Removing Malware and Bloatware from Lenovo K3 Note (K50-T5)

I’ve recently purchased a Lenovo K3 Note from Gearbest and it came with preinstalled malware and bloatware. Here are the things I had to do to bring the phone into a usable state.

Root it

Lot of the malware was preinstalled system apps which cannot be removed without root mode.

I’ve rooted using the CWM (ClockworkMod) method, installing the CWM recovery image then installing SuperSU. The KingRoot method should be easier but didn’t work for me.

Remove apps - Bloatware

I’ve used Titanium Backup because I wasn’t sure which app would break the phone if removed. I removed the following preinstalled apps (that I remember):

BSPTelephonyDevTool 1.0
DU Batter Saver 3.9.9
DU Speed Booster 1.4.0
Mcube
Mobile Assistant 3.0.4.0835
Power Manager 1.1.287.150113.c3631eb
SYNCit 4.0.54
Theme Center 2.70… UPDATE: needed for ringtone selection
User Experience 4.4.1

Remove apps – Malware that was display popup ads

The malware that was hijacking my browser was hidden in a modified YouTube app (this Android Adware was pretty hard to find). I simply uninstalled that using Titanium Backup and installed the correct YouTube app from the Play Store.

Remove apps – Virus and unofficial apps

The next step was to get rid of the virus, which was hidden in a modified Twitter app. The package name was com.twiter.android; see how it’s misspelled?

Unfortunately the infected Twitter app is a system app so cannot be uninstalled, but can be disabled. To do this, I connected the phone in USB debug mode to the computer and run an adb shell in root mode, and then disabled all unknown or unreliable packages:

./adb shell
su
pm disable com.twiter.android
pm disable com.skymobi.mopoplay.appstore
pm disable com.uc.browser.en
pm disable store.antivirus
pm disable com.cleanmaster.mguard_cn
pm disable com.android.dc
reboot

Things that cannot be uninstalled

I’ve tried to remove the SafeCenter as I have no idea what it does, but it removed the Apps menu from the System menu – so had to reinstall it. Luckily I made a backup with Titanium Backup before deleting it, so everything is back to normal.

Unfortunately the battery usage breakdown is either gone as well or was never installed in the System menu, but I can’t figure out which app I should reinstall to have it back.

Viber (or other app) doesn’t work after reboot

Lenovo by default disables auto starting of the apps so Viber won’t start the next time the phone is rebooted and as a result no messages or calls are received. To enable it, go to System Menu, Apps, Viber, Permission Management, and enable Auto-start.


Comments? Please let me know!

Comments

  1. Dal Bahadur Dev gurungJune 20, 2015 at 1:25 PM

    same problem with me

    ReplyDelete
    Replies
    1. UnknownDecember 21, 2015 at 2:16 PM

      me2

      Delete
    2. UnknownFebruary 6, 2016 at 6:00 PM

      Received a k80m last week which was loaded with malware (easylocker),amongst others. This is my first Chinese order and to say I'm pretty disgusted is an understatement. I did a lot of research to get the best phone at the best price and ultimately I'm here with a trojan-rid phone.As someone who doesn't really understand rooting it is going back to Gearbest. Now, why the hell are they sending out infected phones?

      Delete
    3. UnknownFebruary 6, 2016 at 6:01 PM

      Received a k80m last week which was loaded with malware (easylocker),amongst others. This is my first Chinese order and to say I'm pretty disgusted is an understatement. I did a lot of research to get the best phone at the best price and ultimately I'm here with a trojan-rid phone.As someone who doesn't really understand rooting it is going back to Gearbest. Now, why the hell are they sending out infected phones?

      Delete
  2. UnknownJune 26, 2015 at 3:00 AM

    What are the process to root the phone, I've tried the once from xda and it didn't work.

    ReplyDelete
  3. UnknownJune 26, 2015 at 3:00 AM

    What are the process to root the phone, I've tried the once from xda and it didn't work.

    ReplyDelete
  4. AnonymousJuly 1, 2015 at 9:11 AM

    i'm having the same issue that's why i'm here today

    ReplyDelete
  5. UnknownJuly 1, 2015 at 6:59 PM

    This comment has been removed by a blog administrator.

    ReplyDelete
  6. CaioCaFeJuly 14, 2015 at 6:21 PM

    Can you please share your theme center? I deleted mine with no backup.

    ReplyDelete
  7. UnknownJuly 15, 2015 at 7:29 AM

    can you please share your safe center i already deleted it without creating a backup

    ReplyDelete
  8. UnknownAugust 5, 2015 at 1:45 PM

    That's not normal. I've ordered two of these phones (not from Gearbest) and they were NOT rooted.

