Help, have I been hacked? Kinda urgent :( - Galaxy Note 3 Q&A, Help & Troubleshooting

Ok guys, could really do with your help here.
I have an unrooted n9005, which recently had an earpiece fault.
I took it to my local repair store, who took it and said come back in an hour.
After I went back, I found that someone had installed mobomarket on it.
The owner of the shop said it wasn't him, but I can see from the unlock log that it happened for sure whilst with him.
Ok, so I figured what harm could that really do, but then thought to check further.
On rebooting to the odin download screen (vol home and power), the Knox status is now 0x1.
This means they rooted it right? Or is it possible to trip another way?
However, it now isn't rooted (testing using su in terminal) and the firmware status on the odin download screen shows as "official".
My question therefore is, is it possible to root the phone, install malware then unroot it, leaving the malware still active?
Or does the fact the download status show "official" instead of "custom" mean this isn't possible?
This is kinda important as if there is a possibility the phone is compromised, I need to call the police but obviously don't want to do this if the guy is innocent.
(I could for example accept that he used the phone without permission to play something or whatever, and whilst not ethical, I don't need to worry about having to wipe this phone)
Thanks guys, your input would be much appreciated as I intend to go back to him tomorrow.
Sent from my SM-N9005 using Tapatalk

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
For reference.
Sent from my SM-N9005 using Tapatalk

GeneralMeow said:
You can't revert the knox status once you got it tripped, at least for now.
The shop probably attempted to do some modification on your phone. Probably attempting to flash some custom recovery or etc.
Click to expand...
Click to collapse
The shop denied they did anything to it.
The real issue is can it be infected or does the boot loader have some sort of checksum protection? That's all I really care about for now...
Sent from my SM-N9005 using Tapatalk

blanco360 said:
The shop denied they did anything to it.
The real issue is can it be infected or does the boot loader have some sort of checksum protection? That's all I really care about for now...
Sent from my SM-N9005 using Tapatalk
Click to expand...
Click to collapse
Just remove any funny apps you found.
If in doubt, just perform a factory reset.

It's more important I know if my data could have been compromised. For example Google chrome accounts etc...
Sent from my SM-N9005 using Tapatalk

Safest bet is to always assume the worst. Change all your passwords.
If you have proof, I would also report it. Either to a consumer union if you have one, or to the police. Such practises are usually forbidden by law.
This is why I never trust independent repair shops. (It also really doesn't help that the ones here never speak Dutch or English, and are always run by immigrants)

I've now found an app called mobo daemon on the phone too. Sigh.
So just to confirm, to do a secure wipe, I use odin and reflash the whole Rom?
I need to erase the internal sdcard too? (So basically lose everything on the phone? )
Sent from my SM-N9005 using Tapatalk

Do you have a bill or something like that? Did he tell you what he have done?
Tripping knox lowers the value of the device and some knox related features are now unusable.
Maybe the shop used Mobo to backup your data.. that means contacts, accounts and so on.. you can trust him or not.. i would tend to distrust him

He said he didn't run anything on the phone, just checked the ribbon for the speaker.
Swore he didn't do anything else.
Now maybe he didn't, but someone looked through ask my gallery, and installed this app.
It's a crappy situation.
So I guess the phone isn't safe.
Sent from my SM-N9005 using Tapatalk

Can someone confirm, if the phone is rooted, the system status will change to "custom"?
And if flashed back (So root removed) this would clear any malware?
Sent from my SM-N9005 using Tapatalk

I'm on 4.4.2 and rooted, but system status is official (my knox is 0x0). Used towelroot then (it's been a while since i rooted).
I'm not a wizz, but tripping knox usualy happens while rooting, when unrooted afterwards you cannot acces/see anything they might have installed/put in the root of your device.
I would do a full wipe including sd card, just back up the things you absolutely want to keep like pics etc, and follow advice in #6, just to be safe.

