[Q] fjcon-d - Galaxy S III Q&A, Help & Troubleshooting

i have avast security installed on my gs3 and it has found a problem. it says:
android framework
potentially unwanted program detected -
android: fjcon-d [pup]
if i click on resolve it asks me if i want to uninstall android framework
i've googled fjcon-d but can't find much info on it other than saying it's a trojan - how much of a threat is it and should i uninstall android framework or is fjcon-d a false positive

Uninstall framework = no boot .
You give no information regarding firmware .
jje

Regardless of whether it actually is a virus there are 3 methods a virus can hve gotten that deep
- implemented in the custom rom (not necessarely by the maintainer but through unsupervised mirrors)
- Root permissions on an app that includes a virus (again, if sideloaded possibly by a mirror)
- Exploit of a bug in Exynos to gain temporary root (e.g. the camera exploit on old firmwares) by a "normal" app
However we need futher details on ap, kernel, rom and possible patches you used - including Luckypatcher patches or similar
Sent from my GT-I9300 using xda premium

it's just the standard rom from new all i've done is root it.
here's a screenshot

Have a look here (amazing tool is Google search)
http://www.virusradar.com/en/Android_Fjcon.D/description

like i wrote in my first post i've googled fjcon-d and i've already been to that link you gave me but it doesn't give much info other than that it is a trojan, or am i missing something but thanks anyway

cbbella said:
like i wrote in my first post i've googled fjcon-d and i've already been to that link you gave me but it doesn't give much info other than that it is a trojan but thanks anyway
Click to expand...
Click to collapse
I shouldn't worry about it too much, there's quite a lot of android listings in the malware database, I will run your AV on mine and see what it throws up
---------- Post added at 06:56 PM ---------- Previous post was at 06:31 PM ----------
slaphead20 said:
I shouldn't worry about it too much, there's quite a lot of android listings in the malware database, I will run your AV on mine and see what it throws up
Click to expand...
Click to collapse
I just checked but realised that I have jkays framework installed, so probably irrelevant result but nothing shows up

ok, thanks for your time and trying
edit: *solved solved solved*
i also noticed today that a few apps wouldn't update while others would. the one's that wouldn't would only download a few kb's of data then get stuck, these apps were: bbc iplayer, bet calculator, c-locker and chrome browser. i had recently installed the Theftspy app from this forum a few days ago and remembered it installing some kind of framework so i have just uninstalled it(Theftspy) and now all the apps update without a problem. i have also just done a scan with avast security and it never found any problems so i guess it must've been Theftspy causing the problem

