Mallicious Motorola Software Update automatically updating despite disabled settings - Moto G Stylus (Moto G Pro) Questions & Answers

I did the adb debloat method successfully (with some errors I mentioned in that thread), but when I connect to the wifi it quickly updated without my permission, despite my attempt to find all update related settings and disable them, I only found out in my notifications that "Last step to update is to restart" from Motorola Software Update, when I check its "info" disable is greyed out, SOB!
This is really pissing me off and making me want to yeet this heavy ass spyware piece of **** surveillance device out the window, I don't want to restart my device now, how do I prevent the device from updating now after restart? Motorola trying to copy Windows 10?

In Motorola Update you have disabled AutoReboot, and as you see your device is NOT AutoRebooted...
Also you can disable in DeveloperOptions/AutomaticSystemUpdates...

k3dar7 said:
In Motorola Update you have disabled AutoReboot, and as you see your device is NOT AutoRebooted...
Also you can disable in DeveloperOptions/AutomaticSystemUpdates...
Click to expand...
Click to collapse
I wish your portrayal was the reality, I did disable automatic update in developer settings, even before it did the update. Ofcourse that didnt stop it, hence why the use of the word "malicious" in the subject line.

I've had updates disabled in dev options too. It seemed to work but this was on the z4 from last year.
What happened after the update? Everything you disabled was re-enabled.?
Could you use root and app manager from f-or sunny similar on f-droid to disable the offending app?
Just wondering.
Without unlocking and rooting I do not expect to have control over anything on my device. Even then some apps can be a pain to disable or remove.
Sent from my Moto G Stylus using XDA Labs

griz.droidx said:
I've had updates disabled in dev options too. It seemed to work but this was on the z4 from last year.
What happened after the update? Everything you disabled was re-enabled.?
Could you use root and app manager from f-or sunny similar on f-droid to disable the offending app?
Just wondering.
Without unlocking and rooting I do not expect to have control over anything on my device. Even then some apps can be a pain to disable or remove.
Sent from my Moto G Stylus using XDA Labs
Click to expand...
Click to collapse
Sorry for the delay, it is some sort of Motorolla security update, it already automatically downloaded one without asking for permission, now I get a prompt to download a new one (wtf so you force one but then ask later?), when I swipe up from the bottom to see all the tabs open and delete the update prompt, it will just pop up again later, I can send a photo if you want...

ptuner said:
. . . how do I prevent the device from updating now after restart? Motorola trying to copy Windows 10?
Click to expand...
Click to collapse
Boot into stock recovery and clear cache. That's the only way I've ever been able to "cancel" an update that's already been downloaded.
However, I don't know if this will still work on newer phones. No promises.
Either clear cache or factory reset the entire phone. FDR would certainly blow it away.
k3dar7 said:
...
Also you can disable in DeveloperOptions/AutomaticSystemUpdates...
Click to expand...
Click to collapse
Unselecting Automatic Updates in Dev Options has never worked on any phone I've owned.
This . . .
griz.droidx said:
...
Without unlocking and rooting I do not expect to have control over anything on my device.
Click to expand...
Click to collapse
Root ASAP, install Titanium Backup (or similar) and disable all Update apps -- the only way I've ever been assured of blocking unwanted OTAs.

Related

can I stop OTA alerts and prompts to update?

Since I need to stick with SU6-7.0 to make sure xposed keeps working, can I somehow stop OTA prompts to install updates?
I am afraid I am going to accidentally click accept while I am trying to click on something else.
Can't figure out which app is triggering the prompts.
I see
motocare
motorola connect
motorola services
are running
aha, looks like FOTAkill from cyanogenmod might do the trick
com.cyanogenmod.android.fotakill
now to find an unmolested copy
old version http://forum.xda-developers.com/showthread.php?t=1832496
update: apparently fotakill won't work on our phones because we cannot move it to system/app since that area is write protected
Okay this worked
Disable Service app
https://play.google.com/store/apps/details?id=cn.wq.disableservice
http://forum.xda-developers.com/showthread.php?t=2392490
and kill everything for Motorola Update
silence is golden
the sheer number of services running or available is staggering, the app is very well done to inspect them
update: okay apparently disabling motorola updates is not enough, something else is triggering, have to explore much more