If the shop guy reflash official firmware after rooted the phone it will show official again.
You could flash twrp, wipe everything then reflash official firmware if that's going to make you feel more secure

Rosli59564 said:
If the shop guy reflash official firmware after rooted the phone it will show official again.
You could flash twrp, wipe everything then reflash official firmware if that's going to make you feel more secure
Click to expand...
Click to collapse
Went back there today to ask to see the security cameras. Shop has 5 - 3 point around the area, 2 focus directly on the desk (where the phone was supposedly the whole time).
Surprise surprise, all the cameras worked except those 2. Went to the stall (it's in a mall market) as they have one that points at the store. Again, camera not working.
I've got the phone back now (and rooted it) to have a look around on there, but honestly I'm not sure what I would be looking for.
Now though, my Download screen status says "Custom" (I assume because it's rooted)
Now am I missing the point here, but if it said "Official" before - this means it had to be a clean flash? (in which case it's impossible for any malware to be on it?) - or can it still be infected? And why would they flash it back anyway? Maybe get off all the password data then remove root to hide tracks?
Thing is, I am trying to download the official ROM to reflash, but I'm on a 128kbps connection and it's going to take days.....

Righty - been through everything and going by the "Unlock log" - here is what seems to have happened:
15:17 - Phone handed into store.
15:22 - They start playing around with the gallery
15:25 - Go into settings and enable USB debug mode
Phone now shows no use (so I guess this is when it is being rooted) until:
15:47 - When suddenly Mobodaemon is installed onto the device
And then no access until:
16:22 - Which I assume is the time it took Mobodeamon to copy across everything and perhaps flash back?
Then no access until I get back at 16:57
So from this, I'm guessing they did a complete backup of the phone using Mobodaemon - so have access to every saved password on the device. So now I'm going through my Google Chrome listing to see which are the most important ones I need changed.
Actually one thing that puzzles me, is they didn't have very long to download the official firmware to reflash it. Mine is the HK model which is 1.5GB, even the fastest Thai connection has issues with over 300K/s.... curious!

They probably already had the official firmware ready to flash, assuming they perform this kinda 'repairs' more often.

http://mobo-daemon1.android.informer.com
Doing a quick search on Google i could see that the app is used to wirelessy manage your contacts etc etc but for someone to use the app the phone and pc need to be connected to same WiFi network.
What did you have the phone in for repair?

Yeah, or just plug it in via USB.
My plan now is this.
Copy all of my photos and music and data from the phone to my PC.
Use Titanium Backup to backup just the settings of some apps which i dont wnna lose (not the apps themselves, as I assume they could be compromised)
Install the TWRP as suggested and choose "Wipe" - which means the whole phone will be cleared right? Including the internal SD.
Re-flash the official image - install the apps from the app store. Root the phone again, re-import the settings using Titanium backup.
Then turn on phone encryption (this can be done on a rooted phone?) and set a proper password.
And I should be all good right?

^ and dont forget to change passwords for email, bank infos and such.

cryostasis25 said:
^ and dont forget to change passwords for email, bank infos and such.
Click to expand...
Click to collapse
VERY good point!

Its theoretical possible to compromise the partitions of your note which won't be touched by wiping and/or flashing a new rom..
but honestly, it's enough

Related

[Guide] Easiest way from root to stock :)

