Attend XDA's Second Annual Developer Conference, XDA:DevCon 2014!
5,808,657 Members 44,110 Now Online
XDA Developers Android and Mobile Development Forum

[Update.zip] Remove Carrier IQ rootkit

Tip us?
 
whitslack
Old
#1  
Senior Member - OP
Thanks Meter 16
Posts: 195
Join Date: Jun 2010
Cool [Update.zip] Remove Carrier IQ rootkit

Sorry if something like this has already been posted, but the only suggestion I repeatedly stumbled across for removing Carrier IQ involved a $1 app from the Market. That's silly. It's not that complicated.

Here's an update ZIP that will remove Carrier IQ from your EVO 4G. It may work on other HTC phones, as the paths it removes are not EVO-specific.

http://www.mattwhitlock.com/RemoveCIQ.zip

Copy that ZIP file to your SD card, reboot into recovery, and "install" that ZIP.

If you're curious, here's the script included in the ZIP:
Code:
mount("MTD", "system", "/system");

ui_print("Removing Carrier IQ...");
ui_print("  /system/etc/iqprofile.pro");
delete("/system/etc/iqprofile.pro");
ui_print("  /system/bin/iqd");
delete("/system/bin/iqd");
ui_print("  /system/bin/iqfd");
delete("/system/bin/iqfd");
ui_print("  /system/lib/libciq_client.so");
delete("/system/lib/libciq_client.so");
ui_print("  /system/lib/libciq_htc.so");
delete("/system/lib/libciq_htc.so");
ui_print("  /system/lib/libhtciqagent.so");
delete("/system/lib/libhtciqagent.so");
ui_print("  /system/app/HtcIQAgent.apk");
delete("/system/app/HtcIQAgent.apk");
ui_print("  /system/app/HtcIQAgent.odex");
delete("/system/app/HtcIQAgent.odex");
ui_print("  /system/app/IQRD.apk");
delete("/system/app/IQRD.apk");
ui_print("  /system/app/IQRD.odex");
delete("/system/app/IQRD.odex");
ui_print("Carrier IQ is removed.");

unmount("/system");
The Following 8 Users Say Thank You to whitslack For This Useful Post: [ Click to Expand ]
 
cbarth3
Old
#2  
Senior Member
Thanks Meter 70
Posts: 287
Join Date: Nov 2009
Location: Denton, TX

 
DONATE TO ME
thanks. Need to take care of the wifes EVO design
 
{ParanoiA}
Old
#3  
{ParanoiA}'s Avatar
Senior Member
Thanks Meter 151
Posts: 933
Join Date: Apr 2011
Location: Ocean City, NJ
I don't think its that silly to pay a dollar to support a hard working dev or any dev that provides their excellent work to us free of charge.

Go TrevE !!!
HTC ONE M8: S-OFF
ROM: ViperOneM8
RECOVERY: TWRP
KERNEL: Stock

The Following 4 Users Say Thank You to {ParanoiA} For This Useful Post: [ Click to Expand ]
 
thisisbrian
Old
#4  
Account currently disabled
Thanks Meter 0
Posts: 11
Join Date: Dec 2011
Quote:
Originally Posted by {ParanoiA} View Post
I don't think its that silly to pay a dollar to support a hard working dev or any dev that provides their excellent work to us free of charge.

Go TrevE !!!
Agreed

Sent from my PC36100 using Tapatalk
 
infamousteeboy
Old
#5  
infamousteeboy's Avatar
Senior Member
Thanks Meter 179
Posts: 1,378
Join Date: Aug 2011
Location: Anaheim, Ca
Love that I found this zip thanks hit OP

TrevE Supporter!
 
tommytomatoe
Old
#6  
tommytomatoe's Avatar
Recognized Developer
Thanks Meter 6,807
Posts: 6,255
Join Date: Dec 2010
Location: Knoxville USA

 
DONATE TO ME
There are other things involved with removing ciq. Even with those libs and files removed there are other things involved. Like a handful of framework jars and a ton of apks. I found an instance for ciq in Calculator.apk. Seriously? Calculator? Lol. the smali was nested in a directory called "hide". Mmm....

That said, still a good job with posting this. I know my rom already has these removed but it will help others do it easily.

Also, treve's app goes well beyond removing files. It is well worth the dollar to support him.

Also, there are instances in ramdisk as well.

Not to stir trouble for ya. This post is far from that. I just want to make sure you're well informed and also the viewers of your thread are also well informed :)

all you need is a lovely signature.
The Following 5 Users Say Thank You to tommytomatoe For This Useful Post: [ Click to Expand ]
 
Active_Matrix
Old
#7  
Active_Matrix's Avatar
Senior Member
Thanks Meter 98
Posts: 708
Join Date: Oct 2010
Location: Bethpage, Ny

 
DONATE TO ME
Quote:
Originally Posted by tommytomatoe View Post

Also, treve's app goes well beyond removing files. It is well worth the dollar to support him.
Hey tommy, would you know the name of the app by Trev? Or a link for it?
マトリックスは、あなたを持っている.....
ACTIVE
Samsung Galaxy S5
SM-G900P
★ ☆ ★ ☆ ★
ON LEAVE
EVO 4G LTE
DirtyRacun-S-OFF
Evo 4G HW:0004/Epson
Hboot 2.10 /S-OFF
★ ☆ ★ ☆ ★


4G Fix
 
Febby
Old
#8  
Febby's Avatar
Senior Member
Thanks Meter 1,254
Posts: 3,218
Join Date: May 2010
Quote:
Originally Posted by Active_Matrix View Post
Hey tommy, would you know the name of the app by Trev? Or a link for it?
here is the XDA thread to his app =]

http://forum.xda-developers.com/show...&postcount=110

for the license I just typed "treve" in the app store.
The Following 2 Users Say Thank You to Febby For This Useful Post: [ Click to Expand ]
 
Active_Matrix
Old
#9  
Active_Matrix's Avatar
Senior Member
Thanks Meter 98
Posts: 708
Join Date: Oct 2010
Location: Bethpage, Ny

 
DONATE TO ME
Quote:
Originally Posted by CaliBoyPhillip View Post
here is the XDA thread to his app =]

http://forum.xda-developers.com/show...&postcount=110

for the license I just typed "treve" in the app store.
Thanks Phillip!
マトリックスは、あなたを持っている.....
ACTIVE
Samsung Galaxy S5
SM-G900P
★ ☆ ★ ☆ ★
ON LEAVE
EVO 4G LTE
DirtyRacun-S-OFF
Evo 4G HW:0004/Epson
Hboot 2.10 /S-OFF
★ ☆ ★ ☆ ★


4G Fix
 
adis452
Old
#10  
Junior Member
Thanks Meter 2
Posts: 10
Join Date: Feb 2011
Location: Central Florida
Thanks! much faster way to go through all my evos! This CIQ stuff makes me sick.

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes