Cant delete a Malware app with root permission - General Questions and Answers

I can't delete following malware app with root permission.
com.android.provider.down3-1.apk
com.google.model.mi-1.apk
com.google.fk.json.slo.apk
It shows an error:rm failed for com.hola.launcher-1.apk, Operation not permitted
Can any help me out?

This is a malware that changed the immutable attrib
---------- Post added at 11:44 PM ---------- Previous post was at 11:40 PM ----------
svprm said:
I can't delete following malware app with root permission.
com.android.provider.down3-1.apk
com.google.model.mi-1.apk
com.google.fk.json.slo.apk
It shows an error:rm failed for com.hola.launcher-1.apk, Operation not permitted
Can any help me out?
Click to expand...
Click to collapse
You need busybox installed.
Try this commands:
chattr -AacdDijsStu *.apk
rm "your package name"
This time it will get removed without error
Enjoy

Bithacker01 said:
---------- Post added at 11:44 PM ---------- Previous post was at 11:40 PM ----------
You need busybox installed.
Try this commands:
chattr -AacdDijsStu *.apk
rm "your package name"
This time it will get removed without error
Enjoy
Click to expand...
Click to collapse
thanks bro.
It worked.

thanks Bithacker it worked. thank a lot

I have problem to remove "com.aiwozhh.ph.cz.apk" on my Android even I followed the below;
(Try this commands:
chattr -AacdDijsStu *.apk
rm "your package name" )
the error msg is "Operation not permitted".
Pls help!!!!!!!!!!
Thanks,
Piseth

Bithacker01 said:
---------- Post added at 11:44 PM ---------- Previous post was at 11:40 PM ----------
You need busybox installed.
Try this commands:
chattr -AacdDijsStu *.apk
rm "your package name"
This time it will get removed without error
Enjoy
Click to expand...
Click to collapse
Can this be done using terminal emulator?

Wil53664 said:
Can this be done using terminal emulator?
Click to expand...
Click to collapse
Yes, You can use any terminal emulator.
---------- Post added at 09:30 AM ---------- Previous post was at 09:23 AM ----------
Lim Piseth said:
I have problem to remove "com.aiwozhh.ph.cz.apk" on my Android even I followed the below;
(Try this commands:
chattr -AacdDijsStu *.apk
rm "your package name" )
the error msg is "Operation not permitted".
Pls help!!!!!!!!!!
Thanks,
Piseth
Click to expand...
Click to collapse
You need to have root access.
Try rooting your device, use Kingroot App
Then, try these commands
su
chattr -AacdDijsStu *.apk
rm "your package name"

How can I delete the su file from the /system/bin and /system/xbin I keep getting operation not permitted

Lim Piseth said:
I have problem to remove "com.aiwozhh.ph.cz.apk" on my Android even I followed the below;
(Try this commands:
chattr -AacdDijsStu *.apk
rm "your package name" )
the error msg is "Operation not permitted".
Pls help!!!!!!!!!!
Thanks,
Piseth
Click to expand...
Click to collapse
U can try with titanium backup once
If it doesn't work, reboot the phone, freeze the app fast when it boots and then try to uninstall it with titanium
It worked for me once
---------- Post added at 06:00 AM ---------- Previous post was at 05:58 AM ----------
Lim Piseth said:
I have problem to remove "com.aiwozhh.ph.cz.apk" on my Android even I followed the below;
(Try this commands:
chattr -AacdDijsStu *.apk
rm "your package name" )
the error msg is "Operation not permitted".
Pls help!!!!!!!!!!
Thanks,
Piseth
Click to expand...
Click to collapse
Firstly, root ur phone
If it's rooted
Fir type SU and enter
Then try to do whatever u want

Hey! I've been following this problem because I have the same situation, I have a malware named:
VPN
net.qwe.vpn
ad.apk
And I am using this method you just explain BUT the terminal emulator says No such file Not found something like that, there is anything else for me to do? How the freaking hell can I find the real name of this thing? Or what can i do in the emulator in order to be able to find it... Please help

MissSofy said:
Hey! I've been following this problem because I have the same situation, I have a malware named:
VPN
net.qwe.vpn
ad.apk
And I am using this method you just explain BUT the terminal emulator says No such file Not found something like that, there is anything else for me to do? How the freaking hell can I find the real name of this thing? Or what can i do in the emulator in order to be able to find it... Please help
Click to expand...
Click to collapse
did u write the package name?

