Manual removal instructions of CloudSota
Nov 09, 2015 · By Cheetah Mobile
Manual removal instructions:

As these tablets have been preset with root access which is needed to remove the Trojan, we have find a way to get rid of it.

How to clear the Trojan on PC:

Preparation:

1. Connect your tablet to the computer and enable the USB debugging mode.

2. Download the Android toolkit android-tools.zip provided by CM researchers.

3. Decompress android-tools.zip

Clearing:

Connect the tablet to the computer, and enable the USB debugging,

Get the command prompt:



Go to Android toolkit directory

Command:

If the device has been connected to the computer and the USB debugging mode is enabled, generally, it will show as the picture above.

Command:

Go to Android Shell command mode

Command: su

Get the highest authority, the $ will change into # if you obtain the highest authority.

Command:

Remount system partition in read-write mode


Command:

Delete the file checkota.sh. This file tries to restore the Trojan every time the device is rebooted

The content of the file: (The file in different devices are roughly the same)

Command:

to delete the backup file of the Trojan.

Command:

Delete the Trojan.

After executing the above steps, the Trojan will be deleted from your device. However, to avoid the reappearance of the big red “Demo”, we suggestion that users download the APK com.clouds.server.

Reboot the device after installing com.clouds.server, you will see your device return to normality.

As it is impossible to test all infected devices, the removal instructions may not work on certain devices, please do not hesitate to contact us if you cannot remove the Trojan after executing the above steps.