM that has kicked the living daylights out of Google corporate c*a#, please? As in, there is no stuff, in that would-be ROM, that constantly collects our data and sends it back to corporate and other commercial coders, please?
Because, as a matter of principle, we ought not to have to think of just how much data is going to corporation(s) and individuals coding apps etc. And from then on, to "authorities", of course. Not that I have anything to fear, in that respect - but it is the principle that is at stake here! Similar with Linux v. MacroHard and their "enlightened" attitude towards our privacy etc.
You know, we have a myriad of apps of all sorts, so I suppose we do not need Google's intrusion in all aspects of our interaction. I am perfectly happy, for instance, to use Firefox or Maxthon or Opera browser and get into my emails that way, not having to use the Google app for Gmail! I presume we could also have other apps to replace Google chat (presumably through Firefox in Gmail?) and so on and so forth. Really, I do not need Google's maps, when we have Open Street app and so on and on and on.
So, does this ROM exist, please? No Google/corporate/commercial stuff in it, that is...
And if not, has the time arrived?:angel: It is Linux, after all...
Would it be possible to make something like that?
Many thanx, again!
P.S. I recently bought a SuperPad tablet and I wonder if there are custom built ROMs/OSs for those, as well? Anyone knows, please?

Well of course any Rom without the Google apps.
Your principles on data collection went out the window when you first used the internet.

I disagree... respectfully, of course...
For instance, see BBC website for the "right to be forgotten" EU proposal on data collection/storage/handling... However, no such battle can ever be completely lost or won - they keep going on...
As a newby I have a problem with posting links but... let me try:
Code:
bbc co uk / news / technology-16677370
My Q was also re. full functionality without Google stuff - some ROM authors warn that their ROMs can't function properly unless we flash the Google stuff immediately after ROM itself... Any clarification, please?

goggysan said:
I disagree... respectfully, of course...
For instance, see BBC website for the "right to be forgotten" EU proposal on data collection/storage/handling... However, no such battle can ever be completely lost or won - they keep going on...
As a newby I have a problem with posting links but... let me try:
Code:
bbc co uk / news / technology-16677370
My Q was also re. full functionality without Google stuff - some ROM authors warn that their ROMs can't function properly unless we flash the Google stuff immediately after ROM itself... Any clarification, please?
Click to expand...
Click to collapse
its not to do with they cant function properly (they can) its just the fact that play store is "google" and u also need a gmail account. correct me if im wrong. Soo like dethrat says,.... its about gapps. (more or less).

It's not a matter of me thinking this is/you're wrong (on this one). I think/hope, that you are also hoping that I am right... Am I right?
You have a point, in a way, since it started in this manner with credit cards (easily done but also easily circumvented) and onwards but...
Look, ever tried Flipboard? I mean, if you are neglecting the examples I already wrote about... Check it and compare with Google Currents, please... Simply flipboard dot com... Need I say more?
On the level of principles: we do not need to be tethered/electronically tagged and under constant "surveillance" by Google or any other corporation or even the state, for that matter... Don't you think this is kinda worth at least trying? No offence intended to anyone(!) but I think this is the adult thing to do...:angel:
Well, this is what I am looking forward to nowadays... So, do you think that, for instance, a developer of Paranoid Android could make it all work with "alternative" apps, please? An effective "Ads Blocker" and kinda "No Script" apps included, of course. Maybe even - in this sense - "cleaned up" crucial apps, too... If "Anonymous" were really serious and competent (intellectually, professionally and morally), maybe they should get on it right away, eh? :angel:
I mean, if I ever requested anything from anyone on these boards, this would be it - an AIO OS without corporate [email protected]#. And I have a feeling that a fair few of us might keep trying this sort of thing out...:good:

Code:
bbc dot co dot uk / news / science-environment-21923360
Any more info on my question, please? Anyone with some experience?
Cheers!

