Help: Is a New Cubot X6 image available? System is compromised! - General Questions and Answers

Hello!
I would like to ask for help installing either a new Cubot X6 Android or a linux based system. Until recently I wasn't aware of what kind of aggressive trojans for Android happen to compromise a phone to a degree where the solution is to buy a new one. I do not want to accept that. Therefor I am here to ask for help.
WLAN enabled - the phone runs nutts. It causes unknown apps to be installed, ruining the function of the phone completely. I bought it via ebay, a used Cubot X6. I had the device years ago until i sat on it which happened to break the display, but I liked it and bought it again, used. (The used one cost 60 bucks, a replace-display would have cost 35, so I ran with the used one - big mistake as it turned out).
Now, it's root-system is compromised. I set it to only allow apps from trusted sources. I did not download any apps beside well known trust-worthy ones, like google-maps, WhatsApp, all together.
When I first enabled WLAN, it suddenly started to display a message of the shutting down of "org.rain.ball.update" and also "ssCleaner ("suc", "chengele") is trying to obtain your current position", "ymm" cancelled, and several others. If I allow WLAN it automatically downloads 10-20 apps, some of which correlate with my laptop visited websites (alibaba), others apps from sites I have never visited ("sexy videos"). Basically the phone gets so busy that it needs to be restarted to allow any control of the phone.
I tried to fix it with Avaast, Avira, and Malewarebytes without success. With Avaast it also displays: "/storage/sdcard0/.androidsdata/is.jar", but is unable to fix it. I guess I would have to erase the SD-Card too, if I were to have the system replaced, once. None of the above things can be fixed with the tools at hand. The deletions are always interrupted, nothing gets improved permanently.
I immediately did a "Reset to factory condition", but when I enabled WLAN I didn't even install an app - it all started again, as described above.
So, a quick Google-Research turned out, there are trojan-horses, that cover themselves by pretending to be system applications, so that it would be nearly impossible to get rid of the trojan - only solution: buy a new one (See this article wwwDOTblog.lookout.com/blog/2015/11/04/trojanized-adware/).
Now, while I have a broken device and a trojan device, one solution would be to mount the display of the compromised one onto the broken one. I know it's easy to break the display during this. That's why I am here to ask, if someone might have suggestions of what else could be done to have this fixed?
Maybe it would be possible to get an uncompromised mirror-image of a Cubot X6 from the internet that would replace every data on mine? Would it fix it, if I were to install this: "Ubuntu Touch - Version 15.04 Phone"?
Any help would be appreciated. If I were to take a wild guess, I'ld say the trojan horses might have been developed by Apple...... So what am I to do now? Buy a new one?
EDIT: If you were to not believe this to be true, I could shoot a video of it with my laptop. It's really strange, but it is as it is. EDIT 2: Avaast displays a message, the phone has been rooted.
Please help!! Thank you so much!!

You won't get the virus to YOUR phone from replying ...
Am I here at the right forum for this technical problem?
Thanks

Do a search for your rom and instructions on how to flash. It will replace system partition and problem should then be gone.

tys0n said:
Do a search for your rom and instructions on how to flash. It will replace system partition and problem should then be gone.
Click to expand...
Click to collapse
I will try that. Im total newb to smartphone software. any linking would be appreciated. thanks so far!

CubotX6 said:
I will try that. Im total newb to smartphone software. any linking would be appreciated. thanks so far!
Click to expand...
Click to collapse
A google search for "cubot x6 firmware" will give you some good results.
Here's also Cubot forums, with link to downloads.
Hope that will help, and be sure to read up on the subject on how to flash before you start

So many Thanks! You linked me to the perfect spot! Thank you!
While i will redo my laptop with linux soon, you got experience with having linux on the phone? If i wee to try and mes up, it still were possible to go bac to the original cubot files u linked to, correct?
Thank you!!