I have read many posts, and did many tries.........we all know that Froyo ver that is out, is not a official one. In order to get Official OTA update, our phones must be in complete factory stage. Unlocked boot-loader is not an issue. Trust me, i tried many different ways to "unroot" my N1. Following many "how to's" uproot your N, in order to get OTA (Froyo), all tries have failed. I was flashing original roms (ERD79), replaced recovery image, and then i GOT an OTA with 2.1-update1, no sweat! Then, when it tried to install, there was an error every time. I was able to install that (ER27) update manually, but it was NOT the thing i wanted to accomplish. I knew that i will be able to receive next OTA with ver 2.2 (Froyo), but i also knew that this update will NOT install either. The problem is a recovery image! After been running many different custom roms, i have decide to try again to go back to the state from the beginning, so i can be sure i can be able to install official Froyo, when it is out. I was afraid to do this, but i did it anyway.............and it was successful. I restored my Nexus to the original state (except boot-loader of course), and after i got back to ERD79, momentarily i got OTA with ver 2.1-1. But this time, it has installed with no problem!!! I am running it right now, waiting for next (2.2) OTA update.
Ok, here we go:
Just go there and grab Google OEM file (PASSIMG.zip). Put it on your SD card (root dir).
Then restart your phone into boot-loader (trackball+power button).
Once there, top power button again. It will look for passimg file as always. It will load the passimg file. Note the blue status bar at right-upper corner of your screen.
Then, it will check that file, and finally you will see "do you want to start update?"
Press Volume UP, for YES............and wait.
After phone reboots - you are done! Completely back to stock!
Then you can go to "menu-settings-about-system updates" and you should see that your phone is already downloading update 2.1-1.
That is it.
If for some reason you end up with android screen with triangle and exclamation mark, just press VOL up and Power, at the same time, you will get into recovery screen, and reboot your phone from there.
One more thing...........i did that in my own risk
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
So, please do not blame me, if something would happen to you Nexus (phone just exploded, or something....
)
Wow..can't get any simpler than that..thx for this.
Thanks. Very simple.
this effectively make it so that if you root your phone and void the warranty you can unroot and regain your warranty?
This might be totally unrelated, but I finally just rooted my phone a few hours ago, so I'm a noob. I created a nand backup of my factory install. Then I installed cyanogen and some apps, then did another nand backup and think I wiped my factory nand backup. I wanted to keep that. Is there anyway I can get my factory image back for future use? How do you save a new nand backup as a different file name so this won't happen? I don't see how to do this...thanks.
-------------------------------------
Sent via the XDA Tapatalk App
Wow... Much appreciated!
laughter95 said:
this effectively make it so that if you root your phone and void the warranty you can unroot and regain your warranty?
Click to expand...
Click to collapse
Nope. Even if you unroot your phone, your bootloader cannot be locked back again (if you unlocked it). Rooted or not, if your bootloader was unlocked, you always get that unlocked padlock image on your first screen when you turn on your phone. However, I read somewhere that someone has sent his phone back for warranty exchange, after he revert everything to factory stage (except bootloader of course) and they (HTC) accepted. I don’t know how that happened...maybe they (HTC) overlooked that first screen??
As far as I know...this thread is total BS.
You CANT revert to a previous version of Android going through the bootloader's update.
You MUST pick up a stock (I did with a stock Froyo's) Nandroid backup and restore it from Amon's recovery. You'll lose root and your recovery will revert to stock anyway.
justclimb said:
As far as I know...this thread is total BS.
You CANT revert to a previous version of Android going through the bootloader's update.
You MUST pick up a stock (I did with a stock Froyo's) Nandroid backup and restore it from Amon's recovery. You'll lose root and your recovery will revert to stock anyway.
Click to expand...
Click to collapse
