yashsingh1/xdaforums huggingface dataset:
[Device Reviews and Information] avatar4:
Ok, my suspicions about /system/app/LocationEM2/LocationEM2.apk were unfounded.

But Hemphizes are VERY interesting.

App in question is named "Search Service" and is located in /system/app/CallerIdSearch/CallerIdSearch.apk

As you can see (in the pictures) it has couple high level permissions like:

- writing and reading normal and secure settings

- downloading apps in background without notification

- and installing apps

Now scanning.

First scanner I used was metadefender.com which reported 2 engines that thought it was virus. Those engines were NANO and Quick Heal.

Second engine was virustotal.com that at the time also reported 2 engines: NANO and Kaspersky.

But now, after 2 hours after my first upload, virustotal reports 9 engines detecting this app as a virus. You can check it here https://www.virustotal.com/en/file/...5e5bdda323ee4c770744bbbb/analysis/1466621572/

Also between those 2 hours, I uploaded this file to Avira asking them to confirm if this file was false positive or indeed a virus, that after 20 sec of digging, I suspect to be "AdWare.AndroidOS.Ewind.bb" described here https://www.avira.com/en/support-threats-summary/tid/41172/threat/ANDROID.Agent.OD.Gen

It is a very strange feeling to see this happen in only 2 hours.

Right now I'm waiting for a response from Avira. In the mean time you all can download "Quick Heal" from play store and try to eradicate this pest (it has root scaning), or wait and see if this is false positive (highly unlikely in my opinion).

Thanks to Hemphiz for being vigilant. Ulefone owes you either reward for finding a threat or scolding for thwarting their spying on us.

EDIT: I forgot to mention that analyze of virustotal points to some interesting links. In "File details" there is a section called "Interesting strings" that contains:

http://alog.umeng.co/app_logs

http://alog.umeng.com/app_logs

http://ciddb.iappgame.com/

http://log.umsns.com/

http://log.umsns.com/share/api/

http://www.google-analytics.com/collect

https://ssl.google-analytics.com/collect

https://www.app.iappgame.com/app/info

So basically data collection from google and something called umeng and umsns.

Google is straight forward, advertising and identification data.

Umeng was acquired in 2013 by alibaba aka aliexpress, so also advertisement and identification.

Umsns is described here https://www.virustotal.com/en/domain/umsns.com/information/

That leads to domain owner markmonitor.com

What the hell is markmonitor?
[Device Reviews and Information] SirDigitalKnight:
Clean

Ran a scan just now and results came back 100% clean
[Device Reviews and Information] SirDigitalKnight:
Yes, very cool feature indeed. Found it by accident and now use it more each day.

As far as camera photo quality is concerned, the phone has no image optical stabilization so if you want non blurry photos be sure to hold the phone very still while shooting.
[Device Reviews and Information] avatar4:
Im running full scan now with root and all the witless enabled. Feel like idiot in the mean time :}
[Device Reviews and Information] avatar4:
Yeap, still has mine. One in system, and second copy for digging and scaning.

Did full scan with root access and settings shown in attachments.
[Device Reviews and Information] SirDigitalKnight:
Where do you select root access? I used to the same settings you have except mine was set to Repair when virus is found.
[Device Reviews and Information] avatar4:
Supersu asked me to allow this app root access. I granted it and thats it.

Now Im being paranoid that I got this virus some other way.

In case anyone is interested my CallerIdSearch.apk has those checksums:

Md5: b2b55bb69fbed7b12bfeaf9f3c89d639

Sha1: 9201500530cbed1bc348a5c5afab72ba7a4ad82e

I got those checksums from SolidExplorer (file properties) but a lot of file explorers should have checksum generator.

Hope I wasn't "crying wolf" :(

Thanks SirDigitalKnight for trying to confirm this. But dont sweat it. Until couple of people confirm this independently, you shouldn't panic. I might be mistaken or got this from other source which would mean you wouldn't be infected.
[Device Reviews and Information] darksnoopy:
I tried this one http://www.needrom.com/download/miravision/
[Device Reviews and Information] avatar4:
Just received response from Avira. Their report is here https://analysis.avira.com/en/status?uniqueid=Mvx3K2XxLN3fr84AHUCzbJmOXvNGWtrE&incidentid=2051727

Part of email I received from them.

