• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Help com.android.patch virus

Status
Not open for further replies.

jdpercy434

Lurker
After buying this tablet, 1 day after, this morning, I expected an notification saying my Android is outdated. I pressed it, started a download, and asked me to allow unkown sources (yet i know android since old times ago), but then it installs a app called "com.android.patch". Since it has a android icon, I think it was safe, perhaps before it downloaded, I did hold the notification and pressed App Info. It shows that "Minecraft PE" is showing this notification, I think that Minecraft will most likely want me to install this patch in order to fix issues. Minecraft PE is not pre-installed, but I installed it using APK since i'm lazy to buy it.

After 2 days on the event that happen, I did not know that i have Cleanmaster and CM Security (including CM Battery) have been pre-installed since I got this tablet. So i run the 3 of it to make sure that I don't have virus (including to stop battery draining fast). But then CM Security alerted that there's a virus, I were shocked and check if what is this. After, it said "com.android.patch". I think that this is false positive, but no. After the day i installed com.android.patch, more ads appear and the system slows up. I was upset.

After these days, I try to ignore the virus, then after the week, I am really angry. So I managed to use all the uninstall methods. I checked that this is a regular app and not system app, it has device administrator (that won't deactivate), the system version is still the same as when I got this tablet, and it constantly crashes but wont uninstall nor clear data and force stop. All buttons when on com.android.patch after the App list, its all blurred out.

(Sorry if my grammar is not good, I am not pretty good at English Grammar)

Asking for screenshots? Well then I uploaded them for proofs. It is at the bottom of my post.

Help please, and thanks for reading my post! I hope there is a way to fix this.
 

Attachments

  • Screenshot_2014-12-23-14-12-53[1].png
    Screenshot_2014-12-23-14-12-53[1].png
    102.1 KB · Views: 298
  • Screenshot_2014-12-23-14-19-45[1].png
    Screenshot_2014-12-23-14-19-45[1].png
    79 KB · Views: 305
  • Screenshot_2014-12-23-14-20-23[1].png
    Screenshot_2014-12-23-14-20-23[1].png
    144.1 KB · Views: 326
I think you should try a few AV programs to clean up your tablet. If the virus is still there you will need to do a factory reset
 
I try to ignore the virus, then after the week, I am really angry. So I managed to use all the uninstall methods. I checked that this is a regular app and not system app, it has device administrator (that won't deactivate), the system version is still the same as when I got this tablet, and it constantly crashes but wont uninstall nor clear data and force stop. All buttons when on com.android.patch after the App list, its all blurred out.
Can you explain further what you mean by the statement highlighted above? If you uncheck Device Administrator, then go back to Settings > Manage apps, you should be able to uninstall it. Have you tried that exact sequence?
 
I think you should try a few AV programs to clean up your tablet. If the virus is still there you will need to do a factory reset
I did, none of them worked. Even some rogue just infected it. (But finally i got the rid of it, since it just made itself a system app, I figured out on how to uninstall it with a app since I got root already shown on the pictures that I have Xposed Framework). Thanks anyway.
Can you explain further what you mean by the statement highlighted above? If you uncheck Device Administrator, then go back to Settings > Manage apps, you should be able to uninstall it. Have you tried that exact sequence?
"it has device administrator (that won't deactivate)" I placed on my sentence, well of course I unchecked, gone to settings, manage app, and uninstall it. It still doesn't work. When i uncheck, it says a module with a word "test" and two buttons "OK" and "Cancel". Pressing "OK" puts you back to homescreen infinitely even if you open a app unless you restart. Pressing "Cancel" does nothing.

Is there a way how to fix this

PS: I have root, can I remove the app with this? I equally have NO idea.
 
First, you said you installed Minecraft "using APK since I'm too lazy to buy it". IOW, apparently a cracked version from who knows where. Cracked software is notorious for including malware, as you found out. That was your first mistake.

Second, it asked for permission to install as from an unknown source and you granted it, thinking the little green robot somehow made it legitimate. That was your second mistake.

Third, com.android.patch was able to install itself with administrative privileges. I can't be absolutely certain from the info given, but I strongly suspect that running as root is what made that possible. A good example of why I don't believe in rooting my daily driver. The first rule of Linux security is never run as root unless absolutely necessary. However, having root privileges also allowed the malware to be uninstalled. Anyway, IMHO running as root was your third mistake.
 
Last edited:
First, you said you installed Minecraft "using APK since I'm too lazy to buy it". IOW, apparently a cracked version from who knows where. Cracked software is notorious for including malware, as you found out. That was your first mistake.
^^^qft

Your second mistake was coming here looking for help from our community. We support developers by not being too lazy to pay for their apps. We also support them by not helping people that screwed their devices by pirating the apps. Therefor, I'm closing the thread.
 
Status
Not open for further replies.
Back
Top Bottom