Please Help, is this a keylogger? - T-Mobile Samsung Galaxy Note II

I just rooted my phone (Galaxy Note 2) 10-14 days ago and I also have downloaded the mod games outside the google app store. I even scanned my phone with AVG Antivirus Pro and Lockout, and found nothing - no spyware... ect.
I just noticed today there are text files which were created on 03-19-13 which is yesterday in storage/sdcard0.
The two files are
Domtree.text
Rendertree.text
I viewed the texts and they have my bank userID and Credit Card UserID on them, but I did not see my password anywhere in the text files.
Could you please tell me if my phone has a keylogger or some kind of spywares?
I am so afraid of the keylogger, PLEASE HELPThank you for kind information and help.

I am not sure but i think domtree.txt is a known file on android and is used by browsers.
The usernames you see must be stored in browser history. Can you clear your browser history and verify if you still see your username in those files ?
Sent from my SGH-T889 using xda app-developers app

ciphercodes said:
I am not sure but i think domtree.txt is a known file on android and is used by browsers.
The usernames you see must be stored in browser history. Can you clear your browser history and verify if you still see your username in those files ?
Sent from my SGH-T889 using xda app-developers app
Click to expand...
Click to collapse
Thanks for reply.
I just reset the firefox history and usernames are still on the text files. I never had these text files before until I downloaded the firefox app 2-3 days. These text files created on 3-19-13.

mygalaxynote2 said:
Thanks for reply.
I just reset the firefox history and usernames are still on the text files. I never had these text files before until I downloaded the firefox app 2-3 days. These text files created on 3-19-13.
Click to expand...
Click to collapse
I found that these are the dump files from Android webkit.
dumpDomTree
public void dumpDomTree(boolean toFile)
Dump the dom tree to adb shell if "toFile" is False, otherwise dump it to "/sdcard/domTree.txt"
dumpRenderTree
public void dumpRenderTree(boolean toFile)
Dump the render tree to adb shell if "toFile" is False, otherwise dump it to "/sdcard/renderTree.txt"
Reference: http://www.androidjavadoc.com/2.3/android/webkit/WebView.html
If you think your system is infected and sending out data you can install "Quick System Info PRO" and check the Netstats for active connections, they are listed by the programs. Keep in mind you will have to do lots of digging initially.

If you think your system is infected and sending out data you can install "Quick System Info PRO" and check the Netstats for active connections, they are listed by the programs. Keep in mind you will have to do lots of digging initially.[/QUOTE]
Could you explain about webkit/webview please? How did this webkit get into my phone?
Thanks alot

mygalaxynote2 said:
Could you explain about webkit/webview please? How did this webkit get into my phone?
Thanks alot
Click to expand...
Click to collapse
Android platform uses webkit as a base for web browsers.
Sent from my SGH-T889 using xda app-developers app

ciphercodes said:
Android platform uses webkit as a base for web browsers.
Sent from my SGH-T889 using xda app-developers app
Click to expand...
Click to collapse
I dont understand how this happened. I had this phone for more than 3 months and I did not see these files until I rooted my phone 10-14 days ago, got a few modded games, and firefox. Why cant AVG Antivirus Pro, Lockout, or a few other spyware apps detect the spyware/keylogger? Anyone else who can help me?
Thank you

mygalaxynote2 said:
I dont understand how this happened. I had this phone for more than 3 months and I did not see these files until I rooted my phone 10-14 days ago, got a few modded games, and firefox. Why cant AVG Antivirus Pro, Lockout, or a few other spyware apps detect the spyware/keylogger? Anyone else who can help me?
Thank you
Click to expand...
Click to collapse
I don't know how it happened on your phone. But as far as I know, if it is a keylogger, you may open or downlaod some files without knowing. Because such kind of keyloggers can work invisibly on your Phone. I knew an android keylogger iKeyMonitor works invisibly after someone installed it on your phone physically. It can be even controlled remotely, very terrible!

Related

Email app: "Unable to download this attachment"

Shocked I'm the first one looking for a solution to this problem. Search turned up nothing.
In my email app, it downloads only the attachments that are below 500kb. For any attachments that are over 500kb, I need to hit the little down arrow to download. it. I get the spinning clock and then the error "Unable to download this attachment". I've rebooted and no effect.
This is for a docx file. Another one is a pptx. I have Docs to Go and am able to open docx files that downloaded along with the email.
The kicker is that if I forward the email to my Gmail, it will say "fetching attachment" for awhile and then Docs TG will say it's not a valid Word 97-2008 file. But I can open it on my computer just fine.
Anyone?
I can't download this with Touchdown either. I can't be the only one with this problem. I was able to download large attachments via the same Exchange server on the Epic 4G and the Palm Pre.
Why do you suppose you are getting the "97-2000 file" .... ??? The answer is self explanitory man.....
Why do you think it works fine on your computer..... the answer is self explanitory......
The evo is not a windows phone.... if you cant download and/or open office 2010 docs do you find that really very surprising???
So lets start with the basics.....
What rom are you running?
What email app are you using.
Maybe tell whomever is sending office 2010 files to same them as 97-2000 file types ie: doc and ppt and xls
Sent from my PC36100 using XDA App
It's not a Office 2010 file issue. I can open smaller docx, pptx and xlsx files just fine. Meanwhile, I have a XLS file in my inbox right now I can't open which is 3.7MB.
I'm running Stock Sense ROM. Well, almost, it's the deodexed one. I'm rooted.
I've tried the HTC Mail, the stock 2.2 mail, and Touchdown. All give me an error of some sort when downloading larger attachments.
Like I said, I had no problems downloading these large attachments on other phones. If I can't figure this out I'm going to have to return the phone because I receive large-ish attachments all the time for work and if I can't view them on my phone that is an absolute no go.
v_lestat said:
Why do you suppose you are getting the "97-2000 file" .... ??? The answer is self explanitory man.....
Why do you think it works fine on your computer..... the answer is self explanitory......
The evo is not a windows phone.... if you cant download and/or open office 2010 docs do you find that really very surprising???
So lets start with the basics.....
What rom are you running?
What email app are you using.
Maybe tell whomever is sending office 2010 files to same them as 97-2000 file types ie: doc and ppt and xls
Sent from my PC36100 using XDA App
Click to expand...
Click to collapse
Some more data points:
< 1MB PDF downloads OK
< 1MB docx downloads/views OK
1+ MB PDF does not download
1+ MB docx does not download
So it appears there is a 1MB threshold somewhere although I have no idea where.
And I'm not a huge fan of the iPhone but it also is able to download these attachments. I just tested them on my wife's phone.
Are you sure nothing has changed on ur exchange server recently ? Activesync clients can enforce restrictions specified by the server. You should check with ur xchange admin if u havent already.
Sent from my PC36100 using XDA App
sandpa said:
Are you sure nothing has changed on ur exchange server recently ? Activesync clients can enforce restrictions specified by the server. You should check with ur xchange admin if u havent already.
Sent from my PC36100 using XDA App
Click to expand...
Click to collapse
I considered that, but like I said, I added my Exchange account to my wife's iPhone just last night and could download these attachments no problem.
Any ideas? This is infuriating and I'm not sure what to do. I'm about to try going into the store and adding my EAS account on one of the demo units to see if it does it there. I'm at a complete loss here.
I tested the Sprint Store demo unit with my account and had the same problem. I asked them about it and they told me it's not the first time they've heard of this problem, it is due to the way mail is handled in Android, and there is no fix :-( Even though I wasn't sure he knew what he was talking about, it's not a good sign.
Crap. Now what....
In the email app under settings. Make. Sure you select "entire mail" and and "always" under the attachment setting.
Sent from my PC36100 using XDA App
Jetdr said:
In the email app under settings. Make. Sure you select "entire mail" and and "always" under the attachment setting.
Sent from my PC36100 using XDA App
Click to expand...
Click to collapse
So I already have "entire mail" selected under mail size limit. Not sure what you're referring to on the "always" setting. I have a setting for "Include file attachment" and my options are Never, <25KB, <100KB and <500KB. I have <500KB selected.
Use Blackmoon Attachsave. It will let you save it, then view it after. I had the same problem and that solved it for me.
abiezer said:
Use Blackmoon Attachsave. It will let you save it, then view it after. I had the same problem and that solved it for me.
Click to expand...
Click to collapse
Thanks for the idea. It seems that this is only for GMail. I did try installing it but it didn't work. Thanks anyways.
Okay, let's try this another way. Can ANYONE download attachments larger than 1MB using Exchange on the email app? Anyone at all?
Sent from my PC36100 using XDA App
Shane112358 said:
Okay, let's try this another way. Can ANYONE download attachments larger than 1MB using Exchange on the email app? Anyone at all?
Sent from my PC36100 using XDA App
Click to expand...
Click to collapse
Bump, can anyone test this and prove/disprove that this is a platform problem and not device specific?
Shane112358 said:
Bump, can anyone test this and prove/disprove that this is a platform problem and not device specific?
Click to expand...
Click to collapse
Hey man... I just downloaded 1.9MB zip file, using HTC Mail app(stock Froyo rooted), from my work exchange server.
Let me know if you would like to check anything else..
kitts said:
Hey man... I just downloaded 1.9MB zip file, using HTC Mail app(stock Froyo rooted), from my work exchange server.
Let me know if you would like to check anything else..
Click to expand...
Click to collapse
Thanks. So apparently this isn't completely widespread. Maybe it's a function of Android + my server? Because my server works fine with the iPhone and other people's servers work fine with the Evo.
Totally confused. 5 days to return the phone.
FYI, no fix. Contacted higher level technical support and they were absolutely no help.
I too have this problem and have been using Kaiten Mail from Android Marketplace. It downloads attachments fast even on 3G/HSDPA. But it became too buggy for me so now I'm back to the Gmail app.
Maybe try some email clients.

So.... I wrote an app...

https://play.google.com/store/apps/details?id=com.threesixtydev.gtalkshare
It adds an entry to the Share menu letting you share with your google talk contacts...
I got tired of cut and pasting links out of my browser, reddit is fun, and the xda app.
It's free / no ads.
Let me know what you think
*I just published version 1.1 which uses oauth instead of user/pass. But it hasn't appeared on the market quite yet. (lags a bit)
that's not something that i personally need, but I will say thanks for making, and giving
Sent from my SPH-D710 using xda premium
What exactly can we share? I installed it and tried to share a picture and the app didnt appear anywhere ... any insights as to how to use it? It seems pretty straight forward but no luck.
Anything text...
gtalk uses a proprietary file transfer protocol So files are out.
Browser links, Apps from Play, Links from reddit apps (bacon reader, reddit is fun), etc
orb360 said:
Anything text...
gtalk uses a proprietary file transfer protocol So files are out.
Browser links, Apps from Play, Links from reddit apps (bacon reader, reddit is fun), etc
Click to expand...
Click to collapse
Aww ok, thanks for the quick info.
Dude. This is a great little app. I don't know how many times I'm helping someone fix their phone through Gtalk and need them to go to a thread. So I go to tapatalk share the thread to my messenger then copy and paste the text into Gtalk. This makes that so much easier. It needs access to write to Google talk which I understand. All in all great idea and it works as advertised. Thanks.