-------------------

We received the following archive files:

File IDFilenameSize (Byte)Result28828667CallerIdSearch.apk4.76 MBOK

A listing of files contained inside archives alongside their results can be found below:

File IDFilenameSize (Byte)Result28828768CallerIdSearch.ap...es.dex748.41 KBRISK

Please find a detailed report concerning each individual sample below:

FilenameResultCallerIdSearch.ap...es.dexRISK

The file 'CallerIdSearch.apk/classes.dex' has been determined to be 'RISK'.?*Our analysts named the threat Adware/ANDR.Ewind.74841.?*Detection will be added to our virus definition file (VDF) with one of the next updates.
[Device Reviews and Information] SirDigitalKnight:
Possible root issue?

Have not rooted my Power yet. Could it have been introduced through rooting and then adding root access apps?

Android is great that it lets us do cool things after rooting but it also opens up the phone to possible viruses and malware/ spyware.
[Device Reviews and Information] avatar4:
Yes it could. Also all xposed modules have a lot of privileges that normal apps don't. Also flashing zips from recovery and even flashing recovery could introduce infection. That's why I'm asking for confirmation, to check if we all have it or only few.

Your case I treat as still inconclusive. You don't have access to scan system apps so you cant confirm anything. But still, thank you for your time and effort.
[Device Reviews and Information] AngelOfBlood:
Have you reported to Ulefone and explained what you think it is ?

It's important to do in case of been hardware this can be broken or without optimization in code I think.

---------- Post added at 03:13 AM ---------- Previous post was at 03:10 AM ----------

Gavin01 report that to Ulefone mate :)
[Device Reviews and Information] Rizera:
Really? Because I have set my 'Level 14' Loudspeaker figures to the maximum and right now my phone is REALLY loud. I am even thinking of turning it down. Most likely you have a hardware issue. Report it to Ulefone like Angel said!

Sounds like a great option. Befoer doing anything I will try mailing it to them.

Comparing it to my Galaxy S6 Edge+ (AMOLED) the difference in color is out of this world.

Moreover, I can confirm guys, that my Ulefone Power is working with fast charge 9v! Currently on Android 6.0
[Device Reviews and Information] bjbirch:
I used this one on my ulefone power:http://www.needrom.com/download/meidatek-miravision-for-lillipop/ and it worked for me,

You will have to remove the other miravision app first, try using system app remover from Google play store
[Device Reviews and Information] darksnoopy:
I did with your link and its still not working, look at the screenshot. Your link gives me the same file "S3_MiraVision5.zip"
[Device Reviews and Information] bjbirch:
Then use system app remover to remove miravision if it doesn't work on your ulefone power,what Android version do you have on your ulefone power
[Device Reviews and Information] darksnoopy:
I did a manual remove of the .so files, the .apk and then restored the build.prop

Its the latest MM with OTA

Are you on lollipop maybe?
[Device Reviews and Information] gummikeks:
My Screen has some problems as well, it started like a week ago. The Touch Buttons don't work anymore and 2-3 cm of the upper Screen don't work either. This is really frustrating and it seems that this Problem isn't that rare, it's a shame that Ulefone has this kind of problems.

Also, overall Ghost touches are driving me crazy...
[Device Reviews and Information] bjbirch:
Yes My ulefone power is on lollipop,I think the miravision zip file only works with lollipop Roms
[Device Reviews and Information] avatar4:
Ok, I have a strange bug. In lock screen my hardware volume buttons work great. As soon as I unlock the phone, volume down stops working.

Im on latest MM, does anyone has this problem too?

EDIT: As soon as I open any app, volume down starts working. This is the funniest bug I've ever seen :)

---------- Post added at 01:07 PM ---------- Previous post was at 12:12 PM ----------

About this virus/spyware/trojan.

I unpacked system.img file using ext4 unpacker found here http://sourceforge.net/projects/androidicsjbext

And...........its infected. So source is ulefone themselves.

You can check it for yourself, by unpacking and scanning.

