NEW Spam/Malware com.dti.blu aka Mobile Services - Blu Vivo XL

NEW ? Spam/Malware com.dti.blu aka Mobile Services
although... while MalwareBytes doesn't considered unwanted notifications malware...
they call them PUPs Potential Unwanted Programs..
But I call them Malware.
It looks like.. on Nov 8th app-blu-release.apk was downloaded and installed
Not sure what it is/was.
Today.. I got a notification for something like this "Blu wants you to come enjoy games..."
long press the notification.
"Mobile Services" com.dti.blu Updated October 27th.
searching the internet.... I didn't find anything of importance..
I don't want to delete it immediately at this time.. not exactly knowing what it is or does..
other than the Spam/Malware intrusion.
I did force stop it.
So.. if anybody has any info on the apk.. please chime in.
It might be very similar to the situation in the thread below which can be resolved once I know what the APK is...
The thread below.. titled "Android Tools" stock app ? I keep getting push notifications..."
https://forum.xda-developers.com/vivo-xl/help/android-tools-stock-app-getting-push-t3752075
thanks group..

Got an unauthorized download of Gamehub or similar last week and deleted it. Got the same notification about being invited to play games today. Uninstalled Mobile Services updates and then disabled it. No problems so far. This appears to be more crap from Blu masquerading as Google mobile services. It's not a Google app.
I finally fought off the auto downloads and constant notifications resulting from last November's Marshmallow upgrade around March or so. Now it's starting up again. Is November Blu's f with our customers month?

This " com.dti.blu " is definitely a malware it keep installing random games such as Candy Crush Saga, FarmVille 2: Country Escape , Move the Block : Slide Puzzle ... etc
i try uninstalling it with
Code:
adb shell pm uninstall --user 0 com.dti.blu
everything works well but upon looking on apps list it is just disable but it's file size keep getting bigger in real time like it downloading itself again
This is the last time im buying BLU phone

I have a BLU V5 (box says V5, reports G5 in the phone). I'm not getting any unwanted ads or downloads, but It has been slow since the day I got it, and lots of RAM used up even when I'm not doing anything and Android doesn't report what's using it.
Last night, I decided to adb it and found com.bluproducts.activationapp and com.digitalturbine.blubar. I couldn't find anything online on com.bluproducts.activation app, but com.digitalturbine.blubar was definitely an ad service, so I uninstalled from adb. Instant speed improvement.
This morning, I noticed it was slow again, when I used adb, I found a new package that wasn't there before, com.dti.blu. So I uninstalled that, and as soon as I did, com.digitalturbine.blubar re-appeared. I uninstalled that and now I decided to also uninstall com.bluproducts.activationapp. I don't know what's causing these to reinstall. I'll see if it's back tomorrow. Anyone know for sure how to keep these packages from re-installing?

Related

[Q] Marketplace app NOT in marketplace anymore?

Hi,
Just got my NoDo about five hours ago, then almost 7 trial apps and games have been prompted by the tile to be updated:
1. Need for Speed
2. Doodle God
3. oh, I can't remember the rest
but one thing is certain, after the download and update of the apps, everything was removed from the live tile except 1: Doodle God. Now I remember posting this as annoyance whenever I update some apps and still warns me to update when I was at 7008(pre NoDo). I was answered back then that if the app is purchased (non-trial anymore) the update gets done and it won't appear again. Another thing is try to uninstall the trial app and install it again. That way you would install the latest updated trial-mode of the app.
That is what I was about to do to the Doodle God game, I uninstalled it and wanted it to buy for good. I am hesitant to buying it before since it only has one profile, which means only one person can play.
Now, I can't find Doodle God anymore, I tried using the developer site but the wp7 download link gives me the marketplace where it should suppose to have a try & buy button but the buttons are not there. The thumbnail and description of the game and the "show details" is there but there is just no download, try, or buy button.
Now I don't know if it was officially gone from the marketplace since I can't find it scrolling down to almost every game there is.
Is it just the post NoDo thing or what?
I had that happen to me a few times with certain apps (long before nodo), in that it wouldn't show a Try or Buy button.
The workaround that I figured out, is to open one of the thumbnails of the app, maybe swipe to a second image, then hit the back button. All buttons would then appear.
Haven't had to do that in a long while though, your results may vary.
But yeah, I don't see it anywhere. Could have gotten pulled for a number of reasons.
Trying to download it through Zune states "Bad Application Info"
So who knows. Would suck if it got pulled, looks like a cool game.
I'm trying to do it to the point that I wanted to reset my phone. The only thing that's keeping me from resetting it is the sms backup and restore, which wp7 currently doesn't have.
and yeah it's a cool and an addicting game. thanks

