Wednesday, 21 October 2015

[Guide] how to remove ghost push apps



1.Things you need
*ADB minmal fast boot http://forum.xda-developers.com/show....php?t=2317790 thanks shimp208
*you phone must be rooted
*any app that removes system apps i prefer mobileuncle tool.apk (as it works best)

2.First you need to factory reset the device it will help to determine the virus apps
Note : in inew devices please root the phone after factory reset in some cases in inew the phone becomes bricked if you reset the rooted phone :laugh:

3. install mobileuncle tools.apk
you internet or wifi about 2 to 3 hour untill the virus fully take effect

4. put it to flight mode and open mobile uncle tools and go to apps tab at the bottem
you will see apps that have a huge gape of time (installation date) between the original apps and the virus
you mobile uncle tool to remove the apps the apps that did not remove with the tool
use ADB comands to remove them

adb shell
su
mount -o remount,rw /system
cd system/priv-app ( the destination of the apps will be varied use mobile uncle tool to find the destination it will be under the app name Eg: system/app/original name of the app
chattr -iaA (the original name).apk
rm (the original name).apk

5 if ADB comands fail the best thing you can do is in mobile uncle tool find the app clear the data and disable the app or you can use the fool proof method below

method 2 flash the original firmware please factory reset and clear the delvek cache before flashing as some samsung devices they don't clear the data even when flashing the firmware

here are some of the apps i came across
providerdown.apk
com.android.wp.net.log.apk
com.android.Markserver.apk
com.android.hardware.ext0.apk
com.android.psync.apk
com.android.psetting.apk
com.google.model.mi.apk
com.google.fk.json.slo.apk
com.android.pumo.apk
com.android.aoml.apk

(this is only from only one smart phone will update a list of all the gost push apps later)

sorry for the bad english (in a hurry got lots of phones to fix) will upload the screen shots of the steps later








Attached Thumbnails


Click image for larger version<br/><br/>Name:	Capture.PNG<br/>Views:	N/A<br/>Size:	64.1 KB<br/>ID:	3514186
 














No comments:

Post a Comment