Related
Hi There,
I am facing a very major issue with my Motorola Moto G recently (May not be Device Specific though): The WiFi & Mobile Network of my phone are getting turned on automatically. Every time I deactivate both, but get activated again & again even after repetitive deactivation. Even though the mobile data status is showing “Off”, it still gets activated in the background. This not only is draining away my battery but also causing a loss in my mobile currency balance, because the mobile data is consuming bandwidth. I believe this is a Virus or Malware Attack.
I installed CM Mobile Security antivirus as well as Avast Mobile Security which I believe are 2 of the most popular antivirus programs in Google Play store. CM Mobile Security detected a virus or threat called "Towelroot". When it removed or quarantined it, the issue got fixed at that point of time. But when I booted my phone to recovery, for some reason (Even though I selected "Normal Power-up"), I started facing this issue again. This time I scanned my phone again with both the Antivirus programs, but neither of the 2 have fixed the issue. So the virus called "Towelroot" may or may not be the culprit. I was wondering if the virus that was previously quarantined by CM Mobile Security has somehow got access to my Phone again, but when I checked the quarantine, I found that it was still present in the quarantine. I searched a lot in internet, as to how to fix this issue. But I didn't get any solution. Currently I have put my phone on "Flight Mode" to avoid getting my mobile balance cut unnecessarily.
I am totally helpless now. Please please help me addressing this issue, as it's a very major issue.
Any help from anyone will be highly appreciated.
Thanks in advance.
Have you tried to reset the phone ?
Wipe system/data/cache, that should help. If that does not help, then you're facing another issue.
NOTE: If you're going to wipe it, you're gonna all things on your phone(sms, contacts, apps, images on phone internal memory etc). Your SD card will not be touched.
Sent from my GT-S5360 using XDA Free mobile app
Ya I have already tried that. I also did a complete factory reset, like as I already mentioned. Initially after doing the factory reset it worked, but after some time the same issue started showing up.. ..
And may i know what "Another Issue" are you talking about? Is it a virus or a trojan ?? If so just to let you know I have scanned my device with almost all the top AV programs, but none has detected any vulnerabilities or threats.
Please reply.
Check here.
By the looks of it, it is a trojan that happens by rooting ? (May be bs, since it can be from anything and just give it permission)
EDIT: Try to re-install the rom(just follow instructions here http://forum.xda-developers.com/showthread.php?t=2854688 ). Since the problem lies in your linux(android) code this should work
Sent from my GT-S5360
I believe towelroot is actually program used here on xda. Check forums. Sounds like your experiancing carriers ability to flex their powers over your phone. If you have root and have root Explorer or file Explorer take a look into your files on device that are normally hidden from you. When you do restore only temporarily erases situation. They will be right back in your phone creating blocks to further prevent you from getting root. Most carriers are fixed with Google now and have little implant bugs in about 80 % of your apps. When you do something they don't like which could possibly give you opportunity to hack and Redbone or block them they quickly attempt to closer all of your avenues. I've been balding then forever. Seems like I am at a stalemate with them but they have about 6 gigs worth of junk (security) on my phone that prevents me from even song some of the basic stuff. I delete it and it's back in about 1 second. Heres link. . Towel root by respectable developer.
http://forum.xda-developers.com/sitesearch.php?q=towelroot
MasterBrick SCH-I545, XdA mobile app...
Hi, i am facing a similar issue with moto g. During the day it's connected on wifi so there is no issue but during night I turn off wifi and mobile data. When I check my phone in the morning, mobile data is on and data/bandwidth has been consumed from my account. This has been happening since past few days now. Have tried resetting the phone, but that also doesn't help.
Hi, did you find any fix.... same issue here. please help me. Thank you...
Hi, did you find any fix.... same issue here. please help me. Thank you...
Yes, I found a solution for this issue you just download addon didector app it work many smart phones
rahi444 said:
Hi, did you find any fix.... same issue here. please help me. Thank you...
Click to expand...
Click to collapse
Your system could be compromised but probably more likely a rogue app or pup (potentially unwanted program). You can use an antivrus with the PUP set to ON or try an app like permission dog ref
https://www.cnet.com/au/how-to/how-to-check-your-android-device-for-rogue-apps/
Hi,
I am looking for some help with a problem I am experiencing with a recently purchased Lenovo A936, (Golden Warrior). I hope this is the right place to post.
I bought this smart phone from China and have been SO impressed with its performance, it is fast and has a great camera. However, I kept getting unwanted programs popping up so I installed AVG antivirus. It initially identified some 8 threats about 3 of these threats were apps that were installed by the vendor and were not able to be uninstalled, It was possible to remove the remaining threats apart from one which it stated “1 setting is not secure, the device is running in high privilege mode, it has been rooted”
I think Lenovo are responsible manufacturers so I guess the retailer has put some nasty stuff on this phone, I have been able to use the phone for a few months by regularly deleting unwanted programs flagged up by AVG but it has got progressively worse to the point when there are now 10 threats that cannot be removed and there are some pop ups that seem to have hijacked the AVG as they come up on top when I open AVG making it impossible for me to access AVG. I usually switch off at this point!