Related

[Q] Help needed: Malware removal / Rooting unknown brand phone

Hello there!
I am facing the following problem:
A colleague of mine asked me to remove some malware from his very cheap no-name android phone. Actually it does have a name, it is a Yezz Andy 3.5EI (DDMBrands Andy 3.5EI).
I managed to remove some of it, but some seem to be manufacturer bloatware that are infected somehow. I tried kingoroot to root the phone and remove these applications / packages, but basically at every restart it removes the root binary and reinstalls all the malware again (the optimizing app x/y message appears at restarts and basically it's doing it for the malware).
The most annoying one is an application called MonkeyTest that randomly installs during use, part of the package com.android.wp.net.log (with the apk in /data/app/com.android.wp.net.log-1.apk). So obviously without root access I cannot remove that package (and some others with it that install some adware / random popups etc) .
This is the strange part, because if the phone wasn't rooted and it's internal OS memory is protected.. the only obvious way these packages could've gotten there is through a legit manufacturer update (at least that's how I imagine it)
The best solution would be to somehow root it and find a compatible clean Android and flash that or at least some way to remove all the malware. I searched all over the internet, but it's really hard to find anything for this 'brand'.. so maybe someone with more experience can help me out here.
Phone details: Model no.: Andy 3.5EI / Android version: 4.2.2 (the newer ones according to the manufacturer site have 4.4) /Basebrand v: MOLY.WR8.W1315.MD.WG.MP.V1.F1.P2 9,2013/10/30 14:14 / Kernel version: 3.4.5 (Jun 18 2014) / Build no.: ALPS.JB3.MP.V1 / Custom build version: YEZZ_ANDY_35EI_FR_V06_20140618
Any help would be appreciated as I'm kinda new to phones (used to be a developer, but never did anything mobile related)
Thanks in advance!
Well have you tried factory resetting it sometimes it will fix it but you did say something about bloatware so you are going to have to root your phone and I prefer using root uninstaller
---------- Post added at 04:03 PM ---------- Previous post was at 04:03 PM ----------
To uninstall the bloatware or really malware causing it
---------- Post added at 04:07 PM ---------- Previous post was at 04:03 PM ----------
Have you tried an antivirus software google play has great ones try it and has your friend installed any application other then the play store or has he/she downloaded any files like music, pictures, documents, etc.
Of course I tried factory resets and antivirus apps they remove them but they will just auto-reinstall after a few moments. And after reboot they all install.
fsimon01 said:
Of course I tried factory resets and antivirus apps they remove them but they will just auto-reinstall after a few moments. And after reboot they all install.
Click to expand...
Click to collapse
These are built into alot of devices from places like China. The only way to prevent it is to flash an AOSP based image. The main issue there is that there normally isn't anything available for them
zelendel said:
These are built into alot of devices from places like China. The only way to prevent it is to flash an AOSP based image. The main issue there is that there normally isn't anything available for them
Click to expand...
Click to collapse
Yes it really seems like it, though I remember when he bought the phone last year I helped him set it up for the first time and I don't recall noticing these so I'm pretty sure they came with an update, also here's some additional info that I noticed since:
There is a service called 'TimeService' that belongs to a package called com.android.provider.down2-1.apk which was downloaded last month and I think that is the one causing all the issues. When I rooted with kingo-root and before I rebooted (root kindof 'works' till I restart, but is still limited) I tried uninstalling some of the built in apps, such as the yezz appstore and others with root uninstaller. It actually worked on those and they're gone now. Even after a factory reset they don't show up, however I cannot remove that TimeService thing. This gave me the idea to try a unix console app to actually see the message I get.
I gave the console app root permission with kingo and I could walk through the system files. I located that package and tried manually deleting it but I got the Operation failed, permission denied message.. I tried chmod, chown on the file but no use, even tried switching to the 'system' user that the file belongs to, but that can't do anything with it either.
The thing is that if it actually let me remove stuff such as the manufacturers appstore and others, this is really strange. It is acting like a legit computer virus, which I have never seen for mobile phones before It keeps installing the MonkeyTest app which is apparently a trojan, and if I remove it, it just reinstalls it after a few seconds and also everytime the phone reboots it installs a few other apps: BatteryBot, Perfect Cleaner and some others to which I also get notifications for being malicious.
One other thing that happened is that out of nowhere (the phone was just sitting on my desk and was working before) when I picked it up the screen was black so I had to remove the battery since I couldn't do anything with it. After I reinserted the battery I was greeted with a different startup screen that said 'factory mode' then a list appeared written in chineeze characters.. I pressed the power button it took a photo with the back and front cameras, then started activating the GPS.. so I removed the battery again. When I reinserted it, the phone just started normally.
Same problem
Have you found a solution for this "Time Service"? I got the same problem since May 5th and i did everything i could think to fix it, with no positive results... Please, if you know anything about fixing it, send me a message to [email protected]. I don´t know what else can i try :c
Karlmex said:
Have you found a solution for this "Time Service"? I got the same problem since May 5th and i did everything i could think to fix it, with no positive results... Please, if you know anything about fixing it, send me a message to [email protected]. I don´t know what else can i try :c
Click to expand...
Click to collapse
Hello there,
Unfortunately I only had the phone here for a few days and this was all I could do. I am still pretty sure (more than 90%) that it was part of an official update from the manufacturer in May so I'm guessing it was either intentional on their part or they got hacked or something. What I finally did was using kingo root (without a restart, it gives you some temporary access) and root uninstaller to remove most of the original bloatware (even the yezz app store and a bunch of others) to balance out the phone slowing down. I set up the webroot mobile anti-virus app to prevent new ones in the future.. and I set the 3 remaining ones on ignore (the ones that always reinstalled on startup: timeservice, monkeytest and I think batterybot).
The phone is now running fairly smoothly and my collegue can use it.. though I warned him to try to avoid using it for banking services etc... as I don't know what exactly the remaining ones do (though I think all they do is try to install more ads... )
You could try contacting the manufacturer to see if they have anything to say about this.. and maybe update this thread if you find out anything new (I kinda avoided that since judging from the website and the fact that their update installs viruses I doubt it's a serious company)
Imo the only real solution would be the one posted by zelendel and that is flashing a new clean image on it, but unless you get one from the manufacturer along with some help on how to actually root it effectively I doubt you'd find anything on the internet, at least I couldn't
Cheers!