Cheers, and thanks [MENTION=6939319]Hemphiz[/MENTION].
[Device Reviews and Information] Stevo001457:
Hey guys. Just asking how do I receive the latest MM update. I'm currently on the first revision of MM which i flashed. I've waited a few days now since the OTA update has come out but doesn't come up. I hit check for updates & says your system is up to date.
[Device Reviews and Information] Gavin01:
Loud speaker is fine.... For ringtone and sound playing.... It's phone calls with the phones speaker and when using headphones.... I'm going to factory reset and try again i think
[Device Reviews and Information] euroclie:
Ulefone released two versions of the official (non beta) Marshmallow ROM, one dated may 14th and a second one dated may 17th, if I remember correctly.

There was a bug in the may 14th version preventing the correct OTA update, so you'll have to make sure you've flashed the latest (may 17th) version for the OTA updates to work (i.e. be detected, downloaded and installed).

Tapatalk (Ulefone Power)
[Device Reviews and Information] Fl1nt91:
is there any screen glass replacement? i found only the entire lcd block
[Device Reviews and Information] devilgenius:
Fast charging is working on last update? 20160608
[Device Reviews and Information] SirDigitalKnight:
Yes, I was able to charge my phone over 50% in an hour
[Device Reviews and Information] devilgenius:
I just updated and it's not working, any ideea?
[Device Reviews and Information] Rizera:
Yes, I am currently on 20160608 and my Power is charging at 9V:

http://xdaforums.com/showpost.php?p=67445028&postcount=1340

How slow/fast is your charging right now?
[Device Reviews and Information] devilgenius:
It' s charging very slow... 8 hrs from 0 to 100%
[Device Reviews and Information] Rizera:
Wow. Is this while using the stock charger? Makes no sense to me. I charger 0 to 100% in little more than 2 hours.

And just a reminder, charging is a kernel thing, not a ROM thing. What version kernel are you?

Maybe ask Ulefone about this issue?
[Device Reviews and Information] devilgenius:
I don't know, in Lollipop worked perfectly, after upgrade I lost the quick charging...
[Device Reviews and Information] avatar4:
Did you updated only system partition or the whole rom?
[Device Reviews and Information] avatar4:
I'm on latest MM and it works.
[Device Reviews and Information] avatar4:
Ha :) [MENTION=5203720]Rizera[/MENTION] was right. Look at your kernel date. Apparently ulefone went back to older kernel to fix bugs.
[Device Reviews and Information] SirDigitalKnight:
How does one setup the Power to store photos and videos in the SD card? I can not find that setting anywhere....

I have a 128GB Samsung EVO card installed and it is setup as external use.
[Device Reviews and Information] 3dd1:
It's under storage, then there is : default write disk
[Device Reviews and Information] AngelOfBlood:
Btw, There are more people with that issue, I have it to and reported to Ulefone. If you want, you can tell them there are more people with this problem, reforcing the many reports that people have made about it. Last time I mention this thread to the Ulefone support just one example.

Explain what we think and give to him facts or something like that, and that give to this issue a priority because of the incidents.

What you think ? :)

---------- Post added at 01:55 AM ---------- Previous post was at 01:49 AM ----------

I agree to

---------- Post added at 01:56 AM ---------- Previous post was at 01:55 AM ----------

Try find here mate
[Device Reviews and Information] devilgenius:
Yeah, I see I have the old kernel... I' m gonna reflash the last update. Thanks! :)
[Device Reviews and Information] Gavin01:
Guys I'm going to have to go back to my s5 if I can't fix this sound and issue.......does anyone know if I can reflash a older version and go back to how my sounds was which was quite frankly amazing
[Device Reviews and Information] Icone24:
You can reflash an order version, just don't know if it will revert your sound to what it was but it's worth the try.
[Device Reviews and Information] Gavin01:
Worth a go
[Device Reviews and Information] devilgenius:
Can you make a backup only of kernel partition with TWRP and post it here?

The reason is that I don't have acces to a PC in the next 10 days and this charging time its driving me nuts.. :(
[Device Reviews and Information] avatar4:
I dont know what would be kernel partition, sorry. But even if I did, I wouldnt do it. For the simple reason that on one of those (I dont know which) is written my IMEI number, and sharing that is NOT a very bright idea.

Sorry for that.

Ps: I suspect you need preloader/bootloader partition or one of the ramdisk ones which TWRP wont backup.

---------- Post added at 10:57 AM ---------- Previous post was at 10:54 AM ----------

Pps: Try flashing with flashfire or flashify. One of those should work.

