Dodgee X5 pro nativemalware? - Android Q&A, Help & Troubleshooting

Hello,
I have got an Dodgee X5 pro for my wife use. I say so because I'm not the direct user and this makes it difficult to debug problems.
On a regular basis, the screen is locked by full screen advertisement (need a left to right scroll to get rid of). First time I see this. I also find on a regular basis other apps installed (for example the "figaro.fr" (french news paper). I remove it and it come again.
I couldn't root the device with kingroot (I found the other thread on the subject, but too late). needed to have addblocker.
Are these add included in system rom? The only other app that I can make responsible could be whatsapp (I have all the others on my own phone without problem).
I know my wife is prone to touch randomly any screen she sees, trying to get rif of them, so may be she was asked to install (but she have no memory of it).
any idea??
thanks
jdd

i have the same problem. I install malwarebytes and find a malwate apk in system.
/system/app/FWUpgradeProvider/FWUpgradeProvider.apk
I will try to root and remove this app

Related

[Q] Problems with developing a custom GS2 rom for medicinal purposes.

Hello to you all people of XDA, firstly I must state that I've scoured the forums far and wide and have yet to find some valuable info regarding my problem.
So what we're doing is developing (or trying to, as is obvious from this post) a custom rom for the Galaxy S2 which would be used for a single medical application for sensor tracking and the processing and displaying of said data on the SGS2, while at the same time sending it to his/her doctor.
What we need to be able to achieve with this rom is to put it into the hands of the end-user (a chronical patient which will in turn be able to stay at home instead of being hospitalized) and be able to completely lock down the phone for his use (I know, it sounds terrible) so that he loses the phone/sms/games/youtube/internet functionality as we need the phone to run as stable and for as long as possible without any additional battery stress (the constant sending, processing and processing of data seems enough of a problem for now).
I've searched into some custom roms but we eventually came up with the need for a stock Samsung rom which could be modified as we want to.
See this is where the problem begins, we can't seem to get the phone rooted, the ROM customized and then unrooted again so that the phone can't be fiddled with anymore, except when it's completely dead and we need to fix it.
So to cap it all up:
It needs to allow for a custom load and bootscreen (I almost got this to work)
It needs to be completely locked down for the end user.
It has to have full BT, NFC and WiFi functionality
It has to be able to call out and reciev calls, but only to/from specific numbers (911, doctor, etc..)
It has to basically allow for 2-3 programs to be running, while the others simply don't exist on the phone.
I am terribly sorry if anything like this has been asked about before, I swear I put 2 days of me life into researching already.
Any help, any help at all, ideas and solutions, but mostly links are welcome.
Thank you and good day to all.
Just a detail, but the SGS2 doesn't have the NFC functionality. Project seems to be possible, I would look into CyanogenMod sources if I was you.
Sent from my GT-I9100 using XDA App
Why are you afraid of leaving the phone rooted and in hands of the patient?
Is he so uncritical that he can search the web and find means of unrooting a mobile phone and then get around to actually doing it?
LucLucLuc said:
Hello to you all people of XDA, firstly I must state that I've scoured the forums far and wide and have yet to find some valuable info regarding my problem.
So what we're doing is developing (or trying to, as is obvious from this post) a custom rom for the Galaxy S2 which would be used for a single medical application for sensor tracking and the processing and displaying of said data on the SGS2, while at the same time sending it to his/her doctor.
What we need to be able to achieve with this rom is to put it into the hands of the end-user (a chronical patient which will in turn be able to stay at home instead of being hospitalized) and be able to completely lock down the phone for his use (I know, it sounds terrible) so that he loses the phone/sms/games/youtube/internet functionality as we need the phone to run as stable and for as long as possible without any additional battery stress (the constant sending, processing and processing of data seems enough of a problem for now).
I've searched into some custom roms but we eventually came up with the need for a stock Samsung rom which could be modified as we want to.
See this is where the problem begins, we can't seem to get the phone rooted, the ROM customized and then unrooted again so that the phone can't be fiddled with anymore, except when it's completely dead and we need to fix it.