HA ha ha! You did NOT understand what i wrote! Read it again....and what if one does NOT have a Nan backup at all??
" You MUST pick up a stock (I did with a stock Froyo's) Nandroid backup and restore it from Amon's recovery. " <= that's total BS!!
Would this work on the AT&T N1?
RogerPodacter said:
This might be totally unrelated, but I finally just rooted my phone a few hours ago, so I'm a noob. I created a nand backup of my factory install. Then I installed cyanogen and some apps, then did another nand backup and think I wiped my factory nand backup. I wanted to keep that. Is there anyway I can get my factory image back for future use? How do you save a new nand backup as a different file name so this won't happen? I don't see how to do this...thanks.
Click to expand...
Click to collapse
Creating multiple nand backups doesn't overwrite the previous one. It creates a new folder each time, with the timestamp as the folder name. Unless you specifically went into your sd card and deleted the folder containing the first nand backup, it's still there If you click Restore in Recovery, you'll be given a list of all the backups you created.
And you can always go back to the factory image using the ROM here: http://forum.xda-developers.com/showthread.php?t=614850
This might be totally unrelated, but I finally just rooted my phone a few hours ago, so I'm a noob. I created a nand backup of my factory install. Th
Click to expand...
Click to collapse
Creating multiple nand backups doesn't overwrite the previous one. It creates a new folder each time, with the timestamp as the folder name. Unless you specifically went into your sd card and deleted the folder containing the first nand backup, it's still there If you click Restore in Recovery, you'll be given a list of all the backups you created.
And you can always go back to the factory image using the ROM here: http://forum.xda-developers.com/showthread.php?t=614850
Click to expand...
Click to collapse
Awesome good to know. But when I went into restore I only saw one file. But maybe I just needed to click into that and would have seen 2 restore files.
RogerPodacter said:
Awesome good to know. But when I went into restore I only saw one file. But maybe I just needed to click into that and would have seen 2 restore files.
Click to expand...
Click to collapse
Yeah, it should be something like "HTP123990" which is your device number. Click once more and it'll show all the backups for that device.
Or just browse your SD card to the nandroid folder with a file manager like Linda:
wow thanks! it's so easy to use..and works!
i had so many problems with the froyo 2.2..though i really LOVE the speed and the new interface...but afterwards decided to switch back to 2.1 wait for official OTA...
thanks op!
shouldnt the name of this thread be "from FROYO to stock" not "from ROOT to stock"? because this has nothing to do with root, its just going from froyo back to shipping rom.
http://forum.xda-developers.com/showthread.php?t=686593
Well coming from a rooted MoDaCo rom, I performed the steps and am now running the stock ROM and just been informed that there is an update available. Update is installing now and it works great.
Now I have my stock OS back while still rooted, and getting updates.
I just recently got my Nexus one a few days before Froyo hit. I've been sporting Froyo while traveling and getting barely any coverage. So this is a good test.
I'm on Fringe coverage now. With Froyo and its radio, I kept getting network disconnects. Flashing back to stock+update = 2/3 bars of EDGE.
Finally!
RogerPodacter said:
shouldnt the name of this thread be "from FROYO to stock" not "from ROOT to stock"? because this has nothing to do with root, its just going from froyo back to shipping rom.
Click to expand...
Click to collapse
It's the fastest way to reload stock recovery/image/radio altogether.
Not true. I can confirm the method in this thread.
justclimb said:
As far as I know...this thread is total BS.
You CANT revert to a previous version of Android going through the bootloader's update.
You MUST pick up a stock (I did with a stock Froyo's) Nandroid backup and restore it from Amon's recovery. You'll lose root and your recovery will revert to stock anyway.
Click to expand...
Click to collapse
If i use mybackup pro to backup apps and data, how do I restore that stuff once I'm unrooted? Do you have to redownload mybackup pro? Sorry if this is obvious to some, I'm new to android and really want to be able to get the OTA update. Basically I'm wondering how the people that have used this method got all their info and apps back, Thanks.