    ReplyDelete
  9. UnknownAugust 5, 2015 at 2:23 PM

    Seems like you missed a lot of bloatware or were these apps not installed on yours?

    Baidu Browser
    Black Hole
    "Browser"
    Bubbles
    Clean Master
    Live Wallpaper Picker
    MtkFloatMenu
    Music Visualizations Wallpapers
    MusicFX
    Phase Beam
    Photo Screensavers
    Smart Scene

    ReplyDelete
    Replies
    1. UnknownOctober 8, 2015 at 6:18 AM

      Hi Morgan,
      how to remove these bloatware, my battery is draining
      Pls help

      Delete
  10. OleanderAugust 6, 2015 at 6:02 PM

    I did an antivirus scan and theme center seems to be infected but you cant delete it cos it allows you to choose the ringtone right?

    Any bright ideas?

    ReplyDelete
  11. Jacco SlokAugust 8, 2015 at 1:02 AM

    I took the same steps: removing all bloatware but in the end I still wasn't happy with the phone's stock ROM. On YouTube there is a guy (RootJunky) showing how to install CWM and how to install a ROM after that with CWM. It's easy to do. I found a great Multilanguage rom (Limonchelo 5.1 MDSTeam Mod) on this page and this ROM really made me a very happy guy: http://forum.xda-developers.com/android/development/organized-thread-lenovo-k3-note-k50-t3158522 I have never had a cleaner and responsive phone:-) Everything just works now and no more Chinese characters and apps to bother about, and Lollipop 5.1 rocks!

    ReplyDelete
    Replies
    1. UnknownSeptember 11, 2015 at 1:58 PM

      hi jacco, do u need to do this after removing bloatwares or you go straight to limonchelo?thanks

      Delete
    2. Jacco SlokSeptember 13, 2015 at 11:13 AM

      First install cw and supersu, after that go straight To limoncello

      Delete
    3. UnknownJanuary 8, 2016 at 12:48 AM

      Is your mobile network affected via limoncello ROM? Somehow i am unable to catch any 4G network now!

      Delete
  12. gamavinoAugust 9, 2015 at 4:34 AM

    Hello Jacco, did you find issues on LTE after installing the new ROM. Do you know if portuguese language is available in this ROM ?

    ReplyDelete
  13. UnknownAugust 18, 2015 at 1:26 AM

    I also got mine from gearbest and it came prerooted.

    ReplyDelete
  14. JoéAugust 20, 2015 at 11:54 AM

    My phone was rooted by gearbest and full of malware. Iinstalled a program that could uninstall system app but I uninstall something unrelated while trying to remove ads and now I have no access to my desktop on the phone :(. Everything else still works like I can go to settings and what not but I can't launch any apps. In setting I tried to factory reset the phone but I don't think it affect what I removed since after reset it still doesn't work. What a nightmare. I will try to install drivers to computer and flash the rom using CWD, hoping I don't need to do anything on the phone and can do everything from computer...

    ReplyDelete
  15. LeoAugust 25, 2015 at 6:53 AM

    guys i have problem . icant root or update this phone .when i start root program i see this error .you dont have root/superuser acces on your device. how fix this problem

    ReplyDelete
  16. Jacco SlokSeptember 5, 2015 at 5:39 AM

    Hi Gamanivo, Purtuguese is present in 2 flavours: Brazil and Portugal. The only thing that does not work is the led. The rest is fully functional and looks and feels great

    regards,
    Jacco

    ReplyDelete
  17. Jacco SlokSeptember 5, 2015 at 5:42 AM

    Hi Leo, first have a look at videos of Rootjunky on YouTube, this will give you an idea of what to do, it is quite easy to root this phone

    ReplyDelete
  18. UnknownSeptember 12, 2015 at 10:56 PM

    i am root K3 remove app from list buth sms and mesenger brake down, its work buth when want open mesage app break down.
    rest is ok , plz. help ..
    Zoran

    ReplyDelete
  19. UnknownSeptember 18, 2015 at 10:23 PM

    nice article

    ReplyDelete
  20. UnknownSeptember 19, 2015 at 11:31 AM

    By mistake I have removed bluetoothshare app using titanium backup, but unable to restore, pls suggest any quick remedy pls

    ReplyDelete
  21. UnknownSeptember 21, 2015 at 4:39 PM

    my lenovo k3 note k50-t5 doesnt have any system updates, is my phone fake?..also i tried to root it rootjunky's way but after my phone turned off i cant locate it anymore in the computer eventhough my phone says fastboot..
    please help..

