Timmy M20 Root guide/ROMs needed - Android Q&A, Help & Troubleshooting

I recently got a Timmy M20 but it comes with a pesky Trojan virus embedded in the youtube system app (Malware bytes told me). I think the best way to deal with this would be to in install a new ROM. The problem is it's relatively new/uncommon phone and I can't find any resources to help me. Unfortunately as far as I know I can't even root it as it's android 6.0
If anyone has any of the following it would be of great assistance:
Stock ROM for Timmy M20
Custom ROM for TIMMY M20
third party recovery compatible with this phone
advise on viability of porting a ROM from another similar phone(although I think I need the stock ROM to do this?)
Any advice on dealing with this is appreciated. My ultimate goal is to remove the malware but I would also like to install a new ROM for fun/learning.
Specs:
Model: M20
Manufacturer: Timmy
Android Version: 6.0
CPUABI: armeabi-v7ar
Hardware: Mediatec mt6580
Kernel: 3.18.19+

---

Paddy4 said:
I recently got a Timmy M20 but it comes with a pesky Trojan virus embedded in the youtube system app (Malware bytes told me). I think the best way to deal with this would be to in install a new ROM. The problem is it's relatively new/uncommon phone and I can't find any resources to help me. Unfortunately as far as I know I can't even root it as it's android 6.0
If anyone has any of the following it would be of great assistance:
Stock ROM for Timmy M20
third party recovery compatible with this phone
advise on viability of porting a ROM from another similar phone(although I think I need the stock ROM to do this?)
Any advice on dealing with this is appreciated. My ultimate goal is to remove the malware but I would also like to install a new ROM for fun/learning.
Specs:
Model: M20
Manufacturer: Timmy
Android Version: 6.0
CPUABI: armeabi-v7ar
Hardware: Mediatec mt6580
Kernel: 3.18.19+
Click to expand...
Click to collapse
I have the phone and having same problem also. I have searched online for solution but all to no avail. I hope someone here at XDA can truly help out.

---

No root success
Hi
I'm a complete beginner, prompted by the infuriating malware on my Timmy M20 to try and find a solution.
I've tried Framaroot, didn't work. I've tried downloading Kingoroot to my phone, and also to my laptop and connecting with USB. That didn't work either.
I've subscribed to this thread in the hope that somebody somewhere will solve it.
In the meantime I will keep looking, trying & pestering my techy friends.
I did, however, find a stock Rom - on shareaz.us - downloaded to pc, scanned it for viruses (seems to be clean), so it's there if I need it.

---

Bump - would also like root guide for timmy m20 pro and timmy m12. Malware installed by default. Not good.

---

bump!
Same problem here.... got the "stock ROM" from needrom.com. It has even more malware according to Malwarebyte.

---

Bump - same issue.

---

I managed to root the phone. Here's what I did (do it at your own risk!)
1 Unlock bootloader.
You need to enable USB debugging and OEM unlocking on your phone
Boot the phone into fastboot mode. Switch off. Vol up & power together.
The phone will give you three choices (in very small fonts so maybe magnifying glasses called for)
Middle option should be fastboot
Choose it
On your pc, you need to have installed fastboot. Google if you have not done so.
On pc, command prompt;
fastboot flashing unlock (everything will be wiped; if this does not work, type fastboot help for a list of commands)
boot up the phone by taking out the battery and switch on as normal. Should take a long time. Everything is wiped
2. Install TWRP
get the file recovery_timmy_m20_pro.img google drive 0Bwq1wxJqkB4nbjZzb3huWF9fZ0U (I cannot post links )
boot the phone to fastboot mode as above
fastbbot flash recovery recovery_timmy_m20_pro.img
Once it's done reboot the phone into recovery mode (instead of middle option in fastboot, it's the first option)
You should hopefully have TWRP
3. Install SuperSU
download latest SuperSU zip file
copy to sdcard.
insert sd card
boot phone into TWRP
install superSU.
Hopefully you are done
---------- Post added at 09:33 AM ---------- Previous post was at 09:30 AM ----------
Forgot to mention. After rooting, I cannot uninstall Youtube and the other malware as it cause instability. I get "Unfortunately youtube has stopped working" error repeatedly.
Still searching for solution.

---

terence8888 said:
-snip-
Click to expand...
Click to collapse
Thank you for this! I managed to find a solution to prevent the ads from popping up. I use an app called noRootFirewall and it blocks the virus's access to the internet (preventing downloads of ads, etc).
I will try your root solution now, this phone has half decent hardware so it would be good to actually get it running without malware at some point. Maybe try installing Android 5.0 somehow?

---

Timmy M20 TWRP?

---

http://www.timmymobile.com/en/
Shenzhen Hengyuan Dingye Technology Development Co., Ltd.
M20 20160925 171115 in "settings" app, APK:RepMetagen, Android:Triada-QJ says Avast. Cannot be removed.
Sends some data to aliexpress.com says iptraf on my router.
Seller is FUDISI Tech via amazon.de, support says backup and reinstall using this link:
https://mega.nz/#!k7ohibCQ!iIdGvs4TktRnRCHUiGLbbFaRTGX72ae9Hu0Wm_IZkUk
M20_20161121-151942.zip
md5sum M20_20161121-151942.zip
6792c782647faa8629a2399e7d88c454 M20_20161121-151942.zip
A ROM.

---

Oh dear:
$ clamscan -r --no-summary --infected --bell --detect-pua=yes --detect-structured=yes M20_20161121-151942
M20_20161121-151942/MultiDownloadTool_V1604.zip: Win.Trojan.Ramnit-7820 FOUND
...
SPMETA_DLL.dll: Win.Trojan.Ramnit-7820 FOUND
SPMultiPortFlashDownloadProject.exe: PUA.Win.Packer.BorlandCpp-9 FOUND

---

Providing (espionage) malware is a "federal offense" in all countries, I suggest we contact the authorities to take appropriate action.

---

I had the "Tube has stopped working" screen blocker that was driving me crazy. BUT it turned out NOT to be malware.
When I first received the phone, I turned tube OFF, because I do not use it. THAT is the problem. I turned tube back on after a hard reset, and problem solved. And, yes, even doing a hard reset is a PITA, but it can be done even with the screen blocker, if your fingers are nimble enough to (1) hit the OK button on the screen blocker, and (2) immediately hit the "Reboot OK," button on the box under it, during the half-second that the original screen blocker is recycling. It took me about 40 tries, but I no longer have the problem reported above as long as I leave tube "enabled." Hope this help. I was about to process Timmy through the garbage disposal before I figured this out.

---

Avast reported Triada trojan has downloaded one more module and "gstore" malware, blocking the phone completely until reboot.
I'll trash this phone and ordered one with OTA Android security patch support.

---

I just had some problems with my M20 Pro too. I've bought the phone in early july 2017 with a software released 2016/10/29. I've checked for updates several times but the system said that this was the most recent version. After 4 weeks trouble started...
First Google started to warn about the youtube app which couldn't be updated from the app store. Deactivating this app lead to a never ending "youtube was stopped" message loop.
A few days later my wifi switched off randomly and full screen ads appeared where they shouldn't have. Time to do a malware scan... I chose the 30-day-trial version of Malwarebytes and it found 5 trojan infected apps (incl. youtube). But without root they couldn't be deactivated or deinstalled.
After a while Malwarebytes reported that a file called fotaupdate.apk was ready to install, so I installed it. I don't know if this file was already present on the system or if Malwarebytes downloaded it. A few seconds after the installation a download of a system update (2016/11/29) started and installed. The malicious youtube app was still present, but it was the only infected app left. Soon a second update (2016/12/05) showed up. This time the system was free of malware after installation. Shortly after a last system update (2017/08/14) arrived and android is pretty up-to-date on my M20 Pro now.
So, before messing around with rooting and firmware flashing, try to get the ota update to work and install the available system updates.

---

I received the phone today. It has 2016/10/29 firmware installed, with youtube app infected issue
However when I check firmware update, it says that system is already updated.
Is there a way to force the update or to install the newest one manually?
As said by chameo in his post, the latest should be dated 2017/08/14
thank you

---

cinxda said:
As said by chameo in his post, the latest should be dated 2017/08/14
Click to expand...
Click to collapse
For M20 PRO Model.
And this dated firmware ROM may contain latest malware not detectable by virus scanners yet,
be careful.

---

Chameo said:
After a while Malwarebytes reported that a file called fotaupdate.apk was ready to install, so I installed it. I don't know if this file was already present on the system or if Malwarebytes downloaded it. A few seconds after the installation a download of a system update (2016/11/29) started and installed. The malicious youtube app was still present, but it was the only infected app left. Soon a second update (2016/12/05) showed up. This time the system was free of malware after installation. Shortly after a last system update (2017/08/14) arrived and android is pretty up-to-date on my M20 Pro now.
Click to expand...
Click to collapse
I wonder if sharing "fotaupdate.apk" file by Chameo could unlock updates on our devices. If possible, we should give a try.

---

cinxda said:
I wonder if sharing "fotaupdate.apk" file by Chameo could unlock updates on our devices. If possible, we should give a try.
Click to expand...
Click to collapse
NO, not from untrusted sources, has the package been verified or has s/he "unknown sources" enabled?
Besides the TIMMY M20 PRO is a completely different model, this package may brick the M20.

---

@woprr
Wow, that's the pessemistic view of life, eh? With the 2016/10/29 stock software version for the M20 Pro we are already stuck with a malware infected system. It can only get better.... not all of us are fond of flashing firmwares with adb, fiddeling around with command lines or rooting devices with TWRP.
Maybe you have noticed that already the software from 2016/12/05 was malware-free. If there had been malware it would have been discovered within half a year, I guess. But yes, there's always some risk left...
By the way, I doubt that any manufacturer in this highly competitive market can afford to release malware infected software all of the time.
You are right, the M20 and M20 Pro are different models with different firmwares. I've posted my experience in this thread because there are also some M20 Pro owners here, searching for a solution for their problems.
I've found a fotaupdate.apk on a SD card I've used with my M20 Pro some time ago. I've sent it to cinxda to try if it works. We'll see...