[Completed] Malware/trojan survives factory reset, what can I do? - XDA Assist

Hello, my JIayu F2 phone got a problem, I don't know if it's a virus/malware/spuware exactly, Malwarebytes found pup.riskware.smsreg but after factory reset it doesn't find anything and the problem is still here.
There's a hand cursor that appears on the top screen and it seems like the phone is taken over, it's extremely hard to navigate and ads pop up left and right even if I disable unknown sources. Parasite apps also spontaneously install themselves.
I have changed my google password, reset the phone to factory settings, the problem is still there even before I connect the phone to the internet.
I can't flash a ROM because the phone is hard to navigate and the USB port broken. Can't install apps from the playstore, the malware blocks the download, but I can install Apks.
Is there any app I could install to check what is going on? Malwarebytes doesn't find anything anymore, should I use something else?
How does a malware get into the factory reset version?
Thanks in advance

Already answered here:
http://forum.xda-developers.com/general/xda-assist/help-flashing-rom-phone-malware-usb-t3423678
Thread closed.

Related

[Q] Bricked? HELP settings.db

i was trying to allow it to use 3rd party apps BUT, on root explorer, i deleted the original settings.db and pressed paste and a lil popup came up that was too quick to read and dissapeared, and nothing happenned. So i restarted my phone and after the loading of the purple/blue S the screen goes black but the capacitive buttons glow?i still have the settings.db backed up. Is there anyway to fix this?i just need to somehow get into the phone to put it back there. Thanks NOTE: i know this is the wrong thread but i dont have the priveledge to post there
Since the system won't boot all the way up, sideloading is not going to be an option for you. I recommend to flash back to stock firmware, as this usually fixes most brick issues.
See this thread...
http://forum.xda-developers.com/showthread.php?t=731989
Also, this video tutorial will help you...
http://www.youtube.com/watch?v=UDtxnH4lFuk
wasssabi5 said:
i was trying to allow it to use 3rd party apps BUT, on root explorer, i deleted the original settings.db and pressed paste and a lil popup came up that was too quick to read and dissapeared, and nothing happenned. So i restarted my phone and after the loading of the purple/blue S the screen goes black but the capacitive buttons glow?i still have the settings.db backed up. Is there anyway to fix this?i just need to somehow get into the phone to put it back there. Thanks NOTE: i know this is the wrong thread but i dont have the priveledge to post there
Click to expand...
Click to collapse
Do not worry! This happened to me when I tried this.
Go into recovery and do a Factory Reset.
You'll be good to go
You say to "do a factory reset" but I'm confused -- when I go to recovery (`adb reboot recovery`), I have four options, reboot, install packages, delete cache, and delete user data. Is "delete user data" the same as a factory reset? Is that going to solve the problem I created by hosing my settings.db?
I tried to do this: http://samsungcaptivate.wikia.com/wiki/How_To_Enable_Non-Market_apps_for_Captivate -- and though I thought I followed the whole process to a tee, I rebooted to find the same symptoms as the OP: regular boot logo, then a black screen with my buttons backlit. I can still `adb shell` and everything, just no UI on the phone itself...
Answering my own question: yes, "delete cache" then "delete user data" did a factory reset and fixed my problem. This time, I used the [http://forum.xda-developers.com/showthread.php?t=803682 SuperOneClick] de-crippler; worked in seconds. Thanks!