SystemUpdates App Self Installed

So in perusing my apps in the Play Store the other day, I noticed an app called SystemUpdates by chondong. I've never installed this app and there is no option to uninstall it.
It was created and forced into my phone on June 15.
I don't buy for one second that this is a system update app as the phone had the ability to search for and receive OTA updates prior to this being installed. The only description in English says "Update update the internal system of the application" (yes, it says update twice).
This is a Chinese phone and I'm very skeptical of what this app is.
Permissions are intrusive as well; see screenshots.
Any thoughts on this? Reading the feedback on the app, I'm not the only one concerned about this and it appears it doesn't only apply to ZTE, but other Chinese phones as well.
Let's keep this thread alive until someone can answer...
I just noticed the same app on my Axon A1R. One difference though - mine says it is produced by ZZte.
I have no idea when the app was installed (for sure less than 3 weeks ago - I know I went though all my apps because I was having WiFi issues and wanted to make sure it wasn't caused by a random app I'd downloaded). There is no way to uninstall it. I managed to disable it - but that just made the 'System updates' section disappear in the Settings>About Phone menu.
I'm starting to think that installing a mod OS published by some random person might be safer than using the Google approved, ZTE modified and FIDO distributed OS.
TX-Brad said:
So in perusing my apps in the Play Store the other day, I noticed an app called SystemUpdates by chondong. I've never installed this app and there is no option to uninstall it.
It was created and forced into my phone on June 15.
I don't buy for one second that this is a system update app as the phone had the ability to search for and receive OTA updates prior to this being installed. The only description in English says "Update update the internal system of the application" (yes, it says update twice).
This is a Chinese phone and I'm very skeptical of what this app is.
Permissions are intrusive as well; see screenshots.
Any thoughts on this? Reading the feedback on the app, I'm not the only one concerned about this and it appears it doesn't only apply to ZTE, but other Chinese phones as well.
Click to expand...
Click to collapse
It looks to me that you need to do a factory reset, and discontinue installing non-play store apps.
If you did indeed get it from the Play Store, then report it to Google, so it won't be there anymore.
But I find it really hard to believe it came from the Play Store, as Google does a lot of testing of new apps.

TouchPal Emoji App Hijacking ZTE Phones With Ads?

So within the past week or so one of the apps on my phone has been causing Ads to appear on my phone regardless of where I am on my phone (home screen, various apps, etc). They just start appearing. I figured my phone was infected because I've never seen this before. I started to go on Google's playstore and search for every app on my phone and check reviews. I figured whatever app was the culprit would have tons of 1 star reviews very recently. I searched for "TouchPal Emoji" and there's all the 1 star review saying they are getting ads on their phone.
This app was added to my ZTE Axon Pro by default. I'm not sure if it can be entirely removed from the phone either. I don't see it in my app list anymore but I'm not sure if its entirely gone. Anyone else experience this?
I had this as well, and went through my apps... I suspected the Touchpal - disabled it, and saw the side icon disappear (it was asking to install a game as well as the ads) trying to remove it - it would not let me - but asked if I wanted to roll back to the original touchpal. Did that and left it disabled.

"Android Tools" stock app ? I keep getting push notifications...

