THESE VIRUS SEEMS TO BE INFECTING HUNDREDS OF ANDROID DEVICES EACH DAY. (ALWAYS INSTALL ANTIVIRUS ON YOUR ANDROID PHONES TO PROTECT YOUR PHONE FROM BEING INFECTED WITH THESE VIRUSES)
To remove this virus you need to install busybox,
Terminal emulator, Root explorer pro and you must
have Supersu not superuser which is installed by
Kingoroot. If you have rooted your device with
kingoroot, so you need to change that.
Here is how to change that:
Google this: how to get ride and replace kinguser with
supersu app (Follow first zidroid link) I'm not able to submit links so im going to write the
exact apps with developer names to download from
Playstore.
Busybox Installer by JRummy Apps Inc.
Terminal Emulator by Jack Palevich
Root Explorer Pro by Speed Software
Once you have installed everything here is what to do
in steps:
[Note: USB DEBUGGING MUST BE ENABLED Turn on Usb
Debugging by going to settings> developer options>
Usb debugging]
1) Turn off wifi/3G/4G, and then go to settings> apps>
all> disable time service and monkey test. (If already
frozen via titanium backup or other app) skip this.
2) Open Root explorer go to system/xbin and see if
there is any file starting with a dot (eg: .ext.base) also
note that every (.) file has diff permission then the rest
of other files. So just remember those files with dots
because those are the one that you're going to
remove in terminal emulator.
3) Go back to system and then go to Priv-app folder
and look for these two files
[1] cameraupdate.apk [2] providerCertificate.apk and
also notice permission of these two files are different
then the rest of Apks so these two are the base of MT
TS virus and needs to be deleted.
5) WHAT TO TYPE IN TERMINAL EMULATOR or ADB (CMD
Windows)
adb devices (Type this line if you're using adb
Windows)
adb shell
su
cd system/priv-app
chattr -iaA providerCertificate.apk rm providerCertificate.apk
chattr -aA cameraupdate.apk
rm cameraupdate.apk
cd ..
cd system/xbin
chattr -iaA .b rm .b
chattr -iaA .ext.base
rm .ext.base
chattr -iaA .sys.apk
rm .sys.apk
[NOTE: If you are using older version than KK you need not to type priv-app just type cd system/app]
6) Please see if your device xbin has more files with
dots because these are three files I had so if there are
more you need to remove them with the same
command I mentioned above (e.g:cd system/xbin
[Enter] chattr -iaA .New.file & then rm .New.file and
make sure you type the file name correctly just as providerCertificate C is capital otherwise permission
wont change.
7) Exit Emulator/ADB shutdown your device go to
recovery clear cache and restart.
0 comments:
Post a Comment