I have a Samsung Galaxy Note 10.1 that has been infected with some viruses really badly.

After factory defaults, as soon as it connects to the internet it starts downloading some apps and advertisement windows pop up like every 10 seconds.

Things I tried:

  • Installed AVG AntiVirus, CM serurity, Clear master

    • It helped me delete some files of the virus but did not solve the problem
  • Booted into recovery mode:

    • Wiped cache partition
    • wiped data/factory reset
  • Booted into Odin mode:

    • Product Name: GT-N8010
    • Custom Binary: Download: No
    • Current Binary: Samsung Official
    • System Status: Custom
  • Tried to software update

    • Message: Your device has been modified, software updates are not available.

What can I do to get rid of the virus and be able to software update normally?


It sounds like you have it unlocked with a custom recovery. If so, use the custom recovery to install a new ROM for your tablet. Find your tablet on http://forum.xda-developers.com/ and you can find either a third-party (i.e. Cyanogenmod, etc.), modified stock, or even completely stock ROM such as this one: http://forum.xda-developers.com/showthread.php?t=2792979 .

If you don't have a custom recovery, you can find instructions on XDA to use the odin utility to install one.

Wiping the system and data partitions should get rid of the malware but you'll need a new rom to install. If you have an SD card you can put the new rom zip file on the card. If not, you should copy it to the tablet first.

  • is there a danger that I can brick the tablet? – Divin3 Oct 25 '15 at 18:26
  • Yes but it sounds like it's all but unusable as it is. Have you tried Odin? Do you have a Windows PC to run it on? That might be the safest way to start and if something goes wrong with the recovery method Odin is your most likely safety net. You can also use your recover to make a backup but it will be infected. if you have a decent custom recovery already loaded, you should be pretty safe with a stock rom (as I linked above) or another popular well proven ROM from XDA. Just don't get ROMs from sketchy sources and make certain any ROM is FOR YOUR EXACT TABLET before you try to install it. – mikeatlarge Oct 25 '15 at 18:52
  • First time I am doing this. Looks hard at first sight. Unfortunately I don't have an SD card right now. Does it have any importance where I copy the new ROM on the internal file system? – Divin3 Oct 25 '15 at 19:02
  • The internal ROM zip file should probably be copied to /storage/emulated/0 but the safest bet is to boot into your recovery, go to "Install" (or similar) and see what it opens for the default path. You may also have USB file access even within the recovery saving you from having to run your infected OS. So while you're in the recovery see if your tablet shows up on your PC. With some recoveries it's an option you may have to enable. Your tablet may also support USB-OTG if you have any micro USB thumb drives or an OTG adapter. – mikeatlarge Oct 25 '15 at 19:07
  • Read up on XDA for your particular tablet if you're not comfortable doing it. How did the custom recovery get installed or did it come with it? If you have TWRP, PhilZ, or possibly CWM, and your tablet is unlocked, this should be fairly easy. – mikeatlarge Oct 25 '15 at 19:08

I have found a solution for stopping apps downloading without user intervention:

  1. Download TowelRoot and root your device. Then download SuperSU and make it functional.
  2. Download CM security, then scan your phone for infected files.
  3. Download system app remover (root) and delete all the apps what you found affected in CM security. Uninstall CM SECURITY.
  4. Download Titanium Backup and wipe all the data from your phone including cache and apps.
  5. Go to recovery mode and reset your device.

This will probably sort out your problem but in case if you find some more apps most of them will stop. Repeat this again and go to system app remover and uninstall your apps one by one, first remove one and wait for some time. If it doesn't stop then remove another and then another. And when it's stopped go to "Recycle Bin" and reinstall all the apps except the last one.

Once your phone will be all right, download a trustworthy antivirus app (say Avast) for future security.

  • 1
    And yhen you can simply unroot your device by clicking on permanently unroot on supersu.and your devise will me ready for normal update. – Zaheer Maqbool Oct 25 '15 at 19:43
  • Tey to use sammobile and find the best firmwhere – Zaheer Maqbool Oct 25 '15 at 23:43
  • Thank You for the idea, but I think the new ROM would be a cleaner solution. – Divin3 Oct 26 '15 at 14:52
  • I would suggest readers to not try this solution as it is inherently risky and probably not at all the best or the easiest or the safest way to go about achieving what the OP has asked for. – Tamoghna Chowdhury Nov 10 '15 at 8:50

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.