yashsingh1/xdaforums huggingface dataset:
[Samsung Galaxy S10 Themes, Apps, and Mods] mdc0ffey:
The only apk I managed to find amongst all of the nonsense was called something like ashell3 (with an 's) and malwarebytes flagged it as a bankbot so....looks like bs to me, shame.
[Samsung Galaxy S10 Themes, Apps, and Mods] mdc0ffey:
I would love to use it but.....
[Samsung Galaxy S10 Themes, Apps, and Mods] wunit:
Can it be directly installed without development Key?
[Samsung Galaxy S10 Themes, Apps, and Mods] arf8:
Thanks for checking and showing there is a trojan
[Samsung Galaxy S10 Themes, Apps, and Mods] mdc0ffey:
Im using The same versions as above. Malwarebytes RTP flagged it at install.
[Samsung Galaxy S10 Themes, Apps, and Mods] mdc0ffey:
Would really like to use it but don't want to give it admin rights if there's a chance its a trojan.
[Samsung Galaxy S10 Themes, Apps, and Mods] liamR:
Doesn't look too good. But maybe it's for the app to use the new workaround? 🤔
[Samsung Galaxy S10 Themes, Apps, and Mods] arf8:
I can confirm with a deep scan on malwarebytes it detected the trojan. On others like Eset, Kaspersky, AGV and a few others it did not. But one is too many so use caution.
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Crap :(.

If i knew how the guy acomplished the way to use the license of the other app, and samsung api, i would compile the apk myself, as fusionjack has all the tools in his github site.

Oh well, it was good while it lasted 😢. Back to Alliance Shield app again.
[Samsung Galaxy S10 Themes, Apps, and Mods] arf8:
Have you read the privacy statement? You should if you have not.
[Samsung Galaxy S10 Themes, Apps, and Mods] arf8:
https://privacy.alliancex.org/

In case you don't know where to find it.
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Crap again 😅

back to Package disabler as last resort.

I am making a deep scan with malawarebytes too, to see if it detects 'Ashell' as malaware.
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
It detected Trojan Bankbot in my phone. I already uninstalled the app. I'm very sorry everyone for posting an infected app, it was not my intention to do so. 😓

Thank you mdc0ffey for warning us.

I deleted my posts before it does any harm.

Next step is factory reset the phone.

Sorry all once again.
[Samsung Galaxy S10 Themes, Apps, and Mods] arf8:
Only a deep scan detected it, not to mention other AV apps did not detect it at all. One is too many if you ask me.

If you don't want to go the route of an app based disabler option, ADB is simple and does not require anything. PD and other apps allow on the fly changes which is beneficial for some.

Always read the privacy policy of any app you are installing and understand what data is requested from you.
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Just one question, after i backup my phone data to Samsung cloud (apps included, but not the infected one), and factory resetting the phone, is there a chance that after i restore the backup from the cloud, the malaware get in the phone again? 🤕
[Samsung Galaxy S10 Themes, Apps, and Mods] arf8:
If you want to be safe, reload ROM from Odin that is the only sure way
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Good day.

I know this brings nothing to the table, but, today as i was searching for a non infected version of the 'Ashell' app i posted earlier in this thread, i stumbled upon this topic in Malwarebytes forum about Adhell3, that got me even more confused.

It seems that the trojan ' Bankbot' was already a false positive in 'CitizenV' compiled files (https://www.mediafire.com/folder/sb37c6gmhqgbn/AdHell_3), also posted in this thread and the guys at malwarebytes corrected it in their database.

But i am still reluctant to install it.

Adhell 3: False Alarm or Legitimate Trojan?

I have been using Adhell 3 for the last 7 months. Today, opening it to take care of a new exception on my Galaxy A8 (2018) running Oreo 8.0 with Samsung Experience level 9.0, it was determined to be a banking Trojan by Malwarebytes. Not sure if it is or not as before today, despite daily scanning...

forums.malwarebytes.com
[Samsung Galaxy S10 Themes, Apps, and Mods] arf8:
Consider this I have 6 different version of Adhell from 3.1x to latest and a few forks on my phone and none of them are flagged as a trojan. So I would say they did fix the problem.

But this Ashell version is flagged as a trojan. The data speaks for itself.
[Samsung Galaxy S10 Themes, Apps, and Mods] liamR:
Do you have a user at their forum? Maybe give them the link of the new "infected" version to test?
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
No, unfortunately no. 😕
[Samsung Galaxy S10 Themes, Apps, and Mods] arf8:
One thing to note for those who still have a working version. It appears the whitelist does not override your host list. Can be a problem if you rely on a host file on a server!!!
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Good day.