Yes, I did, I even tried on the three names one by one, correct me If im wrong, I wrote this:
su
chattr -AacdDijsStu ad.apk
rm ad.apk
And it appear a line saying No file in directory or something about not finding it. Then I tried the other name:
su
chattr -AacdDijsStu net.qwe.vpn
rm net.qwe.vpn
And nothing... could you please tell me if what i wrote was correct? Or write it in the correct way with the name included
---------- Post added at 07:05 PM ---------- Previous post was at 06:26 PM ----------
Nevermind... I just found out I delete the virus previously . I did so much stuff with the cellphone, I think what got rid of it was a "Format" I applied with the PC. Because I plugged in my cellphone and my laptop, browse its files and find the malware, and I try to delete it but it say that I was not allowed, so I just select the cellphone and did a "quick format" you know? That thing you do with the USB Flash drive, and i did, and later I found this website and I tried what you said and on the screen appear a message saying not found.... I just right now check the system apps with root brower and I cannot find the malware, even with my ikarus antivirus! Im so happy! Thank you anyways this is such a helpfull blog... Im still going to run some scans though, to really make sure the malware is gone for good! thanks again

Related

can't cd ubuntu [screenshots]

I uploaded the screen shot, please take a look and tell me what can I do to solve this problem, I've been trying to install ubuntu for the past few days and all I get in the end is frustration
looks like your first cd command should be (with quotes):
cd "SD Card"
Then try :
cd ubuntu
*sigh* No, didn't work.
UnidH4x0r said:
I uploaded the screen shot, please take a look and tell me what can I do to solve this problem, I've been trying to install ubuntu for the past few days and all I get in the end is frustration
Click to expand...
Click to collapse
When using the CD command, have you tried CD /sdcard/ubuntu and if you have, have you tried to do LS? this will allow you to list out your current directory and allow you to see if the file is there. IF the file is there when you do LS in the directory, you will need to do "ls -l" which means, in laymen terms, "Please Show Me The Permissions Of The Files Here!" and I will direct you towards this walkthrough to help you understand what a little better what it displays -- LS -L and what it does.
This will allow you to make sure that you have permission to look at that folder. IF you do not... then you will be able to change the permissions using CHMod (also in that link). I have a feeling that you do not have the ability to see it and this is what is hindering your ability to CD into the file. Give it a try and good luck
Recap
-- Out Going Links --
LS -L and what it does.
You're right, I can't seem to change it to chmod 777. When I enter it, it gives me back the same thing but then when I ls -l to check, the permissions haven't been set..
---------- Post added at 08:08 PM ---------- Previous post was at 07:51 PM ----------
Ok nvm got it fixed, now I'm just trying to fix that bootubuntu: 29: error :/

[Q]

