ransomware

[guideman]

Hi guys.
Unfortunately my CS968 Android TV box got infected of "Interpol association national security agency" virus and it is locked. Is there any way to remove this virus other than to reflash ROM?
Thanks

[budgetgeek]

If it's ransomware you could pay the ransom, or if the app installs itself to /system you could just reflash the system.img only. If it boots but launches on startup you may be able to uninstall or delete via adb.

[budgetgeek]

You could flash TWRP recovery and use the built in file manager to delete any offending apks or files.

[guideman]

Well, my friend, I chose to reflash .img file and..
Interpole.. is away now
Anyway, I will flash TWRP recovery, will be useful for me.
Thanks for help man.

[guideman]

Well, an additional question, In case of flashing custom recovery how do I enter? reset + DC power?
Regards

[budgetgeek]

Use Android Device Bridge, ADB. Flash recovery only at bootloader, find a minimal adb installation for pc, connect device otg to pc usb, enter

adb devices

To ensure connection, then

adb reboot recovery

[guideman]

Though your answer was not so clear for me (you know, I am a noob..) Anyway, I will try. Thanks for your help.

[Pink_Turtle]

Hi, I'm sorry that you have such a problem. I also suffered from Cerber ransomware.
Here is a good article on this topic: http://sureshotsoftware.com/guides/cerber/

[mitchell4you]

Goodmorning..
A few question,
Can you only get infected/randsomed if your device is Rooted? Or can any device become infected?
How did you guys get this ransomware.. on your system?

Cheers

[budgetgeek]

If you have an older device firmware, some apps, like towelroot for example, can root the device, but then leave it up to the owner to install a superuser app. Package that with malicious code that installs an app to run at start up or background services, or that can change your hosts files, or mine coins for you or any sort of bad behaviour and mask the package to look like something the user wants, like pirate movie app, or pron, and then let it go into the wild and wait for the magic to happen...