"Android Tools" stock app ? I keep getting push notifications...
I searched a bunch and couldn't find any info on this...
It has the "android icon".... you can not block notifications
I have the phone for over a year, Marshmallow.
Not rooted, or else I could investigate more about it.
This started about a month or so ago.
First push was for some "Solitare" type game or something.
Now everyday almost 12 hours apart (4am-5am) and then in the afternoon...
OR when I plug the phone in to charge (4am-5am) I get a push notification.
The push is for an app TopBuzz.... ("personalized news just for you..").
If you long press and hold, on the notification... it "changes" and says "Android Tools".
Android Tools Version 3.1.1.311
There is no "block notification" toggle.. only "Enable for important..."
I don't know if something hijacked the "Android Tools" app that displays when you do the long press hold on the push notification of "TopBuzz" app install.
If you do click on the notification... the TopBuzz app installs instantaneously... no download.
I removed it.
In my Google account(s) I have, and had, all and any type of "feed" disabled...
The only "sketchy" thing I have done... is I have on my old Lollipop optimus f3 phone.. a great app for exporting text messages. "Export Messages" by Dan Hintz (on Google Play). I works great.. love it (needed for work)
Now... Google says.. incompatible with all my devices.
I got a copy of it at ApkPure... and put it on my VivoXL.. and it works great.. like on the old phone.
I have been using it for 6months.. so.. I don't think it could be the recent push problem.
I ran Malwarebytes... and nothing shows up bad.
Last night... I installed AppBrain Ad Detector... it caught the push notification for TopBuzz.. didn't stop it..
But it does have a "toggle" to stop notifications from the "Android Tools"... so maybe that will work.
Is this "Android Tools" app a stock app... it looks like it is.
Why, if it is... pushing TopBuzz app notifications.
Thanks group.
of course... after I search for a week or so... and finally post a question...
Android Tools app is com.data.acquisition
while Malwarebytes did not flag it as a PUP...
I found something in this post... where there are people talking about something similar in BLU phones...
https://forums.androidcentral.com/ask-question/767820-how-do-you-get-rid-adware.html
half way down the page.. from a Malwarebytes representative is a snippet about an app..
different name but still under the package = com.data.acquisition
author: mbam_mtbr
"indeed a pre-baked system app on some phones manufactured by BLU. It is not unusual for this to happen from time to time on some of these budget devices. The apps in question fire.apk (package name com.data.acquisition) and ....."
So Android Tools looks like it is the same thing...
I am think maybe I can try
adb shell pm hide com.data.acquisition
and once again.. after weeks of searching... I don't know why I am finally see more info on this....
adb or debloater doesn't work... you get the same permissions error.
What I did do was in go to the app "Android Tools" (it is a systems app)
and I did the "uninstall updates"...
And it is gone.
BUT the package com.data.acquisition is now, or actually was
Android Communication Sync
so now I am see more info on the net on Android Communication Sync
from this thread... some interesting observations... for a fellow with a BLU Vivo 5R
https://www.reddit.com/r/Android/comments/6a705k/blu_vivo_5r_came_preinstalled_with_malware/
"I tapped on the notification and it led me to a APK install screen, asking me to allow unknown sources, and in the background the name of the app trying to be installed was "Android Tools". "
So... since I uninstalled updates for the previous "Android Tools"
it has reverted to Android Communication Sync, with the same package com.data.acquisition ....
We will see what happens.
I don't even remember clicking something trying to install Android Tools.
It would really suck if Android Communication Sync if this is another hijack of our phones like
com.adups.fota and com.adups.fota.sysoper
Well it's back late tonight the push notification for TopBuzz....
This reallllly pisses me off..
I put AppBrain Ad Detector in yesterday... hoping maybe I could block it...
But no success.
as mentioned above I had reverted back to the previous update of the app...
It just renames the app Android Communications Sync.
while the obvious problems of you/me not having control over this intrusion is disturbing...
What now with my information is being hijacked....
This is so wrong on so many levels....
I bought the phone from MicroCenter United States, in the store.
Not online.
System App
Android Communication Sync Systems App -> package -> com.data.acquisition
pushes Ad notifications (unstoppable)
pushed the app TopBuzz (notification on locked screen)
this had been going on for weeks, twice a day.
At one point Android Communication Sync updated itself and renamed itself "Android Tools"
I uninstalled updates "Android Tools" yesterday
Reverted back to name -> Android Communication Sync Systems
push notifications for TopBuzz app continued.
I let the app install, which was instantaneous, no download seemed to occur.
It seems it was already lucking on my phone.
I wanted to see if I would now start to receive other app push notifications.
From my readings, I feared I would eventually have to do a factory reset anyway.
