Possible malware after flashing official ROM? - Xiaomi Mi 5 Questions & Answers

Hi,
I got a Mi 5 two weeks ago. The hardware of this phone is awesome but unfortunately I discovered that it was flashed with a fake ROM and I didn't like it.
I was able to restore official Chinese ROM, and then I did an upgrade to the latest MIUI 8.2.2.0 (Nougat). The problem is that, besides the language problem, Gapps were not working well with chinese ROM. So I unlocked the bootloader and upgraded to the latest Global ROM and so far so good. It works great, even Google apps.
Today I installed and app called Koodous, that detects malware, and it detected a system app called SpacesCore (com.securespaces.android.settings) as malware (but I got no more details on what type of malware).
My questions are:
1. can be a false positive?
2. can malware be still on the phone after flashing the official ROM and resetting to factory defaults?
3. if it's not a false positive, how can I remove this? Obviously flashing a new ROM and resetting is not enough. Rooting?
Regards,
Kurt.-

Related

Mi Note LTE virus

Hi guys,
I bought a Mi Note yesterday from Singapore (I life in The Netherlands). The phone is doing fine, but I have one problem.
It came with malicious bloatware. This com.twiter.apk and other files keep installing malware on my phone.. and I can not stop it.
Please tell me with to do? The firmware is MIUI 6.
Download the firmware and reflash full firmware wiping caches etc...
How do I do that?
If im correct, i need to download the firmware and flash it via the updater app. How do I get the original firmware? (Which includes my language) And how do I know it helps? I already wiped all data twice. The virus is in the system one back up at this moment.
P.s. will i still have google play?
I recommend grabbing a copy from http://xiaomi.eu/, it's a modified version of the Chinese ROM from MIUI, but removed of China-specific features/apps/bloatware, and comes with Google Services pre-installed (PlayStore and a few other google framework). As far as I can tell, the ROM is "clean" (no malware), and it's updated frequently (the same frequency as MIUI's weekly updates).
If I'm not mistaken, Xiaomi.eu ROM also comes with more European languages, instead of just Chinese & English.
That's the ROM I've been running on my Mi Note Pro, and I've been very happy with it (happier than the official Chinese ROMs).
thank you, but I can only find sdma roms on the site, and I need LTE because my sim card uses 4G.
Thank you guys. It worked!

