• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Root [Guide] Deodexing Stock ROM

Just made a flashable zip. I ran it through my phone and booted, just need confirmation from someone on stock that it removed the .odex files before i put it on the original post.

Download
 
adb shell
su
stop
mount -o rw,remount -t ext4 /dev/block/mmcblk0p12 /system
cp /sdcard/done_app/* /system/app/
cp /sdcard/done_frame/* /system/framework/
rm /system/app/*.odex
rm /system/framework/*.odex
mount -o ro,remount -t ext4 /dev/block/mmcblk0p12
reboot

Friend, i couldnt get the command line in red to work unless i added /system (in blue) at the end of it. Do you know why? basically when i typed that command in and then typed in the next one it said that those files/apks already existed, it wasnt until i added /system that it stopped giving me that error.

another question, how do i know im doedexed now? whats the easiest sign to spot and know im doedexed (other than trying to flash a theme)?
 
Sorry for the delay, was off celebrating my birthday.
Negative on that. It runs and boots but doesnt deodex the apks
Just tested it on my gf's phone and the zip works, it just fails to remove the .odex files. I'll try and fix it later but other than having to manually remove the .odex files, it does the job.

Friend, i couldnt get the command line in red to work unless i added /system (in blue) at the end of it. Do you know why? basically when i typed that command in and then typed in the next one it said that those files/apks already existed, it wasnt until i added /system that it stopped giving me that error.

another question, how do i know im doedexed now? whats the easiest sign to spot and know im doedexed (other than trying to flash a theme)?

Thanks for pointing it out, just added it to the OP. You can go into the /system/app/ and /system/framework/ and check to see if the .odex are gone. You can also check the difference between file sizes between a deodexed apk and one that hasn't been.
 
Got a question? When trying to deox the framework, is it normal when the progress goes red in the cmd prompt? I had no problem deoxing the system/apps but im having some difficulty deoxing the framework. Just wondering. I'm a noob at this and wanted to mess around. Thanks.
 
yeah i tried. didnt work =[ . thank you though but the apps didn't install so I'm a have to restore

did you try putting the esteem USB cable on different ports on the computer? I ask because some of my crappy Dell boxes have USB ports that do NOT recognize ANYTHING it's like they are useless, they work on some things but will not recognize phones or mp3 players ? , my homebuilt pc's with asus or Abit motherboards DO work on ALL ports. :confused:
 
I downloaded and ran xUltimate v2.3.3. AVG immediately detected a Trojan horse Generic5_c.ACLB hidden inside Ultimate-v2.3.3\jar\opt_apk.exe as the executable opened. Here is what I found out about the virus:

Generic5_c.ACLB is a member of the Generic_c family of downloader. A downloader Trojan is a Trojan that opens a security hole on your computer, which is then used by a remote hacker to access your personal information and download additional Trojans and viruses onto your computer. In addition, Trojan Horse Generic_c may slow your computer, change your Internet and desktop settings, decrease your available memory, and flood your computer with popup advertisements. Generic_c has 384 known variants. It is currently spreading and ranked 31 in the world for online threat.

Profile of Generic5_c.ACLB Trojan horse at AVG ThreatLabs

In his post the author of xUltimate v.2.3.3 highlighted a disclaimer, "There are no viruses in any of the files!", which IMO is actually a big red flag similar to someone saying "trust me because I do not lie" before he goes on to spill forth BS.

http://forum.xda-developers.com/showthread.php?p=22558962
 
I downloaded and ran xUltimate v2.3.3. AVG immediately detected a Trojan horse Generic5_c.ACLB hidden inside Ultimate-v2.3.3\jar\opt_apk.exe as the executable opened. Here is what I found out about the virus:

Generic5_c.ACLB is a member of the Generic_c family of downloader. A downloader Trojan is a Trojan that opens a security hole on your computer, which is then used by a remote hacker to access your personal information and download additional Trojans and viruses onto your computer. In addition, Trojan Horse Generic_c may slow your computer, change your Internet and desktop settings, decrease your available memory, and flood your computer with popup advertisements. Generic_c has 384 known variants. It is currently spreading and ranked 31 in the world for online threat.

Profile of Generic5_c.ACLB Trojan horse at AVG ThreatLabs

In his post the author of xUltimate v.2.3.3 highlighted a disclaimer, "There are no viruses in any of the files!", which IMO is actually a big red flag similar to someone saying "trust me because I do not lie" before he goes on to spill forth BS.



So what are you trying to say? On this 4 month old post?

Obviously you have never downloaded a keygen or cracked file. It opens up the same hole that "makes" the computer think it's a virus BUT no virus is actually present. How can you be sure?

lol. Download the program use then delete it and scan your pc? No virus huh?



Plus you've got 51 pages on the Droid Forum where the download is, SURELY someone would have their computer infested with a virus right? Seems to me like a bunch of happy people.
 
There have been many many warnings about xUltimate having viruses in the past. Everyone had just dismissed them as false warnings.

HOWEVER, after going through some of those past warnings, I conjectured xUltimate is indeed malicious from these patterns:

(a) several different past versions all have viruses,

(b) they had different specific viruses at different times,

(c) different anti-virus software had identified xUltimate as threats.

(d) just because your computer has not been damaged by xUltimate does not mean it is definitely safe; likely the author/Trojan hijacks/damagese some computers and not others, and yours just was not "chosen" or "hit". That's the thing about viruses, they do not immediately hit all the computers they infected.

I think it is extremely unlikely that several different anti-virus programs could have mistakenly identified xUltimate as a threat, when several xUltimate versions have a history of having viruses in them, and those were different viruses with very specific identifiers and specific names atop of that.

http://androidforums.com/droid-2-all-things-root/217956-xultimate.html

xultimate-d9pc.exe - What is the xultimate-d9pc.exe from xeudoxus? (id:3753434)

Quick heads up regarding Ultimate Mod - Android Forums at AndroidCentral.com

[HOW-TO] DEODEX Your I9003 - Page 16 - xda-developers

The patterns are there, and they are very strong and clear patterns. It is just very very suspicious. I would not risk my PC to "deodex" some files on my phone. Anyway, my anti-virus program immediately caught the virus and asked to delete it, which I did.

I usually do NOT do that much research into a virus. I usually just let my anti-virus apps delete it and then move on. The reason I did all these research into xUltimate is because, well, this thread is was four-month old. Hundreds if not thousands of people must have already used xUltimate. It seems odd that no one has reported it, (well, it was reported many times but then dismissed.) Well, I did my research and evaluated the past warnings, just to be sure... and I concluded the file is very likely unsafe, and the author and the virus were cleverly deceptive.
 
I think it is extremely unlikely that several different anti-virus programs could have mistakenly identified xUltimate as a threat, when several xUltimate versions have a history of having viruses in them, and those were different viruses with very specific identifiers and specific names atop of that.


When the "said" programs opens up the hole in your computer to allow the program to work, ALL virus programs I hope WOULD see this. So yes, OF COURSE every program is going to see it. Plus, MOST high end "popular" virus programs report such programs and keygens so that they DO show up as false positives to deter people from using them.

Ahhhhhhhhhhh smart on their end huh? Cause obviousy it works. :rolleyes:

Do you write programs and code? If you did you would understand how false postives are created by such programs. It's VERY VERY common actually and most people don't even know about it at the time but when it's all said and done, NO DAMAGE IS DONE TO THE MACHINE and the people are none the wiser.


This is where I list numerous links explaining false postives and why programs do it but Im sure no one will actually click them so therefore I wont waste the time and space. Soooooo.......


What I will do is inform you of your options. Use a program called "sandboxie" to run the program in an isolated enviornment.

BOOM! Problem solved.
 
OH, BTW, you can deodex the phone by hand without the need of a program or you can download and isntall a ROM that already has it done. I didn't even know such program existed.

So I thank you, now I wont have to do it by hand in the future if I ever decide to keep a stock ROM.
 
Do you write programs and code?
Actually I did. I could even code in Assembly language and create simple OS from scratch, which I did in my college classes way back in the mid-1990s. I did not enjoy programming, but I could do it. I has a computer science degree, but I no longer work in IT or programming.

Anyway, I am fairly certain xUltimate has various Trojan files in various versions. It is extremely unlikely for different anti-virus apps to give different false positives for different viruses throughout different time periods for the different versions of the same program. More likely, the author of xUltimate experimented with different Trojans and viruses (or just "evolved through" using different viruses) as he distributed different versions of his app. I made the conjecture not just based on my computer knowledge but on how a clever programmer with malicious intentions would behave and evolve.

Anyway, just giving people a head-up. If anyone wants to take the risk and use xUltimate on his computer, go ahead. I know I wouldn't.
 
It is a false positive just as the root for the esteem shows up on my nod32 as a trojan. It's given as a trojan because it can be used to modify your phone.
 
I get this error when trying your method it happens in the framework part of deodexing. If it matters running windows vista business. Am I doing something wrong?
 

Attachments

  • Ultimatexerror.png
    Ultimatexerror.png
    51.2 KB · Views: 136
Hey well I looked at another tut for doing this and it said if you had and error to remove the .odex file from the orig_* folder so I did. All that does is make it skip it when deodexing which doesnt produce an output file.So anyways I did that and it was smooth sailing through the process...tried the zip align in your post and it didnt work for me. But i think that it zip aligns it when it deodexs anyways coz it says deodexing/aligning when its working. But anyways followed the rest of the guide and got a successful boot. So Id say so far so good. Thanks for the guide!
 
I also wanted to speak on the subject of virus in Ultimate. This is just my opinion and findings.

First of all if you google search for guides for deodexing then you will find that almost every single one uses Ultimate. This said then it pretty safe to assume that since sooo many people use it that its probably ok. Next in my personal experience my virus protection didnt throw a virus alert until it was in the deodexing process. Which to me probably means that one of the files as far as windows was concerned had weird accessiblity which would make sense that some android files would conflict with windows permissions because android system files are bound to have some kind of advanced permissions. Remember that it didnt throw an alert when installing the program itself.

Keeping all this in mind to me it seems logical that Ultimate doesnt have any malicious coding. The best way to decide for yourself if you are wanting to use it is to trust that your virus protection software will do its job and just go ahead and do it. If not then why have it to begin with? And base your own opinion on what you find.

Like I said this is just my opinion and thoughts. Do whatever you think is right.:D
 
Back
Top Bottom