To attempt to fix this problem... is the reason I took a chance on installing TopBuzz app.
Overnight I left the TopBuzz app on my phone.
This morning Malwarebytes informed me
malware Adware.Yemobi.a was on my phone.
I deleted TopBuzz this morning.
Rescanned with Malwarebytes.
Adware.Yemobi.a was still on my phone.
Deleting malware attempt
Notice: "Disable system app......
Android Coummunication Sync is a system app cannot be uninstalled..... "
Click Disable... goes to the app screen... cannot be Force Stop.
Now I have malware Adware.Yemobi.a unremovable.
As part of System app Android Communication Sync
I guess it is time for a factory reset.... but I fear the process will start all over again
with the System app
Android Communication Sync Systems App -> package -> com.data.acquisition
Same problem here
I'm having the same problem on my BLU One Life X. Bad news is I already did the factory reset and it came back. Started with TopBuzz notifications but since then has had others as well. Everything is same as you described. I'm not a developer though and don't really understand all the background stuff. Just looking for a solution. My wife's BLU phone is also having the same problem. If you find a solution please post! Thank you for the information you've shared so far.
I am not a developer either... although done some rooting but not this device.. or yours.
Get the app Malwarebytes.. it is a security scan... it's free. And do a scan.
you will probably have the results as I posted on this thread over at the Malwarebytes forum...
https://forums.malwarebytes.com/top...-android-communication-sync-malware-push-ads/
See my second and further posts... and the response from Malwarebytes
When you install Malwarebytes... you will be at the Dashboard.. click the "Menu" the three lines top left...
Under App Manager...
Click Your Apps
Click (on the top) System Apps
look down and see if you have "Android Tools" installed..
OR... "Android Communication Sync"
Actually... "Android Communication Sync" updates to a renamed "Android Tools"
Both are the same... and from what we have figured out the problem.
Malwarebytes will show them as Adware.Yemobi.a
The above System Apps (actually same app) cannot be deleted.
(read my post(s) and the answer from Malwarebytes in the link I posted above, as as they mentioned and you have learned a factory reset does nothing.)
Malwarebytes.. and probably other virus scanners don't consider these as viruses...
BUT call them PUP's "Potentially Unwanted Programs."
I considered what BLU has done, with this Adware, is a complete violation of just about any consumer laws that are out there between buying a product/manufacture and the consumer.
I installed the TopBuzz app, ran a Malwarebytes scan... but they all point to the apps I mentioned here with the Adware issue (PUP).
I deleted the TopBuzz app shortly after the scan.
Approx... after installing TopBuzz app and deleting.. February 20th...
I had been clean from these Adware notifications until today... when... just by coincidence you posted your response.
Today I got a push Adware Notification for some "Pedometer" app.
I clicked it.... nothing seemed to install.
BUT... on my phone... the TopBuzz app... and mentioned "updated" problem App I mention in this post...
AND NOW.... what appears to have been downloaded some file... which I guess is related to the "Pedometer" app I clicked...
ARE in a folder called Mydownload.
I had discovered the TopBuzz App... and the "updated" problem App... in the Mydownload. folder previously.... and thus deleted them.
The "Pedometer" file didn't look like an App file... but I knew it just showed up today.
Deleted it.
I now this is confusing and sucks big time.
Look in Mydownload folder... and delete anything you haven't downloaded.
and look in your other Download folders... and delete anything you didn't download.
While I don't think this is a solution.. at least that crap won't be there anymore.
Does clicking on these Adware Push Notifications like TopBuzz... Pedometer... make them go away ?
Yes... and NO.... as demonstrated that I got the Push Notification Pedometer App today.
TopBuzz app kept coming and coming twice a day....
TopBuzz stopped after I installed and deleted it... weeks ago.
the Pedometer app (today)... well we will see what happens... I clicked it... didn't see a download... but there in Mydownload folder there was a new file... could have already downloaded.. and maybe the actual Push Notification.
I bought my phone from a reputable computer store, brick and mortar, MicroCenter.
This situation really bothers me... and, as it seems it will continue... probably be contacting my States Attorney General, and the Florida State Attorney General (where BLU is headquartered in the U.S.)
Along with notifying MicroCenter to pull all the BLU phones.
I haven't researched this topic since February 20th.... when shortly after... the problem went away.
I thought it was something that I had done... but obviously you have found the same problem.. which started with the TopBuzz App Push Notifications.
Obviously.. I can't recommend installing the TopBuzz App, and then installing it.
And if that will make the notification go away.
If you do.. make sure you delete it in your Mydownload folder, or in an other Download folder.
And the new "Pedometer" App Push Notification today.. if for me it will come back or what is next.... ???? after I clicked the notification and deleted the file in Mydownload folder.
