Ok this has been happening recently and I can't seem to figure out why.
After installing an app in the app store, it automatically opens chrome (or default browser) and take me to ad.leadboltads.net.
I have tried running various malware software and ad finding software but nothing is standing out. I also tried uninstalling recent apps. I don't want to do a factory reset, but if nothing else works I will.
BTW...never been rooted.
Any ideas?
solved
I downloaded AVG and it found the culprit. It was crystal theme for next launcher. The mention ads in the play store description but at the bottom.
leadbolt bs
Thanks so much. This fixed my phone as well.
cd23murray said:
I downloaded AVG and it found the culprit. It was crystal theme for next launcher. The mention ads in the play store description but at the bottom.
Click to expand...
Click to collapse
AVG didn't do a thing for me.
Lookout Security & Antivirus found mine in ChargeBar Free Edition,
ChargeBar came embedded in the NottachTrix 2.3.0 ROM.
I installed it (NottachTrix) and it (ChargeBar) didn't update for 3 months, then, BANG.
I've deleted ChargeBar's update, moved it from system apps to apps, deleted it, and the browser pop open 'ad.leadboltads.net' still persists.
Lookout Security & Antivirus can not find the new location of the malware, they do not have a forum.
By the very definition and behaviour, this is malware, and, ChargeBar (Asgard Casino Apps) is involved in the distribution of malware.
Asgard Casino Apps distributes 34 apps that behave this way.
They are using Google to distribute this malware, abet, that app is benign in its origin, its a pipeline, or conduit for malware.
Sneaky F##kers aren`t they.........
#1) I would like to get this crap off my phone.
#2) I need to bring this to Google's attention, and have the developer banned from the Play store.
Sooo, starting with #1,,,how do I get this crap off my phone!
NOTE:
I will be linking to this post in the NottachTrix post, I'm asking the developers to to move ChargeBar from the ROM zip.
My MBAM forum post: https://forums.malwarebytes.org/inde...06#entry764184
Theme for NEXT the problem child
cd23murray said:
I downloaded AVG and it found the culprit. It was crystal theme for next launcher. The mention ads in the play store description but at the bottom.
Click to expand...
Click to collapse
Thank you....removed all but the stock themes I downloaded for NEXT and the problem cleared. Now when I update any of my apps my browser DOES NOT open to attempt to take me to "leadbolt.ads".....Thank-You!
I am having the same problem,I have scanned it with AVG and Lookout and can't find anything,it comes up when it installs or updates from google play...?
Yep found it it was a Galaxy S4 Next Launcher theme by BUTTERFLY,In Google Play they should have a warning notice up on apps that have adds like this "WARNING THIS APP HAS LEADBOTADS ADDS" No more themes for me.
Thank you guys so much that was the problem for me too. Crystal theme for next launcher.
I appreciate it!
Sent from my SM-N900T using XDA Premium 4 mobile app
Related
Something weird is going on and has been going on ever since I installed the Amazon App Store on my Cappy running the latest Serendipity rom. I've downloaded WeatherBug Elite and Shaazam when they were both the free paid app of the day through the Amazon App Store. They run just fine... until I reboot my phone. After every reboot, when I go to open either of those two apps I get a force close popup saying that there has been an unknown error with the Amazon App Store and that I need to reinstall the app (that I was trying to open). So I uninstall, go back into the Amazon App store and re-download/reinstall and they work fine again until the next time I reboot or power cycle my phone. The apps load up and run for a few seconds before I get that popup. So far I've only noticed this with those two apps, the other ones I've downloaded through Amazon have been working fine.
I contacted Amazon App Store support via email, but they were not very helpful, they told me I should call them to "discuss the issue further". I don't like calling, that's why I emailed them in the first place!
Anyone else having this issue? Could it be caused by the hosts file? Thanks in advance for any help!
I also have this issue with both WeatherBug Elite and Shazam Encore. I actually uninstalled Shazam (at the time I noticed it) because I installed SoundHound Infinity.
However, I just manually rebooted my phone and, yes, my WeatherBug Elite came back with the error (after re-installing and setting it up).
I tested my other Amazon apps (Airport Mania: First Flight, Angry Birds Rio, Angry Birds Seasons, Diner Dash 2, Doodle Jump, Flight Control, Fruit Ninja, SoundHound Infinity, and Talking Tom Cat) and it's only the WeatherBug Elite and Shazam Encore.
I'm running a Droid X with Liberty 1.5 ROM.
The same here... any solution..??
Same problem...
Any news or ideas?