Related

Motorola Solutions TC55

Hello,
I have a TC55 from Motorola Solutions (i.e. the enterprise division that does not belong to Google). It is a rugged phone with a big battery (4400 mAh), but certainly not the sleekest design. Not sure if there is much interest in this kind of device, and I am certainly no developer - but in case anyone is investigating the TC55, here are two things I found so far:
It does not come with any Google apps: no Maps, no Gmail, no Play store and so on.
It is easily rooted with Framaroot using the Gandalf exploit.
(I cannot post this info into the Framaroot thread due to my low post count).
Anyway, maybe this helps someone. I will be happy to try to answer any questions about the TC55, but keep in mind I am no pro and I am not keen in messing around in its internals much more than I have done already.
Elanguescence said:
Hello,
I have a TC55 from Motorola Solutions (i.e. the enterprise division that does not belong to Google). It is a rugged phone with a big battery (4400 mAh), but certainly not the sleekest design. Not sure if there is much interest in this kind of device, and I am certainly no developer - but in case anyone is investigating the TC55, here are two things I found so far:
It does not come with any Google apps: no Maps, no Gmail, no Play store and so on.
It is easily rooted with Framaroot using the Gandalf exploit.
(I cannot post this info into the Framaroot thread due to my low post count).
Anyway, maybe this helps someone. I will be happy to try to answer any questions about the TC55, but keep in mind I am no pro and I am not keen in messing around in its internals much more than I have done already.
Click to expand...
Click to collapse
I heard my company is planning to go with these soon for entry level supervisors such as myself. I'm trying to figure out exactly what it is. All the specs and brochures from Motorola keep calling it a mobile computer in a smartphone "form factor" but never actually call it a phone. I didn't see anything in any of the specs to lead me to believe for sure that it was a phone or if it was just an Android computer in a smartphone form factor.
Anyway, I just wanted to confirm, that, you're certain this is a phone, correct?
Thanks.
- Byron
bfollowell said:
Anyway, I just wanted to confirm, that, you're certain this is a phone, correct?
Click to expand...
Click to collapse
Yes, definitely. You can call and get called, and you can send and receive SMS. It also supports wired headsets, and it is supposed to work with Bluetooth headsets, though I do not have any to test.
Elanguescence said:
Yes, definitely. You can call and get called, and you can send and receive SMS. It also supports wired headsets, and it is supposed to work with Bluetooth headsets, though I do not have any to test.
Click to expand...
Click to collapse
Thanks for the info but it looks like mine is going to be crippled.
Sort of a let-down really. Yes, it "can" be a phone. Or without a sim card it can be a really powerful Android based mobile computer. That's what it is going to be for most of us. Only a few supervisors with area management approval are going to get units with the phone features working. Still cool. Just not as cool as I'd thought it was going to be.
- Byron
bfollowell said:
Thanks for the info but it looks like mine is going to be crippled.
Click to expand...
Click to collapse
I see, sorry to hear that. It sounds weird to me to do that, but then again I have no clue about this type of work.
Maybe the crippling could be worked around or undone by people with good Android knowledge - but I suppose it might not be the best idea to go against company policy.
Elanguescence said:
I see, sorry to hear that. It sounds weird to me to do that, but then again I have no clue about this type of work.
Maybe the crippling could be worked around or undone by people with good Android knowledge - but I suppose it might not be the best idea to go against company policy.
Click to expand...
Click to collapse
I don't think they're doing anything all that special to cripple it. They just won't all have sim cards or a cell plan. Pretty much as simple as that.
I won't be doing anything to circumvent that though or rooting it or anything like that. It's not like it's a gift and it belongs to me or anything. After almost 22 years, I've kind of grown to like my job and getting a paycheck every two weeks.I'd kind of like to keep it for another 15 or 20 years. Who knows, maybe my manager will decide that I need cell service with mine.
I work for a large automaker in the U.S. We have over 2.8 million square feet under roof. Personally, I can be anywhere on in the plant, on the roof, in pits & sub-basements underneath or anywhere on or near the 50 acre plant site at any given time. A lot of what I need to do on a daily basis is through our intranet portal. They're putting in something like 500 new wi-fi repeaters/extenders all around the plant as well. They're purchasing these for over 300 first line supervisors at my site alone. I'm pretty sure they're doing this corporate-wide so I hate to think what they're spending on these things as a corporation. I'm sure it would bankrupt many small nations! In addition to giving us portal access away from the desk, these are meant to replace our aging industrial radio system. As expensive as these are, they're still much cheaper than $1.5 to $2k per person for a radio that has no other built-in functionality and these do seem pretty ruggedized.