Sorry about the rather lengthy description above but my question is can I recover this phone? Is it possible to wipe everything off, (rather like formatting a computer hard drive), and reinstall the proper android operating system – is the operating system available as a down load? If it is possible to down load, how would this be done, get it on a computer and then connect the phone to the computer? I have android 4.4.4 could I put a later version on? If this is done, can I be sure that al the functions will work – for example does it need drivers for the camera etc. I dont really want to reduce this phone to an expensive paper weight but it looks like I have little to loose now as it is not usable apart from the camera.
I would be eternally grateful if someone could offer some advice, (suitable for a not-too-techy).
Thanks in anticipation,
john.
I encountered a virus on my 0+ 360 alpha with 4.4.2 software. I have two of this phones since it is a couples' phone. They encountered the virus at the same day. At first, both downloads so many ads which the user cannot interfere. It automatically turns on the wifi and turns on the "allow" unknown apps. One phone went stack at boot and the other keeps on downloading apps. Have tried hard reset, data wipe out and wipe out partition cache. Still no improvement. I have checked the other threads but can't find something useful.
rufinoringor said:
I encountered a virus on my 0+ 360 alpha with 4.4.2 software. I have two of this phones since it is a couples' phone. They encountered the virus at the same day. At first, both downloads so many ads which the user cannot interfere. It automatically turns on the wifi and turns on the "allow" unknown apps. One phone went stack at boot and the other keeps on downloading apps. Have tried hard reset, data wipe out and wipe out partition cache. Still no improvement. I have checked the other threads but can't find something useful.
Click to expand...
Click to collapse
Hi thanks for using xda assist.
Please have a look at this thread : http://forum.xda-developers.com/android/help/getting-terraclicks-ad-virus-t3272829
Good luck.
Thanks for the link. My problem is that i cannot even stop the pop up screen so I can install a pop up blocker or something. Hard reset is not even working. Those people making virus are very good in inflicting damage nowadays.
I guess I would have to reload a fresh system. Where and how can I find such things??
Hi guys,
Due to the problem with Android 11 / Android Auto I consider the downgrade to Android 10. Any chance to do it keeping apps and settings (w/o factory reset)?
(SM-9860, CHC).
andriy_ said:
Hi guys,
Due to the problem with Android 11 / Android Auto I consider the downgrade to Android 10. Any chance to do it keeping apps and settings (w/o factory reset)?
(SM-9860, CHC).
Click to expand...
Click to collapse
You will not be able to keep anything. The phone is completely wiped when downgrading.
Maybe Smart Switch but don't bet on it.
ApkExport can make copies of apps so you don't need to download them again.
I treat OS loads as expendable assets; only critical data matters. That app data except for a few apps like Poweramp is pretty much expendable too. Sometimes it can cause issues on new loads, bring old problems into the new load, especially if it's a different firmware platform.
If you have a fast, stable OS that does what you need... leave it alone.
Lol, I'm still running Pie. Not buying any of the hype or security paranoia that Google is pandering. They screwed up 2X now.
Pie was their last good OS... and the numbers/adoption rate bare that out.
What a gaggle of dropped balls
Sad story.
I've tried and got FRP lock. Bought a new one. Old phone is in the repair centre that is going to use JTAG connector to clear the memory chip directly. Let's see
Hello friends and users of XDA forum. First I'm from Hong Kong and join XDA for more than 10 years, please accept my apprologize my poor english.
The story started from 6 years ago, during these days I changed over 20 phones. The first time I changed my mobile phone was image files and viedo files that I captured from IP cam some sensitive captures disappeared. Initially, I thought the problem of my LG-E988. So, I brought a new Phone LG-(forgot) DS. For the first few days. It looks perfectly fine, but the problems came back again. I beliveryed that it may caused by virus/malware/trojan, so I tried almost all different virus scanner avaliable, nothing was found. And sometimes I lost email, SMS message and GPS turned on by itself. I also saw the mobile screen changed itself, even took photos and videos. I told these to my family, because I have parkinson desease. So they believe I have organic psychosis and send me to hospital. Then I was trapped in hospital half a year because my wife lie and doctor did not believe what actually happened.
Over these 6 years, my computers all affected similar trojan (bootkit), It still there after fresh installed once infected. The mobile and computer can work offline, all photos and video files that copied in or out of computer / mobile will be damaged. These forum for mobile, so I concentrate on mobile trojan's issue, if you need solutions how I solve the problem, please feel free to ask.
I don't have much information about the trojan, but i have some clues can share.
(1) the trojan is not an apk nor zip package that installed by TWRP or any recovery.
(2) the trojan seems can be "inject" to any andriod systems and any brand, any model.
(3) the mobile seems must be opened physically. it must be injected into different partitions.
(4) Sometimes it works by root the mobile and install any ROM and the trojan will gone.
(5) I recently fixed a Samsung SM-A715F and I found an encrypted partition in adb shell.
(6) some files are set to some permissions even root can not copy, open, or chmod.
(7) the trojan will not infect other mobiles at same network or NFC, Bluetooth, Wifi.
