HTC EVO VIEW Security Patch and updates - HTC Flyer, EVO View 4G

Thanks to Treve in Evo3D for his amazing work finding this security breach and sharing it with us, and the word reached HTC and now we have several security patches in Sprint via OTA to HTC Evo, HTC Evo3D, HTC Evo View and HTC Sensation.. may have more coming out to their line up.
10/25 Do not let it update itself. See attached pic. Reset will get it back to norm.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Just received in my EVO View a Sprint HTC update for security patch...
Total Download size: 4.63 MB
Here is link for download of the patch in zip file from HTC/Sprint:
http://www.wupload.com/folder/951541
Per Treve after viewing patch file I sent to him (Credits to Treve)
It looks like it deleted these files for you guys
Code:
"/system/app/HtcLoggers.apk", "/system/app/HtcLoggers.odex",
"/system/lib/libhtc_loggers.so",
"/system/recovery.img");
But on our ota on the 3d it also deleted these files, id make sure you dont have them in your phone as well, especially the /data/data one, thats where the binaries for htcloggers live that made the exploit possible, an the other stuff is just garbage
Code:
delete_recursive("/data/data/com.htc.loggers/",
"/sdcard/htclog/");
"/system/app/QXDM2SD.apk", "/system/app/QXDM2SD.odex",
"/system/bin/androidvncserver", "/system/bin/usbnet",
"/system/lib/libhtc_loggers.so", "/system/lib/libhtcqxdm2sd.so",
"/system/recovery.img");
Everything i'm releasing I will be posting patches for - http://forum.xda-developers.com/showthread.php?t=1247108
Its the main thread and i wrote a scanner app at post 110 http://forum.xda-developers.com/showpost.php?p=17612559&postcount=110
Im sure most of it will be the same on the HTC Flyer/ HTC EVO View.
Thank you again Treve.
Dev's lets take a look into the /data/data one, thats where the binaries for htcloggers as Treve indicates.. Let's get this worked out for our benefits

---

My ROM is based on the fully patched build matey, got the ota last week
Sent from my LeeDrOiD loaded s-off HTC EVO 3D

---

LeeDroid said:
My ROM is based on the fully patched build matey, got the ota last week
Sent from my LeeDrOiD loaded s-off HTC EVO 3D
Click to expand...
Click to collapse
Would like to try yours out but mine is the Evo View, not many dev's have it... would be nice though, thx.

---

Do you think that you can just flash the attached file from recovery?

---

geebee1932 said:
Do you think that you can just flash the attached file from recovery?
Click to expand...
Click to collapse
Need to revert to Stock RUU and then do the update(s) once done the do root process again
In case you need the zip 1.22.651.1
OTA_Express_Sprint_WWE_1.22.651.1-1.18.651.1_release_198260xikterg48lc0snx1.zip
New Update-Security Patch 1.22.651.2
OTA_Express_Sprint_WWE_1.22.651.2-1.22.651.1_release_220183oqo49zm8mw3kfeuv.zip
Odd it shows 2.1 not 3.0

---

I just flashed the ota zip through recovery. It worked fine no need to revert to stock. The View does not have sense 3.0. I think it has a modified sense 2.

---

geebee1932 said:
I just flashed the ota zip through recovery. It worked fine no need to revert to stock. The View does not have sense 3.0. I think it has a modified sense 2.
Click to expand...
Click to collapse
I flashed and no go on first attempt got the error as shown in first post.. HTC description is as sense 3.0 mostly do to the carousel I believe..

---

I downloaded the OTA through GoodandEvo.com. I then booted into recovery and was able to flash. I did have to reflash the supersuer to get SU back however. My sense version was 2.1 before I began the update.