Lenovo a8-50 tablet preinstalled malware

smallgarden

I had issues with this tablet. I factory reset it both on the settings and using power/volume button numerous times. Instead of fixing it, it actually added malware. This malware is now considered preinstalled malware. I disabled and forced stopped every app and eventually got play store running. I changed my password and installed Avg and it found 17 preinstalled malware threats but couldnt remove it. I tried malaware and couldnt delete either.
I bought the tablet in argos at christmas. Im not sure if I can bring it back to them or if I should contact Lenovo. I know rooting may be a solution but this can void warranties and know nothing about it. Any suggestions would be greatly appreciated
Thanks

ED E

1. If you need an AV package on your android device, you're doing it wrong.

2. Its probably just bloatware that is being mislabeled as malware, specifically what have you found?

smallgarden

Its definitely malware.

com.android.updater, ceryos, adobe air, mp3 free downloader, com.android.hard, com.android.system, com.android.bson, super video downloader, google update, engrils, love beauty, #1 watch video, smsMang
Agdd, powercoreservice, bcfservice, bidden, GoogleSafe, ConfigNservive to name a few

Allyall

Rooting just gives you Administrator privileges, you can remove/unroot when required.

smallgarden

Allyall wrote: »

Rooting just gives you Administrator privileges, you can remove/unroot when required.

Whats the best way to go about doing this and removing the malware, thanks

Allyall

I was suggestin custom rom, but I think the roms are a bit muddled.

Try Kingoroot - https://www.kingoapp.com/


http://www.cnet.com/uk/how-to/how-to-easily-root-an-android-device/

smallgarden

is there a way of rooting it not connected to a pc. I dont want to run the risk of infecting pc

Allyall

smallgarden wrote: »

is there a way of rooting it not connected to a pc. I dont want to run the risk of infecting pc

Just download Kingoapp and run it on the tablet.

smallgarden

I've managed to get rid of most of the malware but stubborn trojan killer is saying theres a ghost push trojan. It cant kill it. I cant uninstall bcfservice and com.android.vson when in superuser after downloading kingoroot. It comes up as failed

Allyall

https://play.google.com/store/apps/details?id=com.cleanmaster.security.stubborntrjkiller&hl=en

smallgarden

Allyall wrote: »

https://play.google.com/store/apps/details?id=com.cleanmaster.security.stubborntrjkiller&hl=en

thats the one I used. I removed some trojans but cant kill the ghost push one

Allyall

I recommend wiping it and installing a custom rom. You will probably find one at XDA-Developers, Android Freaks, Freaktab or many other forums.
Just make sure it is for the correct device. There is also a Lenovo A850 phone, Roms may not be compatible.

Allyall

smallgarden wrote: »

thats the one I used. I removed some trojans but cant kill the ghost push one

More help here - http://www.cmcm.com/article/share/2015-09-18/801.html
Also some help in the comments.

smallgarden

no idea how to do that allyall but thanks for the help.

Allyall

smallgarden wrote: »

no idea how to do that allyall but thanks for the help.

Custom Rom is very easy to install.
That manual removal above, may seem a bit much to follow, but that link was more for the alternative fixes in the comments, that I posted it.

I'll have a look for a custom rom and post one in a few minutes hopefully.

Root & TWRP Recovery - http://forum.xda-developers.com/android/development/root-twrp-lenovo-tab-2-a8-50f-mt8161-t3226130

Allyall

Unfortunately I can't see a custom rom anywhere for that tablet.

Try downloading https://play.google.com/store/apps/details?id=com.fsecure.ms.safe&hl=en

and see if that helps

ED E

smallgarden wrote: »

Its definitely malware.

com.android.updater, ceryos, adobe air, mp3 free downloader, com.android.hard, com.android.system, com.android.bson, super video downloader, google update, engrils, love beauty, #1 watch video, smsMang
Agdd, powercoreservice, bcfservice, bidden, GoogleSafe, ConfigNservive to name a few

com.android.system So android itself is malware? Better go buy an iPad so.

smallgarden

Allyall wrote: »

Unfortunately I can't see a custom rom anywhere for that tablet.

Try downloading https://play.google.com/store/apps/details?id=com.fsecure.ms.safe&hl=en

and see if that helps

No luck, still have two malwares and possibly ghost push trojan. Trojan killer says it removed it but then rescan and its back

Allyall

smallgarden wrote: »

No luck, still have two malwares and possibly ghost push trojan. Trojan killer says it removed it but then rescan and its back

Have you run Root checker (from the play store) to check that it's rooted properly?

You should try this method - http://forum.xda-developers.com/android/development/root-twrp-lenovo-tab-2-a8-50f-mt8161-t3226130

It's quite straight forward and very unlikely your pc would become infected, but if you are worried about that, you can run a few scans on your PC afterwards.

RossieMan

Look for something called smsmanager thatll be running. I bet if you delete that all your problems will go.

Allyall

RossieMan wrote: »

Look for something called smsmanager thatll be running. I bet if you delete that all your problems will go.

I'd wipe it, but there doesn't seem to be a Rom anywhere, I've looked throught the Lenovo support site too.
They have the source but nothing else.


I'm looking on their dev site.


.

smallgarden

Might try it with my laptop. Ill install a good antivirus. Can a trojan pass from an android device to a pc? Its definitely the ghost trojan which is a nightmare/ almost unpossible to remove. I probably shouldnt have deleted playstore which doesnt help!

Allyall

smallgarden wrote: »

Can a trojan pass from an android device to a pc?

Very unlikely.

smallgarden

thanks for all your help. We managed to bring it back and get refund