What's new
  • Welcome to PHCorner forums. Take a moment to sign up and gain unlimited access and extra privileges that guests are not entitled to, such as: All that and more! Registration is quick, simple and absolutely free. Join our community today!

How to remove malwares on you android phones

PapaDah

Addict
Joined
Mar 2, 2016
Messages
353
Reaction
107
Here is how you can remove malwares without flashing a new rom.
Busybox Installer
Terminal Emulator
Root Explorer Pro
Once you have installed everything here is what to do in steps:
[Note: USB DEBUGGING MUST BE ENABLED Turn on Usb Debugging by going to settings> developer options> Usb debugging]
1) Turn off wifi/3G/4G, and then go to settings> apps> all> disable time service and monkey test. (If already frozen via titanium backup or other app) skip this.
2) Open Root explorer go to system/xbin and see if there is any file starting with a dot (eg: .ext.base) also note that every (.) file has diff permission then the rest of other files. So just remember those files with dots because those are the one that you're going to remove in terminal emulator.
3) Go back to system and then go to Priv-app folder and look for these two files
[1] cameraupdate.apk [2] providerCertificate.apk and also notice permission of these two files are different then the rest of Apks so these two are the base of MT TS virus and needs to be deleted.
4) Open Terminal Emulator
5) WHAT TO TYPE IN TERMINAL EMULATOR
su
mount -o remount,rw /system
cd system/priv-app
chattr -iaA providerCertificate.apk
rm providerCertificate.apk
chattr -aA cameraupdate.apk
rm cameraupdate.apk
cd ..
cd system/xbin
chattr -iaA .b
rm .b
chattr -iaA .ext.base
rm .ext.base
chattr -iaA .sys.apk
rm .sys.apk
[NOTE: If you are using older version than KK you need not to type priv-app just type cd system/app]
6) Please make sure you type the file name correctly just as providerCertificate C is capital otherwise permission wont change.
7) Exit Emulator
 

calypso

Elite
Here is how you can remove malwares without flashing a new rom.
Busybox Installer
Terminal Emulator
Root Explorer Pro
Once you have installed everything here is what to do in steps:
[Note: USB DEBUGGING MUST BE ENABLED Turn on Usb Debugging by going to settings> developer options> Usb debugging]
1) Turn off wifi/3G/4G, and then go to settings> apps> all> disable time service and monkey test. (If already frozen via titanium backup or other app) skip this.
2) Open Root explorer go to system/xbin and see if there is any file starting with a dot (eg: .ext.base) also note that every (.) file has diff permission then the rest of other files. So just remember those files with dots because those are the one that you're going to remove in terminal emulator.
3) Go back to system and then go to Priv-app folder and look for these two files
[1] cameraupdate.apk [2] providerCertificate.apk and also notice permission of these two files are different then the rest of Apks so these two are the base of MT TS virus and needs to be deleted.
4) Open Terminal Emulator
5) WHAT TO TYPE IN TERMINAL EMULATOR
su
mount -o remount,rw /system
cd system/priv-app
chattr -iaA providerCertificate.apk
rm providerCertificate.apk
chattr -aA cameraupdate.apk
rm cameraupdate.apk
cd ..
cd system/xbin
chattr -iaA .b
rm .b
chattr -iaA .ext.base
rm .ext.base
chattr -iaA .sys.apk
rm .sys.apk
[NOTE: If you are using older version than KK you need not to type priv-app just type cd system/app]
6) Please make sure you type the file name correctly just as providerCertificate C is capital otherwise permission wont change.
7) Exit Emulator
Or download malwarebytes.. Hehee
 