Hello everyone,
Been following posts here for a little while and I'm aware there is no right place to post this question. I have a rogers SGH-I727R which was rooted via SuperOneClick. After attempting to reinstall busybox I lost root access and can't quite seem to get it back. I've tried going through SuperOneClick to unroot/root however the program hangs and I'm forced to kill the process. The following are my results from "Root Checker Pro":
Superuser Application Status:Superuser application - version 3.0.7 - is installed!System File Properties for Root Access:Standard LocationCheck Command: ls -l /system/bin/su:Result: lrwxrwxrwx root root 2012-01-03 21:20 su -> /system/bin/busyboxAnalysis: File: su is a symbolic link pointing to another file: /system/bin/busyboxStandard LocationCheck Command: ls -l /system/xbin/su:Result: -rwsr-sr-x root root 22228 2012-01-0301:53*suAnalysis: Setuid attribute present and root user ownership present. Root access is correctly configured for this file! Executing this file can grant root access!Alternative LocationCheck Command: ls -l /sbin/su:Result: /sbin/su: Permission deniedAnalysis: File system permissions restricted and denied access.Alternative LocationCheck Command: ls -l /system/xbin/sudo:Result: /system/xbin/sudo: No such file or directoryAnalysis: File /system/xbin/sudo does not exist.Root User ID and Group ID Status:SU binary not found or not operating properlySystem Environment PATH: /sbin /vendor/bin /system/sbin /system/bin /system/xbinADB Shell Default User:ADB shell setting for standard access, stored in default.prop, is configured as: shell (non root) user - ro.secure=1Results provided on your SGH-I727R device
I apologize for the messy format. Any and all help would be greatly appreciated.
- Cam
Forget the one click, amd just use this method http://forum.xda-developers.com/showthread.php?t=1340526
---------- Post added at 03:44 PM ---------- Previous post was at 03:43 PM ----------
For one are you android 2.3.6? Id suggest just following the link i posted
I am currently on 2.3.5 and it is the LTE HD not sure if it makes a difference or not but I noticed I forgot to mention that, thank you for the timely reply.
silver03wrx said:
For one are you android 2.3.6? Id suggest just following the link i posted
Click to expand...
Click to collapse
+1
I could not get SuperOneClick to work after I did the ota update to 2.3.6 with my original SR.
I had to exchange that phone and my replacement is on 2.3.5
SuperOneClick worked on my 2.3.5 phone first try.
---------- Post added at 02:51 PM ---------- Previous post was at 02:49 PM ----------
Never mind. Just saw your reply above.
Not sure about the LTE HD.
Yes it does. The recovery tar is for i727 skyrocket. Dont try it on a different device. I not sure what to tell you as you have a different device.

[Solved] New 4.2.1 update + root partially lost with Superuser App

Hello
I have upgraded my TF300T with the last ASUS update (4.2.1).
After the upgrade, I have a partially rooted device.
All the apps already declared in the whitelist of Superuser are still gaining the root permission (root explorer...). But any new installed applications cannot access root
After a few hours of research with google I found that supersuser app is not compatible with Android 4.2 but I didn't any clue to repair that.
[UPDATE] Solution in post 4
Thx
Re: [Q] New 4.2.1 update + root partially lost with Superuser App
Do not uninstall anything that has root! I had the same problem when updating from ICS earlier in year. Will post update when I find my notes.
Sent from my DROID RAZR HD using xda app-developers app
---------- Post added at 12:35 PM ---------- Previous post was at 12:14 PM ----------
http://forum.xda-developers.com/showthread.php?t=1995207
Check out this thread - you can see where I thanked the poster near the end. I downloaded the binary as instructed. I use ES File Explorer. I checked the permissions of the installed su. I then copied the new binary replacing the old one. I checked permissions again. I don't remember if I had to change them or not but they were the same when I was done. I then believe I updated the binary from the market. Lastly with fingers crossed I rebooted. For me root was completely restored and I was good to go.
Sent from my DROID RAZR HD using xda app-developers app
Reilly1812 said:
Do not uninstall anything that has root! I had the same problem when updating from ICS earlier in year. Will post update when I find my notes.
Sent from my DROID RAZR HD using xda app-developers app
---------- Post added at 12:35 PM ---------- Previous post was at 12:14 PM ----------
http://forum.xda-developers.com/showthread.php?t=1995207
Check out this thread - you can see where I thanked the poster near the end. I downloaded the binary as instructed. I use ES File Explorer. I checked the permissions of the installed su. I then copied the new binary replacing the old one. I checked permissions again. I don't remember if I had to change them or not but they were the same when I was done. I then believe I updated the binary from the market. Lastly with fingers crossed I rebooted. For me root was completely restored and I was good to go.
Sent from my DROID RAZR HD using xda app-developers app
Click to expand...
Click to collapse
Thanks for your reply but it does not work for me.
Solution
After several tries, I found a way to solve my problem.
As it could be useful for some other people, here are the steps to repair your root
All credit goes to Koush for the fix
Requirements : adb / su binary
Follow this link and dowload su binary on your computer
Extract the contents to a folder
Start a cmd window
Run adb shell
In adb shell type
Code:
/system/bin/su
Check you are root (id or # prompt)
Remount system as RW
Code:
mount -o remount,rw /dev/block/mmcblk0p1 /system
Open a new CMD window and push the su binary from step 1 to the internal storage
Code:
adb push <your path>\su /sdcard/
From the adb session where you got root, type
Code:
mv /system/bin/su /system/bin/su.back
cat /sdcard/su > /system/bin/su
chmod 6755 /system/bin/su
Done (maybe reboot)
If it does not work for you, you can restore your old binary if you prefer...
worked for me
fuzzynco said:
worked for me
Click to expand...
Click to collapse
Is there any way to do this from a terminal app on the device? I just updated and had this happen. I'm suprised more people didn't have an issue/ no general warning went out.