I have been searching for an alternative for 'ashell 3', and i found 2 other version, but all with the same trojan 🤬

One of those was compiled by a user in 4PDA forum and he says that he has the files in is phone an did not insert any malware. :(

Adhell - 4PDA

Adhell, Блокировщик рекламы и трекеров во всех приложениях для телефонов Samsu

translate.google.com
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Good news Everyone!

I am not a developer or coder but as i am the type of person that likes to "make his own sandwich", so i decompiled 'Ashell' with a tool called 'APK Easy Tool' and recompiled it again.

And there's no more malware! :D

Is there another way or anyone that could double check that?

Thank you.
[Samsung Galaxy S10 Themes, Apps, and Mods] mdc0ffey:
Still getting flagged by malwarebytes RTP when downloading. Maybe it is a false positive on malwarebytes part.
[Samsung Galaxy S10 Themes, Apps, and Mods] arf8:
One hit is too many. The open source code compiles fine without being flagged by MB.

APK easy tool only marginally works, if progaurd was used there is likely code obfuscation, you will not be able to rid the virus just be decompiling and recompiling the apk.

If it is being flagged it is being flagged for a reason. If you have access to the source than you are better off but you don't.

As I said above the original source is never flagged, what does that tell you.
[Samsung Galaxy S10 Themes, Apps, and Mods] mdc0ffey:
Its strange, decided to ignore the warning and download anyway, then ran a scan with malwarebytes and guess what.....no threats found???
[Samsung Galaxy S10 Themes, Apps, and Mods] arf8:
I ran the scan and it found the same torjan, but I did not install it and will not.

Use at your own risk
[Samsung Galaxy S10 Themes, Apps, and Mods] mdc0ffey:
Yeah, I won't install either, just thought it strange that the apk was flagged when downloading but not flagged after it had been downloaded.
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Thank you anyway

As i said i'm not a developer.

In my ignorance i made myself an idiot sandwich 😅 .

It was worth the shot 🤷‍♂️
[Samsung Galaxy S10 Themes, Apps, and Mods] mdc0ffey:
Thanks for trying though 👍
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Good day.

Could someone please share with me the files 'knoxsdk.jar' and 'supportlib.jar'? As i am not an KPP partner, i cannot download them from Samsung.

I think i found a way to make adhell work without the license, but all the compiled versions that i downloaded seem to have some kind of malware, and to be sure, i would like to compile it myself, but without those files, it's not possible.
[Samsung Galaxy S10 Themes, Apps, and Mods] Web_E:
I have an old apk of adhell installed ( which I believe is virus free). It was downloaded six month before samsung shutdown dev key generation. will that work for your purpose?
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Good day.

Could anyone here with experience in android development give me his opinion?

Why does that ALL 'CitizenV' built files and even the first file in this thread ADHell v3.1.1 (https://xdaforums.com/attachment.php?attachmentid=4719055&stc=1&d=1552045494), and even other user's built files throughout the internet, is flagged with malware 'bankbot' after i decompile and rebuild, either in my pc or in my phone with 'Apktool' or 'apk editor'?

I have acomplished adhell working without a license but i am out of options for making sure that is safe.
[Samsung Galaxy S10 Themes, Apps, and Mods] dia_naji:
The only real way to get Adhell working is getting a KPE license. Unfortunately those aren't available unless you submit a form that you will be using keys for business purposes. I myself own a IT business and have been using adhell for years
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Hi.

Do you have the files 'knoxsdk.jar' and 'supportlib.jar'? If yes, could you share them with me?

It is possible to make Adhell work even without KPE license, i had it working in my phone working version 3.2.366 compiled by the user 'CitizenV', after changing 2 lines of code. The issue here is that after editing the code and recompiling the apk, Malwarebytes flags the file as if it contains malware.

And i am trying to build it myself so i am sure it is clean.
[Samsung Galaxy S10 Themes, Apps, and Mods] VirtualWaver:
Hi Mate,

Could you please advise what lines exactly did you change in the code to make it work without KPE license? I think I know how to mask the app as other app to activate it. I need to experiment but want to know how to bypass KPE license and use Knox activation instead. I will post a step by step instruction on how to compile and activate it once testing is succesful. Thanks.
[Samsung Galaxy S10 Themes, Apps, and Mods] mozn:
adhell-XE v3.2.496

i found this on a polish forum named mobilneforum.

checking on virustotal //edit: same (false?) flag?

what do you guys think about it
[Samsung Galaxy S10 Themes, Apps, and Mods] VirtualWaver:
For me, I just downloaded the one posted above by CitizenV (which is virus free), modified it and compiled it back. Activated via Knox. Works like a charm.

