Post Reply

[Update.zip] Remove Carrier IQ rootkit

OP whitslack

3rd December 2011, 06:27 AM   |  #1  
OP Senior Member
Thanks Meter: 16
 
195 posts
Join Date:Joined: Jun 2010
Sorry if something like this has already been posted, but the only suggestion I repeatedly stumbled across for removing Carrier IQ involved a $1 app from the Market. That's silly. It's not that complicated.

Here's an update ZIP that will remove Carrier IQ from your EVO 4G. It may work on other HTC phones, as the paths it removes are not EVO-specific.

http://www.mattwhitlock.com/RemoveCIQ.zip

Copy that ZIP file to your SD card, reboot into recovery, and "install" that ZIP.

If you're curious, here's the script included in the ZIP:
Code:
mount("MTD", "system", "/system");

ui_print("Removing Carrier IQ...");
ui_print("  /system/etc/iqprofile.pro");
delete("/system/etc/iqprofile.pro");
ui_print("  /system/bin/iqd");
delete("/system/bin/iqd");
ui_print("  /system/bin/iqfd");
delete("/system/bin/iqfd");
ui_print("  /system/lib/libciq_client.so");
delete("/system/lib/libciq_client.so");
ui_print("  /system/lib/libciq_htc.so");
delete("/system/lib/libciq_htc.so");
ui_print("  /system/lib/libhtciqagent.so");
delete("/system/lib/libhtciqagent.so");
ui_print("  /system/app/HtcIQAgent.apk");
delete("/system/app/HtcIQAgent.apk");
ui_print("  /system/app/HtcIQAgent.odex");
delete("/system/app/HtcIQAgent.odex");
ui_print("  /system/app/IQRD.apk");
delete("/system/app/IQRD.apk");
ui_print("  /system/app/IQRD.odex");
delete("/system/app/IQRD.odex");
ui_print("Carrier IQ is removed.");

unmount("/system");
The Following 8 Users Say Thank You to whitslack For This Useful Post: [ View ]
3rd December 2011, 08:44 AM   |  #2  
Senior Member
Flag Denton, TX
Thanks Meter: 70
 
287 posts
Join Date:Joined: Nov 2009
Donate to Me
More
thanks. Need to take care of the wifes EVO design
3rd December 2011, 01:33 PM   |  #3  
{ParanoiA}'s Avatar
Senior Member
Flag Ocean City, NJ
Thanks Meter: 156
 
951 posts
Join Date:Joined: Apr 2011
More
I don't think its that silly to pay a dollar to support a hard working dev or any dev that provides their excellent work to us free of charge.

Go TrevE !!!
The Following 4 Users Say Thank You to {ParanoiA} For This Useful Post: [ View ]
3rd December 2011, 05:27 PM   |  #4  
Account currently disabled
Thanks Meter: 0
 
11 posts
Join Date:Joined: Dec 2011
Quote:
Originally Posted by {ParanoiA}

I don't think its that silly to pay a dollar to support a hard working dev or any dev that provides their excellent work to us free of charge.

Go TrevE !!!

Agreed

Sent from my PC36100 using Tapatalk
3rd December 2011, 05:53 PM   |  #5  
infamousteeboy's Avatar
Senior Member
Flag Anaheim, Ca
Thanks Meter: 179
 
1,378 posts
Join Date:Joined: Aug 2011
More
Love that I found this zip thanks hit OP

TrevE Supporter!
3rd December 2011, 07:32 PM   |  #6  
tommytomatoe's Avatar
Recognized Developer
Flag Knoxville USA
Thanks Meter: 6,821
 
6,256 posts
Join Date:Joined: Dec 2010
Donate to Me
More
There are other things involved with removing ciq. Even with those libs and files removed there are other things involved. Like a handful of framework jars and a ton of apks. I found an instance for ciq in Calculator.apk. Seriously? Calculator? Lol. the smali was nested in a directory called "hide". Mmm....

That said, still a good job with posting this. I know my rom already has these removed but it will help others do it easily.

Also, treve's app goes well beyond removing files. It is well worth the dollar to support him.

Also, there are instances in ramdisk as well.

Not to stir trouble for ya. This post is far from that. I just want to make sure you're well informed and also the viewers of your thread are also well informed :)

all you need is a lovely signature.
The Following 5 Users Say Thank You to tommytomatoe For This Useful Post: [ View ]
3rd December 2011, 07:52 PM   |  #7  
Active_Matrix's Avatar
Senior Member
Flag Bethpage, Ny
Thanks Meter: 98
 
708 posts
Join Date:Joined: Oct 2010
Donate to Me
More
Quote:
Originally Posted by tommytomatoe


Also, treve's app goes well beyond removing files. It is well worth the dollar to support him.

Hey tommy, would you know the name of the app by Trev? Or a link for it?
3rd December 2011, 07:56 PM   |  #8  
Febby's Avatar
Senior Member
Thanks Meter: 1,254
 
3,219 posts
Join Date:Joined: May 2010
More
Quote:
Originally Posted by Active_Matrix

Hey tommy, would you know the name of the app by Trev? Or a link for it?

here is the XDA thread to his app =]

http://forum.xda-developers.com/show...&postcount=110

for the license I just typed "treve" in the app store.
The Following 2 Users Say Thank You to Febby For This Useful Post: [ View ]
3rd December 2011, 08:00 PM   |  #9  
Active_Matrix's Avatar
Senior Member
Flag Bethpage, Ny
Thanks Meter: 98
 
708 posts
Join Date:Joined: Oct 2010
Donate to Me
More
Quote:
Originally Posted by CaliBoyPhillip

here is the XDA thread to his app =]

http://forum.xda-developers.com/show...&postcount=110

for the license I just typed "treve" in the app store.

Thanks Phillip!
4th December 2011, 04:25 AM   |  #10  
Junior Member
Flag Central Florida
Thanks Meter: 2
 
10 posts
Join Date:Joined: Feb 2011
More
Thanks! much faster way to go through all my evos! This CIQ stuff makes me sick.

Post Reply Subscribe to Thread
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes