Hey guys, this is my first thread, and I'm a bit confused on the app. Today I'll tell how did I stop the freaking google 'malware' from installing and updating every single day. This would work on any rooted device that has access to the data partition, maybe it could be reproduced via adb without root.
First off, I searched everywhere looking on how to disable, uninstall, break, or do anything to this forced battery hog. The best answers were using 'pm hide' on the package but this caused a very high battery usage, due to the file dependencies. So I searched where it was installed. Luckily enough, it is an user app, so it means I would find it on /data/app and /data/data. I will use solid explorer, but any file manager with root access and chmod to change permissions should do just fine.
Once we locate the folder (/data/app/com.google.android.instantapps.supervisor-1 in my case) we delete it. Utterly. After that, we will create a file, and name it exactly the same as the folder did. This is a dummy file that the system will believe it is a folder, and will try to install the application inside it. We fill that file with enough random characters for making the system think it can't just delete it (sometimes cleaners point empty files as worthless and wipe them out)
Now we need to make the dummy file unremovable for anyone but us, by using chmod. Solid explorer has a nice interface for that. We long press the file, enter to properties and set the permission to 0 0 0 (attributes tab). This makes play store unable to delete the file to recover the old folder, and when it tries to download the package, it will fail because it won't have a respective folder to be sent to.
After this, we reboot the phone and see that google play services for instant apps has lost roughly 90% of it's size, and when we enter settings>google>google play instant it'll ask for installation. I was bold enough to accept, just for getting an error dialogue when it tried to install itself.
Known issue: The app reinstalls once again after reboot. The cause is that, when android can't install the app in the first folder (the one that ends with a -1), it can create a second one (ending with a -2 instead), like an alternative. This is solved by just doing the same procedure above on the second folder, and you will end up having two dummy files instead of one. A third folder cannot show up, or at least it didn't in my phone.
Notes: You can repeat this with the folder in /data/data and any other data partition level instant app folder, but I wouldn't do it because I already broke all functionality since I deleted the base apk, and the app size is less than 300KB now so I don't think the trouble is worth it.
You must whitelist these files from any memory cleaner, i.e SD maid corpse finder will delete it thinking it's a leftover of an old app
WARNING; I'M NOT RESPONSIBLE FOR ANY MISLEADS, WRONGS, OR PLUTONIUM-UNSTABLE ROMS THAT MAY EXPLODE IN ANY WAY. YOU ARE THE RESPONSIBLE FOR YOUR DEVICE'S SAFETY AS THIS ISN'T EVEN FULLY TESTED IN MY PHONE AND I DON'T KNOW THE ULTIMATE CONSEQUENCES OF DOING THIS. YOU ARE WARNED.
PD: Please make some suggestions about how I made the thread, I did what I think it's my best
I saw this on my device, and only found little info/threads, with almost zero content/analysis. Aparently the kindle app leaves a bunch of random files around. And since the prefix is "RCE" i am a little paranoid, since that usually means "Remote code execution" and is usually associated with exploits
Files:
CS_JIT_Animation.mp4
jit_cs_positive_preview.png
rce_plugin_strings_resource_cs_CZ.json.min
rce_plugin_strings_resource_de_DE.json.min
rce_plugin_strings_resource_en_US.json.min
rce_plugin_strings_resource_es_ES.json.min
rce_plugin_strings_resource_fr_FR.json.min
rce_plugin_strings_resource_it_IT.json.min
rce_plugin_strings_resource_ja_JP.json.min
rce_plugin_strings_resource_nl_NL.json.min
rce_plugin_strings_resource_pt_BR.json.min
rce_plugin_strings_resource_v2_TYPO_TEST.json
rce_plugin_strings_resource_zh_CN.json.min
All Attached in a zip created by the android native file manager.
