Eddy is 100% right, read here for the full story: https://forums.malwarebytes.com/topic/168824-malware-found-android-trojan-dropper-cant-be-removed/
Way to do it, credits go to "saidshow" there
Hi Guys,
I had the same issue. I used 'package name viewer' to identify a second name for the package. I then used the steps below to remove:
mobile@ubuntu:~/android/sdk/platform-tools$ adb shell
shell@klte:/ $ su
root@klte:/ # mount -o rw,remount /system
root@klte:/ # rm -rf /system/priv-apps/com.android.push.alarm.apk
root@klte:/ # rm -rf /system/priv-apps/com.android.dserw.ds.apk
root@klte:/ # rm -rf /data/data/com.android.push.alarm
root@klte:/ # rm -rf /data/data/com.android.dserw.ds
root@klte:/ # mount -o ro,remount /system
root@klte:/ # exit
shell@klte:/ $ exit
Crap like this and/or insecure IoT devices should be taken from the market and the cybercriminals that allow such schemes punished by authorities.
polonus
fota provider com.adups.fota.sysoper is not in that location on my device. How do I find the file paths of this trojan called fota provider on my system?
