Related
Who is affected? All devices pre-gingerbread
Who should act? Users and developers using pre-gingerbread roms
How do I fix? Flash attached .zip at the bottom of this post
What if I think I was infected? Completely wipe your device, format sdard, go back to stock and re-apply rom, then flash the attached .zip (before installing any apps)
Why should I care? read below...
http://www.androidpolice.com/2011/0...your-phone-steal-your-data-and-open-backdoor/
Flash this with ClockWorkMod.... this is for any Pre Gingerbread ROM.... ie TNT anything, VEGAn 5.1.1 and below, Zpad anything, GAdam anything.
This is not necessary for any ROMS based off Gingerbread AOSP or CM7. Including VEGAn-TAB Experimentals.
Be Safe.
Even More Details here: http://www.androidpolice.com/2011/0...-android-nightmare-and-weve-got-more-details/
I checked out the zip and it just adds a blank text file (0 bytes) called profile to the /system/bin folder. So I am not sure what the fix is?
**EDIT** Nevermind it is a dummy file meant to prevent the virus. Thanks to the OP for providing this.
http://www.androidpolice.com/2011/0...your-phone-steal-your-data-and-open-backdoor/
Nasty stuff. I would say this patch is high priority and I'm already going through my own ROMs to add it in.
http://forum.xda-developers.com/showthread.php?t=977154
Link above has info on creating the file manually.
Jim
fyi -
http://www.pcworld.com/article/221213/keep_malware_off_your_android_phone_5_quick_tips.html
Lookout mobile security . In case you cannot find it via the market.
http://www.getjar.com/Lookout-Mobile-Security-with-Antivirus
Edit. I just installed the lookout app to scan my tab, everything was fine and then, i un-installed it since it was running on the background and taking 10% of the cpu..
Anyways, a nice app that can be used to do a quick scan..
I don't have a stock gtab but I'll ask anyways... how can our stock rom users be protected? Is there an alternate method?
Edit just saw the manual process. Im guess that's the way to go.
xmr405o said:
I don't have a stock gtab but I'll ask anyways... how can our stock rom users be protected? Is there an alternate method?
Edit just saw the manual process. Im guess that's the way to go.
Click to expand...
Click to collapse
I'd curious to see what all the vendors are going to do about this. Granted, they could just say that the Market is not there, but regardless the security hole is still there and needs to be plugged up.
Hi,
I hope that this isn't too offtopic, but I was trying to create /system/bin/profile using a term and su, and when i went into root explorer to make /system/bin R/W, root explorer showed the dir as R/W already, and as mounted on /dev/loop9.
Is that normal?
I haven't installed dataloop, at least intentionally, so it seems strange that /system/bin would be mounted there, plus it being R/W by default?
FYI, I use z4root to get temp root. Could that be why /system/bin is R/W?
Then again, that wouldn't explain the /dev/loop9 mount ...
Jim
jimcpl said:
Hi,
I hope that this isn't too offtopic, but I was trying to create /system/bin/profile using a term and su, and when i went into root explorer to make /system/bin R/W, root explorer showed the dir as R/W already, and as mounted on /dev/loop9.
Is that normal?
I haven't installed dataloop, at least intentionally, so it seems strange that /system/bin would be mounted there, plus it being R/W by default?
FYI, I use z4root to get temp root. Could that be why /system/bin is R/W?
Then again, that wouldn't explain the /dev/loop9 mount ...
Jim
Click to expand...
Click to collapse
Hi,
Creating the profile file manually, it wouldn't persist,i.e., it was gone after rebooting, so I installed gojimi's zip usung CWM, and that worked.
I also did a mount w/o getting temp root, and /system/bin is not on /dev/loop9, so I'm guessing that when z4root sets temp root, it might be remounting /system/bin on /dev/loop9 itself.
Jim
You would have to download one of those sketchy apps to really be affected anyways, right? Who would do that?!
Appreciate the patch. This highlights the two problems with android though, google fixed this security issue in 2.2.2, but most carriers still haven't released that update. And the market needs some oversight, not authoritarian apple like, but some.
Sent from my T-Mobile G2 using XDA App
Is it possible to sticky this thread
Mods is it possible to sticky this thread so that it is easily visible.
Thanks
Hello guys. Is there a way to find out if our tablet is infected or not?
I mean if we have installed any of the apps in the list that automatically means that we are infected or not?
If infected what is preferred to do wipe the tablet or go back to stock rom??
Is there any manual for windows 7 noobies users?
Thanks.
Doctor LeVa said:
Hello guys. Is there a way to find out if our tablet is infected or not?
I mean if we have installed any of the apps in the list that automatically means that we are infected or not?
If infected what is preferred to do wipe the tablet or go back to stock rom??
Is there any manual for windows 7 noobies users?
Thanks.
Click to expand...
