How to remove FWUpdateProvider?

[jrk36]

Malwarebytes indicates my Chinese Umi E Plus has this PUP and recommends removal. However, when I try to remove I get message that UpgradeSys is a system app and cannot be uninstalled. Indicated it should be Disabled. When I try to do that UpgradeSys Disable is greyed out

How can I rid myself of this pesky PUP?

Thanks,

[mbam_mtbr]

Hi @jrk36,

This is a well known Adups app: Mobile Menace Monday: Adups, old and new

Adups is preinstalled malware, which is becoming more of an issue -> Mobile Menace Monday: Preinstalled adware and sometimes worse

Instructions to disable are in the blog post linked above.

Nathan

[LunaBlitz]

Malwarebytes Has detected the same thing on my phone, But I don't see where in those links it gives a fix since the option to disable the app is not there. 

[mbam_mtbr]

Hi @LunaBlitz,

PM sent.

Nathan

[Lutzkhie]

didn't work, i used debloated just now, when i scanned again it wasnt disabled

[Lutzkhie]

This FWupgrade thing is dangerous, i know that because 2 unknown apps were installed automatically the first app is called infoprovider (or infoprovided) it opens a small bubble head with a picture of a brown dog (pretty weird huh), the 2nd app is called enginee i dont know what it does and i dont wanna know and removed it immediately, after a couple of days the infoprovider app installed again and removed it immediately, this problem should be taken care as soon as possible.

[corkie]

I'm trying to clean up a mobile tablet using debloater but debloater can't find the device and there is no ADB interface in the windows device manager list.

The attached screen grab may help.

[mbam_mtbr]

Hi @corkie,

Did you install the Google USB Drivers?

Nathan

[Lutzkhie]

debloater didnt work with my phone, but i was able to remove it by a different approach, through shell commands, i uninstalled it, but when i check it on debloater it says only disabled so i guess its fine, also one of the app that keeps installing is gone the "infoprovided" app no longer install but now the "enginee" app is more persistent than before. every couple of minutes that im online that app install itself. I also notice that my default browser keeps adding 2 app on my homescreen the "loopscoop" and "2048" with Chinese Characters, even if i  delete data and cache of the browser it keeps coming back im not even using it, I'm thinking of disabling my default browser and switch to my usual browser. Maybe malwarebytes can help

[mbam_mtbr]

Hi @Lutzkhie,

If you send us an Apps Report, I can look into it more.

To send an Apps Report with Malwarebytes for Android use the following instructions.

1.Open the Malwarebytes for Android app.

2.Tap the Menu icon.

3. Tap Your apps.

4. Tap three lines icon in upper right corner.

5. Tap Send to support

Choose an email app to send Apps Report.

Your email app will open with the Apps Report included. Send the Apps Report to create a ticket.

Also, if you could share with me the process you used to remove FWUpdateProvider, perhaps I can update the instructions with that approach as well.

Nathan

[Lutzkhie]

alternative removal FWUpdateProvider:
 

1. Install the USB drivers for your device (Google has a list of some universal USB drivers here)
2. Download the ADB binary for your particular OS (Windows, Mac, Linux)
3. Extract the zip file into a folder that you can quickly access.
4. On your phone, go to Settings and tap on About Phone. Find the Build Number and tap on it 7 times to enable Developer Options.
5. Now enter Developer Options and find USB Debugging. Enable it.
6. Plug your phone into the computer and change it from “charge only” mode to “file transfer (MTP)” mode.
7. On your computer, browse to the directory where you extracted the ADB binary.
8. Launch a Command Prompt in your ADB folder. For Windows users, this can be done by holding Shift and Right-clicking then selecting the “open command prompt here” option.
9. Once you’re in the command prompt/terminal, enter the following command: adb devices
10. You will see that the system is starting the ADB daemon. If this is your first time running ADB, you will see a prompt on your phone asking you to authorize a connection with the computer. Grant it.
11. Now if you re-run the adb devices command, the terminal will print the serial number of your device. If so, then you’re ready to move on.
12. Enter the following command: adb shell
13. Execute the “pm list packages | grep '<OEM/Carrier/App Name>'” command (without quotes) to find package names.
14. Execute the command like so: “pm uninstall -k --user 0 <name of package>” command (without quotes) to uninstall a specific system application.

example: pm uninstall -k --user 0 com.fwupgrade.sysoper