FORUMS

Analysis & Opinion

Top Forum Discussions

[Update.zip] Remove Carrier IQ rootkit

195 posts
Thanks Meter: 17
 
By whitslack, Senior Member on 3rd December 2011, 06:27 AM
Post Reply Subscribe to Thread Email Thread
Sorry if something like this has already been posted, but the only suggestion I repeatedly stumbled across for removing Carrier IQ involved a $1 app from the Market. That's silly. It's not that complicated.

Here's an update ZIP that will remove Carrier IQ from your EVO 4G. It may work on other HTC phones, as the paths it removes are not EVO-specific.

http://www.mattwhitlock.com/RemoveCIQ.zip

Copy that ZIP file to your SD card, reboot into recovery, and "install" that ZIP.

If you're curious, here's the script included in the ZIP:
Code:
mount("MTD", "system", "/system");

ui_print("Removing Carrier IQ...");
ui_print("  /system/etc/iqprofile.pro");
delete("/system/etc/iqprofile.pro");
ui_print("  /system/bin/iqd");
delete("/system/bin/iqd");
ui_print("  /system/bin/iqfd");
delete("/system/bin/iqfd");
ui_print("  /system/lib/libciq_client.so");
delete("/system/lib/libciq_client.so");
ui_print("  /system/lib/libciq_htc.so");
delete("/system/lib/libciq_htc.so");
ui_print("  /system/lib/libhtciqagent.so");
delete("/system/lib/libhtciqagent.so");
ui_print("  /system/app/HtcIQAgent.apk");
delete("/system/app/HtcIQAgent.apk");
ui_print("  /system/app/HtcIQAgent.odex");
delete("/system/app/HtcIQAgent.odex");
ui_print("  /system/app/IQRD.apk");
delete("/system/app/IQRD.apk");
ui_print("  /system/app/IQRD.odex");
delete("/system/app/IQRD.odex");
ui_print("Carrier IQ is removed.");

unmount("/system");
The Following 8 Users Say Thank You to whitslack For This Useful Post: [ View ]
 
 
3rd December 2011, 08:44 AM |#2  
Senior Member
Flag Denton, TX
Thanks Meter: 71
 
Donate to Me
More
thanks. Need to take care of the wifes EVO design
3rd December 2011, 01:33 PM |#3  
{ParanoiA}'s Avatar
Senior Member
Flag Ocean City, NJ
Thanks Meter: 165
 
More
I don't think its that silly to pay a dollar to support a hard working dev or any dev that provides their excellent work to us free of charge.

Go TrevE !!!
The Following 4 Users Say Thank You to {ParanoiA} For This Useful Post: [ View ]
3rd December 2011, 05:27 PM |#4  
Account currently disabled
Thanks Meter: 0
 
More
Quote:
Originally Posted by {ParanoiA}

I don't think its that silly to pay a dollar to support a hard working dev or any dev that provides their excellent work to us free of charge.

Go TrevE !!!

Agreed

Sent from my PC36100 using Tapatalk
3rd December 2011, 05:53 PM |#5  
infamousteeboy's Avatar
Senior Member
Flag Anaheim, Ca
Thanks Meter: 179
 
More
Love that I found this zip thanks hit OP

TrevE Supporter!
3rd December 2011, 07:32 PM |#6  
tommytomatoe's Avatar
Recognized Developer
Flag Knoxville USA
Thanks Meter: 6,837
 
Donate to Me
More
There are other things involved with removing ciq. Even with those libs and files removed there are other things involved. Like a handful of framework jars and a ton of apks. I found an instance for ciq in Calculator.apk. Seriously? Calculator? Lol. the smali was nested in a directory called "hide". Mmm....

That said, still a good job with posting this. I know my rom already has these removed but it will help others do it easily.

Also, treve's app goes well beyond removing files. It is well worth the dollar to support him.

Also, there are instances in ramdisk as well.

Not to stir trouble for ya. This post is far from that. I just want to make sure you're well informed and also the viewers of your thread are also well informed :)

all you need is a lovely signature.
The Following 5 Users Say Thank You to tommytomatoe For This Useful Post: [ View ]
3rd December 2011, 07:52 PM |#7  
Active_Matrix's Avatar
Senior Member
Flag Bethpage, Ny
Thanks Meter: 99
 
Donate to Me
More
Quote:
Originally Posted by tommytomatoe


Also, treve's app goes well beyond removing files. It is well worth the dollar to support him.

Hey tommy, would you know the name of the app by Trev? Or a link for it?
3rd December 2011, 07:56 PM |#8  
Febby's Avatar
Senior Member
Thanks Meter: 1,282
 
More
Quote:
Originally Posted by Active_Matrix

Hey tommy, would you know the name of the app by Trev? Or a link for it?

here is the XDA thread to his app =]

http://forum.xda-developers.com/show...&postcount=110

for the license I just typed "treve" in the app store.
The Following 2 Users Say Thank You to Febby For This Useful Post: [ View ]
3rd December 2011, 08:00 PM |#9  
Active_Matrix's Avatar
Senior Member
Flag Bethpage, Ny
Thanks Meter: 99
 
Donate to Me
More
Quote:
Originally Posted by CaliBoyPhillip

here is the XDA thread to his app =]

http://forum.xda-developers.com/show...&postcount=110

for the license I just typed "treve" in the app store.

Thanks Phillip!
4th December 2011, 04:25 AM |#10  
Junior Member
Flag Central Florida
Thanks Meter: 2
 
More
Thanks! much faster way to go through all my evos! This CIQ stuff makes me sick.
4th December 2011, 09:32 PM |#11  
timdawgdentist's Avatar
Senior Member
Flag Rancho Cucamonga
Thanks Meter: 11
 
More
Is this just embedded in the stock or stock rooted roms. Or all roms plagued with this issue? I was just wondering. I dont want my info passed on for sure



thanks in advance
tim

Read More
Post Reply Subscribe to Thread

Guest Quick Reply (no urls or BBcode)
Message:
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes