Sony Xperia C3 Virus Monkey Test and Time Service

Hi,
I've a Sony Xperia C3 having some virus of random download of application, which after searching found two applications Monkey Test and time service are culprit for same.

Solutions Referred-
-Factory Reset done with "Automatic Restore" uncheck (Application are there even after restoring):rolleyes:.
-After restoring disabled the service and no uninstall option was there (Now play store is not opening):mad:.
Questions:
-What is firmware re installation?Is it re installing andriod OS?
- Will this remove the virus i've mentioned?
- what tool or application will do this (Searched one PC Companion, is this the one).
- Can anyone provide step by step reference or any video to do this

Thanks & Regards
Harsimran

FIX for Monkey Test & Time Service Virus. (Without Flashing)

Hello everyone,
This method I'm going to write is tried on my own Lenovo A7600-H Kitkat 4.4.2 tablet, which I did not flash because I'm not sure about stock roms available on the net. If I had found a reliable rom I wouldn't be able learn this

To remove this virus you need to install busybox, Terminal emulator, Root explorer pro and you must have Supersu not superuser which is installed by Kingoroot. If you have rooted your device with kingoroot, so you need to change that.

Here is how to change that:
Google this: how to get ride and replace kinguser with supersu app (Follow first zidroid link)

I'm not able to submit links so im going to write the exact apps with developer names to download from Playstore.

Busybox Installer by JRummy Apps Inc.
Terminal Emulator by Jack Palevich
Root Explorer Pro by Speed Software

Once you have installed everything here is what to do in steps:

1) Turn off wifi/3G/4G Open settings> apps> all> disable time service and monkey test. (If already frozen via titanium backup or other app) skip this.

2) Open Root explorer go to system/xbin and see if there is any file starting with a dot (eg: .ext.base) also note that every (.) file has diff permission then the rest of other files. So just remember those files with dots because those are the one that you're going to remove in terminal emulator.

3) Go back to system and then go to Priv-app folder and look for these two files
[1] cameraupdate.apk [2] providerCertificate.apk and notice permission of these files which are the base of MT TS virus and needs to be deleted.

4) Open Terminal Emulator OR if you have access to your device via adb from a computer.

5) WHAT TO TYPE IN TERMINAL EMULATOR or ADB (CMD Windows)

adb devices (Type this line if you're using adb Windows)
adb shell
su
cd system/priv-app
chattr -iaA providerCertificate.apk
rm providerCertificate.apk
chattr -aA cameraupdate.apk
rm cameraupdate.apk
cd ..
cd system/xbin
chattr -iaA .b
rm .b
chattr -iaA .ext.base
rm .ext.base
chattr -iaA .sys.apk
rm .sys.apk

6) Please see if your device xbin has more files with dots because these are three files I had so if there are more you need to remove them with the same command I mentioned above (e.g:cd system/xbin [Enter] chattr -iaA .New.file & then rm .New.file and make sure you type the file name correctly just as providerCertificate C is capital otherwise permission wont change.

7) Exit Emulator/ADB shutdown your device go to recovery clear cache and restart.

8) Go to settings> apps> all> send me the screenshot if you have Monkey test or Time Service there

9) I'm 100% sure if you've followed everything as I mentioned you are good as new and you don't need to flash.

10) I'm not a developer and That's it!

FIX for Monkey Test & Time Service Virus.

Hello everyone,
This method I'm going to write is tried on my own Lenovo A7600-H Kitkat 4.4.2 tablet, which I did not flash because I'm not sure about stock roms available on the net. If I had found a reliable rom I wouldn't be able learn this :)

To remove this virus you need to install busybox, Terminal emulator, Root explorer pro and you must have Supersu not superuser which is installed by Kingoroot. If you have rooted your device with kingoroot, so you need to change that.

Here is how to change that:
Google this: how to get ride and replace kinguser with supersu app (Follow first zidroid link)

I'm not able to submit links so im going to write the exact apps with developer names to download from Playstore.

Busybox Installer by JRummy Apps Inc.
Terminal Emulator by Jack Palevich
Root Explorer Pro by Speed Software

Once you have installed everything here is what to do in steps:

1) Turn off wifi/3G/4G Open settings> apps> all> disable time service and monkey test. (If already frozen via titanium backup or other app) skip this.

2) Open Root explorer go to system/xbin and see if there is any file starting with a dot (eg: .ext.base) also note that every (.) file has diff permission then the rest of other files. So just remember those files with dots because those are the one that you're going to remove in terminal emulator.

3) Go back to system and then go to Priv-app folder and look for these two files
[1] cameraupdate.apk [2] providerCertificate.apk and notice permission of these files which are the base of MT TS virus and needs to be deleted.

4) Open Terminal Emulator OR if you have access to your device via adb from a computer.

5) WHAT TO TYPE IN TERMINAL EMULATOR or ADB (CMD Windows)

adb devices (Type this line if you're using adb Windows)
adb shell
su
cd system/priv-app
chattr -iaA providerCertificate.apk
rm providerCertificate.apk
chattr -aA cameraupdate.apk
rm cameraupdate.apk
cd ..
cd system/xbin
chattr -iaA .b
rm .b
chattr -iaA .ext.base
rm .ext.base
chattr -iaA .sys.apk
rm .sys.apk

6) Please see if your device xbin has more files with dots because these are three files I had so if there are more you need to remove them with the same command I mentioned above (e.g:cd system/xbin [Enter] chattr -iaA .New.file & then rm .New.file and make sure you type the file name correctly just as providerCertificate C is capital otherwise permission wont change.

7) Exit Emulator/ADB shutdown your device go to recovery clear cache and restart.

8) Go to settings> apps> all> send me the screenshot if you have Monkey test or Time Service there :)

9) I'm 100% sure if you've followed everything as I mentioned you are good as new and you don't need to flash.

10) I'm not a developer and That's it!

com.system.patch virus

I have a sumsung ace 3 gts7272 that has been infected with a virus called com.system.patch. here's what it does:
1- the first thing I noticed was that a white page pops up for like a second and it says com.system.patch
2- the second thing is very hard to not notice. a white noise page pops up every 10-30 seconds and the phone restarts and ANY CHANGES YOU DO BEFORE THE RESTART WILL BE GONE. YOU CAN'T CHANGE ANYTHING.
3- in settings>security>administrators you can see com.system.patch as administrator and android is not ticked, you can tick it but once the device restarts all is back to the way it was.
4- you cannot remove com.system.patch from app manager.
5- you cannot deactivate its authority as administrator.
6-you cannot factory reset it is deactivated. secret code does not work and using keys after it says factory reset done and it restarts everything is back to the way it was.
7- I removed the sd card and the background photos are still there.
8- I can connect it to the pc as storage device but nothing more than that.
9- I tried odin3.9 and it does the whole download process but after reset it goes back to the way it was and I can never get the PASS message.
10- I tried professionals who work for sumsung but after trying everything they just said you should change parts that would cost 3/4 of the phone's price which is not worth it.

I still don't wanna give up. Please help me get rid of this annoying virus.

Might got affected by the stagefright exploit virus

Received this message today and judging by it, my phone might already be affected.

What am I supposed to do now? I removed my SD card and Sim.

Really need help asap.

Attached Thumbnails