Firefox is closed and the phone is locked. When I unlock it Firefox is open with and ad for enflower.info
This has been happening for months ever since I updated my phone through the play store. The phone is a BLU R1 but was purchased at Best Buy noth through AMAZON or their ad program. PLEASE do not reply with the same information from help pages etc without reading this whole section.
I have deleted and reinstalled FF over 20 times. I NEVER added extensions or addon.
I almost always use Private Browsing. I delete my cookies , history all the time. I have never had more than 10 non factory apps installed. They have all been deleted one by one and FF reinstalled through play store after.
It is always the same page with the same add. Other than whois saying it is registered to Alibab in China I can find nothing about this company or the page.
There is no other signs of maleware. I installed Focus and it does not occur in Focus.
I have custom tabs disabled. I have removed SIM cards.
I have been in 4 different countries and MANY network and it has happened in all Only thing I have not done is a factory reset and because google will flood the phone with old crap do not want to spend the two days removing and reconfiguring everything. Avast for Mobile can find nothing. Adding a spam or ad blocker that is going to havest data to send me more adds is not a solution. What I would like is a way to see what android app or process is doing this. if there is an APP that will do exactly that I will try it but I can't find one with that specific funtionality.
All Replies (6)
Hi dev2, does the page open in Chrome if you make Chrome your default browser, or is this specific to Firefox?
What I would like is a way to see what android app or process is doing this. if there is an APP that will do exactly that I will try it but I can't find one with that specific funtionality.
If something is sending a URL to the system to open, maybe there is some kind of debugging you could use to figure out what it was. But I doubt an app would have access to that. Maybe some kind of Android debugging tools could see it?
Can you always trigger it by screen locking or does it seem to be a time-of-day thing, or possibly have some other trigger?
I have Chrome disabled. But it has since happened to Focus so I tried Brave and it happened last night to Brave. So it is indeed a system call to the Android OS that is doing it. I have been looking and it appears the only way to find out what this is is root the phone to access the system logs. While I am a software developer from long ago doing this is not how I really want to spend my time. There needs to be a logging App that can be turned on and Android SHOULD have a way to show the user ALL interapp RPC/API s going on. it is only common sense to be able to solve problems like this when milliIns of apps can be installed on aphone and pretty much access or run the show anyway they want through play services and now the android system webview app. A factory reset for most people these days is the equivalent of moving where you live. Or I may just use this phone as a phone and nothing else.. no browser..no apps. But suggestions for Apps that can view logs/system calls or root the phone are still welcome. I will move all this to an android forum since it is not FF specific as it first appeared.
looks like a malware on the mobile. try factory reset, and if you're rooted also reflash the firmware
Please read previous posts... again.. factory reset is not going to happen. I either take the time to find whats causing it by rooting or find an app that can see System logs/API Calls or the phone will only be a phone with no apps..
dev2 said
Please read previous posts... again.. factory reset is not going to happen. I either take the time to find whats causing it by rooting or find an app that can see System logs/API Calls or the phone will only be a phone with no apps..
go to system settings > apps and remove any non-system app (if the phone not rooted) you dont know.
dev2 said
I have Chrome disabled. But it has since happened to Focus so I tried Brave and it happened last night to Brave. So it is indeed a system call to the Android OS that is doing it. ... There needs to be a logging App that can be turned on and Android SHOULD have a way to show the user ALL interapp RPC/API s going on. it is only common sense to be able to solve problems like this when milliIns of apps can be installed on aphone and pretty much access or run the show anyway they want through play services and now the android system webview app.
You could try asking on a more general Android forum such as: