Unwanted and undetected installation of app in the background

Hello,
browsing the list of the apps installed by F-droid I spotted at least two apps that I didn’t install and I don’t want. How can I detect what apps installed the intruders?
The installed apps are:

packageName,versionCode,versionName
net.androgames.level,36,1.9.7
us.koller.cameraroll,36,v1.0.6
org.freshrss.easyrss,706,0.7.6
org.billthefarmer.editor,153,1.53
org.fdroid.fdroid,1011050,1.11
org.geometerplus.zlibrary.ui.android,3003400,3.0.34
eu.hydrologis.geopaparazzi,100,6.0.4
com.mendhak.gpslogger,106,106
com.android.gpstest.osmdroid,18087,3.9.10
org.pocketworkstation.pckeyboard,1040007,v1.40.7
org.libreoffice.impressremote,26,2.5.2
org.jitsi.meet,210000,21.0.0
org.xbmc.kore,27,v2.5.1
acr.browser.lightning,101,5.1.0
com.adonai.manman,173,2.0.1
net.gsantner.markor,122,2.6.0
com.mkulesh.micromath.plus,27,8.1.0
net.nitroshare.android,40,0.4.0.39
net.sourceforge.opencamera,80,1.48.3
app.fedilab.openmaps,13,1.3.0
de.blinkt.openvpn,176,0.7.22
net.programmierecke.radiodroid2,94,0.84
org.quantumbadger.redreader,96,1.16
com.google.zxing.client.android,108,4.7.8
com.tomer.screenshotsharer,8,1.9
com.simplemobiletools.draw.pro,58,6.3.0
com.simplemobiletools.camera,76,5.3.0
com.simplemobiletools.gallery.pro,340,6.19.5
mobi.omegacentauri.SendReduced,1600,0.16
com.nutomic.syncthingandroid,4264,1.14.0
com.google.android.marvin.talkback,60111898,9.1.0.358315219
org.telegram.messenger,22647,7.6.0
com.termux,108,0.108
com.termux.api,47,0.47
com.termux.boot,7,0.7
com.termux.tasker,5,0.5
com.termux.widget,11,0.11
com.google.android.gms,210915037,21.09.15 (120400-361652764)
de.blau.android,1610,15.1.7.0
org.videolan.vlc,13030407,3.3.4
be.mygod.vpnhotspot,256,2.11.3
org.wikipedia,50350,r/2.7.50350-r-2021-04-02
fr.renzo.wikipoff,7,0.3.2
org.yaaic,27,8.1.0
com.github.yeriomin.yalpstore,1,1.0
com.zoffcc.applications.zanavi,27,8.1.0
com.app.Zensuren,27,8.1.0

org.mcxa.zephyrlogger,27,8.1.0
org.ligi.etheremote,27,8.1.0
ru.equestriadev.mgke,27,8.1.0

The last three apps were not installed by me. What happened?

Newer versions of Android should show which app installed an app in each app info screen.

See an example screenshot at the bottom:

That is possible, but if an app is installed by package manager, you won’t know which app asked to install it. In your case, you know that it’s installed from “F-Droid Privileged Extension” but if it is a
common install from e.g. the file explorer, you won’t know where it is. Therefore, don’t press “install” an app if you don’t know the source when the prompt pops up.
And on top of that, only give “install unknown apps” permission to apps you trust, e.g. F-Droid.

I checked all of those apps and they are all on F-Droid with one thing in common: they are all old from 2017, 2015 and 2016 respectively. You can install App Manager to see when it was installed because it seems to me that you just pressed the wrong button when scrolling through F-Droid.

1 Like