Chrome Home Page changed

A few days ago out of the blue my homepage in Chrome was changed from https://www.google.com to http://portal.fly2tech.com/?channel=13#!/, without me doing so. So i ran a malware check with Malwarebytes and nothing, so better safe than sorry i start looking at apps, com.android.partnerbrowsercustomizations.example is showing as a normal app, whereas before it was a hidden system app. My phone is running stock MM 6.0.1 with Nov 2016 security patches. Not rooted with stock recovery. As a precaution I did a factory reset, and everything was fine then just about an hour ago it changed again, to the fly2tech portal as homepage, i went into apps and the com.android.partnerbrowsercustomizations.example program was showing again, i selected the three dot menu in upper right and clicked uninstall update, at which point i was prompted if i wanted to revert a system app to previous version, I clicked yes, and it disappeared from apps back to hidden system app. I uninstalled chrome just to make sure I was getting a clean copy and so far no more fly2tech portal. I have fired off a support request to Alcatel. I certainly hope they are not pushing this garbage out to customers. Or there is a vulnerability that needs fixed!!! A google search has indicated this has happened to one touch devices from all I have seen....
Anybody else having this problem??
oops, Clicking that link crashed a few apps on my Chrome. Weird how that could be an Alcatel thing.
Huskied said:
oops, Clicking that link crashed a few apps on my Chrome. Weird how that could be an Alcatel thing.
Click to expand...
Click to collapse
It did it again, i rolled back system app, they have also pushed an update to their updater app, I have disabled automatic updating of system and system apps, hopefully it doesn't do it again. I called Alcatel support today, they didn't deny it was them, but they created a ticket and will get back with me.
So I just got a phone call from Alcatel support, they are investigating, the guy said they are in touch with the dept in charge of FOTA updates to see if its something they are pushing or if there is a vulnerability at play. At least they are interested enough to actually call me for details....
Interesting....
That's what is usurp my stock browser for over a month. I set homepage to google.com but it's​always changed autonomous to this portal thing. It's like some mw on Windows doing it's job. Weird.
Sent from my 6045K using Tapatalk
Nikola Jovanovic said:
That's what is usurp my stock browser for over a month. I set homepage to google.com but it's​always changed autonomous to this portal thing. It's like some mw on Windows doing it's job. Weird.
Click to expand...
Click to collapse
At this point I'm convinced Alcatel is pushing the customization, via the system update, and not any malware.... But they have no right to choose my homepage. I have blocked automatic updates to system and system apps so I'm going to run a few days and see if that fixes it...
I'm ​not sure that is the case cause mine have been disabled long time before this happened...
Sent from my 6045K using Tapatalk
Nikola Jovanovic said:
I'm ​not sure that is the case cause mine have been disabled long time before this happened...
Click to expand...
Click to collapse
Well the problem has not repeated itself, since disabling automatic system app updates. I'm still waiting to hear back from Alcatel USA. I find it hard to believe they would force a customization on a phone that is not subsidized, and I could be entirely wrong about it being them, regardless if it's them or not, I don't think I should be forced into using a portal that keeps resetting itself to the homepage. If it's Alcatel, they need to stop, if it's a security vulnerability I hope they patch it.
I doesn't make sense. I've checked my updates to found out that i freezed the update app in titanium backup prior this homepage changes.
Sent from my 6045K using Tapatalk
Nikola Jovanovic said:
I doesn't make sense. I've checked my updates to found out that i freezed the update app in titanium backup prior this homepage changes.
Click to expand...
Click to collapse
Well i spoke too soon, it has happened again, i guess until I get an answer I'm, just going to have to keep uninstalling updates to com.android.partnerbrowsercustomizations.example. which really stinks. If it gets too bothersome I'll just get a new phone
Weird stuff. I'm looking towards note7r
Sent from my 6045K using Tapatalk
So Alcatel wants to send me another Idol 3 and wants to analyze my current phone... I'm glad they are taking this seriously
I have just discovered the same thing on mine. I'm going to freeze com.android.partnerbrowsercustomizations.example in Titanium Backup, and see what happens.
Fiasco said:
I have just discovered the same thing on mine. I'm going to freeze com.android.partnerbrowsercustomizations.example in Titanium Backup, and see what happens.
Click to expand...
Click to collapse
I have to call back the rep from alcatel us support Tomorrow afternoon, they want to examine my phone, not sure how comfortable I am sending my phone back to them, I will remove as much sensitive info as I can, but don't want to strip it bare, I want them to get to the bottom of the problem, but not sure how invasive they will be, but if it helps to stop the problem I guess it's worth it.... They are going to send me another Idol 3 to use while they investigate.... I thought about just doing an OOB restore via Mobile Upgrade Q, but if it's a vulnerability eventually it will creep back up on me, I guess the best bet for all of us is to let Alcatel disect my phone and determine how they can plug it....
Alcatel can always pull your info anytime anywhere you have connection to internet, as google and app developers.. so don't trip you are already been examined.
Sent from my 6045K using Tapatalk
It's not a "bug" it's intentional. I froze it with Titanium Backup then after a couple of days I removed it completely. No more homepage jacking.
Of course, you must be rooted to do this.
Fiasco said:
It's not a "bug" it's intentional. I froze it with Titanium Backup then after a couple of days I removed it completely. No more homepage jacking.
Of course, you must be rooted to do this.
Click to expand...
Click to collapse
Ok so Alcatel is acknowledging the issue and has asked that I refrain from making any modifications to device, including restore via Mobile Upgrade Q. At this point im sure someone at TCL has dropped the bomb, but I'm getting the feeling even the US support team knows this isn't gonna fly. If they want to force it, then push your own browser, don't mess with Chrome, I like my settings just the way they are. I'm giving it another week tops, then I shall root and set up my phone where it can't be violated. I can see a phone company forcing customizations on subsidized phones, but not on an unlucked phone bought outright....
So looks like they stopped pushing it...
Should we reset the phone to factory then? can't they just send an update?

Disable Updates?

Sorry for potentially asking a dumb question, but im at my wits end here.
Is there any way to completely disable OTA updates, with the stock ROM on the Pixel 4a?
Asking because i have turned automatic updates off in settings and it STILL checks and STILL force updates the phone after a week or so. This is extremely frustrating as i have very specific versions of certain apps installed, eg Google Keyboard, Vanced YouTube, Pre stories Twitter etc. They are all configured exactly how i want and when it updates it installs the latest versions and consequently ****s all the settings up at the same time. This means i have to spend a few hours uninstallling, reinstalling and re configuring the whole ****ing phone again.
So yeah, is there a way? I am rooted with magisk if thats of any benefit. Ill do anything, even if it fundamentally breaks google play store/services and requires ghetto apps like LP/Autostarts etc. I just want my device how I want, not what some trillion dollar company wants.
My last device was a Mi A2 Lite and it behaved itself perfectly before i destroyed the screen. Starting to regret this upgrade.
When you say "I have turned automatic updates off", did you do this in the play store app? If so, good.
But, you can also try these extra steps:
1) Turn on "Developer Mode" on your phone (do search for how to do this). Then go into developer options and turn off "Automatic System Updates".
2) Then do the changes I did in this post:
How do I stop update notices?
I'm rooted with Android 10 on my pixel4a. I don't want to upgrade to 11 just yet, but I keep getting the annoying update notices. Is there an app or module I can freeze with titanium to turn off the notices?
forum.xda-developers.com
Since doing these, I have not seen an "Upgrade to Android 11" (I'm on A10) message and I have not noticed any apps being forced updated.
yeah google play updates are disabled. which is interesting because after the phone updates, it re enables them, as well as a bunch of other permissions in settings!
and yeah ive disabled auto system updates in developer options, which is what im pissed about because it still updated the phone without my permission whilst i was asleep last night.
ill try and force freeze those components you listed, see if that kills it.
i might have a poke around the autostarts app later and see if i can do something there, thats if it even works with android 11.
the last time i had to do this was on my nexus 7 running kitkat lol

How can I see disabled apps on my phone?

I've been getting a toast message stating all apps associated with hotspot feature have been blocked, turned off, or are not installed. This started after the most recent update.
Prior to the update, hotspot worked and I've never used a third party app to turn it on. I simply went into the settings and enabled it.
How can I see a full list of services/apps I may have disabled? I also have a VPN running.
Or is there a logcat app I can use to see what's happening? Not rooted here.
On a Samsung S20 5G and not all owners are seeing this issue. So maybe it's a user error.
Thanks for the help.
Depends how you disabled them.
It's easy if you used a package disabler.
I guess adb would work but no clue how to view that. Keep a log of what you disable with adb...
Usually takes a factory reset or two to get things right
@Pinalp84
to list all disabled apps you run
Code:
adb devices
adb shell pm list packages -d
It's not rooted. If I did disable them, I'm sure it wasn't through adb. So most likely through whatever method available via only the phone.
Okay, enabled all packages. Restarted. Still the same issue. So sick of Samsung.
Pinalp84 said:
Okay, enabled all packages. Restarted. Still the same issue. So sick of Samsung.
Click to expand...
Click to collapse
You need to optimize it.
If you did any major firmware updates and didn't do a factory reset, do so now.
If you used SmartSwitch to transfer settings from another OS or device, factory reset.
Clear system cache, system logs and apk caches (data as needed); this is routine maintenance and generally all that's needed once optimized.
Do not use 3rd party launchers or power management especially 3rd party power management apps. Find the what's causing the issues and deal with those apks/services directly. Each user and configuration is unique and so are the solutions.
It's a fast, very stable, strong running device once optimized... play with it.
Never used SmartSwitch. Just did a factory reset. Still the same issue...
Pinalp84 said:
Never used SmartSwitch. Just did a factory reset. Still the same issue...
Click to expand...
Click to collapse
Try in safe mode. In settings do a "tethering" search. Double check all settings...
If it's through a carrier... renew the pass code.
SmartSwitch may be ok if same device and OS... just make sure it's not your primary backup.
My theme, icons, homescreen are pretty elaborate so next reload I'll test it for just that.
If it pukes I'll just factory reset again, no big deal.
blackhawk said:
Try in safe mode. In settings do a "tethering" search. Double check all settings...
If it's through a carrier... renew the pass code.
SmartSwitch may be ok if same device and OS... just make sure it's not your primary backup.
My theme, icons, homescreen are pretty elaborate so next reload I'll test it for just that.
If it pukes I'll just factory reset again, no big deal.
Click to expand...
Click to collapse
Are you on a S20 5G?
Pinalp84 said:
Are you on a S20 5G?
Click to expand...
Click to collapse
No.
Cross search devices/OS versions for solutions and workarounds. Most issues have been around for years...
Everytime you update you expose yourself to new and potentially unknown firmware malfunctions that many times vastly outweigh any benefits.
Google is not conservative but you can be...
There are no solutions for this issue as of now. I've seen a few people online with the same issue and none of them have found a solution even after calling Samsung support. This issue surfaced after the most recent android update.
Pinalp84 said:
There are no solutions for this issue as of now. I've seen a few people online with the same issue and none of them have found a solution even after calling Samsung support. This issue surfaced after the most recent android update.
Click to expand...
Click to collapse
Samsung tech support is next to useless.
The US tech side is better, SK and Philippines are worthless.
Check -all- related settings and permissions.
The update may have toggled a critical buried setting. It wouldn't be the first time
Many times you need to track the issue down yourself. Try different search words and look at all similar issues regardless of the OS version and device.
What are you trying to tetheri to?

Question Is there a way to disable automatic system updates?

It seems Samsung is forcing updates no matter what's turned off in the phone. I have them turned off under developer options, but it's still downloading and installing updates - and with every "system" or "security" updates, it installs other garbage. Apparently I needed "Samsung Visit In". And it keeps giving its stupid apps permissions to cameras/microphone/modify system settings/etc. Really frustrating.
Is there a way to disable that completely? Does anyone know of a package name that I could uninstall via ADB that stops it from downloading patches automatically - hopefully without bricking the whole thing? Or do I have to root it and install something else completely?
I've tried searching here, googling everywhere, and it seems there's nothing...Not sure if Verizon took a few options off - as some of the menus screenshots look different for some people online.
Thanks!
Try
Post in thread 'Disable system update?' https://forum.xda-developers.com/t/disable-system-update.4223781/post-84367233
Or use AdbApp Control. One click its disabled
raul6 said:
Try
Post in thread 'Disable system update?' https://forum.xda-developers.com/t/disable-system-update.4223781/post-84367233
Click to expand...
Click to collapse
Thanks! That was one I haven't ran across yet. 2 of those (systemupdate and updatecenter) are on the do not remove lists on google docs; so had I initially left them alone, but I removed them now, I guess what's the harm...
I could not find wssyncmldm; but while I was in ADB the update popped up again on the phone, clicked on 'learn more' and realized it's verizon that's pushing these updates, not Samsung... So then I went and disabled a lot of verizon/vzw stuff I found, hopefully I got it...
No wonder the old Nokias ran for weeks on a charge, they didn't have all this garbage in the background... lol.
Thanks for the help!
Update, after disabling those the system updates still showed up. I downloaded a package inspector, found it to be com.samsung.sdm. Googled that, people mentioned com.samsung.sdm and com.samsung.sdm.sdmviewer to be the culprits. With the update screen up I disabled com.samsung.sdm and it went away. Disabled sdmviewer too just to be safe, but so far looking good for now.
Their garbage reinstalled samsung pay and all of the other bloatware that I had removed when I got the phone... so frustrating!

Categories

Resources