• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Rstech_knile? any info?

  • Thread starter Thread starter Ozi Ian
  • Start date Start date
godaddy.com or hostgator.com or something, $3 can register a domain in your name for a whole year. If you want to put a website up at your chosen URL, it might cost you more for the hosting, or you can just redirect it to Blogger, Wordpress, Tumblr, etc., or whatever you like.
 
G'day all. I was the one who started the other thread about rstech_knile.

EDIT: Mikestony has now merged that topic with this one for convenience. Thanks MS.

It seems that this file is at very best, ad-ware.

In a moment of stupidity, I allowed all programs to by-pass the very effective Opera Max, and rstech_knile went out and updated itself without any active permission from me. Obviously this nasty piece of program has now become active and more sophisticated.

BECAUSE:

1. It is embedded in root - it can't be found and deleted on my unrooted device.
2. It has found a way to directly bypass Opera Max which previously blocked rstech_knile.
3. Now, every time I turn on wi-fi access, rstech_knile goes out and places a popup (or whatever you want to call it) in the left hand pull-down menu thing.
4. There is now a message (with the Android symbol) saying "try it! maybe some surprised." Very Chinglish!
5. In trying to delete 20 or so of these, I accidently tapped on one and this immediately opend my browser (Firefox) and after many re-directs through click counters etc settled on a site called 'Mobile Scanner.net' [EDIT: Link removed]
6. Then there is a pop-up which asks me to Click on "OK" to continue to 'great deals'. Yeah ... right, as if ...
7. Now I am also getting the "Unfortunately rstech_knile has stopped" message.
Grrrrrrrrr!

The bottom line is, as Mikedt originally guessed, that I'm now convinced rstech_knile is outright spyware, is bad news, and like all the other postings above, I don't know how to get rid of it either.

SO ...

Is gaining access to the root area of my device (rooting) the only way to get rid if it?
If so, are there any Rooting app(s) anyone would care to recommend?

Thanks in advance,
OziIan.

EDIT 2016-06-20 18:28: Removed all of the link to the "Mobile Scanner.net" site.
EDIT 2016-06-23 14:55: Entered comment about merging threads.
 
Last edited:
G'day all. I was the one who started the other thread about rstech_knile. It seems that this file is at very best, ad-ware.

In a moment of stupidity, I allowed all programs to by-pass the very effective Opera Max, and rstech_knile went out and updated itself without any active permission from me. Obviously this nasty piece of program has now become active and more sophisticated.

BECAUSE:

1. It is embedded in root - it can't be found and deleted on my unrooted device.
2. It has found a way to directly bypass Opera Max which previously blocked rstech_knile.
3. Now, every time I turn on wi-fi access, rstech_knile goes out and places a popup (or whatever you want to call it) in the left hand pull-down menu thing.
4. There is now a message (with the Android symbol) saying "try it! maybe some surprised." Very Chinglish!
5. In trying to delete 20 or so of these, I accidently tapped on one and this immediately opend my browser (Firefox) and after many re-directs through click counters etc settled on a site called 'Mobile Scanner.net' [http://./?&subid=179723248046&zoneid=636321&337de243=QoTHA8stPXA82oGOiIAY3r0PHP3RwQtY2AaYtmLXEvyFakL4TuD6il3vRupJIxMGhw6fSjLrLDpPuE6FBG+WCA==] Don't be silly and click on this link!
6. Then there is a pop-up which asks me to Click on "OK" to continue to 'great deals'. Yeah ... right, as if ...
7. Now I am also getting the "Unfortunately rstech_knile has stopped" message.
Grrrrrrrrr!

The bottom line is, as Mikedt originally guessed, that I'm now convinced rstech_knile is outright spyware, is bad news, and like all the other postings above, I don't know how to get rid of it either.

SO ...

Is gaining access to the root area of my device (rooting) the only way to get rid if it?
If so, are there any Rooting app(s) anyone would care to recommend?

Thanks in advance,
OziIan
I broke the link so it cannot be clicked on ;)
 
G'day again.
UPDATE:
Aha! In 'Settings > Apps > Running' rstech_knile shows up.
Entering this app allows you to 'Stop' and 'Disable' and uncheck 'Notifications'. Also 'Clear all data'.
EDIT - ADDED: You can then check that you have been successful by going to 'Disabled' and rstech_knile will then show up there.
While you're there, have a look at all the permissions this malware has granted itself. Scary stuff as far as I'm concerned. I want to get rid of it completely.

Anyway, that seems to have stopped rstech_knile activities (for the moment, at least).

Those who read my original post will remember that my tablet (Aldi special with Android 4.4.2) is permanently powered and on. All I do is use 'Airplane Mode' when I finish. (ie wifi = 'OFF'). I guess if I ever have to re-boot, rstech_knile will re-load itself and the ad-ware will resume.

Sorry I can't be more specific. I'm a PC man from way back (mid 80s) and only just coming to terms with Android devices

My questions still remain unanswered, however.

Will gaining access to the root of my tablet allow me to permanently get rid of rstech_knile?
If so, what is the best app to root my tablet?
Cheers,
OziIan

EDIT 2016-06-23 1035: Added more info.
 
Last edited:
Back
Top Bottom