Suggestions for answer from freaking sony ericson phones ... how cool is that actually!?
So I deleted market app with Titanium Backup... w/o having actually a backup of it.
I tried to install v1.smth ... it installed with the following message: "sorry the application market (process com.android.vending) has stopped unexpectedly", then I tried with v2.26 with the same outcome (those 2 versions actually installed unlike the others that didn't even do that).
I even tried to copy the apk files under /system/app folder on phone with Root Explorer, and still no luck. I need to change the permissions maybe somehow?
I am out of ideas... I don't intend to flash soon and don't have a backup btw.
Thank you
Manage finally to install market app 2.2.7 I forgot to mention I am running on Eclair. Coppied the apk file under /system/app rebooted into openrecovery and did this:
Mioze7Ae said:
Here's the market fix update:
Copy to OpenRecovery/updates/market-227-fix-for-eclair.zip on the SD card
Reboot into OpenRecovery
"Wipe Dalvik Cache"
"Wipe Cache Partition"
"Apply Update" > "market-227-fix-for-eclair.zip"
Reboot
After you boot into Android, you may have to delete the Market cache (Settings > Applications > Manage Applications > Market, "Force stop", "Clear cache"). I'm not sure if that's needed or not.
Click to expand...
Click to collapse
I put the attachment here also if someone else would need it, and thank you for the fix, and also I wrote the answer to my question if needed, because I know I couldn't find a straight answer myself
Hi everyone!
I'm having difficulties with the malware that I, nor all AV and anti-malware apps I've tried cannot delete. I'm sorry if this thread was discused previously, if so just send me a link.
Here's what happened:
I clicked on a link in a web browser, and than phone flashed several times as application "Firewall" was starting.
Anyway AV app detected a virus and tried to clean it, but failed.
The malware is on the phone as "SecurityService" system app in /system/priv-app/.gmp.apk
I cannot delet file it's write protected. I've tried several methods nothing worked.
Any ideas?
If you're rooted, you can uninstall system apps.
Sent from Hell
No, I cannot... Can you give me some tip how to, maybe I Didn't try it.
Most of the time the app which you get when you root can be used to uninstall system apps.... If you don't seem to find it google for root apps uninstaller and install one of them
Sent from Hell
Nope... I tried several of them but they all failed. They either crash, freez or say something like "unable to uninstall", "failed to uninstall", "can't uninstall for unknow reason" and things like that. This malware protected itself somehow. Any other ideas?
dtalic said:
/system/priv-app/.gmp.apk
Click to expand...
Click to collapse
Just delete the folder with a root file explorer. If the "." in front of the file name is correct, it looks like it's trying to mark itself as a hidden file, which may be why the other methods aren't working.
Yes there is dot (.) in front of file name. But if you are suggesting me to delete folder "priv-app" where the file is, I don't think that's a good idea at all. It's packed with system apps files such as dialer, calendar, contacts, etc... Anything else?
I could show you some screenshots if it would help anyone to maybe figure out what to do... Although I wrote what is going on...
dtalic said:
Yes there is dot (.) in front of file name. But if you are suggesting me to delete folder "priv-app" where the file is, I don't think that's a good idea at all. It's packed with system apps files such as dialer, calendar, contacts, etc... Anything else?
Click to expand...
Click to collapse
Don't delete the folder, delete the apk
Sent from Hell
I cannot delete it. Root Explorer just say "can`t delete file" (or something like that). And dozens of other apps say the same. That is my main problem.
dtalic said:
I cannot delete it. Root Explorer just say "can`t delete file" (or something like that). And dozens of other apps say the same. That is my main problem.
Click to expand...
Click to collapse
You can delete anything in TWRP. Just mount system and then use unternal file manager to delete the app.
That sounds promising. Im quite unfamiliar and new to all this, can you either explain me how to, or send me a link with explanation...
dtalic said:
Yes there is dot (.) in front of file name. But if you are suggesting me to delete folder "priv-app" where the file is, I don't think that's a good idea at all. It's packed with system apps files such as dialer, calendar, contacts, etc... Anything else?
Click to expand...
Click to collapse
I should have paid more attention to the file path. Since Lollipop, installed apks are given their own folders. It looks like you're on Kitkat or earlier.
Most root explorers have a toggle between read only and read/write. Check that.
Yes i know about that. Switching to r/w mode didn't help.
i googled twrp as optimumpro suggested and it seems like something that really would work, BUT my phone is not supported any other suggestions?
I also tried "force remove app (by recovery exploit)" option offered by titaniumbackup, but that also failed saying that file couldnt be found!?
dtalic said:
That sounds promising. Im quite unfamiliar and new to all this, can you either explain me how to, or send me a link with explanation...
Click to expand...
Click to collapse
You need to have TWRP recovery. Boot in recovery, go to Mounts and mount System. Then go back to the main screen, choose Advanced, then File Manager. Go to the directory where your file is, click on it, then choose Delete. You'll get a warning that operation is irreversible. Swipe to execute. That's it.
If that doesn't work for you, then reinstall your current rom without wiping data. This way, your System partition will be reformatted, original system apps installed and data preserved. Depending on the rom you flash, you may lose root and/or Supersu, so, you'll have to redo those.
Ok, I think im following you, optimumpro. I also saw some instructions on youtube. But did you see that i wrote that my phone is not supported in twrp. I need to install it, right? I mailed them, maybe they will add my phone for installation too. Or can i risk trying to install twrp using settings for some other device? There is a ZTE, but not my model...
dtalic said:
Ok, I think im following you, optimumpro. I also saw some instructions on youtube. But did you see that i wrote that my phone is not supported in twrp. I need to install it, right? I mailed them, maybe they will add my phone for installation too. Or can i risk trying to install twrp using settings for some other device? There is a ZTE, but not my model...