So to cap it all up:
It needs to allow for a custom load and bootscreen (I almost got this to work)
It needs to be completely locked down for the end user.
It has to have full BT, NFC and WiFi functionality
It has to be able to call out and reciev calls, but only to/from specific numbers (911, doctor, etc..)
It has to basically allow for 2-3 programs to be running, while the others simply don't exist on the phone.
I am terribly sorry if anything like this has been asked about before, I swear I put 2 days of me life into researching already.
Any help, any help at all, ideas and solutions, but mostly links are welcome.
Thank you and good day to all.
Click to expand...
Click to collapse
Block all internet access apart from ones you want or you can just setup iptables rules, shouldnt need root apart from when setting it up
As far as removing programs, just delete the apks from the zip, or before you remove root. My sig has a list of all apks in a upto date rom and what they do.
You can use gemini app manager to control autoruns (stop them etc) also to block (hide and disable apps)
As far removing root, your best bet is to once you are done, use adb (from the android sdk) to remove the superuser.apk then flash the stock kernel back, as far as I know without superuser apps cant grain root permisions.
OR
This app will allow you to block any app behind a password
This app will block incoming and outgoing sms and calls on white and blacklists
Custom boot logo (the first screen before the animation)
Custom boot animation need to go into system/media, I am not sure about the format but there are loads around, like this thread has loads, stock kernel should support them.
I hope that helps
Most of that is easily possible.
If you listed the apps needing removed, the apk files just need deleted.
To control calls, you can use a third party app from market for that.
It's possible to have the custom rom unrooted, and easily flashed, regardless of how badly the phone gets rooted
Boot animation is easy anyway... If you can provide it in a zip like other ones (zip containing numbered png's) then it's a piece of cake.
A little bit of clever firewall stuff would prevent any web traffic, in or out, except to your defined server, which is obviously a concern when a phone is handling sensitive medical info.
genieass said:
Why are you afraid of leaving the phone rooted and in hands of the patient?
The phones are going to be used by around 500.000 people in a year, it's not that we want to take anything away from the user, it's more about not having any problems with the firmware - like ever.
Thanks for all the help!
Click to expand...
Click to collapse
genieass said:
Why are you afraid of leaving the phone rooted and in hands of the patient?
The phones are going to be used by around 500.000 people in a year, it's not that we want to take anything away from the user, it's more about not having any problems with the firmware - like ever.
Thanks for all the help!
Click to expand...
Click to collapse
LucLucLuc, not sure where you live, but you're entering the patient confidentiality minefield with big, big boots.
Apart from the legal considerations, your question is definitely OS related and not device related.
I see what you want, but legally - where I live anyway - it's too much of a grey area to get involved with.
I use call recording a lot for referrals and info from other doctors, but I've always asked the other party if they're OK with it. I won't record patient conversations, and I won't accept any files whatsoever that have seen RIS or PACS first - not worth it.
Can't see it's worth your while, but I'd appreciate it if you keep me informed should you decide to work on it.
Big boots indeed
We are from Slovenia, Europe.
I'm actually just a student doing the research and some basic Android programming, thank god I wasn't let into the bigger of the projects
But yes, this project is a colaboration of several european firms and you can read more about it at chiron-project.eu - it's a very very interesting project afaic.
I don't think we'll be swimming with lawyer piranhas soon though, the project uses sensor data (which sorta is a privacy issue) which will be monitored on a tablet running Android (currently testing the Galaxy tab 10.1 - we were lucky to order one before Steve had another one of his fits), proccessed in real time and then stored on the central server, from where it will only be accessible by the patients doctor.
Patient consents are dealt with before we even start talking about mobile hospitalizations.
It's very encouraging to see some actual interest, if anyone wants to know more about anything related to this project contact me at [email protected]
Thanks again for all the help.

