& Lt; action android: name = & quot; android. intent. action. DELETE & quot;/& gt;, action

For more information about <action android: name = "android. intent. action. DELETE"/>

Today, when I saw a virus sample, I encountered this Action, which is located under an Activity node.

Through real machine testing and guidance from instructors, this Action is equivalent to adding the application to the "System uninstall program" list. When you Uninstall any application in the system, A prompt box is displayed, showing the application with this Action added.

If you select this application as the uninstall program, the Activity where the Action is started runs down.

This idea can be further exploited by Trojans.

For example, you can use this Action to set the trojan as an uninstall program. Only after the trojan operation is completed will it help you uninstall the application You Want To uninstall.

The trojan we met today is such an idea...

Xi

The first blog is recorded (* ^__ ^ *)