[Update.zip] Remove Carrier IQ rootkit

Search This thread

whitslack

Senior Member
Jun 23, 2010
196
18
Sorry if something like this has already been posted, but the only suggestion I repeatedly stumbled across for removing Carrier IQ involved a $1 app from the Market. That's silly. It's not that complicated.

Here's an update ZIP that will remove Carrier IQ from your EVO 4G. It may work on other HTC phones, as the paths it removes are not EVO-specific.

http://www.mattwhitlock.com/RemoveCIQ.zip

Copy that ZIP file to your SD card, reboot into recovery, and "install" that ZIP.

If you're curious, here's the script included in the ZIP:
Code:
mount("MTD", "system", "/system");

ui_print("Removing Carrier IQ...");
ui_print("  /system/etc/iqprofile.pro");
delete("/system/etc/iqprofile.pro");
ui_print("  /system/bin/iqd");
delete("/system/bin/iqd");
ui_print("  /system/bin/iqfd");
delete("/system/bin/iqfd");
ui_print("  /system/lib/libciq_client.so");
delete("/system/lib/libciq_client.so");
ui_print("  /system/lib/libciq_htc.so");
delete("/system/lib/libciq_htc.so");
ui_print("  /system/lib/libhtciqagent.so");
delete("/system/lib/libhtciqagent.so");
ui_print("  /system/app/HtcIQAgent.apk");
delete("/system/app/HtcIQAgent.apk");
ui_print("  /system/app/HtcIQAgent.odex");
delete("/system/app/HtcIQAgent.odex");
ui_print("  /system/app/IQRD.apk");
delete("/system/app/IQRD.apk");
ui_print("  /system/app/IQRD.odex");
delete("/system/app/IQRD.odex");
ui_print("Carrier IQ is removed.");

unmount("/system");
 

tommytomatoe

Inactive Recognized Developer
Dec 13, 2010
6,282
6,800
33
Knoxville USA
There are other things involved with removing ciq. Even with those libs and files removed there are other things involved. Like a handful of framework jars and a ton of apks. I found an instance for ciq in Calculator.apk. Seriously? Calculator? Lol. the smali was nested in a directory called "hide". Mmm....

That said, still a good job with posting this. I know my rom already has these removed but it will help others do it easily.

Also, treve's app goes well beyond removing files. It is well worth the dollar to support him.

Also, there are instances in ramdisk as well.

Not to stir trouble for ya. This post is far from that. I just want to make sure you're well informed and also the viewers of your thread are also well informed :)

all you need is a lovely signature.
 

timdawgdentist

Senior Member
Oct 30, 2007
334
11
Rancho Cucamonga
Is this just embedded in the stock or stock rooted roms. Or all roms plagued with this issue? I was just wondering. I dont want my info passed on for sure



thanks in advance
tim
 

tommytomatoe

Inactive Recognized Developer
Dec 13, 2010
6,282
6,800
33
Knoxville USA
Google carrierIQ for much more details. Stock 100% vanilla aosp does not have it. But any thing stock that comes on phones from carriers, sense, ios, touchwhiz, etc will have ciq. Hope that makes sense.

all you need is a lovely signature.
 

wnoonan

Member
Nov 29, 2009
21
3
I don't think its that silly to pay a dollar to support a hard working dev or any dev that provides their excellent work to us free of charge.

Go TrevE !!!

Except that apparently his app doesn't work on EVO 4G's if you read the reviews. I have been trying to correspond with him to get a response after paying the dollar and finding that the license doesn't get applied to the application, but he's gone silent on me. I'll try this free solution and if it works try to get a refund on the app.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 8
    Sorry if something like this has already been posted, but the only suggestion I repeatedly stumbled across for removing Carrier IQ involved a $1 app from the Market. That's silly. It's not that complicated.

    Here's an update ZIP that will remove Carrier IQ from your EVO 4G. It may work on other HTC phones, as the paths it removes are not EVO-specific.

    http://www.mattwhitlock.com/RemoveCIQ.zip

    Copy that ZIP file to your SD card, reboot into recovery, and "install" that ZIP.

    If you're curious, here's the script included in the ZIP:
    Code:
    mount("MTD", "system", "/system");
    
    ui_print("Removing Carrier IQ...");
    ui_print("  /system/etc/iqprofile.pro");
    delete("/system/etc/iqprofile.pro");
    ui_print("  /system/bin/iqd");
    delete("/system/bin/iqd");
    ui_print("  /system/bin/iqfd");
    delete("/system/bin/iqfd");
    ui_print("  /system/lib/libciq_client.so");
    delete("/system/lib/libciq_client.so");
    ui_print("  /system/lib/libciq_htc.so");
    delete("/system/lib/libciq_htc.so");
    ui_print("  /system/lib/libhtciqagent.so");
    delete("/system/lib/libhtciqagent.so");
    ui_print("  /system/app/HtcIQAgent.apk");
    delete("/system/app/HtcIQAgent.apk");
    ui_print("  /system/app/HtcIQAgent.odex");
    delete("/system/app/HtcIQAgent.odex");
    ui_print("  /system/app/IQRD.apk");
    delete("/system/app/IQRD.apk");
    ui_print("  /system/app/IQRD.odex");
    delete("/system/app/IQRD.odex");
    ui_print("Carrier IQ is removed.");
    
    unmount("/system");
    5
    There are other things involved with removing ciq. Even with those libs and files removed there are other things involved. Like a handful of framework jars and a ton of apks. I found an instance for ciq in Calculator.apk. Seriously? Calculator? Lol. the smali was nested in a directory called "hide". Mmm....

    That said, still a good job with posting this. I know my rom already has these removed but it will help others do it easily.

    Also, treve's app goes well beyond removing files. It is well worth the dollar to support him.

    Also, there are instances in ramdisk as well.

    Not to stir trouble for ya. This post is far from that. I just want to make sure you're well informed and also the viewers of your thread are also well informed :)

    all you need is a lovely signature.
    4
    I don't think its that silly to pay a dollar to support a hard working dev or any dev that provides their excellent work to us free of charge.

    Go TrevE !!!
    2
    Hey tommy, would you know the name of the app by Trev? Or a link for it?

    here is the XDA thread to his app =]

    http://forum.xda-developers.com/showpost.php?p=17612559&postcount=110

    for the license I just typed "treve" in the app store.
    2
    Google carrierIQ for much more details. Stock 100% vanilla aosp does not have it. But any thing stock that comes on phones from carriers, sense, ios, touchwhiz, etc will have ciq. Hope that makes sense.

    all you need is a lovely signature.