Click to expand...
Click to collapse
Unlikely that another device recovery would work. You can use terminal to execute rm "your file" in the directory your file is in. First type su to get root rights. If your rom has no terminal, get it from f-droid. Also see if whatever recovery you use has a file manager or terminal. But again, just reinstall your rom without wiping data...
Ok, here's where im now: tried to use terminal to remove file, but couldn't, it said that i don't have permissions for that. Tried to change permissions, couldn't. As i see it, i should find a way to delete file in recovery. Because i couldn't install twrp, i looked for another recovery file manager. Found "aroma", tried it, but also couldn't install it (none of several versions, followed instructions, but just got message something like "not able to verify... ",something like that... Now, im willing to reinstall rom, but how do i do it? I don't even care for wiping data, I'll just make backup and start all over again
That type of malware usually makes itself immutable so that it can t be erased (even when in recovery, immutable that is), and by reading your post I guess that it s what is happening on your phone.
It s easy to undo if you are rooted and have busybox installed.
Open your android terminal, or connect your phone through adb, then type:
lsattr system/priv-app/.gmp.apk
Most likely it will show something like:
-------------iA----------
The "i" means that the file is immutable, ie is write protected.
To undo this type:
busybox mount -o remount,rw /system
then type:
chattr -i system/priv-app/.gmp.apk
Now you can erase the file, and don t forget to erase its dex in the dalvik cache ([email protected]@[email protected]).
The malware may have some hidden stuff in the system/etc or the system/usr folder(check the install date and time, it should be the same than for .gmp.apk), and it may be immutable too so if that s the case just follow the above procedure again (you ll have of course to change the path, for example if there s a suspicious file called xyz in the system/etc folder then type chattr -i system/etc/xyz).
Let us know if it worked...
Samsung Galaxy S5, Android 6.0.1, Titanium Backup Pro 8.1.0.
According to Application Manager, Titanium Backup is taking up a reported 3.03 GB of data. When i update apps, sometimes it tells me i am running out of space, and it lists Titanium Backup's 3 GB as the biggest user. I have changed the application to external storage.
I tried changing the backup directory to external backup. Right now, on the main page, it says Backup directory: (red x) not available. I click MENU->Prefeences ...->Backup Folder Location and it says in red: The current backup location ("[External Storage]/Android/data/com.kerimidas.TitaniumBackup/backups") cannot be accessed. It also lists: Storage provider: Filesystem, The DETECT button has a solidus next to it, and on bottom of it there is an orange folder and the text: This folder is not writable. Clicking Detect and choosing SD Card returns a message: No backup location was found.
So, i am clicking (click to change) and choosing DocumentProvider storage. Open from shows SD Card. I click Android->data->com.keramidas.TitaniumBackup->backups and click select. A popup says success (it had more, but disappeared quickly), DETECT! has [External Storage] listed, and under it there is a blue circle with an i, that says: This folder contains 377 backups. The red message is still on top and USE THE CURRENT FOLDER is disabled. So, i choose click to change again, choose 1 directory up, after it comes back i choose backups from the list of directories, and now it says [External Storage]/backups and USE THE CURRENT FOLDER is enabled. I click that and it tells me it will use it next time.
I get the running apps (touching left of the main button on the phone) and swipe away Titanium Backup. Go back in and Backup Directory shows a green check and the correct directory. Reboot phone. Start Titanium Backup. Main page shows Backup Directory: (red x) not available.
1) How do i get TitaniumBackup to use the external directory.
2) When i update and Android says that TitaniumBackup is using 3GB, does that mean internal or external memory?
Once you grand Super SU access, open the super su and in option select "Enable SU during boot".
See if it helps.
CeBits said:
Once you grand Super SU access, open the super su and in option select "Enable SU during boot".
See if it helps.
Click to expand...
Click to collapse
Nope.
Here's what i did. Opened SuperSU and checked that box, swiped it away. Opened TitaniumBackup, made the change, exited, when back in, exited, rebooted, checked it, and it had the error again. SuperSU still shows its change, however.
I'm using SuperSU Free. Is this something that requires pro?
chacham said:
Nope.
Here's what i did. Opened SuperSU and checked that box, swiped it away. Opened TitaniumBackup, made the change, exited, when back in, exited, rebooted, checked it, and it had the error again. SuperSU still shows its change, however.
I'm using SuperSU Free. Is this something that requires pro?
Click to expand...
Click to collapse
No i don't think so. I am using free as well. Sorry I don't have another idea for now
CeBits said:
No i don't think so. I am using free as well. Sorry I don't have another idea for now
Click to expand...
Click to collapse
Thank you for the help, even if it didn't help. TitaniumBackup is somewhat useless to me right now, because i can't backup on the phone, due to lack of space. I guess i can continuously change the setting after every reboot, but that seems tedious.
To test further, i uninstalled and reinstalled TB, but that didn't help. TB did give me a warning though:
The "Mount namespace separation" seting in SuperSU might not work reliably on some platforms. If you encounter any issues in TB, please try changing it.
Click to expand...
Click to collapse
So i changed the setting in SuperSU, rebooted, changed the backup directory in TB, rebooted, and the problem still persists. (I set the SuperSU setting back and rebooted since then.)
chacham said:
1) How do i get TitaniumBackup to use the external directory.
Click to expand...
Click to collapse
TitaniumBackup had no ability to write to the extSD card after a recent Android upgrade (Nougat). After attempting changes/fixes to SU and Busybox nothing worked.
The thing that solved it was using the following location...
[extSD#]/Android/data/com.keramidas.TitaniumBackup
For some reason after recent Nougat upgrade TB has no write access to any other extSD card location.