Still a shame about the phone functionality though.
- Byron
Can you see what browser it comes with? Can you install (untrusted) APKs directly without rooting it?
FYI, in case anyone's wondering, there is a version with Google apps on the way (if it isn't already orderable).
Sent from my Moto X
tfnico said:
Can you see what browser it comes with? Can you install (untrusted) APKs directly without rooting it?
Click to expand...
Click to collapse
Browser is a standard one, which comes with other devices. Name is Browser.apk and version is 1.0.9
It's possible to install unsigned APK's without rooting.
google account
Hi,
I got stucked with trying to get google calendars from my google account to TC55.
I found one solution to setup google account as a corporate one, but it's not available anymore due to change in google policy.
I can setup google mail via email account, but that doesn't bring me my calendars to the device.
I tried to install gapps but without success.
Is there any other way?
Thanks.
Motorola work on google apps for TC55.There is in beta.
Elanguescence said:
... here are two things I found so far:
It does not come with any Google apps: no Maps, no Gmail, no Play store and so on.
It is easily rooted with Framaroot using the Gandalf exploit.
(I cannot post this info into the Framaroot thread due to my low post count).
Anyway, maybe this helps someone. I will be happy to try to answer any questions about the TC55, but keep in mind I am no pro and I am not keen in messing around in its internals much more than I have done already.
Click to expand...
Click to collapse
Obviously u rooted, can u install gapps in it?
RjCode said:
Obviously u rooted, can u install gapps in it?
Click to expand...
Click to collapse
No idea, I haven't tried. As far as I understand gapps are usually installed via flashing a zip from recovery, and the stock recovery of the TC55 does not have that option, it only allows reflashing a whole image, if I understand it correctly. Either way, I have come to appreciate the open source alternatives and do not want to get Google on my phone, so I will not try, sorry.
However, going by this thread over at the Motorola support forum, it seems it won't take long until there is official gapps support:
https://developer.motorolasolutions.com/thread/4989
Motorola has now released a TC55-firmware with Google apps. Here are the release notes:
https://atgsupportcentral.motorolasolutions.com/content/emb/docs/ReleaseNotes/Release%20Notes%20-%20%20TC55_RevAPlus_GMS_01%2074G_v10.htm
According to the support email they sent me, to get the actual release you need to perform the following arcane ritual:
Resolution Type is : Software Download
Resolution Id is  : 95562
Resolution Title is : TC55 Update Image v1.74 with GMS (Google Mobile Service) Release Note & Factory Reset & Enterprise Enabler package
restrictedSW :
T55N0JGMVRUEN17400.zip 321 MB TC55 OS Recovery Update package
T55N0JGMVAUEN17400.apf 321 MB TC55 OS update package file for deployment using MSP
If you require access to OS files for TC55 1.74 GMS then call the local Support Desk and provide following information:
a. Site ID
b. Serial #(s)
c. Phone #
d. Customer name (First and Last)
e. E-mail address
Click to expand...
Click to collapse
Don't ask me what the local support desk number is, or the site ID, or why they have to make this so complicated.
Hi Elanguescence,
I think I screwed up my tc55 by enabling the multiuser function without first creating the white list. Now all the users (with admin rights) does not have access to all the programs, including Applock Administrator and Multiuser administrator.
To cut things short, do you know of a way to reset the device? I don't mind setting it to factory default and start over. I've googled it and some said to launch Rapid Deployment and scan a barcode from there... but my Rapid Deployment just says "Service Not Ready, Please Wait" and get stuck there.
Any help appreciated. Thank you.
Any TC55 users here? Should be getting my unit w/ GMS soon... How do you guys like it?
Is the bootloader locked?
Sent from my Moto X
Hey!
I want to Buy one TC55 for me. Normally i hate Android and the Google stuff on the Phone but some Motorola Salesman told me there is a version with out.
Now i use an Sybian Device. That mean i am "offline" the hole time and when i need Internet the Phone connect the the Internet.
So how about that phone can i work "offline" to?
I will also use an VPN Tunnel to block on my backend all Connnection i dont want. Does all Data trough this VPN Tunnel ?
How about the Barcode Scanning does it work good?
I know for 2D i need to use the Cam but how works it when i am in some other Application?
Nobody?
Ok. I just bought a TC55 from a Friend and I was wondering if someone would post the update to get GSM and the Factory Reset packages. I went to the page and it requires all the information posted above before. Mine is rooted, but i am trying to install GAPS but the recovery is the basic and cannot. I manually installed Google Play and the Google Play Services but Google Play services keep crashing and the Play Store will not connect, any ideas ?
the are 2 versions one with google s... service and the other without.
So i belive you have the first?
(Can i ask you some question about that phone?)

Addware /bloatware or virus in a UMI diamond X stock ?

Hi
A friend bought a UMI diamond X a month ago.
From yesterday he stars to have some commercials each time that he takes his phone.
Did the put something in the stock rom that activate after a little time of use ?
Someone knows something?
thanks
I don't know if there is a delay or not before adds start but Chinese phones are known to have quite aggressive ad network even with stock apps & they have weak privacy often, so it could be a stock app. Some Chinese phones have also been shown to do silent upgrades, so you don't know when they update something (can't recall if Umi is one) which is why is may only start a month later.
However it could be due to malware/adware downloaded from a website or if he has used one of the Chinese app stores to get an app or any store that is not Google you are increasing your risks, those stores are not well regulated and many apps have had adware/malware inserted into legitimate looking apps like youtube etc. Did he recently download some apps from an app store that was NOT Google?
see eg
http://blog.teamleadnet.com/2015/06/how-to-remove-adware-browser-hijack-or.html
or
https://www.youtube.com/watch?v=zfi6N10ARFA
(also lookout for Chinese apps (or any other unusual apps) with western alphabet like Baidu, which this guy seems to ignore)
IronRoo said:
I don't know if there is a delay or not before adds start but Chinese phones are known to have quite aggressive ad network even with stock apps & they have weak privacy often, so it could be a stock app. Some Chinese phones have also been shown to do silent upgrades, so you don't know when they update something (can't recall if Umi is one) which is why is may only start a month later.
However it could be due to malware/adware downloaded from a website or if he has used one of the Chinese app stores to get an app or any store that is not Google you are increasing your risks, those stores are not well regulated and many apps have had adware/malware inserted into legitimate looking apps like youtube etc. Did he recently download some apps from an app store that was NOT Google?
see eg
http://blog.teamleadnet.com/2015/06/how-to-remove-adware-browser-hijack-or.html
or
https://www.youtube.com/watch?v=zfi6N10ARFA
(also lookout for Chinese apps (or any other unusual apps) with western alphabet like Baidu, which this guy seems to ignore)
Click to expand...
Click to collapse
Thanks.
As far as I know he didn't install something for a while and on the umi diamond X there is no parallel app store.
He did a factory reset but if there are new commercial pop up i'll try your links , thank you again
Android 5.0 and above, just download, install DNS66 from Fdroid. Update all hosts file.
Cedric1127 said:
Hi
A friend bought a UMI diamond X a month ago.
From yesterday he stars to have some commercials each time that he takes his phone.
Did the put something in the stock rom that activate after a little time of use ?
Someone knows something?
thanks
Click to expand...
Click to collapse
I have the same problem, couple days ago commercials started shows all time, i tried use DNS66 and it doesn't help.
Do anybody know how to root this phone?
I can tell that on UMI Super apart from the battery additions and MediaTek apps there is no of that, very little bloat.. alost AOSP.
This also should help you identify some MTK apps http://bitlog.it/re/dissecting-an-android-chinaphone/
Bringing this up .
I have exactly the same problem. Ad starts showing up on lock screen and every few day some fake app installs out of nowhere. What can I do?
Wrote about it here on xda
The only thing I haven't tried yet is going to stock but now I found this topic and not sure if even that would help. Did OP had any luck with this?
Cedric1127 said:
Thanks.
As far as I know he didn't install something for a while and on the umi diamond X there is no parallel app store.
He did a factory reset but if there are new commercial pop up i'll try your links , thank you again
Click to expand...
Click to collapse
cyryl85 said:
I have the same problem, couple days ago commercials started shows all time, i tried use DNS66 and it doesn't help.
Do anybody know how to root this phone?
Click to expand...
Click to collapse
AbelardM said:
I can tell that on UMI Super apart from the battery additions and MediaTek apps there is no of that, very little bloat.. alost AOSP.
This also should help you identify some MTK apps http://bitlog.it/re/dissecting-an-android-chinaphone/
Click to expand...
Click to collapse
the_bulk said:
Bringing this up .
I have exactly the same problem. Ad starts showing up on lock screen and every few day some fake app installs out of nowhere. What can I do?
Wrote about it here on xda
The only thing I haven't tried yet is going to stock but now I found this topic and not sure if even that would help. Did OP had any luck with this?
Click to expand...
Click to collapse
I saw another forum where someone says you need to freeze the "super cleaner" app (can't be uninstalled) that comes with the phone to stop this & maybe any of the DU branded apps also if they
(edit: on other phone eg Zuji they have another app "battery saver " that seems to work similarly and serve ads or/or push apps to your phone in the same way that needed to be frozen)
I am having lots of problems with my umi diamond x screen keeps jumping and goes into the black screen with all your settings on like wifi aeroplane mode screen brightness etc it locks up the phone, I am also getting lots of adds and the phone is getting hot and using up the battery too, I have taken the sim out and sd card and it still does this so the issues are not sd or sim so it must be the operating system on the phone or something, I have tried everything but cant fix can anyone help or should I just buy a new phone
you can try a factory reset or you can flash the phone with an original room or a custom room but as far as I remember there are very few custom ROMs for this phone

BLU STUDIO X5 (S390U) Stock ROM infected.

Hello guys, as you probably see I'm new at this forums, there's only one reason I joined and is because I own the BLU STUDIO X5 (S390U) since while ago.
I noticed that this phone has built-in somewhat thing of malware on the system APKs of it. What do I mean? Don't matter how many times you do a clean, use anti-malware apps, hard-reset, even flashing to a new stock ROM or a CROM made from the original one: The problem is going to persist.
So... Tell us, which would be the solution? Well I was analysing all the possibilities, even evolving a CROM of it, however this infection it seems to be part of other APKs components, as it is visible through Anti-MalwareBytes, that Settings.APK is corrupted with it.
The solution it seems to be easy but it could be complex, even knowing that other APKs could be infected but are not listed on the scanns: Erasing Settings.APK and try to replace it with a non-infected one, but this is complex as I said.
Before I continue I need to explain what this infection does: After you use the smartphone for first time (counting resets, flashes, etc.) the smartphone is just good, even if your not using internet.
After sometime you will notice some new apps installed on your smartphone, what this infection does is to install them under what it could be called a "Silence mode", PlayStore is not needed to download such apps, either a Web Browser.
But, hey, this doesn't sound bad as it just sounds annoying lad... Aye, this sounds as if the problem is only something redundantly annoying, but not is only that, this malware is found as a Hijack and doesn't sound bad too, however, if someone with enough knowledge knows how to manage a Hijack it can even steal info from your smartphone.
But probably you're thinking, well you can fix it not allowing Unknown Sources APKs to install on it, well...
This is what it takes me to the second point of it: This malware changes the settings of your smartphone whatever the times it wants by itself, don't matter which app you use to not allow this change by itself, it is going to do it anyway.
But why? It seems that the infection has Root Access, what this mean is that it has a higher level access (is running under an Administrator mode).
And we're back again to the solution, you'll think: Maybe if I root it and replace the Settings.APK is going to be fixed, well is not that easy, apart of wasting your time, the smartphone can be even more vulnerable and unstable.
The best solution that is going to work and that's why I posted this here:
To fix this the Stock ROM must be re-built from zero. I'd do this on my own, the problem is that I'm not an advanced user, and I still learning programming and coding at my degree, every help with this would be flawlessly.