[Discontinued]

Download and Install LG United Mobile Driver
Download and Install LG Mobile Support Tool​
Boot your phone into download mode:
Put your G2 into download mode by switching it off, hold the Volume up button and insert the usb cable into the phone; wait for the drivers to finish loading if doing it for the first time.​
Start the LG Mobile Support Tool and click on Options -> Upgrade Recovery
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
It should now download the firmware (about 2gb) and flash it - this may take some time.
This is needed if you stuck in a bootloop after the flash is done:
Factory reset (this wipe your data and sdcard):
1. Turn the phone off.
2. Press and hold the Power and Volume down button.
3. When the LG logo pops up let go for a second and press the combo again.
4. You'll be prompted to press the Power button 3 times to wipe the device.​
I would hate to have to use this, but wow what a good find. Thanks for contributing.
Sent from my LG-D800 using Tapatalk 4
Just got my g2. About to root install twrp etc. This is exactly what I was looking for. Thanks for posting.
Sent from my LG-D801 using XDA Premium 4 mobile app
For anyone putting in dashes with the imei number, dont it wont work with em.
Just wanted to notify that this method made my 32gb D802 a 16 gb one!
karstensson said:
Just wanted to notify that this method made my 32gb D802 a 16 gb one!
Click to expand...
Click to collapse
I used this method last night and it didnt mess with the storage at all. They don't even have a 16gb G2 so who knows. Also are you sure you are not mistaken cause this method doesnt wipe data.
x714x said:
I used this method last night and it didnt mess with the storage at all. They don't even have a 16gb G2 so who knows. Also are you sure you are not mistaken cause this method doesnt wipe data.
Click to expand...
Click to collapse
I know it does'nt wipe data, but it reflashes recovery, and in my case something went wrong. But Lg DO sell D802 as a 16 gb model!
Can anyone using this method please post results. Just wondering if there is more success with this method as opposed to the other method. Thanks.
Saved my bacon today!
karstensson said:
Just wanted to notify that this method made my 32gb D802 a 16 gb one!
Click to expand...
Click to collapse
I don't understand how could this be, you downloaded the specific firmware for your device (using your serial number)...
Can't you just try to flash it again ?
Noam23 said:
I don't understand how could this be, you downloaded the specific firmware for your device (using your serial number)...
Can't you just try to flash it again ?
Click to expand...
Click to collapse
I have reflashed it 5 times The problem was that it asked for some kind of password the first time (not the pin). So I did a factory reset. Now even TWRP says that my storage is 10.66 gb :/
karstensson said:
I have reflashed it 5 times The problem was that it asked for some kind of password the first time (not the pin). So I did a factory reset. Now even TWRP says that my storage is 10.66 gb :/
Click to expand...
Click to collapse
Which password exactly ? when ? in the process of flashing ? the OP mentions no stage in which you need to give password...
What are you going to do now ? your device is not rooted, so you can replace it under warranty, no ?
Noam23 said:
Which password exactly ? when ? in the process of flashing ? the OP mentions no stage in which you need to give password...
What are you going to do now ? your device is not rooted, so you can replace it under warranty, no ?
Click to expand...
Click to collapse
It did not say what the password was for, just asked for it. It came up after the phone had booted, but before i could see the lockscreen. I will wait a couple of weeks, to check if someone else gets the same problem, or if it is fixable. Otherwise i will hand it in on the warranty since there are not traces of root.
karstensson said:
It did not say what the password was for, just asked for it. It came up after the phone had booted, but before i could see the lockscreen. I will wait a couple of weeks, to check if someone else gets the same problem, or if it is fixable. Otherwise i will hand it in on the warranty since there are not traces of root.
Click to expand...
Click to collapse
Why should a password appear at that stage ???
If you went through all of the flash process successfully, booted successfully and only then did a factory reset (when you saw that password), I see no reason to blame the factory reset that you did. This is something to do with the flash process. Maybe this is kind of a punishment that LG unleash on those who use this process ? seriously, why on earth would anyone try to flash his LG2, if it wasn't to get rid of root ? I also don't understand how the password went away after you did hard-reset, since the device was "hard-reset" when you did that flash. You said that you re-flashed about 5 times, did that password appear after each of those 5 times ?
karstensson said:
Just wanted to notify that this method made my 32gb D802 a 16 gb one!
Click to expand...
Click to collapse
Same issue here.
I also got the question after I used the software to enter my encryptionkey. Wich I didnt have.
So I had to hardreset from the recoverymenu (volume down + pwr), then I suddenly had 10.77GB left instead of 26.77GB or something similar.
Annoys me pretty darn much at the time beeing!
I did use my IMEI, not my serialnumber and model. I'll try to use the serial and model this time around, and see if there are any differences at all in doing so.
And yes, it does say 32GB on the back. So we're not mistaken it for a 16GB-model
And it does say that the model is the 32GB when I check the hardware-info on the android itself.
Maybe this has something to do with me using the adbcommand for mounting storage incorrectly?
I thought however it would be reset when I used the LG Mobile Support Tool to hardreset everything though.
Will this work with the AT&T model D800?
Also does this remove all traces of root to the point where you get your warranty back?
what was the solution to this...
Does this work with the TMO versions?
The windows application keeps getting a Windows error and closing shortly after the process begins. Any tips?
I would prob stay away from this if i was anyone else....Because it must be messing people phones up and changing the storage capacity

[Guide][P600 Only] - Guide to return to stock with links to files!