[Q] Question About APK's

I was trying to install some custom apk's for some games and stuff ( skins, fonts, wallpapers) and after tapping install and waiting about a minute, I always get "app not installed". It worked before with no problems and all of a sudden it won't install anything unless from Google Play. I do not have any overlays enabled and previous version/stock apk is uninstalled. I tried installing with Lucky Patcher and it said there was a conflict with permissions and to uninstall app first. The original apk is gone, so not sure what's up there.
Below is what I have. Thanks!
Samsung Galaxy Note 4
Lollipop 5.0.1
Kernel 3.10.40-4243283
Rooted
SuperSu
Titanium Backup Pro
Busy Box
Unreal that no one here knows anything about this...
Beantownfan73 said:
I was trying to install some custom apk's for some games and stuff ( skins, fonts, wallpapers) and after tapping install and waiting about a minute, I always get "app not installed". It worked before with no problems and all of a sudden it won't install anything unless from Google Play. I do not have any overlays enabled and previous version/stock apk is uninstalled. I tried installing with Lucky Patcher and it said there was a conflict with permissions and to uninstall app first. The original apk is gone, so not sure what's up there.
Below is what I have. Thanks!
Samsung Galaxy Note 4
Lollipop 5.0.1
Kernel 3.10.40-4243283
Rooted
SuperSu
Titanium Backup Pro
Busy Box
Click to expand...
Click to collapse
Is there any kind of error message or reason for the failure given? Anything you've changed for this to happen? Have you checked the logcat to see if there's any more information there?
Beantownfan73 said:
Unreal that no one here knows anything about this...
Click to expand...
Click to collapse
Is this the post from 2015 that you are talking about, since this is your last post until lately)? When you didn't get help for some gaming and other stuff that you were trying to use Lucky Patcher for, so you decided we were all jerks? Like any problem ever should be able to be solved just by posting to XDA,?
okay
Maybe you should read this thread/post
Operators are not here 24/7 to tend to your needs. Please realize that. This is a developers site first and foremost.
I’m not talking about not getting help for lucky patcher years ago. I’m talking about the one I posted yesterday or day before yesterday about custom roms for my sm-t810. I googled it and checked here, obviously in the wrong places, to find roms compatible with my device/firmware. The other post I made about broken links and malware, etc, was because that thread had to do with theming, a guide, how to do it, etc. I was disappointed that several links were either broke or lead to some ad page.

Honor 7 Google Play Services Severe Problems

Hope this is an appropriate place to post this :
I was very keen on the Honor 7 due to 64gb memory, sd card, octacore processor, battery and price.
I ordered one from China, and have had it for 2 days. However, am having severe problems.
When adding an account, there is no option for 'Google'.
I have installed Google Play from the Huawei app store and added an account via Play's startup, and for a while, I could download
from Play store and synch gmail and contacts.
I then started to get error "Error while retrieving information from the server RPC:S-7:AEC-0 ..." when trying to download from
the Playstore.
I have tried *many* recommendations including :
*Deleting data and cache from Play app, Play services, and framework services.
*Deleting the account and re-adding.
*Full factory reset and adding Play again from the app store.
*Uninstalling Play service updates so it rolls back to factory version and running Play again to force it to update Play services
to the latest version.
Some of the attempts temporarily resurrect Play, and synching, but now I get "Google play services which some of your
applications rely on is not supported by your device"
Each time I try a fix, the time it runs successfully seems less.
Is it worth me perservering with this : for example is it the need for international firmware on the phone? Could flashing a new
ROM get round this?
Is it because I can't add a Google account. It's weird I managed to download loads of apps, but now can't download any!
Or is it likely to be a phone hardware / firmware / memory unfixable problem?
In every other respect, it's a superb phone and I am reluctant to start the whole returns process if possible, however, if I have
to , I must! (Trouble is, I can't see another phone I want as much : my requirements are maximum processor and memory plus must
support sd card).
Any help much appreciated.
My best guess is that you picked up the wrong version of GPS. You have 64bit processor and therefore must select the corresponded GPS. Try this:
Factory reset and enable adb debugging. Go to http://www.needrom.com/?s=honor+7&sa=search&scat=0, choose the correct ROM or upgrade if exist and flash it following the instructions carefully. Do not miss the ROM or instructions otherwise you can brick the phone.
After that flash the correct GPS from http://www.apkmirror.com/apk/google...ices-7-8-93-2104405-440-android-apk-download/ and GP from http://www.androidapksfree.com/apk/google-play-store-apk-latest-version-download/
Flash on your own risk. I'm not familiar with your previous activities and I'm not taking any responsibility. Good luck.
I am having exactly same problem with my honor 7. Glad I am not alone, however, I was not able to fix it on my own.
I actually did almost what piskr proposed: Installed older version of Google Play 5.7.10 or similar and so far it looks good.
Give it a try, apk could be found on the web
I have the same problem. I thought that was my fault and I am the only one. Now I see this is not specific. Bye the way I don't know the solution.
solution
bcseismail said:
I have the same problem. I thought that was my fault and I am the only one. Now I see this is not specific. Bye the way I don't know the solution.
Click to expand...
Click to collapse
The correct solution should be posted here.
interesting post
v good
---------- Post added at 07:51 PM ---------- Previous post was at 07:50 PM ----------
excellent
---------- Post added at 07:52 PM ---------- Previous post was at 07:51 PM ----------
excellent