Xiaomi MI5 pop-up adds

I hope I can get some help here. Today I started getting add pop-ups on my Xiaomi MI5 that's 3 days old. I installed a lot of applications, but they have all been previously installed on my HTC Desire 500 and my Nexus 7 and I never had any issues. The adds pop up after I unlock the screen, sometimes it's just a Home screen that's not responding (until I hit the Back button), sometimes it's a full add. Adds vary a lot and change from Pokemon training spam to Anti-spyware apps. On some adds it said it's sponsored by "StartApp". On one add there was an information button, so I got some message from "com.aqplay.mediation" about permission settings (nothing really relevant, couldn't uncheck anything anyways).
After scanning the phone with Avast, MBAM and Addons Detector, I got nothing. I also went through a crapload of forums looking for answers, tried to uninstall some apps that I installed today, but nothing helped.
In the end I noticed that the built-in application "File Manager" keeps ending up in my Recent Applications list, even though I never opened it. So I tried to stop and uninstall it, but with no luck. There is a process that looks suspicious so I would like to ask anyone to check if they have the same process on their device.
Under Settings - Installed apps - Running - File Manager there is a Service (second from the top) called "zdrhhriggx". Can anyone verify they have the same Service running?
Since it's a built in app, I can't Disable or Uninstall File Manager to be 100% sure, but so far I have found a workaround.
In the Security application I went to Data Usage settings - Data usage stats - System apps - File Manager and I disabled it's Mobile and Background data access. I am unable to turn off the WLAN setting for it though. But so far, no adds in the last 30mins.
If anyone has a good permanent solution to this problem (I know I can do a factory reset, but let's make that the last option) I'd be forever grateful.
Additional info:
Android version: 6.0 MRA58K
MIUI version: MIUI by xiaomi.eu 7.8.13.0 (MAACNDB) | Stable
Kernel version: 3.18.20-perf-g40a7c74
Fake ROM
I believe you are correct, stupid of me not to check the ROM version. Thank you very much.
You are using Vendor Rom maybe . Unlock your bootloader and flash Official Rom . If you are using root . Install adaway to make some ads dissapear .
Same issue with ads and massive wlan battery drain (vendor rom from xiaomi.eu). unlocked it, flash the official and worked like a charm.
comanteodormihai said:
Same issue with ads and massive wlan battery drain (vendor rom from xiaomi.eu). unlocked it, flash the official and worked like a charm.
Click to expand...
Click to collapse
Yup, same here with the WLAN battery drain. But the adds stopped for some reason the last 2 days. I'm planning on flashing it, just not sure which procedure to follow. Can you please tell me if you had to Unlock the device through the MIUI website request?
I've found this thread to be helpful: http://forum.xda-developers.com/mi-5/how-to/xiaomi-eu-7-8-13-0-maacndb-t3412638
I'm just not clear on the difference between flashing with the fastboot update (MIUI flashing tool) or using Mi PC Suite with Full ROM?
Would you be so kind as to provide more precise steps on what you did to unlock and flash it?
Librese said:
I believe you are correct, stupid of me not to check the ROM version. Thank you very much.
Click to expand...
Click to collapse
You sure you have a fake ROM? I have been installing ROMs from xiaomi.eu ever since and have encounter no ADS whatsoever.
flyturbo said:
You sure you have a fake ROM? I have been installing ROMs from xiaomi.eu ever since and have encounter no ADS whatsoever.
Click to expand...
Click to collapse
I don't see the 7.8.13.0 version on xiaomi.eu, did you ever install that one on any device?
ads on mi 5s
i have bought mi5s, which has the same problems
this is what came with the phone as stock.
android - 6.0.1mxb48T
miui version - 8.0.11.0 MAGCNDH
if i try to update the downloaded ROM from MIUI website via updater it says "cant verify package"
also when i check for update it doesnt show anything, but the MIUI site has an update of 8.1+
ashokbhat123 said:
i have bought mi5s, which has the same problems
this is what came with the phone as stock.
android - 6.0.1mxb48T
miui version - 8.0.11.0 MAGCNDH
if i try to update the downloaded ROM from MIUI website via updater it says "cant verify package"
also when i check for update it doesnt show anything, but the MIUI site has an update of 8.1+
Click to expand...
Click to collapse
Use the fastboot method as described on the MIUI website, that will work.
Guojun said:
Use the fastboot method as described on the MIUI website, that will work.
Click to expand...
Click to collapse
hence i downloaded the Global ROM from Miui for 5s - 8.0.3.0 MAGMIDI "normally". now while trying this, it says "i am updating to a older version & all data will be lost". is it possible to really have a newer version on phone which isnt there in MIUI website?
or something is wrong?
ashokbhat123 said:
hence i downloaded the Global ROM from Miui for 5s - 8.0.3.0 MAGMIDI "normally". now while trying this, it says "i am updating to a older version & all data will be lost". is it possible to really have a newer version on phone which isnt there in MIUI website?
or something is wrong?
Click to expand...
Click to collapse
Since we are assuming you are on a fake ROM with ads, I'd certainly flash the official ROM, no matter what the fake one says.
Guojun said:
Since we are assuming you are on a fake ROM with ads, I'd certainly flash the official ROM, no matter what the fake one says.
Click to expand...
Click to collapse
Thank you Guojaun for your timely help.
i successfully flashed to GLOBAL ROM.
while i was doing this, there was no folder called "Downloaded_rom" for the ROM to put, i created a folder & put the ROM there. then flashing will go through normally. no need of Fastboot or anything.
Now no ads or any sort of issues
ashokbhat123 said:
Thank you Guojaun for your timely help.
i successfully flashed to GLOBAL ROM.
while i was doing this, there was no folder called "Downloaded_rom" for the ROM to put, i created a folder & put the ROM there. then flashing will go through normally. no need of Fastboot or anything.
Now no ads or any sort of issues
Click to expand...
Click to collapse
so I have the same problem with you. Same phone (mi 5s plus) with same android version (6.0.1 MXB48T), and MIUI Version (8.0.6.0.0 M8GCNDH)
I'm about to "update" my phone, and I'm just wondering if I need to wipe my phone data first, or everything will be wipe out on this process?

TWRP, Root, CN vs EU...Confusion!

OK, I need some clarification please. I just ordered the phone on Swappa and will have it soon but I would like to have a plan in place for reaching my goal...A rooted phone with TWRP (don't know about what ROM yet)
I'm not sure what software will be on this phone when I get it (EU or Chinese stock/dev) but does that make a difference when attempting to put TWRP on the phone? Also, are there still 2 separate versions or is there just one now?
Also in regards to the initial root and TWRP procedure is it not possible to have SU zip on your phone beforehand or does it have to be transferred from your computer while in TWRP? Finally, the verity no opt encrypt zip must be flashed regardless of whether you are rooting or not? Many thanks for any and all help!
SantinoInc said:
I'm not sure what software will be on this phone when I get it (EU or Chinese stock/dev) but does that make a difference when attempting to put TWRP on the phone? Also, are there still 2 separate versions or is there just one now?
Click to expand...
Click to collapse
Presently if you read max of the posts in major of the forums, you will find out there are three versions of ROM majorly (removing Chinese dev from the list as many don't seem to be on this) - If you are buying the phone from a reseller and not directly from xiaomi, mostly you will end up with Vendor ROM
1) Vendor ROM global (8.08.0 something version) which comes with very less bloatware and Google play services. Sometimes people said their bootloader was unlocked and for some its not. (mine was locked, so had to apply for unlock - It took 3 days to get the approval).
PLEASE NOTE THAT MANY TIMES THIS VENDOR ROM HAS A "NOTES APP" WITH TROJAN ON IT. MALWARE BYTES DETECTS THIS. HENCE I DECIDED TO GET OFF IT.
2) Chinese stable ROM - The official miui ROM. It has OTA updates but comes with bloatware and quite cumbersome to use for a non Chinese person like me or thats what I felt. If you really want to use Chinese stable (and still need google apps) there is a guide which is available some where in one of the forums, right now can't get hold of it somehow.
3) EU ROM (weekly updates - I believe to be done manually) - This one is so far the best I have used and very less bloatware (there is "Qunar travel" and one Chinese app that came with it. I simply uninstalled them blindly). Comes with google play services and you can download the rest from google store.
My journey so far is Vendor ROM --> Chinese Stable --> EU ROM (Non-root)
Why i didn't go directly from Vendor ROM to EU ROM is because
1) some of the users had issues with TWRP's touch non-responsiveness.
2) I want to see what is there on Chinese Stable before going to EU ROM, so that I can do a comparison.
For Vendor ROM to Chinese Stable use the guide below (by @satishp)
https://forum.xda-developers.com/mi-mix/how-to/kindly-help-flashing-to-china-stable-t3528652
For Chinese Stable (or if you want to try from Vendor ROM directly to EU ROM) to EU ROM use the guide below (by @underlines)
https://forum.xda-developers.com/mi-mix/how-to/guide-flash-global-china-rom-root-gapps-t3510592
Following the steps exactly in the above two guides, I was able to install EU ROM without any issues.
SantinoInc said:
Also in regards to the initial root and TWRP procedure is it not possible to have SU zip on your phone beforehand or does it have to be transferred from your computer while in TWRP?
Click to expand...
Click to collapse
When you enable developer options on your phone and enable USB debugging, then I believe when you connect your phone to laptop/desktop it should connect using MTP and should be seen as device. So I guess you can copy the zip before hand on to the phone.
SantinoInc said:
Finally, the verity no opt encrypt zip must be flashed regardless of whether you are rooting or not? Many thanks for any and all help!
Click to expand...
Click to collapse
All the guides mention that whenever you want to install the EU ROM without root, the dm-verity is compulsory to flash before reboot.
Hope this helps!!. Enjoy your MIX.
thehearty said:
Presently if you read max of the posts in major of the forums, you will find out there are three versions of ROM majorly (removing Chinese dev from the list as many don't seem to be on this) - If you are buying the phone from a reseller and not directly from xiaomi, mostly you will end up with Vendor ROM
1) Vendor ROM global (8.08.0 something version) which comes with very less bloatware and Google play services. Sometimes people said their bootloader was unlocked and for some its not. (mine was locked, so had to apply for unlock - It took 3 days to get the approval).
PLEASE NOTE THAT MANY TIMES THIS VENDOR ROM HAS A "NOTES APP" WITH TROJAN ON IT. MALWARE BYTES DETECTS THIS. HENCE I DECIDED TO GET OFF IT.
2) Chinese stable ROM - The official miui ROM. It has OTA updates but comes with bloatware and quite cumbersome to use for a non Chinese person like me or thats what I felt. If you really want to use Chinese stable (and still need google apps) there is a guide which is available some where in one of the forums, right now can't get hold of it somehow.
3) EU ROM (weekly updates - I believe to be done manually) - This one is so far the best I have used and very less bloatware (there is "Qunar travel" and one Chinese app that came with it. I simply uninstalled them blindly). Comes with google play services and you can download the rest from google store.
My journey so far is Vendor ROM --> Chinese Stable --> EU ROM (Non-root)
Why i didn't go directly from Vendor ROM to EU ROM is because
1) some of the users had issues with TWRP's touch non-responsiveness.
2) I want to see what is there on Chinese Stable before going to EU ROM, so that I can do a comparison.
For Vendor ROM to Chinese Stable use the guide below (by @satishp)
https://forum.xda-developers.com/mi-mix/how-to/kindly-help-flashing-to-china-stable-t3528652
For Chinese Stable (or if you want to try from Vendor ROM directly to EU ROM) to EU ROM use the guide below (by @underlines)
https://forum.xda-developers.com/mi-mix/how-to/guide-flash-global-china-rom-root-gapps-t3510592
Following the steps exactly in the above two guides, I was able to install EU ROM without any issues.
When you enable developer options on your phone and enable USB debugging, then I believe when you connect your phone to laptop/desktop it should connect using MTP and should be seen as device. So I guess you can copy the zip before hand on to the phone.
All the guides mention that whenever you want to install the EU ROM with/without root, the dm-verity is compulsory to flash before reboot.
Hope this helps!!. Enjoy your MIX.
Click to expand...
Click to collapse
Wow, thank you so much for that very thorough answer! I will be getting the phone tomorrow and my goal will be to get the EU Rom on my phone with TWRP and Xposed.
One more small question. So if I happen to get the touch screen freeze (in TWRP or after system reboot) how do you recover from this situation?
SantinoInc said:
One more small question. So if I happen to get the touch screen freeze (in TWRP or after system reboot) how do you recover from this situation?
Click to expand...
Click to collapse
I believe you have to go to Chinese Stable then using MiFlash or install one more version of TWRP which is compatible with Chinese ROM and then other steps. (one of the guides mentions these too)
But my suggestion is simply follow the steps in both the guides, go to chinese stable and then to EU ROM. Its worth the 15 min extra effort as surely i can tell this will not have problems and I believe you can definitely got to root/xposed too finally.
There is a small typo in my previous answer (I corrected it now). Sincere apologies for the same.
Dm-verity is not needed if you are going to root. If you flash to EU ROM and don't want root, then install dm-verity. This is as per the guide mentioned in my last answer.
Hope this helps.