Click to collapse
Please read the thread completely, it is stated you can download lookout security to run a scan to see if you are infected.
downloading.....see what happens
There is a DroidDreamKiller app that allows you to check to see if you are already infected and install the patch. There is also a beta test app that gives you other information. Just search the market for DroidDreamKiller.
To devs: Thank You
TO Everyone else DO THIS ASAP
How do I flash the zip file after downloading it?
Thanks
Start cwm using volume up while powering on.
Once menu comes up select install zip using vol buttons
Use home to select.
Navigate to where you saved zip file
Select it with home button
Once install complete reboot from cwmod
MODs Please make this a sticky . It is being overlooked.
I rooted my Kindle Fire and the only thing that isn't working is the Google Play Store. I used Kindle Fire Utility to root my device. When I open up Google Play, it says:
The application Google Play Store (process.com.android.vending) has stopped unexpectedly. Please try again.
I've tried installing the apk various ways but it's the same result every time.
Any helped appreciated.
Did you move it to /system/app and chmod 755 before installing?
I had this problem for awhile myself and it took me hours to find a solution. What I did was after I rooted my kindle and flashed it over to cm9 reloaded I noticed gapps was not working. So to fix this I rebooted Into twrp and reflashed the gapps zip rebooted once more and my problem was solved. Hope this helps
Sent from my Kindle Fire using XDA
Flashing insecure stock rom 6.3 did the trick.
It was working. I could navigate through the market and look for apps but when I went to install Spotify, it went back to that error message. After that, I try opening the market and it shows the error message.
I'll be honest; I'm a little lost on what everyone said above. All I've been doing is downloading the apk's from the Internet and throwing them on my downloads folder. I open ES File Explorer and download the apk's. Is there anything simple I can try?
gclo85 said:
I'll be honest; I'm a little lost on what everyone said above. All I've been doing is downloading the apk's from the Internet and throwing them on my downloads folder. I open ES File Explorer and download the apk's. Is there anything simple I can try?
Click to expand...
Click to collapse
Do you have the stock rom or a custom one?
Sent from my Kindle Fire using XDA
I'm using stock with go launcher. I just tried a suggestion from a site to make sure I'm rooted. I installed terminal manager and typed su. I got the reply permission denied. I'm thinking that means I'm not rooted?
http://forum.xda-developers.com/showpost.php?p=24312196&postcount=17
@b63: I did what was in that forum and now I'm rooted. Thank you.
Only issue left is when I open the Play Store, it says:
"You must add an account to the device to continue. Do you want to add one now?"
I press yes, it closes. I press no, it closes.
gclo85 said:
@b63: I did what was in that forum and now I'm rooted. Thank you.
Only issue left is when I open the Play Store, it says:
"You must add an account to the device to continue. Do you want to add one now?"
I press yes, it closes. I press no, it closes.
Click to expand...
Click to collapse
Did you flash the gapps.zip or are you just nstalling the apk..... I'd look at that thread b63 gave you again you have to install 3 apps the other 2 sync your gmail account with market that's why it's FCing.... Just set up the es file manager set as rw and drag and drop the 3 apks into the system folder and reboot the kindle
Sent from my HellfireKindle using Tapatalk 2
I believe I'm installing APK's. I've been trying to install files like these:
com.android.vending-3.5.15.apk
Vending(Mod).apk
I move the files to system/apps with Root Explorer and change the permissions but after I install it, it says "Application Not Installed."
gclo85 said:
I believe I'm installing APK's. I've been trying to install files like these:
com.android.vending-3.5.15.apk
Vending(Mod).apk
I move the files to system/apps with Root Explorer and change the permissions but after I install it, it says "Application Not Installed."
Click to expand...
Click to collapse
Don't hit install download those 3 apks in the thread b63 gave you a few posts a go and simply drag them into the system folder then reboot
EDIT: Here
Sent from my HellfireKindle using Tapatalk 2
@DJLamontagneIII: It's working! Thank you so much!
Thank you to everyone else who contributed.
glad to help ...
please mark the subject of the topic (edit first post) with [Solved]
I also wanted to ask; aside from backups or maybe those 3 APK's I just moved, is it safe to delete anything, like the zip file ROM, to free up space on the internal storage?
i assume you mean the sdcard partition
yupp - it's safe - you can keep a backup on your computer if you like
Hello All . I have a rooted 1575 Twrp 3.0.1 I recently noticed iv been getting some weird behavior I havent seen prior. Happens with Stock, AOSP, and CM.
For example with Es File Explorer, I'll swipe from the left , click on tools, then tick root explorer. Ill get the pop up from SuperSU asking me to give it superuser permission, I'll select allow, after about 5 secs, Ill get a pop up saying 'sorry this test failed, this feature can't run on your device', that's the pop up you would get if weren't rooted or if superuser permissions weren't properly granted, But the thing is I am rooted and as the included pictures show, es file explorer says it gas been granted the correct permissions. So I haven't been able to figure out WHY this is happening.