Keep having to sign in

Every time I come to XDA I have to sign in. This is the only page it happens to. (except the secure pages like banks and credit cards and such) But facebook, android forums and other chat sites work fine. How can I stop this. And yes, the box is checked to keep me signed in.
make sure ur browser has no setting to autoclear cookies (i dun know it has something to do wid cookies or not )
also try a different xda theme before u log in (i use xda 2013 1024)
also try a different browser
if they dun work.. jst dun blame me i tried
doctor_droid said:
make sure ur browser has no setting to autoclear cookies (i dun know it has something to do wid cookies or not )
also try a different xda theme before u log in (i use xda 2013 1024)
also try a different browser
if they dun work.. jst dun blame me i tried
Click to expand...
Click to collapse
I think it has to do something with cookies. I set my browser (Firefox) to delete cookies after each session. If I close the browser and get to the site, I have to login again.
If I quit the firefox process using the task manager on Linux, I am signed in.
doctor_droid said:
make sure ur browser has no setting to autoclear cookies (i dun know it has something to do wid cookies or not )
also try a different xda theme before u log in (i use xda 2013 1024)
also try a different browser
if they dun work.. jst dun blame me i tried
Click to expand...
Click to collapse
I use Chrome, I don't remember making changes, but that might have happened over the last upgrade. So I made a few changes myself, and I will see if that helps. But thanks for the idea's.
Am using chrome here too and it also happens with me
Will try the suggestions though
Seraz007 said:
Am using chrome here too and it also happens with me
Will try the suggestions though
Click to expand...
Click to collapse
Funny, I got here fine. But if I use my bookmark, I will have to logon again. I think it has to do with Chrome.
Oditius said:
Funny, I got here fine. But if I use my bookmark, I will have to logon again. I think it has to do with Chrome.
Click to expand...
Click to collapse
ha same here
i bookmarked it as well
Same on aosp browser using bookmark.
What's weird is if I open a link in a new window once I'm on xda, that page will be signed in, or after a few pages.
I created new bookmarks but it's the same.
Well, the problem has seem to go away. At least for the last couple days.
Not for me, problem is still here, tried deleting cookies etc.
Problem here for me on chrome too
Sent from my Nexus 4
Nigeldg said:
Problem here for me on chrome too
Sent from my Nexus 4
Click to expand...
Click to collapse
Me, too, but only on the top level device forums...when I drill down my login credentials appear.
Sent from my SCH-I545 using xda premium
Hello. Newbie here. Sometimes I'm signed in when I load the forum page, but many times I'm not. It seems to me that it occurs when some time passes, but I'm not quite sure yet.
I have the same problem. It would reguide me to http://forum.xda-developers.com/index.php?nocache=1 after I logged in.
Same problem here. On chrome too.
Have XDA in my bookmarks bar and every time I click it, I will be logged out although I checked remember me on my previous login. Only happens with XDA, not with any other site. However, I dont have to always log back in again, if I flick through the website, on most threads it will show me as logged in but sometimes on some pages it will show me as logged out.
Strange
I am having this same exact problem. I can replicate it on multiple computers. Very annoying!

[Q] cleanup browser search history

Hi guys,
I have noticed I tend to accumulate a lot of search history when using the internet browser (stock)
I have a T-Mobile Stock (rooted) GS4 and want to find an app from the market, or anyplace,
that can clean the search history for me using one button execution.
All the "history cleaners" I have tried, say they cleaned history, but soon as I open the browser and type something the old searched items are still showing up.
I'd be most appreciative if someone could point me to the solution other than manually deleting each day of history searches!
Mahalo!
Try clean master the masterpiece according to me....
Sent from my Xperia U using xda app-developers app
Cache mate seems to do it
Sent from my SGH-M919 using xda app-developers app
Just turn on incognito mode next time you're looking at porn
Sent from my SGH-M919 using Tapatalk 4
bfranklin1986 said:
Just turn on incognito mode next time you're looking at porn
Sent from my SGH-M919 using Tapatalk 4
Click to expand...
Click to collapse
Too much work man.
Exel said:
Too much work man.
Click to expand...
Click to collapse
+1 to the above, and the other two previously mentioned don't do the job. Try searching for something and then close browser.
re-open browser and as soon as you touch the search line the same search item is there below!
Clean using the apps mentioned, and still they appear again... not working..... :<(
Is there anyone who knows of an app that will clean the search history?...........
Thanks tho, guys!
bobolinko said:
+1 to the above, and the other two previously mentioned don't do the job. Try searching for something and then close browser.
re-open browser and as soon as you touch the search line the same search item is there below!
Clean using the apps mentioned, and still they appear again... not working..... :<(
Is there anyone who knows of an app that will clean the search history?...........
Thanks tho, guys!
Click to expand...
Click to collapse
How about History Cleaner:
https://play.google.com/store/apps/details?id=mobi.infolife.eraser
Has a Browser history record erase option.
In addition, it has a Widget which you can setup and decide which files are cleaned:good:
I'd post a screenshot, but all of a sudden am unable to upload attachments from my S4 for some reason. Files won't attach.
The Playstore has images which show the Browser History option.
I use the app myself, in addition to a different browser which has the option to erase history when exiting.
Biker1 said:
How about History Cleaner:
https://play.google.com/store/apps/details?id=mobi.infolife.eraser
Has a Browser history record erase option.
In addition, it has a Widget which you can setup and decide which files are cleaned:good:
I'd post a screenshot, but all of a sudden am unable to upload attachments from my S4 for some reason. Files won't attach.
The Playstore has images which show the Browser History option.
I use the app myself, in addition to a different browser which has the option to erase history when exiting.
Click to expand...
Click to collapse
History cleaner does not do anything when it comes to browser history.
Thanks!
bobolinko said:
History cleaner does not do anything when it comes to browser history.
Thanks!
Click to expand...
Click to collapse
I hear ya. Here's a partial description from tthe apps site:
"It's a history eraser for android device, and it can clean history of apps by only one tap. It's similar to the "ccleaner" on PC. It can help you to protect your privacy, and it can also help you to free up the internal storage. No root premission required!
Feature:
★Clear Browser History
★Clear Call Log
★Clear text messages
★Clear Market Search............"
Maybe if you contact the Developer, he can explain or offer a solution as to why the Browser History isn't being erased, even though the description describes this as a feature.