I created a spot on my website for the stock Odin Tar's that I use for the P600.
I posted the US / XAR Region Stock Odin. I also posted the ML1 Asian base I used as well.
As I gather newer ones I will put them up and updated this thread.
Although this guide is written for the p600 it would, in theory work on any P60x device so long as you have the proper Odin files!
Note: This will not "untrip knox"!!!!!!!!
Here is the download page on my site:
MOD EDIT: Link removed as domain has expired. Thread closed until new links can be installed
Enjoy!​
Currently Hosted:
P600UEUBMK1_P600XARBMK1_XAR (Shipped US ROM / XAR Region)
P600ZTUBML1_P600ZZTBML1_BRI (Asian Based ROM / BRI Region)
Other Odin Tar resources: Sammobile. Must be a member but they have tons of them.
How to Return to stock
This mini guide assumes the following...
You were able to root and or install a custom recovery or ROM therefore the drivers are installed on your PC for the tablet. So here we go...
Download Odin from the links in the OP
Extract the the .md5 file from the zip file you downloaded above.
Boot tablet into "Download" mode. You can do this by holding Power and Volume - (down) when the device is shut off. I note on this device it can be a little trickier so you may have to try a couple times. You should now see this on your tablet
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Connect Tablet to PC using known good USB Cable
Start Odin and Press the "AP" button to load the tar.md5 file. This may take a minute as it is also calculating the MD5 to ensure you have a good file. A bad file means bad issues and it wont let you flash it (good fail safe).
Once Odin sees the Tar and loads it completely AND Odin sees the tablet press the Start button to begin. Can takes about 5 to 10 minutes so be patient. Do NOT check or uncheck mark ANY other Options in Odin unless you know what you are doing!
Once it complete you will have a factory image on your tablet. Yay!
But we are not done. You may also want to, at this point, reboot to recovery and do a full data wipe. This method of Odin leaves the SD card and user data intact. To get into recovery hold Power and Volume + until you see the stock Android recovery. Select format Data, reboot. Boom, your tablet is like brand new!
Guided added!
I am not the best technical writer so if you need help understanding what I am saying dont hesitate to ask!
Bumped so people can find this...
Mods moved it so no one looking will actually see it...
scrosler said:
Bumped so people can find this...
Mods moved it so no one looking will actually see it...
Click to expand...
Click to collapse
I'm glad you bumped it. I still haven't tried to install any custom ROM in this tablet, but this post will sure come in handy soon!
Vexelius said:
I'm glad you bumped it. I still haven't tried to install any custom ROM in this tablet, but this post will sure come in handy soon!
Click to expand...
Click to collapse
Indeed!
What happens if I failed to root (according to TWRP) and am stuck in the Samsung splash screen? I was obviously able to install TWRP so hopefully that is enough for Odin to get me back to stock
Will this work?
kaneelias said:
What happens if I failed to root (according to TWRP) and am stuck in the Samsung splash screen? I was obviously able to install TWRP so hopefully that is enough for Odin to get me back to stock
Will this work?
Click to expand...
Click to collapse
If you can see samsung screen you can odin back to stock.
The directions I posted should hold true about getting to Odin / Download Mode
Thanks for this guide, I agree, it should definitely be in the development section.
Hello
So will I get the OTA updates after this? How do I untrip knox?
thanks
Thanks for this Scott and a great ROM!!!!
Sent from my SAMSUNG-SGH-I317 using Tapatalk
tahrang said:
Hello
So will I get the OTA updates after this? How do I untrip knox?
thanks
Click to expand...
Click to collapse
Yes, this is returning you to stock like when you turned it on for the very first time.
No one knows how to untrip knox.
Is it Knox that blocks the ota updates, or is it the rooting itself?
starfall42 said:
Is it Knox that blocks the ota updates, or is it the rooting itself?
Click to expand...
Click to collapse
Not sure. Never tried to Ota with KNOX.
Maybe ask in the Q/A forums.
Just to be safe, and If I do this the tablet will be as if it was completely new, right? I'm going to exchange it for another one and I want to be sure it's as new. Are there any flash counters or stuff like that I should be worried about?
Sent from my Nexus 5
So when a system update comes out we could use these directions to flash the stock rom with out loosing data, apps, settings, etc? Then be able to get the stock OTA?
Coming from the Nexus world, This is a bit different. Google seems to have no interest in the 10 inch sector though, so here we are.
Never have we had a tablet so heavily defended with so many issues. 6 tablets and this one stands out.
Via my Note 3
Tripping out?
scrosler said:
Note: This will not "untrip knox"!!!!!!!!
Click to expand...
Click to collapse
I think I understand what you are saying, but I'm new to Android, and would appreciate a sanity check::cyclops:
1. Knox "trips" (i.e. opens a fusible link in the hardware) if you root the tab and (or?) boot with a non-factory ROM. Once it trips, it cannot ever be "untripped", even if you return to a factory ROM image. (Hence the emphatic statement in the quote.)
2. Question: If a tablet is currently, and has always been, unrooted and stock, will using Odin and these instructions with a factory ROM trip knox? For example, to upgrade to the factory KitKat image
3. Follow-up question: If I flash KitKat as above, can I return to the original release by following your guide, again without tripping knox?
Thanks for the guide and software, and for your help.
iTelegraph said:
I think I understand what you are saying, but I'm new to Android, and would appreciate a sanity check::cyclops:
1. Knox "trips" (i.e. opens a fusible link in the hardware) if you root the tab and (or?) boot with a non-factory ROM. Once it trips, it cannot ever be "untripped", even if you return to a factory ROM image. (Hence the emphatic statement in the quote.)
2. Question: If a tablet is currently, and has always been, unrooted and stock, will using Odin and these instructions with a factory ROM trip knox? For example, to upgrade to the factory KitKat image
3. Follow-up question: If I flash KitKat as above, can I return to the original release by following your guide, again without tripping knox?
Thanks for the guide and software, and for your help.
Click to expand...
Click to collapse
1. As far as anyone knows, Knox cannot be untripped.
2. If you Odin a FACTORY IMAGE it WILL NOT trip Knox. Only custom roms/rooting trips AFAIK.
3. I'm not 100% sure as I haven't tried, but I think I've seen discussions where the bootloader wasn't changed so you could go back. Again, I'm not 100% sure. Maybe we could get clarification from someone who tried.
Sent from my SM-P600 using Tapatalk