Random reboots

Hello,
there are many people suffering from random reboots on mi5. is there a guide to get rid of those?
i bought a new mi5 which already restarted during the first setup. those reboots continued to happen randomly while using the phone. sometimes it isnt occuring for half a day and then it happens 3 times in a row.
there is something hat makes me think it is not a hardware issue. when the phone is in the bootloader or when i install a new rom through fastboot, the phone has never rebooted.
i have tried so many different roms (Resurrection, lineage os, different versions of miui) and they all have that reboot issue. some of them seemed to work better than others, especially with custom kernels like the dragon kernel it happened way less, but still several times a day.
is there something i can flash that is going to stop this rebooting?
when i got the phone the bootloader was already unlocked. i could find any information about that... i thought it might be due to the fact that it had an english miui installed. but is it always like that or are all mi5 shipped with a locked bootloader?
greetings!
Hi
I think maybe something wrong with hardware..also IMO.. if you're bought the new mi5, it should has a locked bootloader, no matter what miui rom version installed..bootloader should be at locked state if that's a real new mi5.
okay thanks thats good to know!
i havent really understod what the different firmwares are for. do they change the baseband version? is there anything else they do? can you recommend me stable firmwares or will they not change anything?
SHARPSH00TER said:
okay thanks thats good to know!
i havent really understod what the different firmwares are for. do they change the baseband version? is there anything else they do? can you recommend me stable firmwares or will they not change anything?
Click to expand...
Click to collapse
Ofcourse..different version of the rom it can be has different firmware/ bootloader too..it depending what the android version and the rom it self.
From my experiences trying some custom and official rom, the best until now for stable daily used what i needed is xiaomi.eu rom that's until now currently using it..it's miui rom that's still based from official miui china rom that are already optimized for global used. You can try used official global miui rom with more language already added but different from xiaomi.eu is official global to much google apps that i don't really needed it for my daily used, that's why i'm still using xiaomi.eu rom.
Had the same problem
Hello, I had the exact same problem as you on MIUI global 8.1.4.0 with locked bootloader. It didn't happen that often, but I think it has to do something with the RAM, if its completely full, the phone will reboot. I fixed this by installing the xiaomi.eu ROM, you always have like 1+GB free RAM with that ROM. As your phone is already unlocked, it is very easy to install a different ROM. I hope this helped you

Return to Global Stock ROM + original recovery

I own a Chinese 128 gb Mi8 that I've bought from a local retailer as converted to Global and it came unlocked bootloader.
I've installed TWRP, rooted, flashed several ROMs, everything was fine, but the time came to hand it over to my wife and planning to return completely back to Stock, including the orginal recovery.
For me the best experience for a normal user is the stock Global ROM, with working official updates.
I plan to eliminate TWRP to come back to stock recovery, but because I don't know which reason it is permanently installed.
Tried several methods, but none of them made it including MiFlash tool, that for me just flashes the fastboot ROM in 1s and stops, than nothing changed.
Any idea how can I do the full stock return?
All I can say is be very careful because what you're trying to do is how people end up hard bricking their chinese MI 8s.
Keep twrp and just flash xiaomi.eu stable release....same user experience or better as stock. It's like stock minus bloatware/spyware processes and region locks.
Face unlock and theme store will work out of the box, no need to mess around with region settings.
I know, but in Xiaomi.EU there are some applications, games that do not work. Currently I am on Xiaomi.EU developer versions, but it seems that after each update I have format everything as using the ROM updater doesn't install the updates. And I am sick of back-up, restores, bla bla.
So there is no solution for returning completely stock?

Categories

Resources