I've been afraid to reboot my phone because of this issue. I guess it's not that big of a deal to uninstall and reinstall two apps, but it's just so annoying. I'm going to download Ad-Free from Google Market later and revert my hosts file and reboot my phone, I'm not sure if that has anything to do with it but I'll let you guys know if it works.
Reverting the hosts file does nothing. I have to reinstall Weatherbug Elite and Shazam again for the 5th time! Ugh.
This is the reply I received from Amazon customer service:
I’m sorry to hear that you are experiencing problems with the Amazon Appstore for Android.
Based on what you described, I think it would be best to investigate this issue further. I haven't heard of this happening before, and we'd like to get more information from you so we can come up with a fix.
You can reach us by phone directly and toll free from many countries by clicking the Contact Us option on our Help pages at:
http://www.amazon.com/amazonappstore
Contacting us through the website allows you to verify security before a call is placed and ensures we have your account information ready when we call you. If your country isn’t listed or you’re unable to take advantage of the Contact Us feature, you can call us directly at 1-866-749-7771. Support for the Amazon Appstore is available between the hours of 6 a.m. and 10 p.m. PST, 7 days a week.
Click to expand...
Click to collapse
If everyone that is having the same problem is willing to take a little bit of time to tell Amazon that this isn't an isolated issue, they might look into further and offer us a solution. Here is the email: [email protected]
I am having the same issue. I did not realize that it was the reboot that was triggering it until I read this thread. Same two apps, Weatherbug and Shazam. The only thing that fixes it is to uninstall and reinstall.
I am running Serendipity 6.3 also.
I have the same issue with those apps running on Cog4.3
+1
Same here!!
same problem here in continuum 4
I found a fix, seems to be working
1. Delete Amazon App store from device (under Settings->Applications, "Clear Data" and "Uninstall")
2. Delete (deregister) all occurrences of device in question from Amazon profile (Your Account > Your Apps and Devices)
3. "Send Amazon App store to a new device" (since mine is a tablet, I sent it to my email)
4. Install Amazon App Store from this new delivery
5. Run App store and log in
Apps should work at that point.
(Note: some of those steps may be unnecessary overkill, but hey, it worked...)
Source http://www.amazon.com/Angry-Birds-l...Z8NXOSQLX3UV/1?_encoding=UTF8&asin=B004SBS8LA
agarp said:
same problem here in continuum 4
I found a fix, seems to be working
1. Delete Amazon App store from device (under Settings->Applications, "Clear Data" and "Uninstall")
2. Delete (deregister) all occurrences of device in question from Amazon profile (Your Account > Your Apps and Devices)
3. "Send Amazon App store to a new device" (since mine is a tablet, I sent it to my email)
4. Install Amazon App Store from this new delivery
5. Run App store and log in
Apps should work at that point.
(Note: some of those steps may be unnecessary overkill, but hey, it worked...)
Source http://www.amazon.com/Angry-Birds-l...Z8NXOSQLX3UV/1?_encoding=UTF8&asin=B004SBS8LA
Click to expand...
Click to collapse
Unfortunately, Shazam and Weatherbug Elite still crash on my device.
Red_81 said:
Unfortunately, Shazam and Weatherbug Elite still crash on my device.
Click to expand...
Click to collapse
do you guys have any start up managers? It seems that the issue all revolve around the amazon market place. Weather bug has always caused issues with every rom I have ever used so I just dont use it any more. I have no prob with Shazam
Nope. I use stock cog4.3 running overstock kernel. That is it. Nothing special here.
Sent from my SAMSUNG-SGH-I897 using XDA App
Could be rom related. Have you tried a different rom?
No but others on other roms have reported the same issues.
Sent from my SAMSUNG-SGH-I897 using XDA App
I'm on stock Froyo and now any app that I've downloaded from the Amazon app store wont open, including WB and Shazam, but also AB Rio, Backbreaker Football and Doodle Jump.So ROM is not the issue, AAS has messed something up.
This is why the amazon store will not be on my phone.
Sent from a Captivate on Bluedipity 6.4, Onix 2.0.5, JQ1 with Xda App
Hi all,
Sadly adaway has been removed from Google play today. I understand why Google done that but I think there will be more apps that start getting axed and there will gradually be less and less customisation to be done to android (my opinion).
What do you all think?
chrisastrous said:
Hi all,
Sadly adaway has been removed from Google play today. I understand why Google done that but I think there will be more apps that start getting axed and there will gradually be less and less customisation to be done to android (my opinion).
What do you all think?
Click to expand...
Click to collapse
I don't think other apps are in Danger unless they violate googles rule.. But there's always XDA
Sent from my Nexus 4 using xda premium
damn that sucks.. anyway here's a copy if anyone ever needs it.
