Gizmos Freeware Reviews  

Go Back   Gizmo's Freeware Forum > Freeware Forum > Mobile Apps

Reply
 
Thread Tools Display Modes
Old 03. Aug 2017, 05:31 PM   #1 (permalink)
Senior Member
 
Join Date: Aug 2012
Posts: 193
Arrow This fully featured file explorer is free for a limited time

This paid file explorer has gone free for a very limited time. It has a PIN-protected access and an FTP server among other features. It works on Phones, Tablets and even Android based Smart TVs. Get your license fast. The offer is valid for a very short time.

https://play.google.com/store/apps/d...bitmanager.pro

Last edited by IO.Hazard; 03. Aug 2017 at 05:40 PM.
IO.Hazard is online now   Reply With Quote
Old 30. Aug 2017, 09:18 PM   #2 (permalink)
Full Member
 
UserError's Avatar
 
Join Date: Jun 2014
Location: Light of the South
Posts: 40
Default

Hi. I downloaded this back then. Now, more than 3 weeks later, I decided to install the free version of bitdefender antivirus to check my phone and this app was detected containing a malicious trojan named SLocker. 11 engines have confirmed this app as malicious too, according to virus-total. https://www.virustotal.com/en/file/d...is/1504123688/

Considering the permissions this app uses, including network and root privileges, I think is too risky to keep it installed. It may be free, but it comes at the cost of our device's security. Just my opinion. I thought sharing my experience would help.
__________________
Error Code 42: User Error. It's not our damn fault!
UserError is offline   Reply With Quote
Old 02. Sep 2017, 06:20 PM   #3 (permalink)
Senior Member
 
Join Date: Aug 2012
Posts: 193
Default

I uninstalled this app some days after I posted this and didn't have any idea about its malicious content. I just posted this thinking it could be a good deal for some people. Had no bad intentions at all.

I ditched antivirus apps for Android a long time ago as the new PlayStore built-in security mechanisms have improved quite a lot in the past years. Also, I didn't get any warning from the PlayStore when installing the app, and hasn't been removed either. My guess is this could be a false positive. That, or maybe the code has some unwanted content which triggers the alarms.

In any case, you're free to report any suspicious app in the PlayStore using the "Report" flag button and explain why you think it could be harmful so the folks at Google could double-check the app to confirm or discard your claim. Google removes several potentially harmful/malicious apps every week and users' reports help a lot.
IO.Hazard is online now   Reply With Quote
Old 04. Sep 2017, 12:03 PM   #4 (permalink)
Copy Editor
 
torres-no-tan-magnifico's Avatar
 
Join Date: Sep 2009
Posts: 1,101
Default

I uninstalled the app after Avast flagged it as containing malicious content: it may well be a false +ve but i wasn't going to take any chances. I have just reported the app to Goggle Play and so it will be interesting to see what they report back.
__________________
(Mx16 + Cx1 + Lx2) + (Tx5 + Nx2 + Bx33)
torres-no-tan-magnifico is online now   Reply With Quote
Old 04. Sep 2017, 08:17 PM   #5 (permalink)
Senior Member
 
Join Date: Aug 2012
Posts: 193
Default

Based on the VirusTotal link, I looked for some more information about the malware and this is what I found:

https://home.mcafee.com/virusinfo/vi...px?key=9609500

So yes, it has risky content. I'm deeply sorry about this. Thank you guys for reporting the app to Google and let's see what happens next. Sadly, the app is still on the Store, maybe the folks at google will take their time to check the app.
IO.Hazard is online now   Reply With Quote
Old 07. Sep 2017, 05:28 AM   #6 (permalink)
Full Member
 
UserError's Avatar
 
Join Date: Jun 2014
Location: Light of the South
Posts: 40
Default

Good thing both of you reported the app. I see there are too many apps with malicious code in the store although this one remains. Maybe just a false positive, we'll never know for sure unless we see some changes on the app description or it gets removed. I'll keep my antivirus installed for the time to come just in case.
__________________
Error Code 42: User Error. It's not our damn fault!
UserError is offline   Reply With Quote
Old 07. Sep 2017, 09:05 AM   #7 (permalink)
Super Moderator
 
Anupam's Avatar
 
Join Date: Jul 2008
Location: India
Posts: 15,121
Default

It seems like Google Play Store has started scanning the installed apps on the phone for security. I just checked to update apps on my phone today, and saw this new message that "No problems found. Apps scanned 6 days ago".

I checked that message and found it to be from Play Store.

So, it's good that Play Store will now scan the installed apps for security on a regular basis.
__________________
Anupam
Anupam is online now   Reply With Quote
Old 09. Sep 2017, 02:53 PM   #8 (permalink)
Senior Member
 
deya's Avatar
 
Join Date: Oct 2009
Location: UK
Posts: 1,345
Default

Interesting reading this. If this app is still available in the store does this mean that Google Play Protect doesn't work very well? .... regarding scanning apps. I was under the impression that even though Play Protect has recently become more visible, as Anupam pointed out, it has been in use for a long time in the background, so to speak, along with other security measures?

If this is the case, and you installed this app in August, then surely Play Protect isn't doing what it claims to do, by not flagging the app?

Genuinely interested and curious about this.
deya is online now   Reply With Quote
Old 09. Sep 2017, 04:30 PM   #9 (permalink)
Site Manager
 
MidnightCowboy's Avatar
 
Join Date: Aug 2008
Location: South American Banana Republic, third bunch from the left
Posts: 15,012
Default

Quote:
Originally Posted by deya View Post

If this is the case, and you installed this app in August, then surely Play Protect isn't doing what it claims to do, by not flagging the app?
IMO the whole thing with using Android powered devices is a bit like playing Russian roulette. On the one hand you have vulnerabilities that no one is going to admit to, plus 'security' software that quite clearly doesn't work as stated, but on the other there are known vulnerabilities that have been around for more than a year but never exploited. The driving factor in all of this, as with Windows, is that 84% of Android devices are not updated.

Just this week I learned from a contact at my Brazilian bank that someone has managed to break into their sms coding system for online transactions but they don't have a cue how or why because to date there are no reported exploits.

Suffice to say if you can 'connect' with it then someone will be looking to profit from this and many thousands of users all over the planet have lost either small sums or their whole life as a result.
__________________
Buy a Hoover and prove technology sucks.
MidnightCowboy is online now   Reply With Quote
Old 09. Sep 2017, 10:33 PM   #10 (permalink)
Senior Member
 
Join Date: Aug 2012
Posts: 193
Default

In order to provide a reliable statement, I just re-installed the app in question from my app library (Play Store > My app & games > Library). The installation went fine and didn't get a notification or warning from the Play Protect extension, so I assume Play Protect won't warn you against apps that remain listed on the Store as it might consider them safe, otherwise those 'flagged' apps would've been removed.

I uninstalled the app again as I wasn't eager to install an antivirus to confirm its malicious content (I trust BitDefender and Avira enough) but the question remains about how safe this app can be. Maybe there aren't enough reports about this app and the folks at Google are to lazy to investigate the app and its code. In any case. just because Google doesn't say anything it means everything is alright IMO.
IO.Hazard is online now   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



All times are GMT +1. The time now is 03:33 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2018, vBulletin Solutions, Inc.