Go Back   Android Forums > Android Phones > Samsung Galaxy S3

test: Reply
 
LinkBack Thread Tools
Old November 20th, 2012, 11:16 PM   #1 (permalink)
New Member
Thread Author (OP)
 
Join Date: Nov 2012
Posts: 2
 
Device(s):
Carrier: Not Provided

Thanks: 0
Thanked 0 Times in 0 Posts
Default Galaxy S3 owners, please help! Is this normal, or have I been hacked?

Alright, so I was browsing some potentially murky/unsafe websites on my Galaxy S3 when I had a horrible system crash, and ever since this crash I've noticed some strange things going on on my phone:

1. Everything is noticeably slower, and there are occasional 3-5 second freezes.

2. If I use OS Monitor to examine system activity, I always see a process listening on a bunch of ports like 55555 and 55556, but the name of this process is different every time I look.

3. If I go into Settings -> Application Manager -> All, click on the current name of the app listening on the ports above, and check its permissions, it always turns out that the app happens to have permission to do about 100 things, from "add or modify calendar events and send email to guests without owners' knowledge" to "directly call phone numbers", you name it -- way more permissions than even a typical system-level process.

SO, Galaxy S3 owners, I'd be eternally grateful if someone could go into Settings -> Application Manager -> All on their phone & check permissions on a few apps (listed below). Do they have 100+ permissions to do everything under the sun on your phone too?

Lcdtest
DttSupport
TMServerApp

I know these are legitimate names of system processes that are supposed to be present, but I'm paranoid that on my phone they might've been replaced with hacked versions. If someone could reassure me that they really are supposed to have permission to do literally everything to my system, I'd be grateful!

Advertisements
rv2012 is offline  
Reply With Quote
sponsored links
Old November 20th, 2012, 11:42 PM   #2 (permalink)
Senior Member
 
Musky's Avatar
 
Join Date: Mar 2010
Posts: 1,749
 
Device(s): Samsung Galaxy S3. Unrevoked Rooted Incredible (retired)
Carrier: Not Provided

Thanks: 400
Thanked 338 Times in 214 Posts
Default

On my phone they seem to have permission for everything, but I can't tell for sure because I don't know all of the permissions and some may not be listed.

But, I only have the first two you listed. I do not have "TMServerApp"
Musky is offline  
Reply With Quote
Old November 20th, 2012, 11:42 PM   #3 (permalink)
Junior Member
 
Join Date: Jul 2012
Posts: 50
 
Device(s):
Carrier: Not Provided

Thanks: 6
Thanked 1 Time in 1 Post
Default

I don't have Lcdtest, I do have DttSupport and it has lots of permissions, I also have TMServerApp, but it's not running.

Hope that helps, do you have anti-virus on your S3?
bigsmokefarmer is offline  
Reply With Quote
Old November 21st, 2012, 12:29 AM   #4 (permalink)
Member
 
Join Date: Jul 2012
Location: Vancouver, Canada
Posts: 226
 
Device(s): Samsung Galaxy S3 Blue International, Nokia N82 (ret'd)
Carrier: Fido

Thanks: 6
Thanked 23 Times in 18 Posts
Default

get some anti-virus software on your phone (then obviously scan your phone) or factory reset.
__________________
GT-i9300 4.1.1
GoldenDiamond is offline  
Reply With Quote
Old November 21st, 2012, 12:56 AM   #5 (permalink)
Senior Member
 
Join Date: May 2011
Location: Karachi, Pakistan
Gender: Male
Posts: 500
 
Device(s): Samsung Galaxy Note 3 n9005, Samaung Galaxy S IV i9500, Samsung Galaxy S3 I9300, Dell Streak 5,
Carrier: Ufone

Thanks: 98
Thanked 19 Times in 18 Posts
thahim.sd@gmail.com
Default

I have all three of them with lots of permissions.
thahim is offline  
Reply With Quote
Old November 21st, 2012, 01:13 AM   #6 (permalink)
Senior Member
 
Join Date: Sep 2012
Posts: 526
 
Device(s):
Carrier: Not Provided

Thanks: 36
Thanked 227 Times in 175 Posts
Default

I have all three and they all have an insane amount of permissions but I don't have any problems here, or none that are noticeable anyway.
Yatezy is offline  
Reply With Quote
Old November 21st, 2012, 01:55 AM   #7 (permalink)
Senior Member
 
Join Date: Dec 2011
Location: London, UK
Posts: 1,011
 
Device(s): Nexus 5, Nexus 7, Galaxy S3, Moto G
Carrier: 3 UK

Thanks: 37
Thanked 297 Times in 246 Posts
Default

If you aren't rooted, these system applications cannot be modified, so it's unlikely that you've been hacked. Tryba factory reset if your phone crashes a lot. By the way, what website did you visit?
sherlock5545 is offline  
Reply With Quote
Old November 21st, 2012, 01:56 AM   #8 (permalink)
New Member
 