Recovery missing in LYF Flame 7.

In my LYF Flame 7 , recovery mode is missing.
When I tried 'adb reboot recovery' command in PC , the phone reboots in recovery mode but dispalys 'No Command' , Can somebody help me to how to fix it. I was tried to root this device with Kingroot but it was not successful. Help me.!!
athulbc said:
In my LYF Flame 7 , recovery mode is missing.
When I tried 'adb reboot recovery' command in PC , the phone reboots in recovery mode but dispalys 'No Command' , Can somebody help me to how to fix it. I was tried to root this device with Kingroot but it was not successful. Help me.!!
Click to expand...
Click to collapse
Hey I also have this device and I have rooted it by kingroot.I know it's not officially supported but click on try to root it will successfully root this device. Proof is the screenshot
Edesh Kumar said:
Hey I also have this device and I have rooted it by kingroot.I know it's not officially supported but click on try to root it will successfully root this device. Proof is the screenshot
Click to expand...
Click to collapse
I think now I can Root. Because my phone now have another rom . I got this new rom from official Jio Care . I went there because I bricked my device when tried to flash a recovery found from the internet. I tried this flashing because the 'factory test mode' was gone after I tried to root with king root .it was showing a 'no command' error when I am trying to go to 'factory test mode' I did that flashing only to restore that. But it ended in a bricked device. So I had to go there and they helped me. I also asked them for stock rom but they didn't give me. I didn't check king root yet with this rom. The current rom i have is same as yours. Ls 4006.
But I don't clearly think which I had before. I guess that was Ls 4007.
athulbc said:
I think now I can Root. Because my phone now have another rom . I got this new rom from official Jio Care . I went there because I bricked my device when tried to flash a recovery found from the internet. I tried this flashing because the 'factory test mode' was gone after I tried to root with king root .it was showing a 'no command' error when I am trying to go to 'factory test mode' I did that flashing only to restore that. But it ended in a bricked device. So I had to go there and they helped me. I also asked them for stock rom but they didn't give me. I didn't check king root yet with this rom.
Click to expand...
Click to collapse
The current rom i have now is same as yours. Lyf Ls 4006 . I dont remember what ROM i had before. I guess that was Ls 4007.
Edesh Kumar said:
Hey I also have this device and I have rooted it by kingroot.I know it's not officially supported but click on try to root it will successfully root this device. Proof is the screenshot
Click to expand...
Click to collapse
Hello.. I tried again. But King Root still not working.
Can you give full details about your OS.
Since you have successfully rooted your device, you are now able to make a full ROM backup of your device. Can you make and upload your ROM and recovery backup here in XDA. ?
That will help many.
athulbc said:
Hello.. I tried again. But King Root still not working.
Can you give full details about your OS.
Since you have successfully rooted your device, you are now able to make a full ROM backup of your device. Can you make and upload your ROM and recovery backup here in XDA. ?
That will help many.
Click to expand...
Click to collapse
Sorry for late response,first I clear some things that I have never build a custom recovery or rom.so it's seems not possible for me take backup of stock rom without custom recovery.
As per your request, you can see my build number in the screenshot
Sent from my LYF_LS-4006 using XDA-Developers mobile app
Edesh Kumar said:
Sorry for late response,first I clear some things that I have never build a custom recovery or rom.so it's seems not possible for me take backup of stock rom without custom recovery.
As per your request, you can see my build number in the screenshot
Sent from my LYF_LS-4006 using XDA-Developers mobile app
Click to expand...
Click to collapse
Sent from my LYF_LS-4006 using XDA-Developers mobile app
Edesh Kumar said:
Hey I also have this device and I have rooted it by kingroot.I know it's not officially supported but click on try to root it will successfully root this device. Proof is the screenshot
Click to expand...
Click to collapse
So have you uninstalled all those bloatwares from your phone .?
If you did so , you had any problems because of the so-called system app removal?.
I'm asking this because I used to disable all those useless system apps , but as a result this phone was restarting frequently without my knowledge. So I did suspect this app disabling and so I restored all these disableed apps. And then the problem solved. You had any issues like this,?
Now I heard about an bloatware removal tool and I wish to try that to get a rid of this bloatwares.
What you say?
Share me your experience.
athulbc said:
So have you uninstalled all those bloatwares from your phone .?