[Q] Bad App installed on LG L7 P700

Hi ,
I have a problem with my LG L7 ,
Today I have installed some app ,called LED Flashlight ,I downloaded it with Chrome, But when I installed it a get message "Shortcut created on Home Screen" many times...
When I go to Home Screen, I could see too may apps installed ,without my knowing.
So i decided to reset the phone to Factory Settings.
I switched off the phone ,take out the battery and return it back.
Than turned on the phone and pressed Vol. Down ,Menu key and Power Button and it started to resetting.
After a while ,phone was sucessful reset...But after 2 minutes working on phone ,the phone again give me the message "Shortcut created on Home Screen" ,and again same situation,too many apps installed without my knowing.
(some of these apps are: remotecall service,recommended...)
And also in Menu with apps ,there are two icons called "Settings"
Any solution?
Thanks and sorry for my bad English.
TheNerko said:
Hi ,
I have a problem with my LG L7 ,
Today I have installed some app ,called LED Flashlight ,I downloaded it with Chrome, But when I installed it a get message "Shortcut created on Home Screen" many times...
When I go to Home Screen, I could see too may apps installed ,without my knowing.
So i decided to reset the phone to Factory Settings.
I switched off the phone ,take out the battery and return it back.
Than turned on the phone and pressed Vol. Down ,Menu key and Power Button and it started to resetting.
After a while ,phone was sucessful reset...But after 2 minutes working on phone ,the phone again give me the message "Shortcut created on Home Screen" ,and again same situation,too many apps installed without my knowing.
(some of these apps are: remotecall service,recommended...)
And also in Menu with apps ,there are two icons called "Settings"
Any solution?
Thanks and sorry for my bad English.
Click to expand...
Click to collapse
First of all, your English is not so bad
The main thing is you have been attacked by a malware. Reboot your phone into the recovery mode and select all things starting with wipe.
May be this helps you
And avoid downloading app from any third grade third party app store
Sushant Rohan said:
First of all, your English is not so bad
The main thing is you have been attacked by a malware. Reboot your phone into the recovery mode and select all things starting with wipe.
May be this helps you
And avoid downloading app from any third grade third party app store
Click to expand...
Click to collapse
Thanks for answer ,but.....
I have installed Avast Mobile Security ,scanned phone and nothing found ,
Downloaded MalwareBytes ,scanned and found 1 malware (called kapk).
Than I decided to connect the phone to USB with PC and root them again.
After root ,i have downloaded Clean Master and tried to Uninstall this app (kapk) and app called Settings (which is appear every time when I reset phone to factory sett.).
But I can't uninstall them it says: Unable to Uninstall .
Than I go to recovery and choose Wipe cache partition and reset it again ,directly from recovery.
But apps again installed after 2 minutes of using phone. (Installed only two apps not more like before, now: Lucky Try and fake Settings).
Try Flashing the Stock ROM
May be this helps
Thanks..
Any other idea to fix it?
TheNerko said:
Thanks..
Any other idea to fix it?
Click to expand...
Click to collapse
You should flash the stock firmware in ANY case to get rid of the malware.
a very easy guide can be found HERE

LG Spirit 4G LTE ~ h440n10d

Hello there guys!
I'm having a really hard time here and i hope you can help me
I have the LG Spirit 4G h440n10d. I had the phone rooted with kingroot and everything was fine.
After an application install that was taking a lot of memory (hearthstone), my phone started lagging before i delete it. After the app's removal, my home and open apps buttons didn't work and neither did the volume buttons. Only the "Back" button worked.
So i tried to reset factory settings from the menu. After the phone reset, i had the LG welcome page in which you insert phone name, wifi, google account, locking methods etc. so i thought everything was fine. But this happened with every restart of the phone. It seemed like the settings weren't saved and my home and apps buttons didn't work again after the factory reset.
After this, i deleted some android files (i regret it a lot) from kingroot application and... voila!
...
After phone reset i can't do nothing and it stays in LG welcome page (i get a small message that "settings" has stopped working) and phone closes by it self.
I tried to flash my phones .kdz version i found with LG flash tools 2014 but my phone stays in "update firmware" page and the program's bar doesn't move (even if i ignore the server communication error).
I saw that my phone has locked bootloader and doesn't have a recovery mode. What can i do now? How can i install a clean firmware to it? I'm willing to answer any of your questions and also i would much appreciate any help given.
Thanks in advance!
mari0z said:
Hello there guys!
I'm having a really hard time here and i hope you can help me
I have the LG Spirit 4G h440n10d. I had the phone rooted with kingroot and everything was fine.
After an application install that was taking a lot of memory (hearthstone), my phone started lagging before i delete it. After the app's removal, my home and open apps buttons didn't work and neither did the volume buttons. Only the "Back" button worked.
So i tried to reset factory settings from the menu. After the phone reset, i had the LG welcome page in which you insert phone name, wifi, google account, locking methods etc. so i thought everything was fine. But this happened with every restart of the phone. It seemed like the settings weren't saved and my home and apps buttons didn't work again after the factory reset.
After this, i deleted some android files (i regret it a lot) from kingroot application and... voila!
...
After phone reset i can't do nothing and it stays in LG welcome page (i get a small message that "settings" has stopped working) and phone closes by it self.
I tried to flash my phones .kdz version i found with LG flash tools 2014 but my phone stays in "update firmware" page and the program's bar doesn't move (even if i ignore the server communication error).
I saw that my phone has locked bootloader and doesn't have a recovery mode. What can i do now? How can i install a clean firmware to it? I'm willing to answer any of your questions and also i would much appreciate any help given.
Thanks in advance!
Click to expand...
Click to collapse
Heeey android geniouses any heeeeelp??

Stuck on setup wizard after factory reset. FIXED

Hey i got a problem i accidentally deleted play services.. So i factory reset my phone and it wont get past the looking for updates screen. Its ben on for 10h still looking for updates. How do i bypasse the setup wizard?
I have mo Internet connected and still didn't change it. It's just rooted.. And i already messed it up lol
It this cause of the root that it's stuck on looking for updates?
How to fix this...
just reflashed a rom in flash tool 2014 just updated the rom and works again
You can try to:
1. Hard Reset
2. Reflash systemrooted.img
3. Reflash stock .kdz
k3lcior said:
You can try to:
1. Hard Reset
2. Reflash systemrooted.img
3. Reflash stock .kdz
Click to expand...
Click to collapse
thanks
i just fixed it today
I'm having a similar issue with my g flex 2. I did a factory reset and now it does a loop on the setup wizard. I cannot get to the recovery screen by pushing the power button and volume down and I can't get it to connect with my computer with usb. Is there another way to do a hard reset?
If you stuck on Google Account , you can try this:
When you enter your email address, select all and hold your finger to showing option. "Cut, Copy, Past, Assist"
Use Assist, choose >> No thanks . And a browser will be showing.
Enter "Setting" And the settings icon will show up.
Go to Settings then Apps.
Disable every single Google app (Chrome, Slides, Sheets, Gmail, maps, Youtube, Hangouts etc. etc anything that is Google in origin.)
Disable all Google Play everything including Play Services and Store
Disable Google Account Manager and Google App
Disable Google services like calendar and contacts sync, text to speech I think, services framework, one time init, and partner setup
Also went to Security, Administrators, and removed Device Manager
---pretty sure I covered it...
back out of menu, reboot phone.
You should be able uncheck Wi-Fi and Mobile networks and still be able to hit Next at the bottom right, FRP check is disabled. Once it boots all the way into the interface, go to Settings, Backup and Reset and do a factory reset.
Click to expand...
Click to collapse
paco68 said:
If you stuck on Google Account , you can try this:
Click to expand...
Click to collapse
That was unsuccessful. Any other suggestions?
I put in my google account info and it worked fine, but it just keeps looping through the setup instead of finishing it. At the end, if I time it right, I can swipe down and get into settings so I thought I could reset it that way, but the reset option isn't even there.
Try to Reflash the phone with LGUP using "Refurbished" mode.
http://forum.xda-developers.com/showpost.php?p=69147446&postcount=259
Thanks. I figured out how to flash it using these instructions. http://forum.xda-developers.com/g-flex2/general/guide-lg-g-flex-2-stock-firmware-to-t3037593
My phone is working great again. I'm new at this but that seems like doing pretty much the same thing. One question though. Supersu is still showing up in the apps. I rooted my phone a long time ago but I figured that would have been deleted through this process.
Same isseue
Hi i have the exact thing going on a week or so i rooted my Lg g3 Vista a week after phone went weird i shut off turned back on a did a factory reset and now it wont go past looking for software updates ....how did or do you reflash your rom it it will not reboot all the way? Sorry im not to tech savy lol but if i knew how id try i cant hurt it anymore then it is now lol thanks i knew i couldnt be the only one this has happened to
I just followed these directions very carefully.
https://forum.xda-developers.com/g-flex2/general/guide-lg-g-flex-2-stock-firmware-to-t3037593
Good luck.

When connected to Wifi apps download and install automatically

I have a Sprint Samsung Galaxy SPH-P500 Android ver. 4.1.2 Build JZO54K.P500VPBMB3 Kernel 3.0.31-929664.
It was never activated. I tried to have Ting and Sprint activate but both were unable to. One day it started downloading an upgrade. Since then every time I connect to Wifi it downloads and installs dozens of apps. I have uninstalled them and have done a factory reset 3 times. I have installed Malwarebytes but it doesn't find any malware. Nothing I do seems to stop the downloads. So many apps are downloaded it makes it hard to use the tablet and it slows it down. This tablet was rooted before trying to activate and I thought that may be the reason we couldn't so I unrooted it. I have tried to root it again but it won't root. I have tried to boot into safe mode but it doesn't work by holding the power and volume down buttons. When Ting was troubleshooting, they had me use the calculator to boot into the safe mode but I forgot how we did it. I think I may need to flash the factory rom but I not quite sure where to start. Please help!! I am just learning where things are on the tablet even though I have had it for a couple of years so please don't use too technical terms.
Thanks
this is done by google play
go in parameters & disable this option
regards
validatus said:
this is done by google play
go in parameters & disable this option
regards
Click to expand...
Click to collapse
Thanks for your reply. Is this Google Play Store that does this? Sorry to be a noob but how do I get to parameters to disable this.
Thanks for your patience.
start google play (not wifi connected)
choose parameters option
regards
I have rooted the tablet with Kingroot and have uninstalled or disabled almost everything, but still have the issue. Everytime I connect to wifi, apps are downloaded and installed automatically. Does anyone have any suggestions? If I should install the factory rom, please direct me to where I can get the file and the directions to install. Thanks
OK
Thanks for all the suggestions. Nothing is working. Now when I turn off Wifi, after a second of two, it comes back on so I can't stop all the apps from downloading and installing. The apps use all my memory so if I try to do anything the tablet is slow and there is always some screen popping up. If I install the factory rom, will that get rid of everything and put it back to original? Doing a factory reset doesn't help.

Categories

Resources