    ReplyDelete
    Replies
    1. aoleoSeptember 22, 2015 at 1:06 AM

      same hier.

      Delete
    2. Wandering IslanderApril 24, 2016 at 9:02 AM

      If you bought it online, like China, it's probably fake. Me myself bought a fake Lenovo K3 Note from fastcardtech. I installed original Lenovo rom and it was bricked. Luckily, I found the original fake firmware from youtube and my phone is back from the dead. My problem with this fake K3 Note is there are lots of bloatware and "viruses" preinstalled. I am still trying to find a way to root it to remove the virus apps from the system.

      Delete
  22. UnknownNovember 24, 2015 at 2:48 PM

    After rooting and installing limonchelo 5.1 MDSteam Mod my LED do not work at all... could any1 help somehow, please ?

    ReplyDelete
  23. Fun PalaceDecember 1, 2015 at 2:56 AM

    I too reboot my phone to remove malware applications and now my phone has got hang after every few minutes and restarted. Being frustrated wtih this phone, anyone can help to rectify this issue in Lenovo K3 Note.

    ReplyDelete
  24. UnknownJune 15, 2016 at 1:22 AM

    hey guys i bought my lenovo k3 note from to2c.com and it was already rooted and i uninstalled the theme center because i thought that it was just a market type app for themes but now i have a problem with the wallpapers and i can't find the same app what should i do..? :(

    ReplyDelete
  25. UnknownJune 15, 2016 at 2:18 AM

    thanks kenzo i reseted it but it didn't work beacause i used an app alled ''system app remover'' for rooted phones only and i just screw it up a little thanks for the app you mentioned. have you tried to tap on a song you have and press set as..?

    ReplyDelete
  26. ROSE MARYJune 7, 2017 at 8:26 AM

    I mistakenly removed safe center.how can I remedy it pls

    ReplyDelete

Post a Comment

Popular posts from this blog

MurMurHash3, an ultra fast hash algorithm for C# / .NET

Image
Finding good hash functions for larger data sets is always challenging. The well know hashes, such as MD5, SHA1, SHA256 are fairly slow with large data processing and their added extra functions (such as being cryptographic hashes) isn’t always required either. Performance and low collision rate on the other hand is very important, so many new hash functions were inverted in the past few years. One of the most notable ones is MurMurHash3, which is an improved version of its predecessor (v2). The new version can create both 32 bit and 128 bit hash values, making it suitable for a wide range of applications. 64 bit architecture The 32 bit hash isn’t too important for large amount of data matching, so I only worked with and tested the 128 bit version. The latter one is optimized for x86-64 architecture, giving amazing speeds for data processing. As a 128 bit value consists of two 64 integers, the processor is fairly good with working with such large hash values – they are not byte
. . .

Read more »

Quick select algorithm - find the Kth element in a list in linear time

Image
Quick select algorithm (Hoare's selection algorithm) – select the Kth element or  the first K element  from a list in linear time Working with large datasets is always painful, especially when it needs to be displayed in a ‘human readable’ format. It is a very frequent task to display only the largest, newest, most expensive etc. items. While sorting the whole dataset definitely gives a correct result, it is much slower than it needs to be – it needs at least O(n*log(n)) time and an it often uses recursion for the sorting, so in practice it can be quite slow. The quick select algorithm can get the top K element from a list of N items in linear time, O(n), with a very reasonable multiplication factor. The quick select does not use recursion so the performance is great for even large datasets. Algorithm The idea of the quick select is quite simple: just like with quicksort, select a random element from the list, and place every item that is smaller to the first half of the
. . .

Read more »

Octoprint as a systemd service - running it with high priority

Image
Octoprint provides remote access to your 3D printer, and as it's written in Python, you can run it on practically any operating system. If you are using a standard Raspberry PI image (for instance, because you run it on an Orange PI ), rather than the customised Octoprint image, you can manually install it and create a systemd service to run it: Add this to /etc/systemd/system/octoprint.service  [Unit] Description=Octoprint After=network.target [Service] ExecStart=/home/pi/octoprint/bin/octoprint serve WorkingDirectory=/home/pi/octoprint StandardOutput=inherit StandardError=inherit Restart=always User=pi CPUSchedulingPolicy=rr CPUSchedulingPriority=80 [Install] WantedBy=multi-user.target Then run sudo systemctl daemon-reload sudo systemctl enable octoprint This will start Octoprint on every reboot with a high priority (so unlikely to stutter during printing).
. . .

Read more »