Blocked executable in the ESP

Question

Blocked executable in the ESP, ensure grub and shim 
are up to date: /boot/efi/EFI/Android/BOOTx64.EFI
Authenticode checksum is present in dbx

I am using Lubuntu 24.04 LTS and do not require Android.

I can not delete /boot/efi/EFI/Android/BOOTx64.EFI with sudo rm /boot/efi/EFI/Android/BOOTx64.EFI

I have checked that both grub and shim are up to date. Not sure if I should try sudo fwupdmgr update --force as there is a warning. How do I clear Android from my system please.

martyn@martyn-hp255g1notebookpc:~$ sudo efibootmgr
[sudo] password for martyn: 
BootCurrent: 0000
Timeout: 0 seconds
BootOrder: 0000,3000,0001,2001,2002,2003
Boot0000* Ubuntu        HD(1,GPT,38496759-e420-ff4d-be12-259d87dcaf52,0x1000,0x96000)/File(\EFI\ubuntu\shimx64.efi)
Boot0001* Ubuntu        HD(1,GPT,38496759-e420-ff4d-be12-259d87dcaf52,0x1000,0x96000)/File(\EFI\ubuntu\grubx64.efi)RC
Boot2001* USB Drive (UEFI)      RC
Boot3000* Internal Hard Disk or Solid State Disk        RC
Boot3001* Internal Hard Disk or Solid State Disk        RC
Boot3002* Internal Hard Disk or Solid State Disk        RC
Boot3003* Internal Hard Disk or Solid State Disk        RC
martyn@martyn-hp255g1notebookpc:~$

score 0 · Accepted Answer · edited Jun 22 '25 at 16:16

I resolved the problem by executing fwupdmgr refresh --force and fwupdmgr update --force. (Ignoring the bit about Howyar's SysReturn software) selected y to perform the operation and reboot.

Then, I followed this procedure, (from Cipricus Apr 22,2024 at 13:07) which is meant for purging EFI of old unused OS entries (each bullet is a separate line):

sudo su
cd /boot/efi/EFI
ls

and then selecting my folder :

rm -rf custom

After that, the update of that UEFI dbx package worked in Discover.

Blocked executable in the ESP

1 Answers1