So, the great WoH tells me that it is possible to use his ROM without the G-stuff, that is "Gapps" - and that everything should work just fine! And I am very grateful for this possibility! I only need to "skip the step with the gapps", he says.
Then, one proceeds with "3rd party app stores" like Amazon, GetJar, Fireplace and Yandex.Store. I presume there is an included browser in the ROM without the Gapps, so I start it and go to one of those sites, get their gadget and simply install from there, the free stuff... hopefully not having to log in with my Gmail account...
My problem, though, lies here in this thread - setting up PDroid. That's for seriously enhanced privacy/security! In the thread's "how to" there seem to be some discrepancies with the newer versions of PDroid... Really not sure how to do it, what exactly must be done, with which files... And I can't post in that section, to ask questions... Like "Where is the apk you mention in the top post?" and "What exactly are the steps?"
So, I must prepare by reading a lot, testing it and then redoing it, from scratch, i.e. flash the ROM again, as WoH described in his thread here: http://forum.xda-developers.com/showthread.php?t=2131790
My hope would be that he includes the PDroid patch/apps - if at all possible - in the next edition of his awesome ROM!
Also, I would dearly love to see and test a ROM with all the best alternative apps, links to a few of the best 3rd party apps stores, tools etc. - but no G-c#@p (or almost no G-c#@p)... at least as much as humanly possible...
Here is a sketch:
3rd party apps stores,
keyboard and speech apps,
a couple of browsers (Firefox/Opera, maybe),
a few tools to manage the phone and set it up properly (Advanced Task Killer, Android Manager and alike),
best audio-visually capable Gtalk app and Skype for chat,
some non-demanding but good protection (Avast suite?),
Flipboard for news,
Adobe Reader, Kindle and Aldiko for reading,
MX and Meridian players for multimedia stuff,
Flash,
camera and videocam apps(?),
audio, video and photo editing SW,
Sopcast (TV channels) and "1Channel for Google" for audio-video streaming from the net,
...and so on,,, everybody continuing to fill it up according to their preferences, of course... all freeware/gratis!!!
Perhaps call it an "Alternative apps pack"???
So, maybe: when apps2sd card tool has been installed, we flash the "Alternative apps pack"... and it all goes to an SD card?
I think this might be a very cool idea, for many of us...
Go WoH and co.!!!!!!!!!!!!!!!!!!! :good:

[Q] Mallware in SVHD 1.0.0 ?

First of all, I'm a long time lurker on the XDA forums, haven't posted at all (why would I, if there aren't substantial questions ). Until now, that is. I was lurking the D-HD Dev fora when I came across a new Sense 4.1 rom; http://forum.xda-developers.com/showthread.php?t=2204384
Not happy with the Sense4 roms there are I really wanted to try it.
Downloaded it, and my ESET Smart Security went haywire. According to ESET the package contained mallware, Android/Plankton.I
Reported it so a moderator could look into it. Afterwards I looked into the package itself, seems like install_flash_player.apk was detected as mallware. The file contained a read-me file with a reference to RevMob Team (something to do with adds) and the file classes.dex was detected as a threat. Compared to an actual flash player package the file-sizes mismatched quite a bit.
First of all, is it a false positive of ESET, or actual mallware.
Second, The report I filed was answered as:
This is misuse of the report function. Pls make 10 useful posts and then come to the dev forum. Or PM the member. Thanks
Click to expand...
Click to collapse
This baffled me quite a bit, im reporting a godd****d possibility of mallware, and am replied to like that?! Nice, could be quite some people's phones are infected with mallware.
Is it normal to act like that, then? Off-course, if people aren't running a scanner, it is there own fault...