If you did so , you had any problems because of the so-called system app removal?.
I'm asking this because I used to disable all those useless system apps , but as a result this phone was restarting frequently without my knowledge. So I did suspect this app disabling and so I restored all these disableed apps. And then the problem solved. You had any issues like this,?
Now I heard about an bloatware removal tool and I wish to try that to get a rid of this bloatwares.
What you say?
Share me your experience.
Click to expand...
Click to collapse
Yes I have removed much bloatware applications. But first let me know which system apps you want to uninstall so that I can guide you for apps which can cause bootloop after uninstalling.But Don't worry
Removing Bloatware is a normal action for root user
Edesh Kumar said:
Yes I have removed much bloatware applications. But first let me know which system apps you want to uninstall so that I can guide you for apps which can cause bootloop after uninstalling.But Don't worry
Removing Bloatware is a normal action for root user
Click to expand...
Click to collapse
I want remove
Google keyboard
Play newsstand
Play music
play movies
play books
Hangouts
Google Plus
Jio drive
Slides
Sheets
Docs
Google Chrome etc.
I'm a little worried because I don't have any stock rom backup so if something went wrong like something I mentioned in the above post , I have to go again the LYF Care . So you please just check whether all those apps mentioned above are removed or not.
If you still have any apps mentioned above just take it's backup apk using SD Maid and uninstall those apps. So that you can check whether any system instability arises due to the uninstallation.
Please check right now and tell me. I'm waiting for your reply.
athulbc said:
I want remove
Google keyboard
Play newsstand
Play music
play movies
play books
Hangouts
Google Plus
Jio drive
Slides
Sheets
Docs
Google Chrome etc.
I'm a little worried because I don't have any stock rom backup so if something went wrong like something I mentioned in the above post , I have to go again the LYF Care . So you please just check whether all those apps mentioned above are removed or not.
If you still have any apps mentioned above just take it's backup apk using SD Maid and uninstall those apps. So that you can check whether any system instability arises due to the uninstallation.
Please check right now and tell me. I'm waiting for your reply.
Click to expand...
Click to collapse
I don't have any idea for Google keyboard. Except Google keyboard you can remove all that bloatware you mentioned. I have also removed that stuff
Edesh Kumar said:
I don't have any idea for Google keyboard. Except Google keyboard you can remove all that bloatware you mentioned. I have also removed that stuff
Click to expand...
Click to collapse
Ok. And you had no issues?
So Ok. Hope there won't be any problems. I will be proceeding to the uninstallation.
athulbc said:
Ok. And you had no issues?
So Ok. Hope there won't be any problems. I will be proceeding to the uninstallation.
Click to expand...
Click to collapse
No .There will be no issues. I will suggest you uninstalling through lucky patcher.I found it best for such operations. You may encounter 'unfortunately stopping pop-up messages of applications' .so don't worry just restart your device.I did the same
---------- Post added at 02:09 PM ---------- Previous post was at 01:59 PM ----------
Edesh Kumar said:
No .There will be no issues. I will suggest you uninstalling through lucky patcher.I found it best for such operations. You may encounter 'unfortunately stopping pop-up messages of applications' .so don't worry just restart your device.I did the same
Click to expand...
Click to collapse
You would probably be doing so for freeing up some system space.I will suggest you to update app to system(apps like play store,play services and some other useful system apps keep the original system stock app even if you update the application). So you should integrate update to system which will remove the old system app by updated one so you will have much more free space and whenever you factory reset your device ,you will get the updated system apps installed.
---------- Post added at 02:13 PM ---------- Previous post was at 02:09 PM ----------
Edesh Kumar said:
No .There will be no issues. I will suggest you uninstalling through lucky patcher.I found it best for such operations. You may encounter 'unfortunately stopping pop-up messages of applications' .so don't worry just restart your device.I did the same
---------- Post added at 02:09 PM ---------- Previous post was at 01:59 PM ----------
You would probably be doing so for freeing up some system space.I will suggest you to update app to system(apps like play store,play services and some other useful system apps keep the original system stock app even if you update the application). So you should integrate update to system which will remove the old system app by updated one so you will have much more free space and whenever you factory reset your device ,you will get the updated system apps installed.
