Xposed framework showing me ads?!

[ghost]

I am getting popup Fullscreen ads!
I removed and checked the ads are gone but when i install the framework i get ads after 24 hrs.
Please explain me this problem!

[xstar97]

The framework doesn't contain any ads nor does the Xposed app, more than likely another app is being malicious.

…

On Sat, May 25, 2019, 12:06 PM Lui Kazami ***@***.***> wrote: I am getting popup Fullscreen ads! I removed and checked the ads are gone but when i install the framework i get ads after 24 hrs. Please explain me this problem! — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#469?email_source=notifications&email_token=ACHW5HY6JD6WULIIOAAXKJLPXFPYNA5CNFSM4HPU4OWKYY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4GV3HRUQ>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ACHW5H5OAXY37N5OQXBPUYDPXFPYNANCNFSM4HPU4OWA> .

[ghost]

No sir, i strongly support opensource community and use f-droid! And have no app that can show me ads!
Can you please tell me the best/official source to download xposed framework and installer!

[xstar97]

Here or xda... Can't get any official than this:/

…

On Sat, May 25, 2019, 1:06 PM Lui Kazami ***@***.***> wrote: No sir, i strongly support opensource community and use f-droid! And have no app that can show me ads! Can you please tell me the best/official source to download xposed framework and installer! — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#469?email_source=notifications&email_token=ACHW5HYZG46TLAODGVMJCOLPXFWZVA5CNFSM4HPU4OWKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODWHVRQI#issuecomment-495933633>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ACHW5H7GLBBLWFOORN3W733PXFWZVANCNFSM4HPU4OWA> .

[ViperLiu]

I had same problem before, and I found that I installed a FAKE Xposed Installer

You can use Packet Capture ( you can install this app via google play ) to capture the traffic and find out which app is showing ads

And after analyzed the FAKE apk with MobSF, I found that the Signer Certificate of the apk is xposed instead of rovo89

FAKE one:

[
  Version: V3
  Subject: CN=xposed
  Signature Algorithm: SHA256withRSA, OID = 1.2.840.113549.1.1.11

  Key:  
  Validity: [From: Mon Aug 20 15:35:48 UTC 2018,
               To: Fri Aug 14 15:35:48 UTC 2043]
  Issuer: CN=xposed
  SerialNumber: [    0dc5d244]

Certificate Extensions: 1
[1]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: F7 56 89 90 32 EA DD 76   C3 59 10 1D 9D 01 19 00  .V..2..v.Y......
0010: 04 28 9B 8E                                        .(..
]
]

REAL one:

[
[
  Version: V3
  Subject: CN=rovo89
  Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5

  Key:  
  Validity: [From: Wed Jul 04 17:32:14 UTC 2012,
               To: Sun Jun 28 17:32:14 UTC 2037]
  Issuer: CN=rovo89
  SerialNumber: [    4ff47e1e]

]

[Student-t1]

mostly fake xposed framework.
you should go to XDA for the real.

[nakedpwr]

Hey, I never chime in on stuff. I keep my head down and learn all I can BUT this happened to me! I got a installer that left the correct installer installed but also a second proggie with no name and no icon. when I took it apart it had remnants of programming from another game. I don't ever play games. I've never played this game before my entire life. Nor had I ever really even seen anybody else play it. It certainly had never been on my phone. But the next thing you know I uninstalled it and the ads are gone. It also had elevated rights that I swear that I never gave it. I currently find myself in a small town with very little in the way of access to high-tech. Is there anybody out there that would be willing to take on a student that's willing to work hard and learn? Yes I'm old enough that I still believe in the mentor/student paradigm. At least that's the way that we did it through med school. But hunting and pecking in randomly learning on your own... it's not time efficient. And yes experience is the best teacher but my gosh she costs an arm and a leg... nakedpwr@gmail

[xstar97]

Hey, love the convo brewing, but lets take it out to forum and continue this chat....
Same topic as this and now we can share more info w/o bugging the devs here :)

Https://forum.xda-developers.com/xposed/modules/xposed-module-installer-cracked-version-t3957494