Lol, they should have at least looked into the problem
Sent from my Desire HD using Tapatalk 2

I contacted mygamers, he assures me that it is a false positive.
Also scanned install_flash_player.apk at
virustotal (dot) com/nl/file/ab1c124f868680a1f6a620fdb1595719bc012719f619ce76c4683094c64c63f0/analysis/1364154496/
15 out of 46 scanners detected something or another.
Call me paranoid, but I think I'll skip on this rom

Asherdu said:
First of all, I'm a long time lurker on the XDA forums, haven't posted at all (why would I, if there aren't substantial questions ). Until now, that is. I was lurking the D-HD Dev fora when I came across a new Sense 4.1 rom; http://forum.xda-developers.com/showthread.php?t=2204384
Not happy with the Sense4 roms there are I really wanted to try it.
Downloaded it, and my ESET Smart Security went haywire. According to ESET the package contained mallware, Android/Plankton.I
Reported it so a moderator could look into it. Afterwards I looked into the package itself, seems like install_flash_player.apk was detected as mallware. The file contained a read-me file with a reference to RevMob Team (something to do with adds) and the file classes.dex was detected as a threat. Compared to an actual flash player package the file-sizes mismatched quite a bit.
First of all, is it a false positive of ESET, or actual mallware.
Second, The report I filed was answered as:
This baffled me quite a bit, im reporting a godd****d possibility of mallware, and am replied to like that?! Nice, could be quite some people's phones are infected with mallware.
Is it normal to act like that, then? Off-course, if people aren't running a scanner, it is there own fault...
Click to expand...
Click to collapse
It is unfortunate for you

Not to be mean or anything but you should really change antivirus as eset sucks...

Well then.... I seem to be correct. Did want to try the rom, and, indeed, it is a fast rom... but... 'install_flash_player.apk' isn't the true, adobe, flash player package. Rather it barfs a platoria of adds and starts a download of flash player.
So, mallware non the less (and NOT a false positive).
Don't believe me? just start the flash player app in the app drawer.
Ahwel, how really needs flash player, it is a security risk on its own HTML5 all the way.
Muikkuman said:
Not to be mean or anything but you should really change antivirus as eset sucks...
Click to expand...
Click to collapse
All a mather of opinion

It's simple. It's only a piece of software designed for Android, and so can't harm your PC. The ads can be blocked with AdAway.
And also, use a better antivirus. I suggest CommonSense 2013, its working great for me
Hit Thanks if I helped you out
--------------------------------
HTC Desire HD (RCMix Energized)
Samsung GNote 10.1 (Stock)

uhm...
*blink*
My internet security software detects a file that isn't the file it claims to be and you tell me to get a bette....
Wow... just... wow... Glad you are not in the computer support business, at least, I really hope you are not.
Don't be daft, man! I know that something detected as 'Android/Plankton.I' is aimed to Android and not Windows (or whatever).
Fact remains, there are still official adobe flash packages for android, instead of add network packages.
Ahwell, just a factory reset and the data folder is clean Who uses flash anyway.

Asherdu said:
uhm...
*blink*
My internet security software detects a file that isn't the file it claims to be and you tell me to get a bette....
Wow... just... wow... Glad you are not in the computer support business, at least, I really hope you are not.
Don't be daft, man! I know that something detected as 'Android/Plankton.I' is aimed to Android and not Windows (or whatever).
Fact remains, there are still official adobe flash packages for android, instead of add network packages.
Ahwell, just a factory reset and the data folder is clean Who uses flash anyway.
Click to expand...
Click to collapse
First off, chill out a bit
Second, he has a point.
Your anti-virus software detected a "something" that is harmful... It may be harmful, but for Windows. There is no point in running Windows A-V software to scan Android or linux files... Viruses are written for specific systems and are ineffective on others. Just like all other programs. Hope I cleared some things up.

I disagree with that. Malicious software is malicious software, no matter what the operating system is. A virus scanner should detect it, no mather if it is windows based, osx or linux (linux and osx virii, riiiight )
My point is, why would someone use malicious software when there are packages from the original developer (Adobe, in this case).
It is to bad, too, because the rom it self is indeed quiet fast and stable.
Even though a factory reset will clean up the data directory (and thus delete the package), I'm cautious if it comes to this rom.
And, to be entirely honest, I believe the moderator who closed my report, is lazy. To lazy to investigate a possible threat. Eventualy it is 'just' adware, but, at the same time, it could have been something more dangerous.
That was it for me, I will stay at the lurking corner again

no mallware found , its cleane
checked by smart security