yashsingh1/xdaforums huggingface dataset:
[Android Stick & Console AllWinner based Computers] 3mel:
has anyone here tried Edxposed and can report that it works OK ?

I don't have a PC to reflash the device if it goes wrong but I need to get minmin guard onboard as I passionately hate intrusive ads.

if you do have it working which version of Rirucore did you use ?

DON'T USE EDXPOSED

both YAHFA and SandHook latest versions lead to a soft brick!

YAHFA let's you get a lot further into the process, but activating 3 modules was enough to ''corrupt'' the rom.

now it's either factory reset or try removing files via ADB on a borrowed laptop. I've suffered so that you don't have to. God I miss TWRP.
[Android Stick & Console AllWinner based Computers] Zesam:
Hi!

I tried flash T95's firmware (because of root) i Transpeed h616 (no root), has same device-specification, but It doesn't boot.

Do you know why? Shall I unlock boot-loader first? If yes then fastboot oem unlock works?

Thanks
[Android Stick & Console AllWinner based Computers] Dustsword:
I got this problem too

My firmware version is 10.1.A29-1105

If you had solve way , plz help me bro , thx
[Android Stick & Console AllWinner based Computers] AFCAFC:
Hey Man, so basically it turns out this is a hardware issue from what I read online - something to do with overheating but is like impossible to fix!

I ended up returning mine for a refund and buying an Nvidia Shield Pro instead, and I would absolutely recommend that you do the same! You won't be disappointed, the Shield is the REAL DEAL! Best tech purchase I've made in a long time👍🏾👍🏾👍🏾

Hope that helps buddy
[Android Stick & Console AllWinner based Computers] Dustsword:
I got overheat cause this problem

After I use mobile phone radiator to this box , it fix and work normal
[Android Stick & Console AllWinner based Computers] dj_ste:
I flashed it and it works well, thank you!
[Android Stick & Console AllWinner based Computers] Akitika:
I'm trying to edit the build.prop file on this box, root switch is flicked, root is checked and confirmed, bootloader unlocked, if I install magisk app, install magisk, restart, the box will not boot. If I just edit the build.prop itself, the box will not boot.

What am I doing wrong? I just want the box to think it is a phone so I can use the mobile version of Google photos instead of the TV version. I did this on my QPlus box no problem but the T95 is a nightmare!!! Somebody please help.

I'm running the T95-H616-A29-0110 firmware if that helps.
[Android Stick & Console AllWinner based Computers] Rccm112:
I am using A29 and I cannot get Magisk installed. I’ve tried to install Magisk 22 and 24. Everytime it reboots I get a black screen after the splash screen and I have to reinstall the firmware. The only reason I want to install Magisk is so that I can enable system less host so that I can enable Adaway. I have also tried A27.

Also is there anyway to keep it from forgetting what my default launcher is?
[Android Stick & Console AllWinner based Computers] Ansanizam:
Can you help me.. I need 10.1.X28.img firmware
[Android Stick & Console AllWinner based Computers] Ansanizam:
Hi, i need firmware for this T95H box. 10.1.X28,,, picture below
[Android Stick & Console AllWinner based Computers] hayalci:
Pease firmware file link
[Android Stick & Console AllWinner based Computers] pmf123:
Had one of these for nearly two years, today it won't turn on.

We had a power outage yesterday and haven't tried it since then, so may be the cause.

The PSU is OK as I checked with a volt meter.

Any repair info anywhere? don't see a reset button on it.

Thanks!
[Android Stick & Console AllWinner based Computers] frangs:
Can u share this firmware?! I'm looking for the a29 to download and nothing
[Android Stick & Console AllWinner based Computers] Rccm112:
I found that a29 locks the bootloader. You can google t95 h616 4pda. Translate the page to English and you will find several versions of the firmware.
[Android Stick & Console AllWinner based Computers] Ansanizam:
Can you help in finding 10.1.X28
[Android Stick & Console AllWinner based Computers] Unclemaamoo:
Hello , i have H616-T95MAX-AXP313A-V3.0 2021-10-26 , I am having issue with the date when ever it loads up it doesnt auto update the time and it cant play youtube unless it is date is fixed everytime it power on , need to fix that , i am new and im learning please guide me , i downloaded Phonixsuit and downloaded some IMG file somewhere i click a button behind in AV hold and it doesnt detect also , wifi connection shows limited
[Android Stick & Console AllWinner based Computers] dobsuk:
HI all. I am the next deceived with this box :p I am using Mecool m8s Pro L and i am more than happy with it but just needed one more android box and decided to try that one. I am bit disapointed tbh. It is with some custom ****ty Google Pixel Android version. Not real updates for the apps and so on. It is good for watching TV but that is all. It does not play the videos smoothly enough does not matter what quality they are 720p or 1080p and i even do not want to think about 4K videos :ROFLMAO: I already open the dispute with the seller but maybe will request partial refund and will keep the box to play with it. So, guys i read all posts here but i am quite confused. What is the best option to improve that box? To flash with the firmware but which one?? Did anybody find Android TV version for it yet? As my Mecool is with ATV and works really well. My T95 is supposed to be 4/64 but i do not believe after i read all posts here and as i can see how it works. Will open the board and will check in the next days.

The build version is 10.1.A29-0712 and it is with 2.4/5Ghz WiFi and Bluetooth.

So any advise how to improve that toy will be really appreciated. Thanks.
[Android Stick & Console AllWinner based Computers] TheGhost1951:
How did you install magisk?
[Android Stick & Console AllWinner based Computers] TheGhost1951:
How did you patch the bootloader?
[Android Stick & Console AllWinner based Computers] TheGhost1951:
How do you plan to temp boot twrp or even flash it permanently?
[Android Stick & Console AllWinner based Computers] DesktopECHO:
For owners of this device, have a look in this folder:

/data/data/com.swe.dgbluancher/files

Check to see if there's a folder named да -- If there is, your device is infected with malware. I'm investigating reports this is included in brand-new devices purchased online. If you're affected (or not) please reply here and let us know if you're on stock or flashed firmware.
[Android Stick & Console AllWinner based Computers] stevendeb25:
My t95 box, from fresh,

Flick root switch to on, box rebooted

installed adaway

opened adaway picked root, sync failed

flicked root switch to off

box rebooted

opened adaway hosts done ads blocked

opened apps with ads = no ads 😜

Flick root switch again to gain root for filemanagers etc

happy days
[Android Stick & Console AllWinner based Computers] stevendeb25:
Friend just bought one for me to setup for movies and tv
[Android Stick & Console AllWinner based Computers] DesktopECHO:
Ads sure, but not all the malware on the box.

You may want to check to see if this folder exists:

/data/data/com.swe.dgbluancher/files/да

Also run AVG, it will find malware (but not all of it)
[Android Stick & Console AllWinner based Computers] stevendeb25:
Yeah it's got that folder/file after rechecking

ran AVG scan found one malware "intallapp"
[Android Stick & Console AllWinner based Computers] DesktopECHO:
Sadly that’s just the tip of the iceberg!
[Android Stick & Console AllWinner based Computers] stevendeb25:
Had my t95 box for a few years now and not had any issues, but I don't enter bank details or login into things, if I do login into something it's a email I don't normally use
[Android Stick & Console AllWinner based Computers] ismael ulisses:
temho a t95 no aida mostra 1gb de ram e 8 de rom
[Android Stick & Console AllWinner based Computers] nicktyke:
I have this box. 4/64gb model. Doing ls from terminal in the dgbluancher/files folder shows no such subfolder. However, I'd now be keen to see what it is up to. I have an Ubuntu box on the same network which is easier to work with than the crappy t95. Any danger of a walkthrough of installing pi-hole on the Ubuntu box and configuring the t95 to use the Ubuntu box as DNS, please?
[Android Stick & Console AllWinner based Computers] DesktopECHO:
Can you check one more thing real quick? Do you have a folder named:

/data/system/Corejava

And the file:

/data/system/shared_prefs/open_preference.xml

If so, you are infected.
[Android Stick & Console AllWinner based Computers] DesktopECHO:
As far as installing Pi-hole on the T95 goes, it's very simple to get up and running. Then set the T95's DNS1 and DNS2 to 127.0.0.1 and you'll see exactly what the device is up to.

Pi-hole for Android Deployment
[Android Stick & Console AllWinner based Computers] nicktyke:
Both folder and file are present 😢

Struggling for time this evening. Will have a look at pi-hole tomorrow. Ideally on the Linux box with a decent screen and a hardware keyboard and point the t95 DNS settings to it. If I can't fathom that, I'll install pi-hole on the t95 per your guide. Thanks
[Android Stick & Console AllWinner based Computers] DesktopECHO:
Help is on the way!

GitHub - DesktopECHO/T95-H616-Malware: "Pre-Owned" malware in ROM for AllWinner H616/H618 & RockChip RK3328 Android TV Boxes

"Pre-Owned" malware in ROM for AllWinner H616/H618 & RockChip RK3328 Android TV Boxes - DesktopECHO/T95-H616-Malware

github.com

The script I posted to GitHub will effectively 'de-fang' the malware and clean-up your T95 as much as possible (for now, while a better solution can be found)
[Android Stick & Console AllWinner based Computers] nicktyke:
Right then. Set up pi-hole and there it is 🤬
[Android Stick & Console AllWinner based Computers] DesktopECHO:
You will also see these after you run the remediation script:

On top of that, it tries to use 8.8.8.8 if it doesn't like the answer it's getting from default DNS.

The cleanup script I put together will prevent Stage One from being downloaded, but it will NOT (at this time) stop pinging the C2 servers.
[Android Stick & Console AllWinner based Computers] PhyllisDillhole:
Bump.

Stage 1? Could you elaborate a little more? What would stage 2 do? I almost gave one of these away as a gift. Like you said, these can easily be obtained en masse from places like Alibaba and sell like hotcakes on Amazon and eBay (and it's not like the sellers on Amazon or eBay know- and perhaps not even the wholesalers) and most people just plug them in and connect all their devices, etc, without knowing anything about this or that there's a de-fanging script- etc.

I purchased these because of the processor, that I could flash Batocera or whatever to it or run it off of an sd card and use it for gaming and movies. Unfortunately, I did plug it in briefly before I found this post, One thing I did notice is that an air mouse I had that was working and in perfect working order stopped working. It still works on other machines.

I don't need it to be online for what I use it for, but I guess my main question is- given the current climate, should this be of a larger security concern?

I still have one in the packaging and I have said folders and files on the one I did use. Is this something that should be brought to broader attention? These are cool, functional, and cheap- thus people turn other people onto them and they buy them for friends and family, etc.

What's Stage 2? Pegasus? lol
[Android Stick & Console AllWinner based Computers] DesktopECHO:
Thorough write-up here: T95 H616 Malware

Reported online by BleepingComputer,PCMag and others
[Android Stick & Console AllWinner based Computers] nazgul67:
Anyone experienced distorted voice using Zoom Cloud Meeting app?

Any way of fixing this?

Device: T95 4gb ram

Firmware: X19
[Android Stick & Console AllWinner based Computers] GarM35:
Hi! I have 2 tv boxes Allwinner t95 max with android 9 (2.1.21) and they were working perfectly. From last month or so both have started to do the same thing: playing videos (either streaming or from hard drive) suddenly the image and sound freeze a couple of seconds (making a very annoying noise), and sometimes the image freezes but the sound continues until it all fades to black and then continues synchronized. I have restored one of them to factory defaults and it keeps doing it. Do you have any idea what could have happened and how to fix it? Thank you very much!
[Android Stick & Console AllWinner based Computers] spinnersp:
I have the 4/64 ver. Opened box to confirm.I cannot for the life of me get this detected with adb or even pheniox tool. Any help on drivers(which i believe pheniox tool installed. I can here windows sound when connecting. i can sometimes get this error in adb "

adb server version (39) doesn't match this client (41); killing...

* daemon started successfully" Sometimes the client and server numbers sre different.
[Android Stick & Console AllWinner based Computers] theslydog:
I had an unused T95 and I just fired it up and sure enough it was infected.

So I hunted for some firmware and the only firmware (out of many) that would install with PhoenixSuit was T95-H616-X29.img

It says Build 10.1.X29-0621

Has anyone had a look to see if this img is infected like that of the firmware that the box comes with?

I can see

/data/system/Corejava

but not

/data/system/shared_prefs/open_preference.xml

the 'files' folder here is also not present

/data/data/com.swe.dgbluancher/files/да
[Android Stick & Console AllWinner based Computers] spinnersp:
I hunted around for firmware for this box 4/64 dual wifi. Tried many different H616 files,couldnt get any to work unless they were T95 specific.Then I found "Vontar-X1-A29-1105",boots up with the Vontar logo. Once booted up looks just like the T95 and same as theslydog

I can see

/data/system/Corejava

but not

/data/system/shared_prefs/open_preference.xml

the 'files' folder here is also not present

/data/data/com.swe.dgbluancher/files/да
[Android Stick & Console AllWinner based Computers] DesktopECHO:
The reason you're not seeing:

/data/system/shared_prefs/open_preference.xml

/data/data/com.swe.dgbluancher/files/да

is because the botnet owners changed DNS on ycxrl.com to an invalid, private IP (192.168.9.1) ... so "stage 0" malware is running, but the pre-pwn3d malware is unable to download "stage 1" from ycxrl.com.

That is great news short-term, but they can change this back anytime they like to a real IP. I highly recommend you look at my cleanup script and at minimum perform the following steps to prevent malware from showing up again when they change ycxrl.com back to a real IP.

___________________________________________________________

Install ADB (If not already installed):

Assuming you're on Windows, to install ADB simply install Chocolatey first and install ADB using Choco:

choco install adb

macOS users have Homebrew to accomplish the same thing:

brew install android-platform-tools

___________________________________________________________

Cleanup Steps:

Start with a factory-reset device

Set the root switch to enabled and restart the device

Go to Settings -> Network & Internet

Connect to WiFi/Ethernet (preferably with a static IP and no gateway to prevent internet access)

Get T95 IP address from WiFi/Ethernet settings, connect to the device and become root:

adb connect [T95 IP address]
-> * daemon not running; starting now at tcp:5037
-> * daemon started successfully
-> connected to 10.74.0.88:5555
adb root
-> restarting adbd as root

Stage 1's 'home' folder is /data/system/Corejava -- Defeat the malware by turning /data/system/Corejava into an immutable file instead:

adb shell rm -rf /data/system/Corejava
adb shell touch /data/system/Corejava
adb shell chmod 0000 /data/system/Corejava
adb shell /vendor/bin/busybox chattr +i /data/system/Corejava

Additionally, the following prevents adups from running, which is an extra, unrelated layer of malware:

adb shell pm uninstall --user 0 com.adups.fota
adb shell pm uninstall --user 0 com.ftest
adb shell pm uninstall --user 0 com.www.intallapp
adb shell rm -rf /data/data/com.adups.fota
adb shell touch /data/data/com.adups.fota
adb shell chmod 0000 /data/data/com.adups.fota
adb shell /vendor/bin/busybox chattr +i /data/data/com.adups.fota

The X29 and A29 firmwares (If i recall correctly, it was a while ago) have some additional breakage that cause high load averages and higher temps, even at idle.

This is an Interesting find, thanks!
[Android Stick & Console AllWinner based Computers] hayabusa777:
Hello, I've been trying all day, because I don't have this usb a to a cable, but I ordered one. I've now gotten a connection with adblink and via sdk via Wifi with the T95, with windows 11 operating system. How do you start your sh file ?adb connect ip:5555,do I get a connection,what do I have to do then?I read a lot and tried all day,before I ask for help now,can you please help me.Thank you
[Android Stick & Console AllWinner based Computers] theslydog:
Thanks for the info. I will give ADB a whirl.

I also have an unused T95H here (both left overs from an old job).

The T95H (looks like this https://linux-sunxi.org/T95H) is almost identical to the T95 specs wise.

The T95 board says H616-T95MAX-APX313A-V3.0

The T95H board says H616-T95MAX-V4.0

I will fire that up the T95H and see if it is infected as well.
[Android Stick & Console AllWinner based Computers] spinnersp:
I used phoenix tool to install. I had to go to developers options, and toggle use usb 0 off then on.then phoenix tool detected box
[Android Stick & Console AllWinner based Computers] spinnersp:
I looked for those files with root file manager on the box locally
[Android Stick & Console AllWinner based Computers] theslydog:
Can you remove the files this way or does it have to be done using adb?
[Android Stick & Console AllWinner based Computers] spinnersp:
not sure i didnt have the files,but i think you can
[Android Stick & Console AllWinner based Computers] hayabusa777:
with the Phonixsuite I can't transfer the script from the desktop echo to the t95 box?!
[Android Stick & Console AllWinner based Computers] DesktopECHO:
I updated my post above to include steps for connecting with ADB
[Android Stick & Console AllWinner based Computers] hayabusa777:
Thank you for taking the trouble, I'll get my cable soon, I'll report back here.
[Android Stick & Console AllWinner based Computers] theslydog:
Ok so I flashed another complete fresh image and enabled developer and root and did not connect to the internet.

Also side loaded Root Explorer, Home Screen Launcher and another TV launcher.

Started it up again in the new launcher and with Root Explorer deleted the following:

/data/system/Corejava

/data/data/com.adups.fota (there is another adups folder there I deleted but I forgot the name of it)

/data/data/com.swe.dgbluancher

/system/priv-app/Launcher10/Launcher10.apk

(There is no /data/system/shared_prefs if you dont connect to the internet)

Restarted and there is no more dgblauncher or any of the above files.

Maybe this has fixed it but I haven't had a chance to check any logs yet.
[Android Stick & Console AllWinner based Computers] DesktopECHO:
Unless your device is bricked, you don't need a USB-A to USB-A cable. Go to settings, do a factory reset, and follow the instructions in my earlier post to fix this over WiFi or Ethernet.
[Android Stick & Console AllWinner based Computers] DesktopECHO:
The steps quoted above do NOT prevent the malware from reappearing.

You need to install ADB on a PC on the same network as your T95.

Assuming you're on Windows, to install ADB simply install Chocolatey first and install ADB using Choco:

choco install adb

Mac users can use Homebrew to accomplish the same thing:

brew install android-platform-tools

....and follow the steps listed in my earlier post, simply by copy/pasting the adb commands into your terminal, one line at a time.
[Android Stick & Console AllWinner based Computers] hayabusa777:
I did it now with powershell and usb a cable, can now see the box on the PC, without having switched on the internet, let your script run through. But the first thing I did was install atv launcher and delete the original one, with a tutorial from malwarebytes, one difficult birth :-).Thank you again for your help and your patience.I'm not an expert in a field, try to master many things, we simply don't have enough time in our lives.Great forum, you're always helped, best regards
[Android Stick & Console AllWinner based Computers] undertaker3411:
Hello I need help, I updated my tvbox and now it only tells me that I have 2gb of ram and 16 of rom when I had 4gb of ram and 32 of rom I have installed the version of 10.1.A29-0712 and I have not been able to detect the configuration of 4gb and 32gb could you please help me to get the frimware that I need the frimaware to install is T95-H616-A29.img
[Android Stick & Console AllWinner based Computers] Dell65:
T95-H616-A29.img

drive.google.com
[Android Stick & Console AllWinner based Computers] hayalci:
I have the same problem, T95-H616-X29.img is 4ram 32gb with this version?
[Android Stick & Console AllWinner based Computers] Dell65:
Yes !
[Android Stick & Console AllWinner based Computers] hayalci:
this version did not work, how can I make the device 4 ram and 32gb memory.
[Android Stick & Console AllWinner based Computers] Dell65:
this version is for dual wifi !

and this version is for 2.4 wifi !

T95-H616-X29.img

drive.google.com
[Android Stick & Console AllWinner based Computers] undertaker3411:
I already tried with the two images and I still have the same problem, it keeps telling me that I have 2 ram and 16 rom
[Android Stick & Console AllWinner based Computers] undertaker3411:
Thank you very much for your time, sorry for not thanking
[Android Stick & Console AllWinner based Computers] Shujah66:
i have a H616-T95MAX-AXP313-V2.0, i was working fine, but last day i suddenly stop working, i tried to reset it from reset button behind AV jack but it did nothing. When i hold reset button and plugin power jack i wont start, i tried a lot of things but it did not go in Android Recovery Mode, help me please to solve this issue, i have videos and photos i will upload it soon
[Android Stick & Console AllWinner based Computers] joaquin256:
bricked mine after changing some system images files...only will boot into fastboot thus not very useful because Phoenix utilites need adb for flashing I ended flashing a new boot image and I bricked it even more... now it's only identified as random usb device on windows. Anyone knows how can I short the pins to be detected by the flashing tool?
[Android Stick & Console AllWinner based Computers] oshobugie:
I just got the box as a gift

What image should I install

A2,4 A29 , X14 or A25

thanks
[Android Stick & Console AllWinner based Computers] hayabusa777:
I installed the image 10.1.x30, now the deleted apps netflix, aptoide, etc. come back after booting and I wanted to know what launcher you use
[Android Stick & Console AllWinner based Computers] hayabusa777:
I have now cleaned again, now I have the Wolf Launcher
[Android Stick & Console AllWinner based Computers] oshobugie:
Please post the link to download the image
[Android Stick & Console AllWinner based Computers] hayabusa777:
go back one page in the thread, can someone posted us
[Android Stick & Console AllWinner based Computers] hayabusa777:
Here Bro
[Android Stick & Console AllWinner based Computers] imvolkankaban:
I'm looking at solution for everyone who already have the T95 Android TV Box (4GB RAM, 32GB ROM, Allwinner H616 Quad-core) and are dealing with malware infections. Is there someone who can create a solution to flash with either batocera or EmuELEC?
[Android Stick & Console AllWinner based Computers] b1n4ry:
I just got gifted one of these (4gb 128gb ROM) any luck finding any info ?
[Android Stick & Console AllWinner based Computers] vgjjk:
May I ask, I use the firmware of A23, what is the difference between it and the version of A29 (This firmware is shipped with the factory)?