Click to expand...
Click to collapse
You can do so by lucky patcher
Edesh Kumar said:
No .There will be no issues. I will suggest you uninstalling through lucky patcher.I found it best for such operations. You may encounter 'unfortunately stopping pop-up messages of applications' .so don't worry just restart your device.I did the same
---------- Post added at 02:09 PM ---------- Previous post was at 01:59 PM ----------
You would probably be doing so for freeing up some system space.I will suggest you to update app to system(apps like play store,play services and some other useful system apps keep the original system stock app even if you update the application). So you should integrate update to system which will remove the old system app by updated one so you will have much more free space and whenever you factory reset your device ,you will get the updated system apps installed.
---------- Post added at 02:13 PM ---------- Previous post was at 02:09 PM ----------
You can do so by lucky patcher
Click to expand...
Click to collapse
Ok and Thanks for your help man.
I will post you the result.
Take care. Byee. See you soon.
i have rooted lyf 7 ls-4006 how i take a backup for custom recovery also for stock rom TIA
check it https://forum.xda-developers.com/android/help/lyf-flame-7-ls-4006-stock-rom-custom-t3512465
Shahzeb hayat said:
i have rooted lyf 7 ls-4006 how i take a backup for custom recovery also for stock rom TIA
Click to expand...
Click to collapse
Thanks a lot for your help.
Shahzeb hayat said:
check it https://forum.xda-developers.com/android/help/lyf-flame-7-ls-4006-stock-rom-custom-t3512465
Click to expand...
Click to collapse
I have downloaded those files you have uploaded. I have a few questions about it.
Did you ever tried to flash it to phones other than yours. ?
If you have done it, did you flash it using just fastboot or used any other special software?
You have also provided a twrp recovery. But that recovery doesn't have boot.img and system.img missing. That doesn't seems okay . Are you sure about it ? Please check it.
How did you root your device?
I been trying Kingroot for a while but it's not working for me.
My build number is LYF_LS_01_12
I am also planning to build a custom ROM based on the stock ROM because in the latest update, they made the icons look really ugly . Also it will be a practice for me learn custom ROMing.
But before I proceed, your suggestions would be helpful for me.
So please make some time to answer those questions above.
Once again thank you very much for your effort to upload those files with that slow connection.
Very thank full to you
athulbc said:
I have downloaded those files you have uploaded. I have a few questions about it.
Did you ever tried to flash it to phones other than yours. ?
If you have done it, did you flash it using just fastboot or used any other special software?
You have also provided a twrp recovery. But that recovery doesn't have boot.img and system.img missing. That doesn't seems okay . Are you sure about it ? Please check it.
How did you root your device?
I been trying Kingroot for a while but it's not working for me.
My build number is LYF_LS_01_12
I am also planning to build a custom ROM based on the stock ROM because in the latest update, they made the icons look really ugly . Also it will be a practice for me learn custom ROMing.
But before I proceed, your suggestions would be helpful for me.
So please make some time to answer those questions above.
Once again thank you very much for your effort to upload those files with that slow connection.
Click to expand...
Click to collapse
I Tried these file in my own phone via flashfire restore option
For root my phone using KingRoot_4.9.6 and model is LS_4006_01_09
About twrp I don't know how it comes in backup bcoz I check my stock recovery which is not twrp
And also these files not not flashable if you are developer then plz make custom recovery or stock file for us Tia
Shahzeb hayat said:
I Tried these file in my own phone via flashfire restore option
For root my phone using KingRoot_4.9.6 and model is LS_4006_01_09
About twrp I don't know how it comes in backup bcoz I check my stock recovery which is not twrp
And also these files not not flashable if you are developer then plz make custom recovery or stock file for us Tia
Click to expand...
Click to collapse
Not flashable ????
I'm no developer yet but I thought you are. I was so happy when I see those files. It's sad when you says not flashable.
But okay , I am learning about flashing and custom ROMing and I will do my level best to help you guys.
I will be soon starting a new thread with full details about those files given by you. Let's see what Devs here talks about it. I really need to root and custom ROM it. Only problem is that I don't have any other phone for testing. I got only this one for all of my needs. I thought you already flashed it in your phone.
Anyway, thanks for your help and let's see what I can do.
Bye. See you .