I'm not having any issues with other rooted apps, its only with any file explorer I use.
It allows me to see the root of the SD card, but for example, if I try to edit the build.prop, I'll go in there, make an edit, then when I would try to save it, it won't let me.
When I first rooted this phone, this wasn't a problem. The one change I did make is once twrp 3.0 came out, iv been using adoptable storage. I can't say if this has anything to do with this problem or not, but I'm hoping some one out there has an idea of why this is happening and what I can do to fix it, Bec its so frustrating. Is there something I can do to remedy this.
,
Thanks for taking the time to read this.
hello im getting the following message everytime i try and download the lists "copying of host file failed! please read help for more information"
ive just updated to the android 7.0 through the developer program, twrp custom recovery installed with root access build number NRD90M
just wondering what could be causing this and if i can do anything to try and fix it thanks
Is your /system set to read only, or read/write? If read only, adaway will not be able to update /system/etc/hosts
dratsablive said:
Is your /system set to read only, or read/write? If read only, adaway will not be able to update /system/etc/hosts
Click to expand...
Click to collapse
i have it set to read write im gonna try to flash the systemless hosts right now ill update how it goes
flashing the AdAway_systemless_hosts_v2.zip in the recovery, then unistalling and reinstalling the app seems to have worked
you can also use Magisk now to enable complete systemless root and then the hosts file /system/etc will be forwarded to the systemless version
I didn't even install Adaway, I just downloaded a host file and replaced it in /etc/
Works good enough for me and one less app running...
kennehh said:
hello im getting the following message everytime i try and download the lists "copying of host file failed! please read help for more information"
ive just updated to the android 7.0 through the developer program, twrp custom recovery installed with root access build number NRD90M
just wondering what could be causing this and if i can do anything to try and fix it thanks
Click to expand...
Click to collapse
In the exact same boat. Frustrating. Tried Adfree, to no avail. Adaway, to no avail. Tried the adaway bind zip file, making hosts writable, and even System to writable. Nothing.
treoo0_1 said:
In the exact same boat. Frustrating. Tried Adfree, to no avail. Adaway, to no avail. Tried the adaway bind zip file, making hosts writable, and even System to writable. Nothing.
Click to expand...
Click to collapse
i have fixed this by converting adaway from user apps to system apps using Link2SD, reboot and adaway working properly again
Very old thread, but I've had exactly the same problem installing AdAway on the last 3 or 4 phones -- all but one running Nougat 7.0, the other on Oreo 8.1. This was when trying to install AdAway versions 3.1 and 3.3.something.
I finally got it to write hosts file updates using one of the following, not sure which was the key:
-- Installed version 3.2 which had been running problem-free on an old phone for years. The biggest difference is this older phone is running Resurrection Remix 5.8.3 (Nougat 7.1.2).
-- Before trying to update the hosts file on this fresh install, I went straight to AdAway preferences and set "Check for updates daily", "Enable webserver", and "Start webserver on boot". After making those settings I tapped Download Files and Apply Ad Blocking, and it successfully wrote to the hosts file.
Again I don't know which was the fix. It seems weird that version 3.2 would work when a version just before and after it didn't work for me. But of course it is possible that the version is the difference. It seems even more weird that those 3 little preference settings make any difference at all . . . unless it's just the act of writing changes to the AdAway app itself.
Before installing 3.2, using Root Explorer I checked permissions on the working phone and one non-working phone, for the systems and etc folders, and for the hosts file itself. (In all cases AdAway is/was set to use /systems/etc/hosts.) I also checked Android permissions in the Apps list. All permissions were exactly the same on both phones: 0755 for system, 0755 for etc, and 0644 for hosts. No permissions assigned via Android.
Hoping this bump will also get fresh attention from somebody who might know the details of a real answer.
@Moondroid
Why the hell you trying to make some really old ass version of it work instead of installing the newest version? Lol
I've been using 4.2.7 and though its kind of weird on a fresh install I need to update and apply the hosts twice before searching for newer hosts comes back its up to date. But at least it works.
Hi all
I have Samsung S4 now for 3 years. It is rooted and I am using SuperSU. When last month I updated SuperSU through Google Play to buggy version 2.80, I lost root. To fix that, I installed 2.79 through TWRP and gained back the root. Then I updated to version 2.82 through Google Play, but yesterday discovered the problem with permissions on storage/emulated/0. The problem is, that this directory and all subfolders becomed read only. Or to be exacted, If I create a subfolder I got this error "su error: mkdir failed for /storage/emulated/0/test, Permission denied". Same error if I want to remove any file, etc. Also changing permission doesn't work.
Can anyone please help me?
thank you
best regards
Starlord
Stop updating SuperSU from the Play Store. There are always some sort of problems with it.
The most logical step is to completely unroot, then reroot again. Have fun.
Also, why do you get a su error? Creating folders doesn't require super user rights. Unless you tried to do it with the terminal emulator.