Current places mentioning this
https://forums.oneplus.com/threads/unkown-files-in-download.948860/
https://talk.sonymobile.com/t5/Xper...erious-Files-in-Downloads-Folder/td-p/1353185
https://forum.xda-developers.com/xperia-xz1/help/phone-mysterious-files-download-folder-t3871763
https://www.youtube.com/watch?v=eMmx5tRm0jM (one of the files is a video, someone uploaded to youtube ...and to https://gfycat.com/generouspinkcolt
How to make those files appear for you:
Install kindle from the google app store
if you already have it installed, or want to see the files again after you deleted, Stop the app and delete all storage. (nothing will be lost, this app syncs everything and some more to the amazon servers)
perform the first Sync on kindle app
Now, insert a pen drive and open the native android File Mananger and look at the local Download folder
Files are somewhat hidden:
If you look into the download folder with any other app (I tried, blackberry file manager, oi file manager, Ghost Commander, and Termux --after enabling the storage setup)
Files probably have a weird attribute or ownership... but the native android file manager does not show anything other than creation date! And every single file operation (copy, move, compress) reset the information to "regular user, creation time set to now". So either I see them on the Native File Manager, without any information available, or I do not see the files until I destroy the information.
Android version is not important (seems to happen on several versions) and has been happening for a while (First mention seems to be Nov2018)
Anyone have any idea what this is? I know I will probably reverse eng the kindle app at some point, wast a bunch of time, and realize it is just some dumb amateur library badly implemented by amazon... or maybe not. I think at this point I am most curious as to how the app "hides" the files from most everything.
My phone came with two file managers but only one has this file. It's spelled incorrectly and 6 other folders were modified at the exact same date/time as this one - except they're empty. There's no option for hidden files in the so so lame file manager, either. Nothing in Google search or here, either. I'm wondering if it's a virus since it's so obviously a typo. Thanks!
WanderWoman said:
My phone came with two file managers but only one has this file. It's spelled incorrectly and 6 other folders were modified at the exact same date/time as this one - except they're empty. There's no option for hidden files in the so so lame file manager, either. Nothing in Google search or here, either. I'm wondering if it's a virus since it's so obviously a typo. Thanks!
Click to expand...
Click to collapse
It is a system app, not a virus(technically, viruses do not exist in android, there is only malware and adware or worms that you mistakenly give permission to access to your device, such as clicking links with malicious code, opening photos that have malicious code, answring texts that have malicious code,etc.., that is why it is essential to be completely aware of what you are clicking on.
Root is required in order for you to view the contents of what is in your system files/folders. Preferably root and a file manager that has a "root explorer" feature.
Sent from my SM-S767VL using Tapatalk
I can no longer find the media files that used to be in /storage/emulated/0/WhatsApp until Android 10. I've searched the following locations with no luck:
/storage/emulated/0/Android/data/com.whatsapp
/storage/0BD9-A981/Android/data/com.whatsapp
/data/data/com.whatsapp
/data/user/0/com.whatsapp
/data/user_de/0/com.whatsapp
Any help is welcome. Thank you!
KaMyKaSii said:
I can no longer find the media files that used to be in /storage/emulated/0/WhatsApp until Android 10. I've searched the following locations with no luck:
/storage/emulated/0/Android/data/com.whatsapp
/storage/0BD9-A981/Android/data/com.whatsapp
/data/data/com.whatsapp
/data/user/0/com.whatsapp
/data/user_de/0/com.whatsapp
Any help is welcome. Thank you!
Click to expand...
Click to collapse
Try to locate the folder using the command:
Code:
ls /data/data/com.whatsapp*
VD171 said:
Try to locate the folder using the command:
Code:
ls /data/data/com.whatsapp*
Click to expand...
Click to collapse
I just found the folder. But thanks anyway. Here's the location for those who also need it:
/storage/emulated/0/Android/media/com.whatsapp/WhatsApp
Hi.. In Android 10, Whatsapp folder used to be in root folder (emulated/0), but in Android 11, it has moved to Android/media folder. The big problem it has is - everytime you wipe data to install a ROM, Whatsapp along with media needs to be backed up. Does someone know a workaround here so that WhatsApp has its folder in the root directory? Thanks.
