Help URGENT ISSUE : Uninstall App Android Warning

[suvamroy]

Hi all - I need help with a really urgent issue.


I'm running a beta test and hence loaded the apk to a public url (amazon S3). Until this point the url was not public domain.


I installed the app on multiple devices and after a day or two, I'm getting the popup warning to uninstall the app (please see attached).


And this behavior is not the same on all the phones/devices. On virustotal, i'm getting 1/57 detection ratio where drweb is giving this message - Android.Gmuse.2.origin. but this error from virustotal comes for my previous apps I've created also - but not this uninstall warning from Android and my apps are running fine on many other devices.


If it helps, i've also listed the permissions my app is using

<uses-permissionandroid:name="android.permission.GET_ACCOUNTS"/>

<uses-permissionandroid:name="android.permission.ACCESS_COARSE_LOCATION"/>

<uses-permissionandroid:name="android.permission.ACCESS_FINE_LOCATION"/>

<uses-permissionandroid:name="android.permission.ACCESS_NETWORK_STATE"/>

<uses-permissionandroid:name="android.permission.ACCESS_WIFI_STATE"/>

<uses-permissionandroid:name="android.permission.BLUETOOTH"/>

<uses-permissionandroid:name="android.permission.CALL_PHONE"/>

<uses-permissionandroid:name="android.permission.CAMERA"/>

<uses-permissionandroid:name="android.permission.CHANGE_CONFIGURATION"/>

<uses-permissionandroid:name="android.permission.CHANGE_NETWORK_STATE"/>

<uses-permissionandroid:name="android.permission.CHANGE_WIFI_STATE"/>

<uses-permissionandroid:name="android.permission.DISABLE_KEYGUARD"/>

<uses-permissionandroid:name="android.permission.FLASHLIGHT"/>

<uses-permissionandroid:name="android.permission.GET_TASKS"/>

<uses-permissionandroid:name="android.permission.INSTALL_PACKAGES"/>

<uses-permissionandroid:name="android.permission.INTERACT_ACROSS_USERS_FULL"/>

<uses-permissionandroid:name="android.permission.INTERNET"/>

<uses-permissionandroid:name="android.permission.KILL_BACKGROUND_PROCESSES"/>

<uses-permissionandroid:name="android.permission.MODIFY_AUDIO_SETTINGS"/>

<uses-permissionandroid:name="android.permission.MOUNT_UNMOUNT_FILESYSTEMS"/>

<uses-permissionandroid:name="android.permission.PROCESS_OUTGOING_CALLS"/>

<uses-permissionandroid:name="android.permission.READ_CALENDAR"/>

<uses-permissionandroid:name="android.permission.READ_CONTACTS"/>

<uses-permissionandroid:name="android.permission.READ_EXTERNAL_STORAGE"/>

<uses-permissionandroid:name="android.permission.READ_LOGS"/>

<uses-permissionandroid:name="android.permission.READ_CALL_LOG"/>

<uses-permissionandroid:name="android.permission.READ_PHONE_STATE"/>

<uses-permissionandroid:name="android.permission.READ_SMS"/>

<uses-permissionandroid:name="android.permission.RECEIVE_BOOT_COMPLETED"/>

<uses-permissionandroid:name="android.permission.RECEIVE_SMS"/>

<uses-permissionandroid:name="android.permission.RECORD_AUDIO"/>

<uses-permissionandroid:name="android.permission.RESTART_PACKAGES"/>

<uses-permissionandroid:name="android.permission.SEND_SMS"/>

<uses-permissionandroid:name="android.permission.STATUS_BAR"/>

<uses-permissionandroid:name="android.permission.SYSTEM_ALERT_WINDOW"/>

<uses-permissionandroid:name="android.permission.VIBRATE"/>

<uses-permissionandroid:name="android.permission.WAKE_LOCK"/>

<uses-permissionandroid:name="android.permission.WRITE_CALENDAR"/>

<uses-permissionandroid:name="android.permission.WRITE_CONTACTS"/>

<uses-permissionandroid:name="android.permission.WRITE_EXTERNAL_STORAGE"/>

<uses-permissionandroid:name="android.permission.WRITE_SECURE_SETTINGS"/>

<uses-permissionandroid:name="android.permission.WRITE_SETTINGS"/>

<uses-permissionandroid:name="android.permission.WRITE_SMS"/>

<uses-permissionandroid:name="com.android.browser.permission.READ_HISTORY_BOOKMARKS"/>

<uses-permissionandroid:name="com.android.launcher.permission.INSTALL_SHORTCUT"/>

<uses-permissionandroid:name="com.android.launcher.permission.READ_SETTINGS"/>

<uses-permissionandroid:name="com.android.launcher.permission.UNINSTALL_SHORTCUT"/>

<uses-permissionandroid:name="com.google.android.gms.permission.ACTIVITY_RECOGNITION"/>

<uses-permissionandroid:name="android.permission.GET_ACCOUNTS"/>

<!-- Share App -->

<uses-permissionandroid:name="com.apps.corecomponents.view.TAB_INFO"/>


<permission

android:name="com.apps.corecomponents.permission.C2D_MESSAGE"

androidrotectionLevel="signature"/>

<permissionandroid:name="com.apps.corecomponents.view.TAB_INFO"/>


<uses-permissionandroid:name="com.apps.corecomponents.permission.C2D_MESSAGE"/>


<!-- This app has permission to register and receive data message. -->

<uses-permissionandroid:name="com.google.android.c2dm.permission.RECEIVE"/>


<uses-featureandroid:name="android.hardware.camera"/>

<uses-featureandroid:name="android.hardware.camera.autofocus"/>


Please let me know what prompts this error and how do we fix it.


Thanks a lot

 

[Hadron]

That is a fearsome list of permissions! Dare I ask what it's doing that needs all of those?

I'm not an android developer, and you'd get better advice in our Application Development forum. But just looking at that list, and assuming it's the permissions rather than a scan of the code itself that's caused this message, I'd personally think that the ability to receive data messages (i.e. instructions to the app) plus a list of permissions which allows it to do almost anything would make me cautious about installing it.