[Q] Problems related to apps and access

First I will say that I found this forum from a thread on Esato and since I have an Xperia X10 Mini Pro with Android 2.1, and saw that this was a professional place, I signed up. Hope some can help a girl out.
I am a newbie when it comes to "all that tech stuff" with cellphones, but I learn fast. I've just recently started to use internet on my phone, and well, some problems occured when trying to download some apps from the android market.
For some odd reason I can't seem to access the android market at all with my gmail/google-account. I think I do it right, I have WiFi on and I put in my gmail-account/google-account, but everytime I get a "can't access market", or "turn WiFi on". But WiFi is on!
What can the problem be?
I've used the "Android Injector" instead and downloaded apk-files from an android software applications site onto my phone memory via the USB-cable. (I can't use the "Android Injector" anymore, as malwarebytes deleted it because apparently it was some malware attached to it).
My phone memory is close to being full (I have 66 mb left), so how can I download future (or already existing) apps to the SDcard?
I've heard that you could install a custom ROM, but I have no idea how to do that. I don't know how to root the phone either. ?
And then, I downloaded an app called "Viber" from an android software applicaions site. I didn't find it useful and uninstalled it, but when I read some newspapers online (World Newspapers app), it came back as a shortcut on my phone. What is this?
Relax!!
Take your time and visit different threads.
We all were noob once and me still is! We have to devote some time reading various forums and section before our doubt gets clear!
Use the search button - the most effective way to get your answers!!
Hope you can understand!!!!!! :thumbup:
--—--—--—--—---—----—---—--—-
Press Thanks it hardly takes a second!!! :thumbup::thumbup::thumbup::thumbup:
sender device :Amazing XPERIA X10 SuperMINI!
I do have to say I now have access to gmail and android market, thanks to some link I found on G-Apps Masters. I went in via youtube. Yay!

Ineducable noob seeks to irreversibly remove wifi/data access for cheapest smartphone

Hi,
Apologies if this is in the wrong thread category.
I'd like to permanently remove internet access from either a whole phone or from selected apps. This would create a dumbphone with a touchscreen. This is to tackle a net addiction, yet leave me with the capability of communicating with family via SMS. Existing dumbphones don't have touchscreens and often cause me excruciating pain to use, because of a condition I suffer from called fibromyalgia, which mimics the symptoms of RSI. Autocomplete on touchscreen phones reduces the number & intensity of finger-touches I need to make to type an SMS and are thus relatively freeing.
Would anyone know how this could be done, please? I rooted a phone once or twice but am not capable of following any instructions which require judgement. Please don't take more than a couple of minutes over this because there's a strong chance any advice will go over my head.
With thanks in advance for your thoughts
Jonathan
joanthan75 said:
Hi,
Apologies if this is in the wrong thread category.
I'd like to permanently remove internet access from either a whole phone or from selected apps. This would create a dumbphone with a touchscreen. This is to tackle a net addiction, yet leave me with the capability of communicating with family via SMS. Existing dumbphones don't have touchscreens and often cause me excruciating pain to use, because of a condition I suffer from called fibromyalgia, which mimics the symptoms of RSI. Autocomplete on touchscreen phones reduces the number & intensity of finger-touches I need to make to type an SMS and are thus relatively freeing.
Would anyone know how this could be done, please? I rooted a phone once or twice but am not capable of following any instructions which require judgement. Please don't take more than a couple of minutes over this because there's a strong chance any advice will go over my head.
With thanks in advance for your thoughts
Jonathan
Click to expand...
Click to collapse
Root your phone based on your past experience.
Install Xposed Installer app.
Install xposed framework by clicking install button in the app.
After a few minutes, your phone would ask for permission to reboot.
Reboot it.
It will take around 10 minutes or more to reboot.
Open the Xposed Installer app and click the menu icon on top left of the screen.
Select Downloads.
Search for XFirewall and install it.
Reboot.
Open XFirewall.
Select which apps you want to have net connectivity.
OR
You can try any other normal firewall app if you think it to be better than XFirewall
Augustoandro said:
Search for XFirewall and install it.
Reboot.
Open XFirewall.
Select which apps you want to have net connectivity.
OR
You can try any other normal firewall app if you think it to be better than XFirewall
Click to expand...
Click to collapse
Thanks Augusto! Much appreciated.
Do you or does anyone on here please know of any firewall apps which allow the user to commit to a period (24 hours, a week, a year, permanently) without network access? Unfortunately without this kind of restriction I can't trust myself to stay off the web. Five minutes reading the news or Twitter always turns into five hours.
Thanks

Strange semi-stealthy malware that hides itself

Hi all,
So here's the situation: I have a Pixel 1 with stock (read: overbloated verizon) android. Whatever, I'm lazy and I haven't gotten around to rooting it. I installed a firewall recently for giggles. I'm going through the system apps and merrily blocking verizon junkware when I come across this thing (bear with me for the complete description, as XDA's spam filters are blocking my image links)
It's a system process called 'nobody' with a version number of 10. The Netguard app also gives a number above the name (i don't know what it's supposed to mean) that for most apps seems sort of random, but for this app is 9999.
I try to find this thing in my system app manager, and it's nowhere to be found.
So I keep on keeping on, thinking 'weird, but whatever', and then I come across another app called 'root' with a version number of 10 and (maybe it's a process id?) of 0.
Also, nowhere to be found.
And here's the thing; there's a gear icon in Netguard, that for _every other app_, opens up the system app manager page for that app. For these two? Nothing.
Now, I am not super proficient in android stuffs. My questions for you smart and pretty people are these:
1. How can I go about digging around in my phone to find the files that are running this thing?
2. What's the best way to get more information on what this is? (and yeah, I tried googling 'nobody' and 'root'. It went predictably).
3. How can I prepare a report / who would I send this to? There's gotta be security researchers who could use logs pertaining to this ****.
Yeah, I know that I need to nuke & pave the device. I will. I want to try and recon a little first. So, what do you got?

My phone came with pre-installed malware, and I'm desperate. What am I supposed to do now?

Hello everyone in the XDA Developers community, how are you? I hope that very good.
I come to you because I am desperate with my phone; Since they gave it to me (yes, this phone is a gift) about 3 or 4 months ago (it is a phone from the Sky Devices brand, more specifically the Sky Devices Platinum 5.0M) I had not noticed anything strange, until a couple of weeks After checking my applications in the phone settings, I noticed a very strange app, which calls itself “App Settings”, it seemed strange to me, but I uninstalled it without further ado, but after a while I check the apps and I realize that the app reappeared without prior notice, to which my alarms go off immediately and I resort to installing the trial version of Kaspersky Internet Security for Android, and after running both a quick scan and a full scan, it detects the Trojan in question (attached screenshots below). What I proceed to do now is to eliminate the Trojan in question with the AV, to which I reassure myself a bit, knowing that the AV "neutralized" the Trojan; I'm still normal, using it, when days later, when I see the recent apps, I see the happy "App Settings" running, to which I deduce that the supposed virus survived, to which I resort to different AVs, such as Malwarebytes and ESET, both without throwing me any results. Tired, I let the matter pass and I don't give it much importance. Now we come to today: I begin to notice that the phone is draining the battery too quickly, apart from the fact that there is something that makes it not recognize the SIM (it is not the phone, because before it recognized it, apart from the fact that the SIM is new), I go to Settings to see the applications and I see that the infection has become worse: there are many more apps of its kind, such as a Flashlight call (I don't use external flashlights, I always use the one on the phone), another call " system service ”, and others that by the logo, I deduce that they come from the first one. My question comes in here: what should I do with the phone, given the evidence of infection? I need your help urgently, because if my phone continues like this, with your forgiveness, I will smash it against the wall without further ado, because this virus has me fed up.
Thank you all and I await your responses.
PS: The Sky Devices brand is from the United States, so it can't be that Chinese.
PS2: It should also be clarified that when I eliminate the virus with Kaspersky, more appear again, I attach screenshots below.
PS3: Yes, I know that this question has nothing to do with development, or ROM's or anything like that, I'm just desperate; this virus has me crazy, and I have also published my problem in the Kaspersky Community Forums, also in HTCMania , and nowhere do they answer me, and all I want is to get rid of this damn virus once and for all.
PS4: BTW, I am from Colombia, that is why in the screenshots that I attached you can see everything in Spanish.
Device Information
Brand: Sky Devices
Reference: Sky Devices Platinum 5.0M
OS installed: Android 7.0 Nougat (Official ROM)
Kaspersky AV version installed: Latest (v11.68.4.5635)

Categories

Resources