

Package:/system/app/AutoDialer/AutoDialer.apk=com.example Pm list packages -f (only showing some interesting packages): Using pm list packages -f I determined that is install in /system/priv-app/Kyz2203 with the data in /data/data/. These could be candidates (spoiler - they are). I found two interesting looking processes and android.hb.uys.pbuild looking at the SeLinux context they seem to be platform apps (u:r:platform_app:s0). Installation is blocked by Google Play (verified apps I assume).

Judging by the task bar there still seem to be a number of apps running but checking via Settings/Apps and on the filesystem (/data/apps) no apps are installed.Įvery now and then a pop-up appears that looks like a 3rd party market trying to download and install apps. Removing the app didn't seem to do anything. I tried Googling the package name but without success. I found one app that I didn't install (), I uninstalled it via adb uninstall. Part 1, observations and hoping for an easy way out: Luckily I had some time on my hands to investigate. Returning back from my Holiday trip I was greeted by overlay ads once again. This solution worked for a couple of days. The "fun part" was using google translate on my phone to navigate their app market app.- Collin Mulliner December 14, 2018 Apps that are flagged by google play as "ad-fraud". I bought this Chinese Android tablet (yellyouth) for a project and it randomly installs apps in the background. All of this using Google Translate on my phone. I ended up navigating the menu of what looked like a 3rd-party app store to uninstall an app named Retipuj that was flag by Google Play for ad-fraud. This got more complicated since all of it was in Chinese. I didn't have time to investigate so I just tried to close the apps and ads.

After a couple of days (or weeks?) suddenly some overlay ads and warnings from Google Play about malicious apps appeared. In November I bought a cheap Android Tablet for a wall-mounted display (see this blog post: Android InfoPanel).