Definitely install Malwarebytes (free trial Pro Version... even after the trial the basic version is still great).
Malwarebytes has a computer version too which I highly recommend and used for years... free or paid version both great.
You could also try this app AppBrain Ad Detector... although it didn't seem to stop
the System App we/I have been talking about.. "Android Communication Sync" or the update to a renamed "Android Tools"
The AppBrain Ad Detector clearly shows the System App mentioned as the culprit.
https://play.google.com/store/apps/details?id=com.appspot.swisscodemonkeys.detector&hl=en
at least it might show something else you can block
Maybe we can both call the BLU company tech support... and complain...
Reporting BLU
I am having the same issues on a BLU Life One X phone.
My issue with these guys has been going on since last summer. They forced an update on my phone and broke most of the functionality. Widgets are broken, most apps do not run, and the memory is 50-70% taken p by the OS/android/UI crap. I have gone through forums, Google support, and BLU support. BLU offered no help or suggestions at all and instead, gave me a price list for new phones. This happened days after my warranty expired.
Now this adware/spyware is infected my phone since Dec 10, 2017. Maybe earlier because I have factory reset my phone a couple times now. I have tried rooting my device but no software I have found can do it. Kingroot, Kingoroot, dr.fone... all failed. The rooting attempts were in response to this adverts/notifocations.
On top of this, my phone randomly has notifications saying "installing ..." and some app I have never heard of, like this pedometer and topbuzz, but once it completes it disappears. I cant find it in my apps, and it never says "Install finished" like regular apps do when they install/update. This is sketchy ****.
I have reported BLU to the anti-fraud center and also to Amazon, where I bought this phone. They have purposefully, and forcefully degraded the performance of my phone then told me to buy a new phone from them, and they are potentially stealing all my data/private information through their sketchy system apps.
found this app on my mom's phone some time ago. adb command "adb shell pm uninstall -k --user 0 com.data.acquisition" worked for me.
adb command?
Soffff10 I don't know what an adb command is or how to run one. Can you post more directions please?
That does it
soffff10 said:
found this app on my mom's phone some time ago. adb command "adb shell pm uninstall -k --user 0 com.data.acquisition" worked for me.
Click to expand...
Click to collapse
FWIW that command did the trick for me. Thanks!!!!!
soffff10 said:
found this app on my mom's phone some time ago. adb command "adb shell pm uninstall -k --user 0 com.data.acquisition" worked for me.
Click to expand...
Click to collapse
FWIW, that command did the trick for me as well.
This all just started. Mine were "Facebook" ads (an app I DON'T have). I am sure this unique to BLU phones (I have BLU Life One X2). "Android Tools" - yeah right.
Very cool this works, was really starting to piss me off.
soffff10 said:
found this app on my mom's phone some time ago. adb command "adb shell pm uninstall -k --user 0 com.data.acquisition" worked for me.
Click to expand...
Click to collapse
@soffff10 Thanks brother. Yes success !
Interesting that I had not found that before in doing my research... I had tried other adb commands but just didn't have the exact command line for success.
Nor was any information exactly pertaining to your command line suggested over at Malwarbytes... when I had posted a question there.
Thank you for supporting the community with your participation, as it will help others.
Have a great day.
YES!
soffff10 said:
found this app on my mom's phone some time ago. adb command "adb shell pm uninstall -k --user 0 com.data.acquisition" worked for me.
Click to expand...
Click to collapse
Worked for me too!!! Thank you so much!!!:good:

getting spam all the time on a new setup s10

hi all,
i bought a new s10 a couple of weeks ago and after setting up everything and installing all of my apps which come from the playstore I am randomly receiving spam whenever i unlock my phone or during the use of whichever app.
what happens is that either chrome or (after i have uninstalled chrome) the samsung browser came in front and opens some **** websites..
i hope someone can give me some advice/hint where to look at, before i have to resignate and start by scratch.
what i already tried, is to uninstall a lot of apps i could have imagined to be the culprit and i also installed things like airpush detector, hoping they could find something.
PS: sorry if posted this thread in the wrong section. did not know where to put at all.
thank you and regards
---
problem solved.
malware found and deleted.
I found this article...
What you have to do is… go to the Settings followed by Application Manager or Apps here you will find a list of all the installed apps in your android phone. So scroll downwards and you will find an Unnamed App with no thumbnail installed in your phone… most probably this app appears at the last of the list. Just uninstall this app and you are all set. All thing become normal and avoid installing apps from any of the unknown resources.
Here is the full page.
https://www.quora.com/Every-time-I-...hus-more-tabs-open-every-time-Is-this-a-virus

Categories

Resources