Please select To the mobile version | Continue to access the desktop computer version

ulefone Official Forum

Search
View: 2048|Reply: 9

[Discussion] ULEFONE METAL HAS TROJAN IN THE ROM

[Copy link]

1

Threads

46

Posts

172

Credits

Developer

Rank: 5Rank: 5

Credits
172

Thanksgiving DayHappy Halloweenulefone MetalDeveloper

Post time 2016-10-18 23:22:58 | Show all posts |Read mode

Sign up now, Make more friends, Enjoy with more features, Let you easily Fun Community.

You have to Login for download or view attachment(s). No Account? Register

x
I have had this phone about six weeks. It appears that there is a delayed activating trojan installed into the system rom as a search service. It ghost installs several other apps including "Game Assistant" and "gsmui". Even if you uninstall these apps after a reboot everything is reinstalled. If unknown sources is off the trojan turns it back on to quietly install the nefarious apps. Ulefone needs to release a clean ROM for this phone. Install a trojan in the system app is a very bad and stupid thing to do. I have tried Kingroot and Kingoroot and both failed to root it. The only solution seems to be to root the phone and uninstall the trojan memory manager service. Ulefone should issue an OTA that wipes out the trojan and/or installs a new rom.

1

Threads

64

Posts

531

Credits

Senior Member

Rank: 4

Credits
531

Thanksgiving Dayulefone Metalulefone Fan from Portugal1K Forum Members

Post time 2016-10-18 23:40:41 | Show all posts
Please, take a tour on the forum before posting, please.
Avoid thread replication.

Regarding to Viruses/Malware/Trojan, please check and post your comments on this thread:
http://forum.ulefone.com/thread-205-1-1.html

0

Threads

19

Posts

92

Credits

Member

Rank: 2

Credits
92

Thanksgiving DayGiveaway Participantsulefone Fan from UK1K Forum Members

Post time 2016-10-19 17:49:18 | Show all posts
I stopped the auto installing by running ahn v3 labs security right before doing a reset from the settings menu. Now I have no issues

1

Threads

46

Posts

172

Credits

Developer

Rank: 5Rank: 5

Credits
172

Thanksgiving DayHappy Halloweenulefone MetalDeveloper

 Author| Post time 2016-10-19 18:00:15 | Show all posts
Simojo replied at 2016-10-19 17:49
I stopped the auto installing by running ahn v3 labs security right before doing a reset from the se ...

You think you have no issues because the trojan has an activation delay. It is somewhere between 50 and 60 power on/off cycles after first turned on or factory reset. If you turn off every day the trojan will reactivate in about six weeks or so.
Bitcoin 1LYRNjkji8iJnGiEhBo8yizWorbmdTFZKn

0

Threads

26

Posts

102

Credits

Member

Rank: 2

Credits
102

Thanksgiving Dayulefone Metalulefone Fan from Italy

Post time 2016-10-19 21:35:59 | Show all posts
jackbox replied at 2016-10-19 11:00
You think you have no issues because the trojan has an activation delay. It is somewhere between 5 ...

which rom have you installed? from needrom the F5B_GQ3030AH1_ulefone_20160912 – full_wtk6753_65u_m0-user 6.0 MRA58K it seems free of any malware-troyan...

please check and follow this thread, instead of open new ones ;)
Ulefone Metal
Xiaomi Redmi Note 3 Pro SE · Kate · Miui 8 Glob. Dev.

1

Threads

22

Posts

129

Credits

Member

Rank: 2

Credits
129

Thanksgiving Day1K Forum Members

Post time 2016-10-19 22:57:29 | Show all posts
Edited by dropbear at 2016-10-22 15:20

<p>Pellentesque habitant morbi tristique senectus et netus et malesuada fames ac turpis egestas. Vestibulum tortor quam, feugiat vitae, ultricies eget, tempor sit amet, ante. Donec eu libero sit amet quam egestas semper. Aenean ultricies mi vitae est. Mauris placerat eleifend leo. Quisque sit amet est et sapien ullamcorper pharetra. Vestibulum erat wisi, condimentum sed, commodo vitae, ornare sit amet, wisi. Aenean fermentum, elit eget tincidunt condimentum, eros ipsum rutrum orci, sagittis tempus lacus enim ac dui. Donec non enim in turpis pulvinar facilisis. Ut felis. Praesent dapibus, neque id cursus faucibus, tortor neque egestas augue, eu vulputate magna eros eu erat. Aliquam erat volutpat. Nam dui mi, tincidunt quis, accumsan porttitor, facilisis luctus, metus</p>

1

Threads

46

Posts

172

Credits

Developer

Rank: 5Rank: 5

Credits
172

Thanksgiving DayHappy Halloweenulefone MetalDeveloper

 Author| Post time 2016-10-19 23:28:01 | Show all posts
dropbear replied at 2016-10-19 22:57
This is not official rom. Dont post rom if not official.
Official latest is "ulefone Metal_Android ...

Yes, exactly. I am waiting for official ROM without malware. If the non-official ROM is installed once an OTA is available it will fail to install because the existing ROM is not official. I am hoping Ulefone does the right thing and releases a new, clean ROM soon.
Bitcoin 1LYRNjkji8iJnGiEhBo8yizWorbmdTFZKn

15

Threads

341

Posts

1237

Credits

Gold Member

Rank: 6Rank: 6

Credits
1237

Thanksgiving Dayulefone MetalGiveaway Participantsulefone Fan from CroatiaHappy HalloweenUpdate Beta team1K Forum MembersForum Star

Post time 2016-10-20 01:07:29 | Show all posts
jackbox replied at 2016-10-19 16:28
Yes, exactly. I am waiting for official ROM without malware. If the non-official ROM is installed  ...

How many times should be repeated here (duplicated threads for the same matter) that Russlan's 20160912 only has removed two Search Service and Opera Mobile Store, and nothing else.

It has OTA, it is not rooted, id did not change Recovery - If OTA will work for the official 20160728 it will just work the same for 20160912

1

Threads

46

Posts

172

Credits

Developer

Rank: 5Rank: 5

Credits
172

Thanksgiving DayHappy Halloweenulefone MetalDeveloper

 Author| Post time 2016-10-20 01:35:07 | Show all posts
zgfg replied at 2016-10-20 01:07
How many times should be repeated here (duplicated threads for the same matter) that Russlan's 201 ...

OTA won't work because official ROMs check that all original files distributed in the ROM are there and have not been changed before flashing the OTA update. Since he removed files from the original distribution an OTA update will FAIL if this ROM is installed, since all the original files cannot be verified by checksum.
Bitcoin 1LYRNjkji8iJnGiEhBo8yizWorbmdTFZKn

3

Threads

131

Posts

1090

Credits

Gold Member

Rank: 6Rank: 6

Credits
1090

Thanksgiving DayHappy Halloweenulefone Metalulefone Fan from Sweden1K Forum Members

Post time 2016-10-20 01:38:09 | Show all posts
Edited by Jocke.Sve at 2016-10-19 18:39

As there is a parallell discussion ongoing in the original thread about malware found in Metal it would be great to close this thread and focus in topic;
http://forum.ulefone.com/thread-205-1-1.html
Having multiple topics/threads doesn't do any good...
----
..//Jocke.Sve
You have to log in before you can reply Login | Register

Points Rules

Quick Reply To Top Return to the list