(8) again, the trojan and see/listen using camera in realtime, see what you are doing, see your position, listen to background noise, the word you are typing or take full control of your phone, heat up your cpu and even turn your roaming on and transmit hundred of giga byte data.
I'm a programmer that I can write a little java program, root my mobile and install my favourite ROM, but not able to trace / detect / delete such trojan and where the data goes. Any expert can help me to doing that? It destory my family by capture something that my wife should not see. I still have a LG V20 and a honor 8A (JAT-L29) are infected. Please what to do next, or what you need.
Thanks for every one and sorry for my poor english.
boyfriend3088 said:
Hello friends and users of XDA forum. First I'm from Hong Kong and join XDA for more than 10 years, please accept my apprologize my poor english.
The story started from 6 years ago, during these days I changed over 20 phones. The first time I changed my mobile phone was image files and viedo files that I captured from IP cam some sensitive captures disappeared. Initially, I thought the problem of my LG-E988. So, I brought a new Phone LG-(forgot) DS. For the first few days. It looks perfectly fine, but the problems came back again. I beliveryed that it may caused by virus/malware/trojan, so I tried almost all different virus scanner avaliable, nothing was found. And sometimes I lost email, SMS message and GPS turned on by itself. I also saw the mobile screen changed itself, even took photos and videos. I told these to my family, because I have parkinson desease. So they believe I have organic psychosis and send me to hospital. Then I was trapped in hospital half a year because my wife lie and doctor did not believe what actually happened.
Over these 6 years, my computers all affected similar trojan (bootkit), It still there after fresh installed once infected. The mobile and computer can work offline, all photos and video files that copied in or out of computer / mobile will be damaged. These forum for mobile, so I concentrate on mobile trojan's issue, if you need solutions how I solve the problem, please feel free to ask.
I don't have much information about the trojan, but i have some clues can share.
(1) the trojan is not an apk nor zip package that installed by TWRP or any recovery.
(2) the trojan seems can be "inject" to any andriod systems and any brand, any model.
(3) the mobile seems must be opened physically. it must be injected into different partitions.
(4) Sometimes it works by root the mobile and install any ROM and the trojan will gone.
(5) I recently fixed a Samsung SM-A715F and I found an encrypted partition in adb shell.
(6) some files are set to some permissions even root can not copy, open, or chmod.
(7) the trojan will not infect other mobiles at same network or NFC, Bluetooth, Wifi.
(8) again, the trojan and see/listen using camera in realtime, see what you are doing, see your position, listen to background noise, the word you are typing or take full control of your phone, heat up your cpu and even turn your roaming on and transmit hundred of giga byte data.
I'm a programmer that I can write a little java program, root my mobile and install my favourite ROM, but not able to trace / detect / delete such trojan and where the data goes. Any expert can help me to doing that? It destory my family by capture something that my wife should not see. I still have a LG V20 and a honor 8A (JAT-L29) are infected. Please what to do next, or what you need.
Thanks for every one and sorry for my poor english.
Click to expand...
Click to collapse
It sounds to me that your computer is the main problem and I assume you connect the phone to it so the phone gets infected.
Regarding computer and virus the best thing to do is to format and reinstall the Operative System.
Regarding the phone, hard reset and no more problem.
mobnoob said:
It sounds to me that your computer is the main problem and I assume you connect the phone to it so the phone gets infected.
Regarding computer and virus the best thing to do is to format and reinstall the Operative System.
Regarding the phone, hard reset and no more problem.
Click to expand...
Click to collapse
Thanks for the reply. Nope, plug-in into a computer won't infect the phone, but if debug turn on, it might be ture. But I'm 100% sure hard / factory reset, wipe cache won't clean the trojan. I did it million times with no apps was installed but still clear the trojan. it's not done by install an apk. according to infected 20+ phones, 80% of the phone's cover were openned. I believe they downloaded "EEPROM" boot partition and add a small portion of code. If I root the phone, sometimes i can see an unknown encrypted partition. And administrator can't access most of the files on root. The only solution is root the phone and wipe everything then, put stock rom from other sources install, but it's risky. Any others methods or suggestion to check or verify the ROMs are original stock ROM?
Please help me! Thanks!
#The attach file is rooted phone /root_files, but most file can't be copied.
1. A Factory Reset - as its name implies - simply turns device into state when it was shipped by manufacturer, means all user-data / user-apps get wiped, system apps get reset to their original state if they got upgraded.
2. Wiping the Cache deletes only temporary system data, but not temporary user-app data.
Hence it should be obvious these 2 named actions will eliminate a trojan or other malware the Android device got infected with. But with the help of an activated Google Play Store they can re-install themselves.
Trojans ( hidden apps ) can easily get found on Android device.
FYI:
What all types of Trojans have in common is that they can only get onto the end device with the help of the user.
Trojans are not only found in email attachments. They can also piggyback on supposedly free programs. Therefore, it is once again important not to use dubious sources for software downloads such as codec packs or cracked programs, even if you might save a few bucks. The damage that can be caused by Trojans often exceeds the value of the software if it had been purchased regularly.
By the way, a Trojan should not be confused with a virus. Viruses reproduce independently, while a Trojan is merely a door opener - but with potentially devastating consequences.