[Doogee Shoot 1 ] App Android "Chromes". what's it? [TRIADA Malware]

Dear friends,
i am struggling with a strange APP named "Chromes". It seems to be undocumented (i googled a lot).
The only thing i know is that IT INSTALLS ALONE without any visibile message. After a Factory reset i found it (AGAIN) in the phone.
I couldn't SEEK what / when / Who installs it in my phone.
It gains telephone and archive rights without any ask to me.
I also know that my doogee phone suffers of a vulnerability (never closed) by DOOGEE and i don't know if it'd be related with it.
No clue.
Does anyone have had the same experience? Does anyone have EVER seen it?
Let me know please.
Best Regards.
EDIT: ****warning: I remember to everyone that ROOTING/HACKING/INSTALLING a different ROM in your phone may void the warranty AND can potentially BRICK your phone . Do it ONLY IF YOU KNOW WHAT YOU ARE DOING . I warned you.*****
edit 13/11/2017 *LIST OF REPORTED DEVICE AFFECTED WITH CHROMES (Malware) app *:
----------------------------------------------
Doogee Shoot 1
Gretel A9
UHANS A101
NOMU S10
Leagoo M8
leagoo M8 pro
----------------------------------------------
Report if you have it. Thank you.
i just found it on my phone too and started googling it.. and yours seem to be the only instance ive found so far.. i dont know what it does or where it comes from.. i can close it from the task manager but itll start itself again 3 processes that itself have about 2-3 services.. mostly ChromesService DaemonService and ChromesService2 the main proces seems to be signed from com.appclone.lyhj the second one doesnt have the daemonService and is signed from com.android.qnsettings and the third one had com.yunshi.market listed. again i dont know there they come from or whats their purpose.. and if they have anything to do with the ad popups i get since a few days now that dont seem to be app related since its the same popups for most apps .. apps that dont have those popups natively like whatsapp or facebook. i have since uninstalled pretty much anything and tried some antivirus but i guess its gonna be rooted and gets a custom rom. it is also a china cell called nomu s20 . after googling a bit it seems there are a lot security problems with my device.
edit: ive found something on this link i cant post because i am not a trusted user yet
also after running kaspersky antivirus it did indeed find something (as opposed to the comodo antivirus that kept silent)
it found Trojan.androidOS.Boogr.gsh as the chromesBase.apk and another one i just deleted without writing the name. it seems though this might be related to the Triada-Virus/trojan .. soo.. yeah it might be a good idea to save your stuff and not only try with a factory reset but completely reinstall the whole rom.
edit2: just deinstalling them hasnt solved anything .. the problem sits way deeper meaning it is definitely related to the triada virus. it just reinstalls the software again without anything showing.
edit3: found it.. it is indeed the triada virus on my phone ..
I have been dealing with that damned "Chromes" app for two or three weeks now (BTW, they appear two of them with the same icon and logo.)
MalwareBytes detects it as malware (Avast sometimes does, sometimes does'nt)
I have trie , for sure , uninstalling (completely unuseful) stopping all the apps I can (seems to have an effect in the reinstalling time ), and also keeping them installed but removing the Phone, Storage and SMS permissions, which, surprisingly, remain removed (until you uninstall the app)
I dealed in the past with the virus app on the Shoot 1 firmware, which turnaround solution (disabling the fake app) worked OK for me. But recently there have not been any fw update, so this time is not the firmware the responsible.
Any hint or help will be greatly appreciated.
¡Cheers!
Hi guys!
I'm having the same problem as you two. I can't believe that Doogee has screwed up on this again... (I also have the shoot 1 [nice screen ]) I'm surprised that, as you said, I've not found anything on the internet about this*. In addition, the application consumes a large amount of mobile data!
I hope there is an update soon, and that the problem is solved
Thank you all for your comments! Greetings from Spain!!
*Well, here they have the same problem
https ://android.stackexchange.com/questions/185520/how-to-get-rid-of-a-malware-app-chromes
Don't wait too much from Doogee. In fact don't wait nothing at all. They didn't solved yet the firmware virus that came with the first OTA update. We're alone...
And your GPS signal how is it going? In my case it does not get fixed to any satellite. Has someone managed to root it successfully? The truth is that I do not understand much about this, that's why I'm a bit afraid to do it.
I found this in a spanish forum, look at the last post (#19). (I think you have to translate it )
http: //ww w.htcmania. com/showthread.php?t=1291106
Summing up a bit, he says that Doogee sells mobiles with malware in the system. The fact is that they do it conscientiously. And then put a "solution", which is to install a firewall, so that you can control the internet connection of the applications.
Thanks again!
Some updates...
let me give you some updates :
1) the Shoot 1 phone is not easy to root with standard tools (kingroot & others: i tried a lot of them);
1) i successfully installed twrp with the FLASHTOOL and a specific recovery image TWRP + SU (if needed i can help about it);
2) I backupped everything (included malware of course) just to be sure i could go back in case of brick;
*** 3) I downloaded and installed the FANTASTIC lineage OS without any STUPID bloatware. ***
My phone is secure and fast NOW.
i warmly RECOMMEND all of you to root and update to lineage OS 7.1.2 (ver 14). Thankx to the lineage team! **they deserve a donation!!****
* about Shoot1 GPS *
i still didn't test it with the new LINEAGE and i will update you
Before i discovered the malware inside the GPS was not fixing correctly and in general not working like my previous LG or HTC
I was using an external BLUETOOTH antenna by using a middleware driver named Bluetooth GPS. Once you configured the driveer it works like a charm with tomtom and all GPS software ( i tested a lot). The external GPS solution lets the phone cold and free to charge during long gps travel session.
I will test anyway with the internal GPS again with the new LINEAGE ROM.
For any test or info write here and send me a PV message.
UPDATE: the lineage team is releasing the version 15 (development) with OREO. Anyway i will not install it soon. I am SOOOO SOLID now!
jmam said:
Any hint or help will be greatly appreciated.
¡Cheers!
Click to expand...
Click to collapse
Unfortunately you can't get rid of it. No one knows if there is another fake app or background service that loads it again. It seems to appear (after a factory reset) some days later (i.e. just the time to download from whoknowswhere).
The fact is that I CAN'T TRUST ANYMORE the Doogee and the entire ROM so i warmly suggest you to ROOT (via TWRP + SU) , backup all, and install a LINEAGE fresh n° 14 release for shoot 1.
i did it and it worked like a charm.
Chromes
I have phone that is not rooted or changed firmware. Antivirus said that i have chomes and facebook apps that are not safe, but i do not have facebook installed. I tried factory reseting the phone twice, but it still comes back....
Have got the same "Chromes" problem on Gretel A9 mobile. Not rooted, only used Google Playstore for few apps. So frustrated and so little information on how to solve it for a non techie like me. Tried to contact Gretel who never reply. Still under an AliExpress warranty but not sure if malware stuff is covered. Needrom have the official stock rom for the A9. Do I have to root the phone to reinstall a clean stock rom? Can anyone point me to instructions on how to replace the stock rom? Thanks for any help.
I am really sorry to say that. The SUPPORT from some of these Chinese Supplier is really poor. I can't help you with your GRETEL . Please search on this XDA forum is anyone can do .
Root it and install a reliable distro. Be careful: when you root your phone you loose your WARRANTY and (sometime) some functions of your phone is not available or not available at 100%.
Custom ROMs should be considered ALWAYS as "bleeding" and "in development".
As i said i will never buy anymore low cost China phones DUE to this lack of support and this (unbelievable) disattention to release malwared firmware.
Deki-bg said:
I have phone that is not rooted or changed firmware. Antivirus said that i have chomes and facebook apps that are not safe, but i do not have facebook installed. I tried factory reseting the phone twice, but it still comes back....
Click to expand...
Click to collapse
I struggled a lot to remove it with normal antivirus and antimalware.
It seems to BE NOT POSSIBLE without a rooted phone.
In my phone there were 2 problems:
1) the malware CHROMES
2) the injected system library (dunno what it does).
So , once i removed the CHROMES %$£"%$£% app....i could not know if it was related (or somehow connected) with the malware injected system library. So i couldn't trust anymore that factory o.s. and i replaced it with LINEAGE (atm something not working 100% like GPS) but at least it's clean and works.
I hope LINEAGE could support more chinaphones to get rid of the buggy malwared firmware from Doogee, Gretel and others Chinamakers
UHANS A101 affected as well!
CHROMES and
fake FACEBOOK app
garibald75 said:
I am really sorry to say that. The SUPPORT from some of these Chinese Supplier is really poor. I can't help you with your GRETEL . Please search on this XDA forum is anyone can do .
Root it and install a reliable distro. Be careful: when you root your phone you loose your WARRANTY and (sometime) some functions of your phone is not available or not available at 100%.
Custom ROMs should be considered ALWAYS as "bleeding" and "in development".
As i said i will never buy anymore low cost China phones DUE to this lack of support and this (unbelievable) disattention to release malwared firmware.
Click to expand...
Click to collapse
Thanks for the reply.
Do warranties usually cover an infected Rom (I'd need to send it to a Poland service centre)
Is it hard to flash a new clean stock rom over an infected stock rom?
owlsman said:
Thanks for the reply.
Do warranties usually cover an infected Rom (I'd need to send it to a Poland service centre)
Is it hard to flash a new clean stock rom over an infected stock rom?
Click to expand...
Click to collapse
If you can't ROOT it, try to open RMA or open a ticket, try (at least). I hope we can MOUNT CASE and create a bit of hype around this CRAZY THINGS .
In my case it doesn worth. The DOOGEE has a really poor website and we yellew there a lot about this malware.
No way to return. IT doesn't worth.
However tell them and try to have it swapped.
Hey guys, I just got the apk. If a dev can make it "peaceful", I will really appreciate that. Just rename the chromes(blablabla).txt to chromes(blablabla).apk
jimmy1235 said:
Hey guys, I just got the apk. If a dev can make it "peaceful", I will really appreciate that. Just rename the chromes(blablabla).txt to chromes(blablabla).apk
Click to expand...
Click to collapse
WARNING for all the users: THIS APK IS FOR DEVELOPERS. This apk CONTAINS a malware. it's *ONLY* FOR RESEARCH purposes. so Don't try to install it!!
the really interesting THING would be to know if it RECALLS some system service or other RESIDENT modules to complete the cleaning and to allow US to use the original firmware again.
Let's see if anyone can help us.
Well... This is getting REALLY deeply...
https://www.kaspersky.com/blog/triada-trojan/11481/
i tested KAV and other antivirus and malware removal tools.
KAV was not able to remove and to detect it.
the 1st (maybe not the only one) that warned me has been DR WEB ANTIVIRUS and it (also) couldn't remove it without rooting.
It's impossibile, though, to know WHAT / WHICH process is linked in memory or injected in the original ROM since the Chinese CRAPPYPHONES are full of bloatware and "weirdware" .
The trust is ZERO for them ATM.