I believe the virus thing is false positive as the original build by CitizenV is clean and some AVs only flag it after recompiling. Corect me if I am wrong but if the AVs don't flag the original one, its impossible for virus to appear out of nowhere after recompilling, especially when we recompile it by ourselves.

I certainty won't install modified mods that are flagged by AVs but this base build is virus free and I can certanly see it is flagging after I recompile so no way for virus to appear.
[Samsung Galaxy S10 Themes, Apps, and Mods] Mrxyzl:
Can you share the apk you compiled that work?
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Good day.

I'm sorry, i erased the apk, because after compiling, the apk is still flagged with a trojan.

You could ask VirtualWaver for is apk.
[Samsung Galaxy S10 Themes, Apps, and Mods] Mrxyzl:
Thks for the info. I manage to make the apk. Ill test it with virus total again to see how it work.

Edit: the result show no virus except for the pua debug key (which mean i modified the stock apk). So i guess its safe. I modified via mt manager not apktool so thats why i guess.

Heres the link for the check

Edit 2: testing on phone and adhell work like it should be. Thanks @VirtualWaver and @Hansoliv for the tip and guide

Edit 3: add attachments
[Samsung Galaxy S10 Themes, Apps, and Mods] Mrxyzl:
Deleted
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Nice work!

Have you tested the file in malwarebytes?

I too had only the 'pua debug key' with VirusTotal in my apk, but after a deep scan with malwarebytes, it flags 'bankbot' :(.
[Samsung Galaxy S10 Themes, Apps, and Mods] Mrxyzl:
You mean malware byte for mobile? I try scan my phone with it (adhell app, not file) and show nothing

Edit: i scanned and heres the result. Yes the mod one you sent show up as malware but the one i made didnt.

Edit 2: if you want to double check i can pm you the file
[Samsung Galaxy S10 Themes, Apps, and Mods] skeletonboy:
Hi, do you mind sharing the apk?
[Samsung Galaxy S10 Themes, Apps, and Mods] VirtualWaver:
Sorry for a late reply folks.

I also don't have the app as deleted it after installation but it was still flagged as a virus by Malwarebytes.

However, as I mentioned before, it is pretty obvious for me that this is a false positive as the source file does not contain the virus and its impossible for a virus to appear out of nowhere after recompilation. This is convincing for me personally, you guys use your own judgement and risk assessment.

I did not try to compile it with MT File Manager yet as it apparently wants me to login and purchase a subscription for advanced features. Mrxyzl - did you try to enable Deep Scan in Malwarebytes? It only flags the it after Deep Scan is enabled.
[Samsung Galaxy S10 Themes, Apps, and Mods] Mrxyzl:
@VirtualWaver i did do deep scan with malwarebyte and the mod version from @Hansoliv show up as the screenshot above but the one i did with mt manager didnt.

Btw mt manager is an trojanware and it did require log in but no need subscription. I only use it on my emulator.
[Samsung Galaxy S10 Themes, Apps, and Mods] VirtualWaver:
Thanks for the info.

How do you know its a trojanware?? I did install it but removed shortly after.
[Samsung Galaxy S10 Themes, Apps, and Mods] Mrxyzl:
Check it with virus total because my eset nod32 flagged it
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Thanks to users VirtualWaver and Mrxyzl, i has finally able to create a working version of Adhell3, based on 'CitizenV' ah3 3.2.541, without samsung keys and no malware, using an app called MT Manager. :geek:

Clean with ESET, Virustotal and Malwarebytes.
[Samsung Galaxy S10 Themes, Apps, and Mods] *elmo*:
@Hansoliv, will you share the app?
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Good day.

I used the app 'EMM remote supp*rt' from play store to get the knox license for Adhell to work.

Hope it helps.
[Samsung Galaxy S10 Themes, Apps, and Mods] mdc0ffey:
Thanks a lot for you work in making this app. I have installed the apk but can't seem to get it to load properly. When it starts up I just get a white screen with the menu bar at the bottom but nothing is responsive. Is there something else I need to do?

Thanks again for you efforts.
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Good day.

Have you enabled device administrator rights? You have to manually enable that.
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
In case anyone wants, i made a version of adhell3 3.2.366 too, because this version has a separator to restrict hardware and google sync.