[Q] Terminal not showing any output?

After I have succesfull root and unroot my terminal doesn't show any output only error messages. I'm also unable to re-root my device. When I copy psneuter to /data/local/tmp the terminal doesn't give any message nor an error message but psneuter isn't copy. I have verified it by createing in a file in /data/local/tmp and copy it to my sdcard. Gingerbreak doesn't work either and gives error "Couldn't extract asset". I have an orphaned su on my device but it has only user rights. Is there a way I can fix my terminal and re-root my device? Uh!
Are you sure the issue is not with the terminal app ?
you can try other terminal app to confirm
---------- Post added at 07:34 PM ---------- Previous post was at 07:20 PM ----------
Are you sure the issue is not with the terminal app ?
you can try other terminal app to confirm
appviz said:
Are you sure the issue is not with the terminal app ?
you can try other terminal app to confirm
---------- Post added at 07:34 PM ---------- Previous post was at 07:20 PM ----------
Are you sure the issue is not with the terminal app ?
you can try other terminal app to confirm
Click to expand...
Click to collapse
I tried many things I also tried a different terminal app to no avail. The solution was to copy a working busybox. I think toolbox would work, too. My busybox was out-of-order and toolbox was also replaced with busybox! As a result many blobs didn't work and the terminal was black. Su did work because it a standalone applet. Adb push to /data/local/tmp worked, too, but the terminal was black and many applet not working.

Z5 Rooting & Recovery Boot Mode (UK Xperia Z5 E6653)