Cubot X30. Great phone but with added malware?

Hi, I've recently took a chance on a well priced midrange smartphone from Cubot, namely the X30 with 8gb ram 256gb rom and stock Android 10.. or so it seems.
The only app installed that wasn't a Google app is an app called Wireless Update, which connects with com.adups.fota. After some research I found many articles from 2017 saying that this update app is actually malware which could do a whole manner of nefarious things without the users knowledge or permission.
According to Cubot it's just the app that they use to push OTA to devices.
I've been using the phone for a few days now and haven't had any problems *yet* but I'm very wary about adding my banking apps etc.
I've scanned with Malwarebytes which shows no problems, but I've read elsewhere that because it's a system app, av products overlook it..?
Does anybody know or have experience that can help me please? Should I/could I return the phone on the grounds that it's infected? The Wireless Update app is apparently on many lesser known devices, do do you own one? Is this a threat, or is it largely overblown?
I've currently got the app 'frozen' through the screen time limiting function on Android 10 (it's allowed zero seconds per day) and I've restricted its permissions too.
Would appreciate any help please people ?
Thanks
RedHammer99 said:
Hi, I've recently took a chance on a well priced midrange smartphone from Cubot, namely the X30 with 8gb ram 256gb rom and stock Android 10.. or so it seems.
The only app installed that wasn't a Google app is an app called Wireless Update, which connects with com.adups.fota. After some research I found many articles from 2017 saying that this update app is actually malware which could do a whole manner of nefarious things without the users knowledge or permission.
According to Cubot it's just the app that they use to push OTA to devices.
I've been using the phone for a few days now and haven't had any problems *yet* but I'm very wary about adding my banking apps etc.
I've scanned with Malwarebytes which shows no problems, but I've read elsewhere that because it's a system app, av products overlook it..?
Does anybody know or have experience that can help me please? Should I/could I return the phone on the grounds that it's infected? The Wireless Update app is apparently on many lesser known devices, do do you own one? Is this a threat, or is it largely overblown?
I've currently got the app 'frozen' through the screen time limiting function on Android 10 (it's allowed zero seconds per day) and I've restricted its permissions too.
Would appreciate any help please people ?
Thanks
Click to expand...
Click to collapse
Hello man,
I' bought the 6/128 GB version instead of 8/256 GB 'cause I prefer to stock data in a Micro SD.
Anyway... At the moment, I've no info related to possible malware in the system, using Malwarebytes like u.
Just to inform u:
* TWRP recovery for Cubot X30 is already available (unofficial) BUT IT CANNOT MOUNT SYSTEM (so, no flash, no backup...)
* ROOT is already available for Cubot X30, u need simply to unlock bootloader and flash Magisk patched BOOT.IMG
:good:
PYCON said:
Hello man,
I' bought the 6/128 GB version instead of 8/256 GB 'cause I prefer to stock data in a Micro SD.
Anyway... At the moment, I've no info related to possible malware in the system, using Malwarebytes like u.
Just to inform u:
* TWRP recovery for Cubot X30 is already available (unofficial) BUT IT CANNOT MOUNT SYSTEM (so, no flash, no backup...)
* ROOT is already available for Cubot X30, u need simply to unlock bootloader and flash Magisk patched BOOT.IMG
:good:
Click to expand...
Click to collapse
Thanks for the info. I've been slowly (they've taken 12 days to reply) talking with Malwarebytes Antimalware through email about this. Here's their most recent reply.
Quote
"Derek (Support)
Nov 13, 2020, 10:15 PST
Hello,
My name is Derek. I will be helping you with your ticket # 3252842.
We have seen an increase in Android devices coming with pre-installed malware. For additional information on this malware, please refer to our blog post provided below.
blog.malwarebytes com/cybercrime/2019/01/the-new-landscape-of-preinstalled-mobile-malware-malicious-code-within/
Due to the security within the Android OS by default system apps can not be removed by 3rd party apps including Malwarebytes.
I have provided some methods of removing or disabling system malware below:
- Disable the app – Can be done via Android Settings -> Apps -> bad app -> Force stop/disable or through adb command line. Which can be found on our forum at the link below.
This will prevent the app and any associated services from running.
//forums.malwarebytes com/topic/216616-removal-instructions-for-adups/?tab=comments#comment-1190826
Note: Proceed at your own risk! I, nor Malwarebytes, can guarantee this will not damage your mobile device. Uninstalling system apps have the potential to permanently damage your device, rendering it unusable.
- Root your device and uninstall the malicious apps. Usually reserved for advanced users. I can't recommend rooting because of the potential for damaging phone, and doing so is at your own risk.