I wouldn't call /sdcard (/storage/emulated/0) the root directory, but ok. Whether the whatsapp folder is placed directly in /sdcard or in /sdcard/Android/media doesn't make a difference as to whether you have to back it up, as it will be on the userdata partition in both cases.
how about my case, im using samsung android 11, and i clone whatsapp with the built-in app = dualapp, but the problem is i can't received a media file from other people like document, images, videos, etc. and cannot sending any files too from my device, i've checked the dualapp\android\media and there is no com.whatsapp folder inside. anyone can help me with this case?
thanks before.
maleforwork said:
how about my case, im using samsung android 11, and i clone whatsapp with the built-in app = dualapp, but the problem is i can't received a media file from other people like document, images, videos, etc. and cannot sending any files too from my device, i've checked the dualapp\android\media and there is no com.whatsapp folder inside. anyone can help me with this case?
thanks before.
Click to expand...
Click to collapse
I am in the same boat. I can no longer find the dual WhatsApp files, and that version is like a redhead stepchild, cannot add stickers, doesn't recognize file types, etc. All since Android 11 moved the dual app files "somewhere".
maleforwork said:
how about my case, im using samsung android 11, and i clone whatsapp with the built-in app = dualapp, but the problem is i can't received a media file from other people like document, images, videos, etc. and cannot sending any files too from my device, i've checked the dualapp\android\media and there is no com.whatsapp folder inside. anyone can help me with this case?
thanks before.
Click to expand...
Click to collapse
Same here, it happened this morning. I am having my exams and because of this I can't access my pdf notes anymore. All of this is so frustrating :/
Someone also got trouble with loading the "WhatsApp Images" Folder over a File Explorer?
When i wanna access it from several Apps like File Explorer or Backup Apps, it will load like endless, some minutes at least.
Have mor than 10 000 Pictures in it but before it loaded always immediately.
If i am in TWRP i can access the Folder but don't scroll down with the bar, just around 1/3 of the Page. Only if i scroll over the Display every File it will show me someting, otherwise it shows just Empty over some Files, like there would be a File Limitation?
Chrypsisilon said:
Someone also got trouble with loading the "WhatsApp Images" Folder over a File Explorer?
When i wanna access it from several Apps like File Explorer or Backup Apps, it will load like endless, some minutes at least.
Have mor than 10 000 Pictures in it but before it loaded always immediately.
If i am in TWRP i can access the Folder but don't scroll down with the bar, just around 1/3 of the Page. Only if i scroll over the Display every File it will show me someting, otherwise it shows just Empty over some Files, like there would be a File Limitation?
Click to expand...
Click to collapse
Exactly the same here. Switched to Samsung android 11 3 weeks ago and since a few days Whatapp app backup (80mb) took an hour instead of less than 2 minutes. Quickly found out that WA folder had been moved and that it now takes 10-60 seconds to open WA images folder (9400 pics) instead of < 1sec at previous location. Yesterday I reinstalled WA and everything was placed back in the original folder (0/WhatsApp) and everything was fast again. But tonight (00:00) everything has been moved to Android/media/com.whatsapp and the backup of whatapp is already running for 50 minutes now. The status for a very long time is: "Prepairing google drive backup".
This is very frustrating and I don't understand how they can ruin this for so many people (see google store reviews).
I don't understand why one location is so much slower than another directory. Is exactly the same storage. Does it have to do with indexes? Who is going to offer a solution for this, Samsung or Whatsapp?
Google or WhatsApp have had to get a solution, but if the wan't?
Because i am using OnePlus, so we know that it shouldn't be a Mobile Phone Manufacturer issue.
Crazy that even the built in Backup won't work because i just use other ways like "FolderSync" or "Synology DS Cloud" Backup.
Even Built in File Explorer or such as "X-Plore" and whatever, won't load the Folder until there are gone some Minutes.
Can also just guess why, but Indexing should be done if it is.
Did also some other trys with a Folder which has just 5130 Pictures (copy of some Pictures).
Used "X-plore" to easy Move the Folder around.
- Move Picture Folder in "Android" Folder will work well but every of the 3 subfolder "data", "media", "obb" will get in trouble.
- Move Picture Folder into "data", it will take a longer Time, also "obb" Folder which is a kind faster.
- Move Picture into "media", it will moved immeaditly like usual at the Phone.
Access Picture Folder just under "Android" Folder it will work fine, but if you wanna Access this Folder under "data", "media" or "obb" you have to wait and enjoy the running circle symbol.
So is the question, what is different with all the subfolder under "Android", like they would have a Speed limit or additional encryption?
First you need to do a whole backup of your chat so that you can migrate the chat information from respectable whatsapp to Fouad Whatsapp.
I am also facing this problem yesterday when I upgrade my smartphone from android 10 to android 11. But after some research, I found the solution. Here are the complete details:
Whatsapp folder in android 11
For images
Android\media\com.whatsapp\WhatsApp\Media\WhatsApp Images
Guys, I'm using Samsung phone too and my WhatsApp media files is in a mess too since the location change a couple of months ago. Now I have media stores in these 2 folders, just like you guys:
1) Whatsapp/Media
2) Android/media/com.whatsapp/Whatsapp/Media (new location)
Now my issue is, I have photos back from year 2016. I can view it in Whatsapp chat (some of them can't locate anymore) but i can't find it in both the directories mentioned above. When I select 'view in gallery', and then i use MiXplorer to check the image location, it says: (refer to attached screenshots)
Path: content://com.whatsapp.provider.media/item (which i guess it is in obb folder)
How is this even possible? The image is not lost but it is not accessible by me anymore and I cant back it up. Due to this mess, I really want to tidy up my media files and move them into single location, presumably the new location but the missing files stop me from doing it. It's bugging me for a few months now
maleforwork said:
how about my case, im using samsung android 11, and i clone whatsapp with the built-in app = dualapp, but the problem is i can't received a media file from other people like document, images, videos, etc. and cannot sending any files too from my device, i've checked the dualapp\android\media and there is no com.whatsapp folder inside. anyone can help me with this case?
thanks before.
Click to expand...
Click to collapse
I had installed beta APK and it has some bugs. Today I've decided tou reinstall the sable APK when i uninstalled the beta App the whole folder form android/media also deletd and I've lost everything thing. I had backed up to google drive a few days ago now i could not found the backup. The backup i got is of Dec 2020.
Guys, try this path: <SD-CARD>/Android/media/com.whatsapp/WhatsApp
I found all my whatsapp media there since android 11 upgrade (Samsung M31)
All my files keep on /sdcard/WhatsApp/Media even on Android 11.
Some solution here about the Access Time from the Images Folder?
When i Access (does not matter which File Explorer or Backup Tool) then i have to wait over 10 Minutes and most of them still won't show any pictures. Of Coursee i have over 10'000 Files in it but at the old Location it took me just a few seconds.
Chrypsisilon said:
Some solution here about the Access Time from the Images Folder?
When i Access (does not matter which File Explorer or Backup Tool) then i have to wait over 10 Minutes and most of them still won't show any pictures. Of Coursee i have over 10'000 Files in it but at the old Location it took me just a few seconds.
Click to expand...
Click to collapse
Any OS has problems to deal with folders that contains millions of files.
Certainly, you need to clean the folder.
This is driving me nuts. I have a file in my internal Download folder (Android 10. internal Download folder is the standard destination for most downloads, though some are directed to Download on SD Card) that I don't recall downloading.
I can't find any record of the download in Chrome, Firefox, download managers, etc. I can't figure out what source I might have downloaded it from, or which app was used to download it.
There was a notification of the completed download, on my Android notifications, which played the file when tapped. So Android KNOWS this file was recently downloaded. (I.e. I didn't just forget I had it there. It wasn't moved from another directory.) The last modified timestamp confirms the file is recent (though that could be the result of move/copy).
Tapping the notification played the file, and caused the notification to disappear, and now I seem to have no way of tracking it down.
The only clue is the filename, which seems to be a UUID. Like so
fb249a29-e864-42be-b044-7c4c94d902d0.mp3
This is not a file that would be widely available online. It would likely have come from a close contact. (Voicemail download, social media post, file sharing, etc.)
Can someone send a file without me actively accepting it?
What type of server, or app, would give UUID filenames to .mp3 files?
(For example, Google Voice voicemail downloads have the format
Voicemail_18006887322_20210430.mp3
showing phone number, and timestamp.)