Morning All,
I've been looking around for a stock Lollipop 5.1.1 Rom for the Xperia Z5 but haven't come across one yet, are there preferred site to browse for stock roms?
Also, is anyone aware of how to boot into recovery mode? Does a stock Sony Rom for Lollipop have it enabled?
http://developer.sonymobile.com/201...for-a-range-of-unlocked-xperia-devices-video/
Could you call *#*#2673#*#* in dial app?
If it doesn't blocked by security, we can enable non-secure ADB thanks to new app in Z5 system.
Does anyone know if someone working on a root method
AndroPlus said:
Could you call *#*#2673#*#* in dial app?
If it doesn't blocked by security, we can enable non-secure ADB thanks to new app in Z5 system.
Click to expand...
Click to collapse
Hello AndroPlus, sorry if this is noob question but could you explain what is it non secure adb and for what exactly it is useful? I tried dial that number and i was able to get into core settings menu with option switch non secure adb on but im still not sure what does it mean exactly and google is pretty silent about this as i can't find any informations about it
Sent from my E6653 using XDA Free mobile app
flakac said:
Hello AndroPlus, sorry if this is noob question but could you explain what is it non secure adb and for what exactly it is useful? I tried dial that number and i was able to get into core settings menu with option switch non secure adb on but im still not sure what does it mean exactly and google is pretty silent about this as i can't find any informations about it
Sent from my E6653 using XDA Free mobile app
Click to expand...
Click to collapse
You can use # (root) in adb shell if non secure adb is enabled.
We have to find how to disable dm-verity and ric to mod system partition, though...
AndroPlus said:
You can use # (root) in adb shell if non secure adb is enabled.
We have to find how to disable dm-verity and ric to mod system partition, though...
Click to expand...
Click to collapse
Nice,that's interesting, I owned every single Xperia Z and red alot about rooting on each single model but never heard about non secure adb.
But now I am huge fan of non secure adb,i hope someone will find how to disable ric!
Sent from my E6653 using XDA Free mobile app
AndroPlus said:
You can use # (root) in adb shell if non secure adb is enabled.
We have to find how to disable dm-verity and ric to mod system partition, though...
Click to expand...
Click to collapse
Does that mean you can backup TA partition in adb shell using dd command?
shoey63 said:
Does that mean you can backup TA partition in adb shell using dd command?
Click to expand...
Click to collapse
Yes, if it works.
Sometimes security feature blocks root to do any actions (they are stronger than root...), so someone should try it first.
shoey63 said:
Does that mean you can backup TA partition in adb shell using dd command?
Click to expand...
Click to collapse
Could anyone with a Z5 or Z5 Compact try this, please?
I'd love to know before buying one.
non-secure ADB works on my Z5 (sim-free UK).
What is the command to backup partitions?
okgnew said:
non-secure ADB works on my Z5 (sim-free UK).
What is the command to backup partitions?
Click to expand...
Click to collapse
Code:
dd if=/dev/block/platform/msm_sdcc.1/by-name/TA of=/sdcard/TA.img
hm. it does not work.
I get 'permissions denied'
okgnew said:
hm. it does not work.
I get 'permissions denied'
Click to expand...
Click to collapse
If you type
Code:
id
, what do you get?
[email protected]:/ $ id
id
uid=2000(shell) gid=2000(shell) groups=1004(input),1007(log),1011(adb),1015(sdcard_rw),1026(drmrpc),1028(sdcard_r),2993(
trimarea),3001(net_bt_admin),3002(net_bt),3003(inet),3006(net_bw_stats) context=u:r:shell:s0
---------- Post added at 09:48 PM ---------- Previous post was at 09:47 PM ----------
[email protected]:/ $ dd if=/dev/block/platform/msm_sdcc.1/by-name/TA of=/sdcard/TA.img
v/block/platform/msm_sdcc.1/by-name/TA of=/sdcard/TA.img <
dd: /dev/block/platform/msm_sdcc.1/by-name/TA: Permission denied
---------- Post added at 09:49 PM ---------- Previous post was at 09:48 PM ----------
W:\>adb push hosts /data/data
failed to copy 'hosts' to '/data/data/hosts': Permission denied
okgnew said:
[email protected]:/ $ id
id
uid=2000(shell) gid=2000(shell) groups=1004(input),1007(log),1011(adb),1015(sdcard_rw),1026(drmrpc),1028(sdcard_r),2993(
trimarea),3001(net_bt_admin),3002(net_bt),3003(inet),3006(net_bw_stats) context=u:r:shell:s0
---------- Post added at 09:48 PM ---------- Previous post was at 09:47 PM ----------
[email protected]:/ $ dd if=/dev/block/platform/msm_sdcc.1/by-name/TA of=/sdcard/TA.img
v/block/platform/msm_sdcc.1/by-name/TA of=/sdcard/TA.img <
dd: /dev/block/platform/msm_sdcc.1/by-name/TA: Permission denied
---------- Post added at 09:49 PM ---------- Previous post was at 09:48 PM ----------
W:\>adb push hosts /data/data
failed to copy 'hosts' to '/data/data/hosts': Permission denied
Click to expand...
Click to collapse
You are not root, you are shell user.
You are using secure ADB.
I run 'adb root' but it did not change anything
And 'su' returns 'command not found'
After unsecuring ADB is it possible to push su and busybox via ADB with a computer
Thekjp95 said:
After unsecuring ADB is it possible to push su and busybox via ADB with a computer
Click to expand...
Click to collapse
Not that I could see. I tried a few commands which didn't work but even if you did dm-verity would have to be disabled otherwise the system would bootloop
Sent from my E6653 using Tapatalk
@DooMLoRD will you be willing to do work on the z5

Categories

Resources