Join Date: Jul 2012
Posts: 12
 
Device(s):
Carrier: Not Provided

Thanks: 0
Thanked 0 Times in 0 Posts
Default

I also have all 3 with lots of permissions, must be normal then.
Uppal007 is offline  
Reply With Quote
Old November 21st, 2012, 02:10 AM   #9 (permalink)
Member
 
Join Date: Mar 2011
Location: Brighton. UK
Gender: Male
Posts: 361
 
Device(s): Lg G3, Nexus 7 - 16gb
Carrier: EE

Thanks: 50
Thanked 47 Times in 34 Posts
Default

Try installing Fast Reboot from the play store and running it
Spaceprobe is offline  
Reply With Quote
Old November 21st, 2012, 05:52 AM   #10 (permalink)
Senior Member
 
dportal2006's Avatar
 
Join Date: Dec 2011
Posts: 612
 
Device(s):
Carrier: Not Provided

Thanks: 13
Thanked 78 Times in 63 Posts
Default

Oh man. Do you mind telling me what website did you visit? I would like avoid it. Try downloading and anti virus and then factory reset the phone.
dportal2006 is online now  
Reply With Quote
sponsored links
Old November 21st, 2012, 06:41 AM   #11 (permalink)
Dr. Feelgood
 
Rxpert83's Avatar
 
Join Date: Aug 2011
Location: MN
Gender: Male
Posts: 17,268
 
Device(s): Nexus 7, Nexus 5
Carrier: Sprint

Thanks: 14,773
Thanked 12,564 Times in 7,248 Posts
Default

Do a factory reset immediately. Its the only way to know its safe.
Rxpert83 is offline  
Reply With Quote
Old November 21st, 2012, 04:30 PM   #12 (permalink)
New Member
Thread Author (OP)
 
Join Date: Nov 2012
Posts: 2
 
Device(s):
Carrier: Not Provided

Thanks: 0
Thanked 0 Times in 0 Posts
Default

Thanks so much to everyone who replied! I feel better knowing that it's normal for these processes to have crazy permissions, but I did a factory reset anyway just to be extra safe.

Question, though: a factory reset doesn't re-install the core operating system, right? It just deletes user-downloaded apps + app data? I guess I'm just wondering whether it protects against the situation where the OS itself has been compromised. Is it even possible for there to be a "privilege-elevation"-type exploit where a process gets root access through some security vulnerability and then overwrites core system binaries with hacked versions? Or is it not possible for even a process that gets root access to do this?

To those who asked what site it was that caused my original crash: I don't have the exact URL, but it was some weird Russian image host that I got linked to from a forum.
rv2012 is offline  
Reply With Quote
Old November 21st, 2012, 05:04 PM   #13 (permalink)
Senior Member
 
Join Date: Jul 2012
Location: Virginia Beach, VA USA
Gender: Male
Posts: 677
 
Device(s): Droid X, HTC Thunderbolt, Samsung Galaxy S3
Carrier: Verizon

Thanks: 12
Thanked 70 Times in 62 Posts
Default

Quote:
Originally Posted by rv2012 View Post
Alright, so I was browsing some potentially murky/unsafe websites on my Galaxy S3 when I had a horrible system crash, and ever since this crash I've noticed some strange things going on on my phone:

1. Everything is noticeably slower, and there are occasional 3-5 second freezes.

2. If I use OS Monitor to examine system activity, I always see a process listening on a bunch of ports like 55555 and 55556, but the name of this process is different every time I look.

3. If I go into Settings -> Application Manager -> All, click on the current name of the app listening on the ports above, and check its permissions, it always turns out that the app happens to have permission to do about 100 things, from "add or modify calendar events and send email to guests without owners' knowledge" to "directly call phone numbers", you name it -- way more permissions than even a typical system-level process.

SO, Galaxy S3 owners, I'd be eternally grateful if someone could go into Settings -> Application Manager -> All on their phone & check permissions on a few apps (listed below). Do they have 100+ permissions to do everything under the sun on your phone too?

Lcdtest
DttSupport
TMServerApp

I know these are legitimate names of system processes that are supposed to be present, but I'm paranoid that on my phone they might've been replaced with hacked versions. If someone could reassure me that they really are supposed to have permission to do literally everything to my system, I'd be grateful!

LCDTEST 17 permissions
DTTSUPPORT 16 permissions
Do not have the third one.

Those core files should be safe. Shouldn't have to worry about them.
davidmanvell is offline  
Reply With Quote
Reply

Buy the Samsung Galaxy S III
Sign up for instant notification when the Samsung Galaxy S III goes on sale!
Samsung Galaxy S III

  The Samsung Galaxy S3 is the company's flagship device of 2012. As one of the most anticipated devices of the year, this device is the first to come with a Exynos 4 Quad processor. It also has Android 4.0, a 4.8-inch 720p Super AMOLED ... Read More



Go Back   Android Forums > Android Phones > Samsung Galaxy S3
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -5. The time now is 07:24 AM.
Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.