Change default download app (sound easy, right?)

I have ADM (advanced download manager) and it works great. But sometimes the links in pages don't get grabbed by ADM and the browser starts the transfer.
I'm pretty sure it's the stock app for the M9 because this happens with all installed browsers (6)
The aim is to have ADM download all apk files, regardless of browsers used.
Huge thanks for solving this
Sent from my HTC One M9 using Tapatalk
I want to stop this from happening..
So ADM takes over
Make sure auto intercept links is on in administration and story sharing the link to the app if that happens..
shivadow said:
Make sure auto intercept links is on in administration and story sharing the link to the app if that happens..
Click to expand...
Click to collapse
Yes it auto intercepts most files, but not all .apk files
The sites give a gibberish address that a simple copy paste won't work.
I want ADM to grab the coded .apk file within the URL and not directly copy paste.
However, I'm having trouble explaining and understanding your post..sorry
Sent from my HTC One M9 using Tapatalk
I have ADM with no defaults set
Sent from my HTC One M9 using Tapatalk
Clear the defaults for chrome then try the link again.
shivadow said:
Clear the defaults for chrome then try the link again.
Click to expand...
Click to collapse
I have before but this is another issue from the browser
This is what I'm trying to disable, redirected to ADM
I understand what you mean, you want the downloads to be handled by only adm. The problem is that my adm seems to work fine but sometimes it won't pickup links as it should.
If you're having the problem of adm not kicking in at all i recommend uninstall and reinstall. Also, not accusing you of anything here, the proper Google play version will probably work better than a version downloaded from elsewhere.
It might be worth paying attention to what type of files and which type of website server (https or https) that it happens on. If you can post a link I can work with it would help a little.
Yep, I was using adm from another market. I'm using the google play version now and the problem still persists.
Here's the link of the culprit in subject. http://bit.ly/2qyTtzs
But as you will no doubt get the same result as you mentioned about adm not handling all generated links.
Christ I'm stoned @[email protected]
Sent from my HTC One M9 using Tapatalk
Regardless, unsolved at this time
Definitely stumped me.. Cant get adm to work with that link whatsoever.
shivadow said:
Definitely stumped me.. Cant get adm to work with that link whatsoever.
Click to expand...
Click to collapse
What about a logcat? idk
2ISAB said:
What about a logcat? idk
Click to expand...
Click to collapse
It will be an issue with adm. You're best bet us to approach them via the contact link in Google play. Give them all the information you have and the link to test with.
shivadow said:
It will be an issue with adm. You're best bet us to approach them via the contact link in Google play. Give them all the information you have and the link to test with.
Click to expand...
Click to collapse
Seems like one of the few options...
Anyways, I'm making progress with IDM+
through their browser. Just wondering if you've played with idm
UPDATE.
Just remove storage access to the browser.
Figured it out by fluke Just now ?
Sent from my HTC One M9 using XDA Labs

Categories

Resources