i dont understand what this means

had this same problem now for a while but cant sort it . so i got in toutch with samsung. the problem is i have no play store on my phone . had to send samsung reports on my phone . and this is the responce i got as pictured below
tazzuk2020 said:
had this same problem now for a while but cant sort it . so i got in toutch with samsung. the problem is i have no play store on my phone . had to send samsung reports on my phone . and this is the responce i got as pictured below
Click to expand...
Click to collapse
Try using fdroid and aroura store
Nameless Foe said:
Try using fdroid and aroura store
Click to expand...
Click to collapse
yeah thats fine but i still want to know what the issue is
tazzuk2020 said:
yeah thats fine but i still want to know what the issue is
Click to expand...
Click to collapse
Tbh, im not sure about whats going on there... I have personally never seen that before. Hopefully someone will stumble across and have the answer. Good Luck!
Nameless Foe said:
Tbh, im not sure about whats going on there... I have personally never seen that before. Hopefully someone will stumble across and have the answer. Good Luck!
Click to expand...
Click to collapse
Ok thanks anyway
Someone here knows about this but not me. Couldn't find much about it;
App installation | Knox SDK
Samsung tech support sucks.
Sounds like a Knox issue. Somethings not configured correctly or got corrupted.
Did Playstore ever work?
Is the phone a carrier one? Carrier tech support can be much better than Samsung's if you get a knowledgeable tech.
Try deleting your Goggle account(s), full nuke them, then recreate your primary account.
Clear Playstore and Goggle Play Services app data.
Do not have any disabled or Firewall blocked, Android, Google apks for now.
Reboot and clear system cache on the boot menu (NOT a hard reset!).
Try again, reboot if it fails.
Make sure the Goggle account is working correctly; trying using gmail.
Reboots are generally needed after you correct the issue for Playstore, it's a pain.
You can try a hard reboot (NOT reset!) but doubt this will help.
A hard reset (factory reset) may get it but it could reoccur so try to find the root cause.
If it's a none stock configuration or rooted phone you'll need advance help from XDA members who play with these issues for fun, giggles and to learn new curse words. Lol, I haven't as yet... I already curse like a Nam Vet
If you don't find a solution bump this thread each day as needed. Be patient as their is a wealth of knowledge here within the site's members.
blackhawk said:
Someone here knows about this but not me. Couldn't find much about it;
App installation | Knox SDK
Samsung tech support sucks.
Sounds like a Knox issue. Somethings not configured correctly or got corrupted.
Did Playstore ever work?
Is the phone a carrier one? Carrier tech support can be much better than Samsung's if you get a knowledgeable tech.
Try deleting your Goggle account(s), full nuke them, then recreate your primary account.
Clear Playstore and Goggle Play Services app data.
Do not have any disabled or Firewall blocked, Android, Google apks for now.
Reboot and clear system cache on the boot menu (NOT a hard reset!).
Try again, reboot if it fails.
Make sure the Goggle account is working correctly; trying using gmail.
Reboots are generally needed after you correct the issue for Playstore, it's a pain.
You can try a hard reboot (NOT reset!) but doubt this will help.
A hard reset (factory reset) may get it but it could reoccur so try to find the root cause.
If it's a none stock configuration or rooted phone you'll need advance help from XDA members who play with these issues for fun, giggles and to learn new curse words. Lol, I haven't as yet... I already curse like a Nam Vet
If you don't find a solution bump this thread each day as needed. Be patient as their is a wealth of knowledge here within the site's members.
Click to expand...
Click to collapse
The phone is not rooted. I’m not getting options to factory reset . I’m not really clued up very much thf
tazzuk2020 said:
The phone is not rooted. I’m not getting options to factory reset . I’m not really clued up very much thf
Click to expand...
Click to collapse
Try what I suggested. Recreating your Google account will most likely fix it. Learn by doing.
Play with it. The stock Android OS are pretty much impossible to damage short of bad 3rd party apps. The more you play with it, the more you learn. Make sure all your critical data is completely backed up*; be prepared for a reload at any time to prevent data loss.
If you need to download apps from Playstore now and have a device that can connect to Playstore do this. Install the apps you want on that device then use ApkExport to copy those apps then transfer and install on the troubled device
APK Export (Backup & Share) - Apps on Google Play
Manage and extract your apps.
play.google.com
Google how to bring up the boot menu on your model. The clear system cache option is found there; it can cure many erratic behavior issues.
The hard reboot is a different key sequence, Google for that model.
Do not do a factory reset until you exhaust all other solutions if the load is still fresh and no viruses are present otherwise it's a waste of time.
If you feel you have no other solutions you can use it, but if it doesn't fix it or it reoccurs you'll be right back where you started.
Contact your carrier tech support, ask to talk to advanced tech support, escalate your case if need be. They will likely be more helpful than Samsung. Remember a tech that tells you nothing but to do a factory reset isn't giving you tech support. It's the easiest solution for them, not you!!!
Note: if it's an old OS load by all means punch in a fresh copy though; after a year or so, or any major firmware update a factory reload is good practice.
*back up to SD card if you have one and/or your PC. Back that PC copy up on at least one stand alone hdd. Develop a complete back up plan before you need it.
