Android机子刷机，遇到个频率（几秒一次）弹广告的内置流氓软件，作为service运行，可以进程保活，也就是强行关闭进程，它可以重新启动，非常恶心，时不时就来一个全屏广告，自动下载其他的apk安装包，自动安装。电脑管家是识别为木马的。
看了一下他的 AndroidManifest.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
| <?xml version="1.0" encoding="utf-8" standalone="no"?>
<manifest xmlns:android="http://schemas.android.com/apk/res/android" package="com.xym.ma" platformBuildVersionCode="19" platformBuildVersionName="4.4.2-1456859">
<application android:icon="@drawable/ic_launcher" android:label="xym" android:name="com.xym.ma.a">
<activity android:exported="true" android:name="com.xym.ma.b" android:screenOrientation="portrait" android:theme="@android:style/Theme.Translucent"/>
<meta-data android:name="googlepotatooid" android:value="712c9cef25b42dc4"/>
<meta-data android:name="googlepotatoo_channel" android:value="ch0117"/>
<meta-data android:name="googlepotatoo_jd" android:value="true"/>
<activity android:name="com.zuhn.mkn.d.a" android:screenOrientation="portrait" android:theme="@android:style/Theme.Translucent.NoTitleBar">
<intent-filter>
<action android:name="com.zuhn.mkn.activity"/>
</intent-filter>
</activity>
<service android:exported="true" android:name="com.zuhn.mkn.b.a"/>
<receiver android:name="com.zuhn.mkn.a.b">
<intent-filter>
<action android:name="android.intent.action.BOOT_COMPLETED"/>
<action android:name="android.net.conn.CONNECTIVITY_CHANGE"/>
<action android:name="android.intent.action.USER_PRESENT"/>
<action android:name="com.zuhn.mkn.destory"/>
</intent-filter>
</receiver>
<activity android:label="JDBrowserActivity" android:name="com.jd.jdadsdk.JDAdBrowser" android:screenOrientation="portrait" android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<service android:exported="false" android:name="com.qq.e.comm.DownloadService"/>
<activity android:configChanges="keyboard|keyboardHidden|orientation|screenSize" android:name="com.qq.e.ads.ADActivity"/>
</application>
<uses-permission android:name="android.permission.ACCESS_FINE_LOCATION"/>
<uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED"/>
<uses-permission android:name="com.android.launcher.permission.UNINSTALL_SHORTCUT"/>
<uses-permission android:name="android.permission.READ_PHONE_STATE"/>
<uses-permission android:name="com.android.launcher.permission.INSTALL_SHORTCUT"/>
<uses-permission android:name="android.permission.SYSTEM_ALERT_WINDOW"/>
<uses-permission android:name="android.permission.ACCESS_WIFI_STATE"/>
<uses-permission android:name="android.permission.ACCESS_COARSE_LOCATION"/>
<uses-permission android:name="android.permission.GET_TASKS"/>
<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE"/>
<uses-permission android:name="android.permission.INTERNET"/>
<uses-permission android:name="android.permission.MOUNT_UNMOUNT_FILESYSTEMS"/>
<uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE"/>
<uses-permission android:name="android.permission.READ_CALL_LOG"/>
<uses-permission android:name="android.permission.READ_SMS"/>
</manifest>
|