• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Help Cant root and malware! help please!

Hi i have recently downloaded a bad apk file virus/malware of completely glitchy app

This app has made it so i can't uninstall it because it is in the system apps file so I need root
it has been replicating itself and pretending to be com.system.ui and installing other apps such as panel app Swype Kika emoji keyboard and solitaire

So I decided to root to see if I can delete this malware I have rooted a device before and I got my self cwm
and everything was working out great after I disabled my antivirus on computer I didn't get any errors saying root lost or anything so I go ahead reboot the system but i have no root just the recovery right now I'm stuck and have nowhere to go supersu won't even work root checker says I don't have root.

If anyone's wondering i seem to have two malware files called com.swiping.whale.apk
com.system.cap.hm.aupdater.apk

These files were scanned using Malware bytes as this was the only app that saw the malware

I got this after i downloaded this file on this website: **mod removed pirated site link**

This is what i get for cracking i guess.

I also tried a whole bunch of mods such as cwm and twrp and others

I have tried doing a reset won't work files are regenerated after rest

Also i am new to Andriod forums so if post this in the wrong section sorry.

Any help much appreciated
 
Last edited by a moderator:
Hello there!
Although I cannot provide help at this moment, sorry, I did remove the link you posted as we'd rather not promote sites that have paid apps for free, k? ;)
 
AT&T doesn't like to release its firmware so not going to be able to find stock NJ2 that you can flash with Odin.
I have used these files on several i747 to update or to fix bootloops.

You can get the latest TWRP tar from here and flash with Odin but Philz touch works fine also
https://dl.twrp.me/d2att/
 
I would get both downloads under NJ2. The system image and the bootloader modem zip.
Good idea to get the stock recovery zip too.

If after flashing the system then bootloader zip, phone gets stuck on the AT&T logo for more than 10 min, pull and replace the battery and boot back into Philz and flash the stock recovery zip. Do the battery pull/ replace again and boot into stock recovery and choose Factory Reset.
You can flash custom recovery again later if you want.
Factory Reset in stock recovery is a miracle worker sometimes.
 
Here you go:
http://forum.xda-developers.com/galaxy-s3/general/fix-s3-to-factory-unroot-stock-recovery-t2323847
When flashing back to stock,Remove your sim and micro sd card.As it will wipe them clean.And you can put them back in after flashing back to stock.
Also I would reformat the micro sd card if you have one.

Edit: Be sure to use the AT&T Variant.
I tried the canadian and i flashed the rom but every single time i load it back up my apps are still there even if i did a reset
supersu is even there aswell
 
I would get both downloads under NJ2. The system image and the bootloader modem zip.
Good idea to get the stock recovery zip too.

If after flashing the system then bootloader zip, phone gets stuck on the AT&T logo for more than 10 min, pull and replace the battery and boot back into Philz and flash the stock recovery zip. Do the battery pull/ replace again and boot into stock recovery and choose Factory Reset.
You can flash custom recovery again later if you want.
Factory Reset in stock recovery is a miracle worker sometimes.
Im lost D:
 
I would get both downloads under NJ2. The system image and the bootloader modem zip.
Good idea to get the stock recovery zip too.

If after flashing the system then bootloader zip, phone gets stuck on the AT&T logo for more than 10 min, pull and replace the battery and boot back into Philz and flash the stock recovery zip. Do the battery pull/ replace again and boot into stock recovery and choose Factory Reset.
You can flash custom recovery again later if you want.
Factory Reset in stock recovery is a miracle worker sometimes.
i flashed the defualt rom now that i still have these apps i have them were i want them so do i just root and delete them?
 
Im using supersuupdate v 2.00 is that fine?
Also it will say upgrading andriod and say there is no su binary installed
You can get newer 2.65 from here
https://download.chainfire.eu/921/SuperSU

When you flashed the NJ2 ROM, did you preform Advanced Wipe first? Everything but SD card?
The ROM was a complete firmware and should have been a clean install removing the corrupt apps with the old system.
 
When you flashed the NJ2 ROM, did you preform Advanced Wipe first? Everything but SD card?
The ROM was a complete firmware and should have been a clean install removing the corrupt apps with the old system.
By advance you mean wipe from recovery mode?
 
Back
Top Bottom