{"id":2385,"date":"2015-09-06T19:06:08","date_gmt":"2015-09-06T18:06:08","guid":{"rendered":"http:\/\/blog.hovatek.com\/?p=2385"},"modified":"2022-08-15T22:13:20","modified_gmt":"2022-08-15T22:13:20","slug":"how-to-remove-privacy-guard-easy-tool-monkey-test-and-time-service-malware-from-an-mtk-mediatek-android-phone","status":"publish","type":"post","link":"https:\/\/www.hovatek.com\/blog\/how-to-remove-privacy-guard-easy-tool-monkey-test-and-time-service-malware-from-an-mtk-mediatek-android-phone\/","title":{"rendered":"How to remove privacy guard, easy tool, monkey test and time service malware from an MTK (Mediatek) Android phone"},"content":{"rendered":"<p><a href=\"https:\/\/www.hovatek.com\/blog\/bpyeki\/uploads\/2015\/09\/uploadfromtaptalk1444123699070.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2551\" src=\"https:\/\/www.hovatek.com\/blog\/bpyeki\/uploads\/2015\/09\/uploadfromtaptalk1444123699070.png\" alt=\"how to remove android monkey test time service malware virus\" width=\"480\" height=\"854\" \/><\/a><\/p>\n<div class=\"ast-oembed-container \" style=\"height: 100%;\"><iframe loading=\"lazy\" title=\"How to remove Monkey Test &amp; Time Service Malware from an MTK (MediaTek) Android phone\" width=\"500\" height=\"281\" src=\"https:\/\/www.youtube.com\/embed\/1izfpkN7lnk?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe><\/div>\n<p>Quite a number of fans have complained about encountering this issue either on other peoples MTK Android phones or theirs so we&#8217;ll be discussing these malware, how they affect your Android phone and how to permanently remove them.<\/p>\n<h3>How did I get infected?<\/h3>\n<p>In my previous article on removing Malware from an Android phone (see <a href=\"https:\/\/www.hovatek.com\/blog\/how-to-remove-adware-from-an-android-phone\/\">https:\/\/www.hovatek.com\/blog\/how-to-remove-adware-from-an-android-phone\/<\/a>), I discussed some methods by which malware infect your Android phone. The easiest point of entry for an Android phone is the application(s) you install. Considering how popular the Android platform is and how many Android apps there are, its not hard to imagine why hackers would exploit this. The most potent carriers of malware are cracked \/ nulled apps (using malware crypters and binders).<\/p>\n<h3>Are they harmful to my Android phone?<\/h3>\n<p>If you&#8217;ve ever experienced these apps then you would know that they not only auto-update but also install unsolicited applications on your phone (using up your data plan). Adware\u00a0are just a few steps away from harvesting your personal information so why wouldn&#8217;t they go all the way? You will also get a lot of <em>has stopped<\/em> errors like &#8220;unfortunately adobe air has stopped&#8221;, &#8220;unfortunately measure has stopped&#8221; and this could be very frustrating.<\/p>\n<h3>Why wont uninstalling \/ factory resetting remove them?<\/h3>\n<p>Uninstalling them under Settings &gt;Apps or doing a factory reset would have been effective if only these apps\u00a0were fully installed in the \/data partition. After uninstalling, all you need to do is reboot your phone and they&#8217;re back again like nothing happened.<\/p>\n<h3>How then do I remove\u00a0privacy guard, easy tool, monkey test and time service from my phone?<\/h3>\n<p>Consider the following methods:<\/p>\n<p>1. Locate the malicious apks under\u00a0\/system\/apps, data\/app, vendor\/operator\/app , system\/priv-app, system\/preloadapp or anywhere they&#8217;re installed to and delete them. For Monkey Test and Time Service, the apks to delete are cameraupdate.apk, providerCertificate.apk, providerdown.apk and themeManags.apk (see <a href=\"https:\/\/www.hovatek.com\/blog\/how-to-remove-bloatware-on-an-android-phone\/\">https:\/\/www.hovatek.com\/blog\/how-to-remove-bloatware-on-an-android-phone\/<\/a>\u00a0for the Bloatware removal techniques ). The phone needs to be rooted in order to use this method (see <a href=\"https:\/\/www.hovatek.com\/blog\/how-to-root-android-easily-without-pc\/\">https:\/\/www.hovatek.com\/blog\/how-to-root-android-easily-without-pc\/<\/a>\u00a0to know more about rooting an Android phone)<\/p>\n<p>2. Install a good antivirus like <a href=\"https:\/\/hovatek.com\/redirect.php?link=https:\/\/play.google.com\/store\/apps\/details?id=com.qihoo.security&amp;hl=en\">360 security<\/a>\u00a0, <a href=\"https:\/\/hovatek.com\/redirect.php?link=https:\/\/play.google.com\/store\/apps\/developer?id=StopBadApp+Mobile+Security\">Stopbadapp<\/a>\u00a0, <a href=\"https:\/\/hovatek.com\/redirect.php?link=https:\/\/play.google.com\/store\/apps\/details?id=com.antivirus&amp;hl=en\">AVG<\/a>\u00a0, <a href=\"https:\/\/hovatek.com\/redirect.php?link=https:\/\/play.google.com\/store\/apps\/details?id=com.cleanmaster.security.stubborntrjkiller&amp;hl=en\">Ghost Push Trojan Killer<\/a>, <a href=\"https:\/\/hovatek.com\/redirect.php?link=https:\/\/play.google.com\/store\/apps\/details?id=com.avast.android.mobilesecurity&amp;hl=en\">Avast<\/a>\u00a0or <a href=\"https:\/\/hovatek.com\/redirect.php?link=https:\/\/play.google.com\/store\/apps\/details?id=org.malwarebytes.antimalware&amp;hl=en\">Malwarebytes<\/a>\u00a0and scan the phone.<\/p>\n<p>3. Use the custom recovery backup and restore method:<\/p>\n<ul>\n<li>Get a working phone of the same model (without the malware issue)<\/li>\n<li>Flash a custom recovery to both phones using the method at\u00a0<a href=\"https:\/\/www.hovatek.com\/forum\/thread-455.html\">https:\/\/www.hovatek.com\/forum\/thread-455.html<\/a>\u00a0and backup the working phone in recovery mode (see <a href=\"https:\/\/www.hovatek.com\/forum\/thread-479.html\">https:\/\/www.hovatek.com\/forum\/thread-479.html<\/a>\u00a0for how to boot into recovery mode)<\/li>\n<li>Copy the backup folder from the SD card of the working phone to the SD card of the malware infected phone (ensure to maintain the folder structure)<\/li>\n<li>Boot the malware infected phone into recovery mode and format System under Mounts &amp; Storage<\/li>\n<li>Return to the main menu and restore the backup of the working phone under Backup &amp; Restore &gt; Restore<\/li>\n<\/ul>\n<p>4. Format then flash using SP Flash Tool<\/p>\n<ul>\n<li>Get a clean working phone of the same model and back it up using the method described at\u00a0<a href=\"https:\/\/www.hovatek.com\/forum\/thread-468.html\">https:\/\/www.hovatek.com\/forum\/thread-468.html<\/a>\u00a0(you&#8217;ll then have a stock \/ MTK backup)<\/li>\n<li>Format then flash the malware infected phone using SP Flash Tool at\u00a0<a href=\"https:\/\/www.hovatek.com\/forum\/thread-159.html\">https:\/\/www.hovatek.com\/forum\/thread-159.html<\/a>\u00a0and the stock MTK backup obtained from the step above<\/li>\n<\/ul>\n<h3>My phone is stuck at brand logo after deleting something wrong in the \/system folder. How do I fix my phone?<\/h3>\n<p>You need to flash back system.img or system.ext4.tar depending on the format that your \/system directory is in the ROM.\u00a0Please, create a new thread at our forum and our reps will provide free step by step assistance (see <a href=\"https:\/\/www.hovatek.com\/forum\/thread-514.html\">https:\/\/www.hovatek.com\/forum\/thread-514.html<\/a> for how to create a thread) .<\/p>\n<p>Hovatek&#8230;.just a button away!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Quite a number of fans have complained about encountering this issue either on other peoples MTK Android phones or theirs so we&#8217;ll be discussing these malware, how they affect your Android phone and how to permanently remove them. How did I get infected? In my previous article on removing Malware from an Android phone (see [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":2387,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[818],"tags":[20,126],"class_list":["post-2385","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tutorials","tag-android","tag-tutorials"],"_links":{"self":[{"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/posts\/2385","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/comments?post=2385"}],"version-history":[{"count":0,"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/posts\/2385\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/media?parent=2385"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/categories?post=2385"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hovatek.com\/blog\/wp-json\/wp\/v2\/tags?post=2385"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}