---------- Post added at 10:58 AM ---------- Previous post was at 10:57 AM ----------

Ppps: But watch out, or you will be left for next 10 days without a phone too :)
[Device Reviews and Information] devilgenius:
I have a backup, so its not gonna be a problem...

Does anybody have the latest ota.zip?
[Device Reviews and Information] avatar4:
Sorry, no. But full image (around 600mb) is at ulefone.com under software.
[Device Reviews and Information] Gavin01:
when i got my phone i didnt make a note of the version it was on, all i know is i downloaded a rom from needrom and installed that then a few days later i got a OTA update and installed that.

When i did the OTA update this is when i lost the loud volume...........

ive just installed this one.

ulefone Power_Android 6.0_20160517

and i still dont have loud volume? would my phone of come with any other version. Im so sad now as the phone was perfect and now i might have to get rid of it as i just cant hear it, its virtually impossible to talk when walking down the road as its so quiet. People have also commented that i sound very quiet as well.

Would it the phone came on android 5.0.1???? if so where can i get this to install? Im willing to try anything
[Device Reviews and Information] SirDigitalKnight:
Yes, it would have come with 5.0.1 which you can download off their (Ulefone) website.
[Device Reviews and Information] Ibromish:
Have you tried enabling "BesAudEnh" and disabling "BesLoudness" under sound enhancement in sound and notification menu?

... It helps!
[Device Reviews and Information] Hemphiz:
All thanks goes to you mate. I appreciate the time youve put in to try and make our devices dirt free. And I'm sure others do to. Top stuff :good:
[Device Reviews and Information] SirDigitalKnight:
My Power does not have this bug with the volume buttons. I am also on the latest MM version.
[Device Reviews and Information] seb7o:
i have the MM 6___517 build, and I tryed to flash different TWRP but didnt work. Now will the new OTA update work if my recovery is "broken" aka not working properly?

Havent got it rooted yet, its getting tiresome to use unrooted phone xD How did u root it? Needrom couldnt help.
[Device Reviews and Information] Gavin01:
im now back on 5.01......................

just went through mtk and all the drop down boxes on audio and maxed everthing out to 160 or 255 and i think its improved a little. will test it later when out and about.
[Device Reviews and Information] Ziegenjupp:
Hi,

After i succesfully rooted my MM with replacing recovery.img from twrp with the original Recovery in the rom folder, then installed super su(latest beta) it works, but overnight i lost root again and had to manually flash supersu again in twrp. What did i do wrong?

Thx
[Device Reviews and Information] rob1992:
Seems like i either got very lucky (besides the slight headphone jack issue, but meh) or it wil break within the next half year.
[Device Reviews and Information] thanksmeg:
Solution : set Google Camera as the default camera app for this to work. To do that, after having installed Google Camera from the Play Store, open the Gallery, swipe left and choose to always use Google Camera for this action. I believe you could also do that from the settings.

So yes we can do whatever we want with that extra button ! :highfive:

---------- Post added at 10:48 PM ---------- Previous post was at 10:45 PM ----------

I didn't use a version from XDA. I went to Kingroot's official site (I can't post links yet but it's the first result on Google) and downloaded it from there.

EDIT : You also need to allow installing apps from Unknown sources (in the general settings under Security) to be able to install it.

---------- Post added at 10:56 PM ---------- Previous post was at 10:48 PM ----------

You totally blew my mind right there, dude.

Open Additions module

Press Add new key

Press the hardware extra button ('smartkey').

Add condition > Screen On > Click > scroll to the bottom and choose Load Application List > choose Google Camera (or another similar software)

Add condition > Camera > Click > choose Camera (6th choice from the top)

Add condition > Camera > Long Press > Disabled (not mandatory but will prevent launching the audio Recorder)

Set Google Camera as default camera app by opening the gallery, swiping to the Camera, and choosing to always use Google Camera

Takes about 3 minutes to set it all up.
[Device Reviews and Information] f1c:
I got it working with Additions, I meant that I couldn't do it by manually editing stuff with the root Explorer. ?
[Device Reviews and Information] taldah:
Please, wch version of twrp did u use with rashr cus ulefone power isn't listed among phones dat support twrp. Tnkz

---------- Post added at 07:39 AM ---------- Previous post was at 07:33 AM ----------

I used kingroot apk version 4.8.0, try it.
[Device Reviews and Information] darksnoopy:
Good morning guys and gals.