Dev is already posting it im other places. All good. :thumbup:
From https://code.google.com/p/ad-away/
AdAway was removed from Google Play
I received an email from Google Play that AdAway was removed due to "Violation of section 4.4 of the Developer Distribution Agreement." Thus, it will never be available on Google Play again. Please switch to F-Droid, the open alternative to Google Play!
Allow app installs from 'unknown sources'
Download https://f-droid.org/FDroid.apk to your device
Install this apk
Open F-Droid and search for AdAway
This has nothing to do with the Nexus 4.
Closed
So in perusing my apps in the Play Store the other day, I noticed an app called SystemUpdates by chondong. I've never installed this app and there is no option to uninstall it.
It was created and forced into my phone on June 15.
I don't buy for one second that this is a system update app as the phone had the ability to search for and receive OTA updates prior to this being installed. The only description in English says "Update update the internal system of the application" (yes, it says update twice).
This is a Chinese phone and I'm very skeptical of what this app is.
Permissions are intrusive as well; see screenshots.
Any thoughts on this? Reading the feedback on the app, I'm not the only one concerned about this and it appears it doesn't only apply to ZTE, but other Chinese phones as well.
Let's keep this thread alive until someone can answer...
I just noticed the same app on my Axon A1R. One difference though - mine says it is produced by ZZte.
I have no idea when the app was installed (for sure less than 3 weeks ago - I know I went though all my apps because I was having WiFi issues and wanted to make sure it wasn't caused by a random app I'd downloaded). There is no way to uninstall it. I managed to disable it - but that just made the 'System updates' section disappear in the Settings>About Phone menu.
I'm starting to think that installing a mod OS published by some random person might be safer than using the Google approved, ZTE modified and FIDO distributed OS.
TX-Brad said:
So in perusing my apps in the Play Store the other day, I noticed an app called SystemUpdates by chondong. I've never installed this app and there is no option to uninstall it.
It was created and forced into my phone on June 15.
I don't buy for one second that this is a system update app as the phone had the ability to search for and receive OTA updates prior to this being installed. The only description in English says "Update update the internal system of the application" (yes, it says update twice).
This is a Chinese phone and I'm very skeptical of what this app is.
Permissions are intrusive as well; see screenshots.
Any thoughts on this? Reading the feedback on the app, I'm not the only one concerned about this and it appears it doesn't only apply to ZTE, but other Chinese phones as well.
Click to expand...
Click to collapse
It looks to me that you need to do a factory reset, and discontinue installing non-play store apps.
If you did indeed get it from the Play Store, then report it to Google, so it won't be there anymore.
But I find it really hard to believe it came from the Play Store, as Google does a lot of testing of new apps.
Idol 4 6055u hidden update last week and File Manager is now like a 'Clean Master' clone with all the clean-your-phone and boost-your-phone notifications spam. And since there's no way to root it the app is not removable.
Anyone had any luck stabbing this one to death?
Sucks right? Mentioned it in a thread I made a few weeks back:
https://forum.xda-developers.com/idol-4s/help/alcatel-phone-t3634870
If possible, uninstalling updates or disabling the app should revert the app to its pre-spam state. If not, disabling the apps and using a less invasive file manager app is an option.
Alternatively a factory reset will return all system apps to their pre-spammy state if I recall correctly. From there, you can just avoid updating that individual app.
macallik said:
Sucks right? Mentioned it in a thread I made a few weeks back:
https://forum.xda-developers.com/idol-4s/help/alcatel-phone-t3634870
If possible, uninstalling updates or disabling the app should revert the app to its pre-spam state. If not, disabling the apps and using a less invasive file manager app is an option.
Alternatively a factory reset will return all system apps to their pre-spammy state if I recall correctly. From there, you can just avoid updating that individual app.
Click to expand...
Click to collapse
Unfortunately you can't disable the app, even though it appears you can under dev options (tried that, it just updates itself in the background again). Have tried uninstalling (updates) but it updates itself again and the spam reappears. It also places a perma-notification (can't slide off) at the top of the notifications.
BUT: The latest update to File Manager allows you to turn off notifications. Problem solved.
NOTE: You do have to give permissions for storage before you can get into the settings that allow turning off notifications/shortcuts.
This is well-known problem, ads presents in all latest preinstalled Acatel's apps updates: File Manager, Sound Recorder, Weather, Launcher and others. All of them puts notifications with spam-news and in some cases tries to change default homepage of Google Chrome browser. To prevent this need to do the following things:
1. Uninstall all updates of these apps to revert it to stock-state.
2. Deny auto update of these apps in Google Play.
3. Deny auto update of system apps in standart Update application.
DeckerSU said:
This is well-known problem, ads presents in all latest preinstalled Acatel's apps updates: File Manager, Sound Recorder, Weather, Launcher and others. All of them puts notifications with spam-news and in some cases tries to change default homepage of Google Chrome browser. To prevent this need to do the following things:
1. Uninstall all updates of these apps to revert it to stock-state.
2. Deny auto update of these apps in Google Play.
3. Deny auto update of system apps in standart Update application.
Click to expand...
Click to collapse
Thanks, following these steps I think I got them tamed. Not all the apps show up in Google Play but disabling auto-update in 'Updates' (Alcatel's version) should take care of those...
yosemite610 said:
Thanks, following these steps I think I got them tamed. Not all the apps show up in Google Play but disabling auto-update in 'Updates' (Alcatel's version) should take care of those...
Click to expand...
Click to collapse
Several of Alcatel's Apps updates throught Google Play and other via Updates app. For example, sound recorder updates via Google Play. If it's already updated - just remove updates and Google Play app for Sound Recorder and forbid / deny future updates. In 'Updates' need to forbid updates of system apps too. I already done all of this steps for each preinstalled app which tries to update - all fine. There is no any unwanted push notifications.
Rip ._. I hate this phone so much.
They are pathetic. Updating all apps and adding ads to them.
DeckerSU said:
Several of Alcatel's Apps updates throught Google Play and other via Updates app. For example, sound recorder updates via Google Play. If it's already updated - just remove updates and Google Play app for Sound Recorder and forbid / deny future updates. In 'Updates' need to forbid updates of system apps too. I already done all of this steps for each preinstalled app which tries to update - all fine. There is no any unwanted push notifications.
Click to expand...
Click to collapse
Thanks for the tips and detailed info @DeckerSU. I had begun to prepare to unlock, root, and flash a custom ROM due to this adware and push notification nonsense. Up until the recent app updates, I had truly enjoyed the clean, stock android UI experience on my idol3 ... now I can relax again, the aggravation of those push notifications is gone!
DeckerSU said:
This is well-known problem, ads presents in all latest preinstalled Acatel's apps updates: File Manager, Sound Recorder, Weather, Launcher and others. All of them puts notifications with spam-news and in some cases tries to change default homepage of Google Chrome browser. To prevent this need to do the following things:
1. Uninstall all updates of these apps to revert it to stock-state.
2. Deny auto update of these apps in Google Play.
3. Deny auto update of system apps in standart Update application.
Click to expand...
Click to collapse
thank you, I hadn't thought of step 3
I signed in just to thank you
edit: just realized this thread is for idol 4s, but it applied to my idol 3..
I didn't realize this is a problem on later phones.. so messed up
Very bad, all those spamming programs on a phone we paid for. They beter come out with a recent
Android update. Its a Shame for the alcatel brand.
DeckerSU said:
This is well-known problem, ads presents in all latest preinstalled Acatel's apps updates: File Manager, Sound Recorder, Weather, Launcher and others. All of them puts notifications with spam-news and in some cases tries to change default homepage of Google Chrome browser. To prevent this need to do the following things:
1. Uninstall all updates of these apps to revert it to stock-state.
2. Deny auto update of these apps in Google Play.
3. Deny auto update of system apps in standart Update application.
Click to expand...
Click to collapse
Thanks for the tips! I was starting to think I would have to root the device... Very dissapointing to see this kind of behaviour from Alcatel
Cheers
It may be worse than you think!
It's bad enough for a SYSTEM app to be serving up potentially malicious advertising that could Pwn your device, but it ventures deep into dark waters if that SYSTEM app has the Facebook "Graph" API inside of it that could allow a developer (or in this case your Chinese phone manufacturer) to use your Facebook access token to pillage through your Facebook account and look through your photos, tags, pages visited, URL's, or even create Facebook posts or messages on your behalf!
Sound crazy?
Take a look at the Facebook "Graph" developer site for yourself:
https://developers.facebook.com/docs/graph-api/using-graph-api/
And if someone was familiar with some open source tools that could allow them to look inside an Android app:
https://github.com/iBotPeaches/Apktool
https://github.com/pxb1988/dex2jar
https://github.com/sreenivasmula/JDGUI
http://www.7-zip.org/download.html
That person might look to see if the app has the Facebook Graph API inside of it:
https://play.google.com/store/apps/details?id=com.jrdcom.filemanager&hl=en
Any one have a custom rom? Like Lineage or CM or AOSP any other one except the crapy stock rom?
Not good enough!
