How to see which app created shortcuts on my home screen?

Question

I have a Samsung S7, and lately some apps or virus started to create shortcuts to ads on my homescreen that look like app icons. I removed a lot of new apps but the phenomenon sticks. Usually the thug app creates shortcuts during the mid-night when I am asleep. I like to find how exactly which app is doing this. Thanks.

Have you already checked one of the many related questions: Android Automatically Adds Shortcuts To Home Screen / “Lucky try” & “Recommended” shortcuts always appear on homescreen, how to remove it? / How to Block Third Party Apps from Creative Spam Shortcuts on Home Screen? / Who is creating icons? — Izzy, Jun 09 '16 at 12:28
@Izzy "Who is creating icons?" seems to be the same question, unfortunately no one came up with an answer yet. I assume it might not be possible. I am looking into the launcher.db as we speak at this moment. — Aero Windwalker, Jun 09 '16 at 12:53
Let me give you some additional pointers. I've already pointed to the question, but check this specific answer on “Lucky try” & “Recommended” shortcuts always appear on homescreen, how to remove it?, and a related one on How to find installed apps which are using SMS feature. Your candidate requires the INSTALL_SHORTCUT permission. With that in mind, procedure is the same. — Izzy, Jun 09 '16 at 12:59
@izzy is it possible that what is creating the shortcuts is a virus and doesn't show up on the application list? I already removed all the apps having the permission to INSTALL_SHORTCUT. — Aero Windwalker, Jun 09 '16 at 13:44
A virus is very unlikely (as none exists for Android). But if some malware was able to acquire system privileges, yes: It might hide as well as not need specific permissions to do anything. And before you ask: in that case, a factory-reset won't help (as it doesn't touch system apps). — Izzy, Jun 09 '16 at 13:47
@Izzy I see. I dug into launcher.db and I couldn't find the creator of these shortcuts. The shortcut showed up last night has an intent of http://lvxin.kaixinmt.com/h5/lvxing.html#Intent;launchFlags=0x10000000;package=com.sec.android.app.sbrowser;end. — Aero Windwalker, Jun 09 '16 at 14:05
Ah, that's another pointer. The URL contained points to a Chinese site (redirecting to another one). And LVXING – well, probably ads for sunglasses. That URL would be launched with your browser. As that domain is hosted in China & owned by a Chinese company: Any Chinese apps left on your device which you've added "lately", does that ring a bell? — Izzy, Jun 09 '16 at 14:44
@lzzy The thing is, they are all gone. I am using Addons Dector to monitor my shortcuts and hopefully I get to catch the malware. — Aero Windwalker, Jun 09 '16 at 15:40

How to see which app created shortcuts on my home screen?

0 Answers0