- Install different, trusted, ROM to replace the infected one. Usually reserved for advanced users, this requires your device is rooted, please do at your own risk.
- Return device where purchased.
I wish there were more options but where Android's openness and built-in security collide; openness, anyone can flash a device with a custom ROM, security, you can't uninstall system apps.
Kind regards,
Derek S. | Malwarebytes Support | support.malwarebytes.com"
I've sent them info through the app about all the installed apps etc but they seem to have just written me a generic reply, linking to an old fix for Android 6... I've asked for more info and will update their replies here
Hopefully someone from XDA will be able to help too.
P.S. I've had to remove a dot from the links they sent, as this is a new XDA account and I can't post links yet.
Wireless update, malware, bloatware.
I brought a Homtom 17 pro about 4years ago and I'm using it to send this reply, the app in question is indeed Malware as my phone came with it pre-installed, but here's the catch it doesn't kick in until either 6 or 12 months after the phone being activated and then it starts to install bloateware , e.g random apps called setting or other named apps you wouldn't look at twice and think they have always been there (popup ads), it communicates with China? Or that global area. It's been along time since I researched this so the country may differ. When I found this out I instantly installed Adguard to prevent Wireless update + some other system apps from communicating with the web and I have had no problems since. Obviously you can go down the roots Malware bytes said but you could brick your phone or root it, and many official apps nowadays don't like rooted phones. I hope this helps and sorry for the long reply.
PYCON said:
Hello man,
I' bought the 6/128 GB version instead of 8/256 GB 'cause I prefer to stock data in a Micro SD.
Anyway... At the moment, I've no info related to possible malware in the system, using Malwarebytes like u.
Just to inform u:
* TWRP recovery for Cubot X30 is already available (unofficial) BUT IT CANNOT MOUNT SYSTEM (so, no flash, no backup...)
* ROOT is already available for Cubot X30, u need simply to unlock bootloader and flash Magisk patched BOOT.IMG
:good:
Click to expand...
Click to collapse
Very good to know that there is already a root method. I created an account just to ask for your help. Can you give me more details? I've tried everything.
aboy2020 said:
Very good to know that there is already a root method. I created an account just to ask for your help. Can you give me more details? I've tried everything.
Click to expand...
Click to collapse
Sure, about root?
RedHammer99 said:
Thanks for the info. I've been slowly (they've taken 12 days to reply) talking with Malwarebytes Antimalware through email about this. Here's their most recent reply.
Quote
"Derek (Support)
Nov 13, 2020, 10:15 PST
Hello,
My name is Derek. I will be helping you with your ticket # 3252842.
We have seen an increase in Android devices coming with pre-installed malware. For additional information on this malware, please refer to our blog post provided below.
blog.malwarebytes com/cybercrime/2019/01/the-new-landscape-of-preinstalled-mobile-malware-malicious-code-within/
Due to the security within the Android OS by default system apps can not be removed by 3rd party apps including Malwarebytes.
I have provided some methods of removing or disabling system malware below:
- Disable the app – Can be done via Android Settings -> Apps -> bad app -> Force stop/disable or through adb command line. Which can be found on our forum at the link below.
This will prevent the app and any associated services from running.
//forums.malwarebytes com/topic/216616-removal-instructions-for-adups/?tab=comments#comment-1190826
Note: Proceed at your own risk! I, nor Malwarebytes, can guarantee this will not damage your mobile device. Uninstalling system apps have the potential to permanently damage your device, rendering it unusable.
- Root your device and uninstall the malicious apps. Usually reserved for advanced users. I can't recommend rooting because of the potential for damaging phone, and doing so is at your own risk.
- Install different, trusted, ROM to replace the infected one. Usually reserved for advanced users, this requires your device is rooted, please do at your own risk.
- Return device where purchased.
I wish there were more options but where Android's openness and built-in security collide; openness, anyone can flash a device with a custom ROM, security, you can't uninstall system apps.
Kind regards,
Derek S. | Malwarebytes Support | support.malwarebytes.com"
I've sent them info through the app about all the installed apps etc but they seem to have just written me a generic reply, linking to an old fix for Android 6... I've asked for more info and will update their replies here
Hopefully someone from XDA will be able to help too.
P.S. I've had to remove a dot from the links they sent, as this is a new XDA account and I can't post links yet.
Click to expand...
Click to collapse
Thank you for this piece of information.

Categories

Resources