I 've been lurking on this thread for a while, got my phone one week ago. So far everything seems just fine. I can also confirm the deep-headphone jack problem, although thats not an issue for me since i only use BT headphones for music. Wooden version is just Fab! The rom on this phone seems to have some pretty neat features but other than that i think its just messed up. I really dont think its the best rom we could have in terms of battery usage or camera drivers, not that i dont like it, but i see more potential to it.

The only think that really bothers me is the problem with the viber app. If you swipe it from the multitasking menu, it will shutdown the app, no more new messages. Also, if you restart the phone and forget to open the viber app, you wont receive messages. It is frustrating really! I think that rooting the phone and converting viber to a system app will solve the problem, but i dont feel like messing with rooting right now. Other than that, it seems that Asphalt 8 is not the only problematic game. Other Gameloft games i tried like Nova 3, have the exact same issue. Seems to be gameloft-programming relevant. Anyway i really hope that custom roms will come on the way, although i think they will have issues with fingerprint sensor. By the way Android 6 on 32bit again? Seriously? :eek:

PS. s7yler thanks for the vids you posted, it was like "porn" while waiting for my phone to arrive
[Device Reviews and Information] Powoli:
I tried flash another rom. And tried to launch recovery or something the screen is black but backlighted see in the attachment.

I hear that in Ulefone Be Touch was similar problem that they have two versions of rom. That one gave black screen and all You have to do is flashing another rom and was all good. I hope maybe in Ulefone Power is the same? Can someone give me a link for original first rom for Ulefone Power
[Device Reviews and Information] megthebest:
you find rom here:

http://www.needrom.com/download/ulefone-power/

i tested on my sample these:

01/16/2016

01/27/2016

01/30/2016

all of them worked flawlessy ...

You need to flash them in firmware upgrade mode, overwriting LK Bin, Boot and Preloader as well
[Device Reviews and Information] Powoli:
Flash wit SPMDT or another program?
[Device Reviews and Information] megthebest:
Sp flashtool as usual. Use 5.1532 or newer, you find it in my twrp recovery thread on needrom.
[Device Reviews and Information] Powoli:
Just flash a rom and the same thing can hear volume change but screen is black with backlight.
[Device Reviews and Information] megthebest:
so i think defintely that is an hardware failure:crying:
[Device Reviews and Information] Powoli:
It worked i was checking the phone everything was fine i even play a one game, then i close the game and lock the phone and put it on table after some time i don't remember how much. I grab a phone push power button and black screen, i hear volume changing etc. i don't know what to do now. I ordered on Aliexpress. Sending back the phone wrom my country will be more expensive then phone.
[Device Reviews and Information] DrStuhl:
Can everybody confirm the audio jack problem? This is a real dealbreaker for me :(
[Device Reviews and Information] megthebest:
you have bad luck ... i'm afraid :crying:

have you tested also last rom with different model name and boot images?

no Jack Audio problem, i have Xiaomi Piston 3 and it sounds good..
[Device Reviews and Information] Powoli:
No i only try with rom for Ulefone Power i don't know wich another rom i can try that will make phone work. Can You help me please?
[Device Reviews and Information] megthebest:
I mean This rom:

Ulefone Power - Update 01/30/2016

last one of the thread:

http://www.needrom.com/download/ulefone-power/

is has different build.prop, model name and boot logo/animation.. but i currently use it on my Power without any issues
[Device Reviews and Information] Powoli:
I tried but i can tried again. Thanks
[Device Reviews and Information] megthebest:
try also a factory reset from recovery or directly from settings/backup & Recovery/factory reset feature
[Device Reviews and Information] Powoli:
How i can do it factory reset when i don't see anything?
[Device Reviews and Information] rob1992:
Its mostly a physical problem that is very dependent on the jack you plug into it. If the plug is long enough and the rings separated at the correct distance from the tip its fine. Its the ones that are slightly too short that could cause an issue. Although i'm not sure but maybe once you get into the more expensive headphones the jack length and whatnot gets a bit more standardized?
[Device Reviews and Information] darksnoopy:
Happens to me too. Just restart your device and root will be ok again