GizBeat

China Phones To Be Removed From eBay Due To Star N9500 Virus

Written by

Damian Parsons

in

, ,

German security software maker G Data has discovered a spyware app now labelled Android.Trojan.Uupay.D. This spyware comes pre-installed on “Star N9500” devices. The spyware disguises itself as the Google Play Store and can send information from your phone to China servers. According to G Data it is possible for the software to “retrieve personal data, intercept calls and online banking data, read emails and text messages or control the camera and microphone remotely”.

star-phone-2“The only thing users see is an app with the Google Play Store icon in the running processes; other than that, the application is completely disguised,” reports Christian Geschkat. “Unfortunately, removing the Trojan is not possible as it is part of the device’s firmware and apps that fall into this category cannot be deleted. This includes the fake Google Play Store app of the N9500.”

This has led to a fallout at eBay and some news outlets have reported all Star N9500 and even all China phones have been removed from eBay. “Due to reports that some Star 9500 smartphones are loaded with spyware, eBay is not allowing the sale of these devices as a precautionary measure,” eBay has stated to the BBC.star-phone

This seems to not be fully the case. Though it appears quite a few N9500 listings have been removed, our search done at Thursday, JUN 16th 5:00pm +7 turns up plenty of China phones listed and even the N9500 still listed.

Don’t panic

I would urge China mobile fans to not throw the baby out with the bathwater and immediately dismiss or slander Star. Something to consider is that it is very possible these phones with viruses are not truly Star phones at all. Many OEM phones call their phones “Star”, when in fact the phone is not released from Star factories.

This is certainly something that China phones didn’t need – another reason for the common consumer to not buy them. It doesn’t detract from them one bit in my eyes, but I can see how the average consumer could be scared off.

If you are someone who is new to China brands, do not fret. Those who are skittish about the issue may want to consider one of the more popular brand China models from a trusted shop and the issue can be avoided entirely, though it needs to be noted that I feel it is a very isolated issue and even the cheaper OEM phones are not to be shied away from. See further reports, solutions and user opinion on this issue at Chinaphonearena

Comments

5 responses to “China Phones To Be Removed From eBay Due To Star N9500 Virus”

  1. twiggi Avatar
    twiggi

    Same viruses can be found on the device TIMMY E82.
    Beware!

    Reply
  2. twiggi Avatar
    twiggi

    I have written an email to the operations manager June 16 2014 and get no reply. Quote of mail: TIMMY overseas operations director
    Mr. Zheng

    Dear Sir,

    I am owner of above phone and I find it anoying that it establishes
    unauthorized internet connection. How can I supress that function?

    Thank you,

    Reply
  3. GrahamP Avatar
    GrahamP

    Hi, I think I have a Goophone N3 Elite (MTK6592 octacore). Goophone say it’s not one of their phones eventhough it has a goophone label inside. I’ve determined from the firmware it might be a Star phone but not being able to find a manufacturers address so can’t confirm this.

    Anyway to the point, it comes with a number of programs/apps which I find dubious. Do you recognise them and should I remove them. I’m currently unrooted.

    * Burn the rope (in a folder entitled ppy-cross)
    * ‘half a dozen chinese symbols’ (in a folder baidu)
    * AmaboyApp (not sure where this is located)

    Thank you.

    Reply
    1. Damian Parsons Avatar
      Damian Parsons

      Hi Graham,
      Burn the rope is a game. You can surely remove that safely. The other ones you can likely remove safely as well, but I would make a backup first. There are Baidu ROMs, so it is possibly these are required files, but it is tough to say without having the phone in hand.

      The best advice I can give you is to make a backup first. Especially if you are not sure what phone you have or where to get proper firmware for your phone. See http://www.chinaphonearena.com for how to make a backup of China clones and China phones.

      Also, I am assuming you are already rooted. If you can acquire root shell with MTK Droid Tool (also available on http://www.chinaphonearena.com), you can use the button ‘delete china’, but this is not guaranteed to hit all of the China junk on your phone.

      The alternative is to just leave it alone. Normally phones come with enough storage for the extra China apps to be inconsequential. If you are concerned about viruses, check out Avast or Malwarebytes from the app store.

      Reply
  4. Jakey Avatar
    Jakey

    Another China phone: Jiake JK11 (might also go under a different name) has according to a scan with malwarebytes a trojan in a system file: HTMLviewer which of course also can’t be removed (without root).

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *

More posts