I no longer trust ANYTHING that is installed on my Alcatel device after the recent adware/spyware "upgrades"!
I installed TWRP and the (unofficial) Lineage ROM until I get a different phone all together.
https://forum.xda-developers.com/id...ficial-lineageos-14-1-idol36045x-5-5-t3615700
I will NEVER purchase another Alcatel device as long as I live and I will advise all my friends and family and anyone else that will listen to avoid Alcatel as well.
I also suggest that anyone with a stock Alcatel device not to use any "widgets" that create shortcuts that may use your access tokens for Facebook and/or Twitter until we know what is going on.
The Facebook Graph API on a native app has a greater access level than a web application and the token(s) don't expire for 60 days and can be extended.
I advise people to avoid logging in to apps or websites with their social media and/or Google credentials and to change your passwords and set up 2 factor authentication and remove any apps associated with your social media accounts.
Wtf
yosemite610 said:
Idol 4 6055u hidden update last week and File Manager is now like a 'Clean Master' clone with all the clean-your-phone and boost-your-phone notifications spam. And since there's no way to root it the app is not removable.
Anyone had any luck stabbing this one to death?
Click to expand...
Click to collapse
That update is from google play store! Not from alcatel.... Uninstall updates and don't let google play do whatever it wants in your phone!
That update is from google play store! Not from alcatel....
Click to expand...
Click to collapse
The update may have come the Google Play Store but is every bit Alcatel!
The "boost" function comes from TCL (Alcatel) owned Hawk app's "Super Cleaner" and the antivirus function comes from Hawk's Hi Security app that uses McAfee technology.
http://www.ehawk.com/en/
Can you help me to unlock a sharp phone?
DeckerSU said:
This is well-known problem, ads presents in all latest preinstalled Acatel's apps updates: File Manager, Sound Recorder, Weather, Launcher and others. All of them puts notifications with spam-news and in some cases tries to change default homepage of Google Chrome browser. To prevent this need to do the following things:
1. Uninstall all updates of these apps to revert it to stock-state.
2. Deny auto update of these apps in Google Play.
3. Deny auto update of system apps in standart Update application.
Click to expand...
Click to collapse
Can you help me to unlock a sharp phone?
I have the modem.elf file.
Following the advice on this thread, I was able to revert to the old versions of these apps back in October, and my phone stayed usable from then until about 2 weeks ago. Suddenly, the "updates" installed themselves (as part of a "critical system update" that I was notified my phone needed, and now, I don't have the option to uninstall the updates (or rather, it uninstalls to another spammy, bloatware version, not to the factory original).
Any ideas on what I can do now? Or is it time to throw this phone in the trash, and get one from a company that doesn't do this?
critical system update
Following the advice on this thread, I was able to revert to the old versions of these apps back in October, and my phone stayed usable from then until about 2 weeks ago. Suddenly, the "updates" installed themselves (as part of a "critical system update" that I was notified my phone needed, and now, I don't have the option to uninstall the updates (or rather, it uninstalls to another spammy, bloatware version, not to the factory original).
Click to expand...
Click to collapse
You have got to be kidding me!
Now Alcatel and McAfee are tricking users into installing their adware/spyware through the use of fake "critical update" patches?
I think it is high time to do a complete breakdown/inspection of the app and do a full public disclosure.
It isn't surprising that Alcatel would infect a users phone with adware/spyware but for a so-called "security" company like McAfee to be involved is both frightening and disturbing.
I'm having a problem with ads by google. I restored my note 8 from a note 4 and have all my apps that I've been using for years. Nothing new. Now with the new note 8 (unlocked version) I get a full page ad for the google app store about every 2 days, just some random app to download.
This shows up when I pick up my phone and unlock it.
So I've gone into the app store and made sure all notifications are off. I turned off all notifications from any app I don't need notifications from. I've gone into the google ad choices on my google account and turned off ad personalization. I've removed pretty much removed all the google apps except play store and play music.
I called Samsung and they had me remove my google account from the phone and reinstall it. I was told it will ask for permissions and it never did.
I'm ready throw this dam thing because I can't get the ads to stop.
Today I put it in safe mode to see if it happens over the next couple of days.
Any suggestions?
Thanks
What launcher are you using? The stock Samsung one? I never get ads in the home and lockscreen even back when I didn't habe an ad blocker installed.
You are getting a pop-up ad, then I don't think it has anything to do with notifications. I suggest you start uninstalling apps one by one until this problem stops. It is most likely an app on your phone doing this. Start uninstalling in the reverse order you installed them in. There will be a rogue app causing the problem.
I think I found the app. A network signal app that people complain about popup ads. Hopefully this is the issue.
thanks