Comment

banditz

Addict
Here is how you can remove malwares without flashing a new rom.
Busybox Installer
Terminal Emulator
Root Explorer Pro
Once you have installed everything here is what to do in steps:
[Note: USB DEBUGGING MUST BE ENABLED Turn on Usb Debugging by going to settings> developer options> Usb debugging]
1) Turn off wifi/3G/4G, and then go to settings> apps> all> disable time service and monkey test. (If already frozen via titanium backup or other app) skip this.
2) Open Root explorer go to system/xbin and see if there is any file starting with a dot (eg: .ext.base) also note that every (.) file has diff permission then the rest of other files. So just remember those files with dots because those are the one that you're going to remove in terminal emulator.
3) Go back to system and then go to Priv-app folder and look for these two files
[1] cameraupdate.apk [2] providerCertificate.apk and also notice permission of these two files are different then the rest of Apks so these two are the base of MT TS virus and needs to be deleted.
4) Open Terminal Emulator
5) WHAT TO TYPE IN TERMINAL EMULATOR
su
mount -o remount,rw /system
cd system/priv-app
chattr -iaA providerCertificate.apk
rm providerCertificate.apk
chattr -aA cameraupdate.apk
rm cameraupdate.apk
cd ..
cd system/xbin
chattr -iaA .b
rm .b
chattr -iaA .ext.base
rm .ext.base
chattr -iaA .sys.apk
rm .sys.apk
[NOTE: If you are using older version than KK you need not to type priv-app just type cd system/app]
6) Please make sure you type the file name correctly just as providerCertificate C is capital otherwise permission wont change.
7) Exit Emulator
ask ko lang i enter koba bawat type ko o tuloytuloy lng pag type ko ,lakabang sample screenshot ndi ko sanay sa emulator ?hehe,pero ngawa kong paltan ng super su kingroot ko my ss kasi yung guide ss sa emulator.
 
Comment

PapaDah

Addict
ask ko lang i enter koba bawat type ko o tuloytuloy lng pag type ko ,lakabang sample screenshot ndi ko sanay sa emulator ?hehe,pero ngawa kong paltan ng super su kingroot ko my ss kasi yung guide ss sa emulator.
Wala ako SS sir
 
Comment

PapaDah

Addict
QUOTE="banditz, post: 1431940, member: 495629"]kada type ba i enter ko?[/QUOTE]
Su <enter> lahat sir may enter yan kaya bumababa sya
 
Comment

Rawrrrrr

Eternal Poster
Yung virus sa phone ko ang kapal talaga ng mukha. Ayaw magpatanggal. Kahit anong anti virus na na try ko. Trojan pa naman. Tapos hindi pa rooted phone ko. Tssss anyway, thanks for sharing. :D
 
Comment

banditz

Addict
at dun sa system/xbin wala naman ako nakitang mga my dot na file ,sa private app lang nakita ko ung camera at ung isa ibig sabihin un lang 2 na yun itype ko sa emulator? pasensya dami ko tanong hehe ! safe bato kahit magkamali?
 
Comment

Rawrrrrr

Eternal Poster
Na try ko na yung trojan killer sa playstore kaso wala epek. hahaha hinayaan ko nalang. Saka kailangan yata rooted talaga ang phone para gumana. PapaDah
 
Comment

PapaDah

Addict
at dun sa system/xbin wala naman ako nakitang mga my dot na file ,sa private app lang nakita ko ung camera at ung isa ibig sabihin un lang 2 na yun itype ko sa emulator? pasensya dami ko tanong hehe ! safe bato kahit magkamali?
Sure ka sir ? Walang (.) Sa xbin mo ? Kung ganun ung dalawa lang po ,

Na try ko na yung trojan killer sa playstore kaso wala epek. hahaha hinayaan ko nalang. Saka kailangan yata rooted talaga ang phone para gumana. PapaDah
Yes po kailangan rooted kasi system na ung gagalawin jan
 
Comment

Online statistics

Members online
1,734
Guests online
2,090
Total visitors
3,824

Forum statistics

Threads
1,090,623
Messages
18,312,130
Members
1,525,160
Comments
1,191,417
Attachments
1,424,720
Profile posts
97,940
Top