I used the app 'NotifyRDS Add-on: S*msung' to get the knox license

(https://play.google.com/store/apps/details?id=com.notifycorp.streamer.addon.knox)
[Samsung Galaxy S10 Themes, Apps, and Mods] *elmo*:
Also not working for me. The same symptoms
[Samsung Galaxy S10 Themes, Apps, and Mods] mdc0ffey:
Yes have enabled admin rights. Have the same outcome with 3.2.366 apk also.
[Samsung Galaxy S10 Themes, Apps, and Mods] *elmo*:
Me too. Looks like some window is opened and hidden...
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Hello

Have you installed first 'EMM remote support' from the play store and activated the knox license, before installing Adhell3?

If you don't do that before, adhell cannot get knox license.

In case you don't know the hack to activate adhell3, follow the instructions in this page

adhell3 v3.2.496 [Mod] | ApkMagic

adhell3 v3.2.496 [Mod] | ApkMagic

apkmagic.com.ar
[Samsung Galaxy S10 Themes, Apps, and Mods] *elmo*:
THANKS for link to tutiorial. Without it, I would never have installed the application...
[Samsung Galaxy S10 Themes, Apps, and Mods] mdc0ffey:
Still can't get it to work. Followed the instructions best I could but no luck. Not too sure on step 2 so might be doing it wrong. Any help appreciated.

I'm assuming "EMM Remote" is "Remote Support for Knox Manager" and "My Safe" is "Secur Folder"
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Now that i am re-reading, the instructions, they are not very clear.

You are right in your assumptions.

Just to be sure, here is the link for the right app.

Remote Support for Samsung SDS - Apps on Google Play

This enables IT Admin to troubleshoot the user's device problem remotely.

play.google.com

Before you try again, uninstall "Remote Support for Knox Manager" and reboot the phone.

In step 2, after installing, execute the app, activate the knox license and after that you should have a screen like the screenshot attached (may have a number or not) and exit the app.

Now go to secure folder and add the app "Remote Support for Knox Manager", and inside the secure folder, execute again "Remote Support for Knox Manager" and get the knox license again like in step 2.

Now you can follow the instructions from step 4 (should be step 5)
[Samsung Galaxy S10 Themes, Apps, and Mods] mdc0ffey:
Thanks so much that's awesome. Was doing everything right except using the wrong remote support app 🤦‍♂️

All working now 👍 cheers.
[Samsung Galaxy S10 Themes, Apps, and Mods] mdc0ffey:
Ah Adhell good to have you back!
[Samsung Galaxy S10 Themes, Apps, and Mods] Ser0mancerXXIV:
Which Adhell3 version is virus free that's being used?
[Samsung Galaxy S10 Themes, Apps, and Mods] *elmo*:
Given by @Hansoliv (y)(y)(y)
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Good day.

I have created two versions, see post #651 and #655.

Instructions for instalation see post #659.

Hope it helps
[Samsung Galaxy S10 Themes, Apps, and Mods] Mrxyzl:
Now if someone can find away to do all the step automatically would be great.

Btw after reboot knox license manager will pop some warning notice, but adhell still work fine after. Any idea what the warning mean?
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Do that automatically is out of my league. 🤷‍♂️

About the license, it happened to me too, just once, and as Adhell is still working,so i forgot about it.
[Samsung Galaxy S10 Themes, Apps, and Mods] dmdeen:
I'm getting a Parse Error installing on my S5. Any ideas how to resolve?

Thanks
[Samsung Galaxy S10 Themes, Apps, and Mods] Mrxyzl:
Look like you did not uninstall the donor app.
[Samsung Galaxy S10 Themes, Apps, and Mods] mdc0ffey:
Parsing error is usually a compatibility issue ie your OS is too old.. what version of android are you running?
[Samsung Galaxy S10 Themes, Apps, and Mods] dmdeen:
6.0.1
[Samsung Galaxy S10 Themes, Apps, and Mods] mdc0ffey:
From what I can tell adhell3 3.1 onwards uses api 28 which is android 9 pie so it wont install on anything lower. Not the authority on this so I could be wrong.
[Samsung Galaxy S10 Themes, Apps, and Mods] intxeon:
I can't see any option for these steps in Biometric and security. Can you be more specific maybe with some screenshot?

Thanks

Create service Safe in My Settings – Biometrics and security:

– Add applications – EMM Remote Support

– Take everything as in step 2 (but for My Safe) .- how it will without a prompt knox can

exit or wait sometimes delayed suitable knox .
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
'My safe' is 'Secure folder' 😅

See also post #662
[Samsung Galaxy S10 Themes, Apps, and Mods] Siminica:
could someone who managed to have functional adhell3 confirm/help with corrections the following steps:

1. installed remote ... sds emm

2. run the app

3. closed the app

4. added to safe folder

5. run from safe folder

6. closed the app

7. removed the app

8. removed from safe folder

9. installed adhell3

10. gave admin permission

11. when open the app - the "disbled" screen with bottom toolbar that others have mentioned before

S10Lite Android 11 latest sec patch (July)

thank you
[Samsung Galaxy S10 Themes, Apps, and Mods] Hansoliv:
Good day.

Is this the app you installed in step 1?

Remote Support for Samsung SDS - Apps on Google Play

This enables IT Admin to troubleshoot the user's device problem remotely.

play.google.com

In step 8, did you uninstalled secure folder? (see attached screenshot)

Do not uninstall the app inside secure folder
[Samsung Galaxy S10 Themes, Apps, and Mods] Siminica:
thank you for replying

the app is the good one

problem is that I didn't uninstall secure folder, just the app FROM secure folder, as I have other stuff there that I intended to keep (my secure folder was created before trying to install adhell3 and I thought I can use it as it is...)

I will try again from the beginning with a complete removal of the secure folder.

Do you have any ideea if after successfully installing and running adhell3 I will have the possibility to establish a new secure folder and put apps in it?

I executed the sequence again and uninstalled completely secure folder and now it's working. Thank you for your support.
[Samsung Galaxy S10 Themes, Apps, and Mods] s2isaliveandkicking:
Instructions are so unclear that it looks like it's been written by an autistic person who assumes everyone has the same knowledge as him.

I followed them to best of my ability but adhell is showing uninteractable gray screen.

1. Got the correct emm app

2. launch it in normal shell

3. from recents clear it

4. enable secure folder from settings

5. add emm to secure folder and launch from there

6. clear it from recents again

7. Uninstall emm from normal system

8. open secure folder and remove that emm app from the secure folder

9. in secure folder hi,t three dots, settings/more/uninstall, keep the default "take media out" or whatever it's in English checked

10. Install adhell

11. without opening it, enable it in device admin apps

12. Boom, grey screen
[Samsung Galaxy S10 Themes, Apps, and Mods] Siminica:
have you seen also the reply I got to my initial question? what I was missing was the fact that secure folder must be completely uninstalled not only the emm app uninstalled from secure folder. so when I did that in step 8 of my sequence INSTEAD of removing the app from secure folder everything went fine for me.

before retrying the sequence I uninstalled everything related to this process including my existing secure folder and rebooted the phone
[Samsung Galaxy S10 Themes, Apps, and Mods] s2isaliveandkicking:
It can't be COMPLETELY uninstalled. Choose your words better.

The three dots/options/more/options/uninstall is the only uninstall you're going to get.

Because there's no option to uninstall secure folder in device settings/apps. You can only disable it.

To COMPLETELY uninstall it you already need root.
[Samsung Galaxy S10 Themes, Apps, and Mods] Siminica:
ok, my bad - English is not my native so I might be mistakenly using some words. what I meant was uninstall secure folder instead of removing the emm app from it. so when I uninstalled secure folder the emm app was present there, maybe removing the app from secure folder also removes something from knox but uninstalling secure folder it doesn't, I can't say as I am no expert, but this approach did the trick for me
[Samsung Galaxy S10 Themes, Apps, and Mods] s2isaliveandkicking:
That's what I was going to try.

Bevcause the moron who wrote those instruction on that lotita virus site didn't explain the logic behind this.

I'm guessing:

1. adhell needs special knox key to work

2. That key can't be obtained anymore

3. we install an official knox app to get that key locally stored on the device

4. we use a virtualization software (secure folder) to duplicate the app to fool adhell to refer to that location to obtain the key

5. the adhell provided in this page has the same com.something.name as the emm remote app?

6. when the emm remote app is uninstalled from normal system and adhell is installed, it's looking for keys

7. the virtualized emm app is providing the keys to the adhell app DESPITE being removed from secure folder and the secure folder is uninstalled

BUT HOW?

These instructions are plain wrong as the virtualized/sandboxed software's data shouldn't be accessed by any other app, it's virtualized and called SECURE folder for a reason ffs.

Is anyone well versed in this thing can explain how the process works rather than giving instructions?

We can make our own instructions if we know ticktock behind the process.