blackhawk said:
Try what I suggested. Recreating your Google account will most likely fix it. Learn by doing.
Play with it. The stock Android OS are pretty much impossible to damage short of bad 3rd party apps. The more you play with it, the more you learn. Make sure all your critical data is completely backed up*; be prepared for a reload at any time to prevent data loss.
If you need to download apps from Playstore now and have a device that can connect to Playstore do this. Install the apps you want on that device then use ApkExport to copy those apps then transfer and install on the troubled device
APK Export (Backup & Share) - Apps on Google Play
Manage and extract your apps.
play.google.com
Google how to bring up the boot menu on your model. The clear system cache option is found there; it can cure many erratic behavior issues.
The hard reboot is a different key sequence, Google for that model.
Do not do a factory reset until you exhaust all other solutions if the load is still fresh and no viruses are present otherwise it's a waste of time.
If you feel you have no other solutions you can use it, but if it doesn't fix it or it reoccurs you'll be right back where you started.
Contact your carrier tech support, ask to talk to advanced tech support, escalate your case if need be. They will likely be more helpful than Samsung. Remember a tech that tells you nothing but to do a factory reset isn't giving you tech support. It's the easiest solution for them, not you!!!
Note: if it's an old OS load by all means punch in a fresh copy though; after a year or so, or any major firmware update a factory reload is good practice.
*back up to SD card if you have one and/or your PC. Back that PC copy up on at least one stand alone hdd. Develop a complete back up plan before you need it.
Click to expand...
Click to collapse
i cleared system cache. done a hard reboot. still the same . cant even find the option to do a factory reset. im not worried about backing phone up. the phone is a samsung a51. i have got another firmware downloading as we talk im not convinced its going to sort the problem
tazzuk2020 said:
i cleared system cache. done a hard reboot. still the same . cant even find the option to do a factory reset. im not worried about backing phone up. the phone is a samsung a51. i have got another firmware downloading as we talk im not convinced its going to sort the problem
Click to expand...
Click to collapse
Google it for that model. It's should be on the boot menu though. Also in settings as well.
I don't know what to say. This isn't that hard... small steps first.
I was completely PC illiterate 16 years ago. Was building up custom machines within the first year and probably crashed 50 or more XP loads, lol.
I was completely Android illiterate 6 years ago.
I'm 63 yo...
I have done little coding but you need to acquire a certain level of wherewithal to use PCs/Androids well, to keep them and your data secure.
You learn by doing and the Android OS is far easier to learn than XP or XPx64.
If you don't immerse yourself in it you will not learn.
It's fun to play with.
Explore it, play with it... you can't cause any permanent harm to a stock Android. You will occasionally need to undo a setting(s) change you made that may soak up a lot of time tracking it down but that's how you learn.
Go through all the settings and learn what they do.
Turn on Developer Options, play with it.
Google for the answers as your questions arise.
I'm constantly learning by doing that not just for Androids but a broad range of topics.
Lol, the internet is a whole pseudo library at your fingertips. Pretty cool.
blackhawk said:
Google it for that model. It's should be on the boot menu though. Also in settings as well.
I don't know what to say. This isn't that hard... small steps first.
I was completely PC illiterate 16 years ago. Was building up custom machines within the first year and probably crashed 50 or more XP loads, lol.
I was completely Android illiterate 6 years ago.
I'm 63 yo...
I have done little coding but you need to acquire a certain level of wherewithal to use PCs/Androids well, to keep them and your data secure.
You learn by doing and the Android OS is far easier to learn than XP or XPx64.
If you don't immerse yourself in it you will not learn.
It's fun to play with.
Explore it, play with it... you can't cause any permanent harm to a stock Android. You will occasionally need to undo a setting(s) change you made that may soak up a lot of time tracking it down but that's how you learn.
Go through all the settings and learn what they do.
Turn on Developer Options, play with it.
Google for the answers as your questions arise.
I'm constantly learning by doing that not just for Androids but a broad range of topics.
Lol, the internet is a whole pseudo library at your fingertips. Pretty cool.
Click to expand...
Click to collapse
No factory reset on boot menu. And nowhere to be seen on phone. I even typed it in to search bar on phone . Maybe this is all linked. Only option I have is to reinstall the firmware I have got downloading but that won’t be finished for a few hours
You should be able to factory reset from recovery. Google how to boot to recovery for your device
xunholyx said:
You should be able to factory reset from recovery. Google how to boot to recovery for your device
Click to expand...
Click to collapse
Nothing from boot menu.
tazzuk2020 said:
Nothing from boot menu.View attachment 5212005
Click to expand...
Click to collapse
Part of the reason I left Samsung years ago. They do stuff different than any other OEM. You can't even use fastboot commands ffs
xunholyx said:
Part of the reason I left Samsung years ago. They do stuff different than any other OEM. You can't even use fastboot commands ffs
Click to expand...
Click to collapse
i got a feeling its to do with knox. is there anything i can do about this . i brought the phone 2nd hand. the phone works perfect apart from play store

Categories

Resources