Attempting to install superuser may void warranty

I do NOT have an unlocked bootloader, however when I set up my phone (H815 USA) google auto installed my apps from my Note 4.
It was rooted and google auto installed my root related apps.
One of which was superuser.
I was messing around in the hidden menu (277634#*#) and found some interesting things.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
If we click on "Display Result" I get this....
Looks like it will log any installation of superuser or superSU.
Because it now says "Modified" in the results, my thoughts are that LG could if they were total dicks, void your warranty.
Again, I do not have an unlocked bootloader and do not have root.
This is a false recording of a modified status by LG's service menu checks.
Nice find. Its interesting to see LG do that because to my knowledge HTC doesn't do anything like that. Having said that it is known that if we root our phones we are using some exploit and thereby voiding the warranty ourselves, it is just LG trying to keep dishonest people honest in my opinion.
branj said:
Nice find. Its interesting to see LG do that because to my knowledge HTC doesn't do anything like that. Having said that it is known that if we root our phones we are using some exploit and thereby voiding the warranty ourselves, it is just LG trying to keep dishonest people honest in my opinion.
Click to expand...
Click to collapse
I do not mind them recording if my phone is actually modified.
As in, I actually unlocked the bootloader and installed a root app and or custom ROM / recovery.
However in this case it is calling an unsuccessful installation of just a root app a modified state.
This could be bad for many many people who have already bought this phone and never intended to even attempt to root or unlock it.
If they have google restore apps from an older phone when they upgrade, and the old phone was rooted, now the G4 is considered "Modified" and out of warranty.
^I agree with what you are saying.
I couldn't find that menu
Sent from my LG-H811 using Tapatalk
LancerV said:
I couldn't find that menu
Click to expand...
Click to collapse
It is there, on the carrier models it may be blocked from access by you, however LG can access it if you send it in for warranty replacement or repair.
Milimbar said:
I do NOT have an unlocked bootloader, however when I set up my phone (H815 USA) google auto installed my apps from my Note 4.
It was rooted and google auto installed my root related apps.
One of which was superuser.
I was messing around in the hidden menu (277634#*#) and found some interesting things.
If we click on "Display Result" I get this....
Looks like it will log any installation of superuser or superSU.
Because it now says "Modified" in the results, my thoughts are that LG could if they were total dicks, void your warranty.
Again, I do not have an unlocked bootloader and do not have root.
This is a false recording of a modified status by LG's service menu checks.
Click to expand...
Click to collapse
When first installing APPs from Google, there are option for you to choose which apps to install from your previous device. You should have un checked those Apps which required Root including SuperSU.
Mine just shown Official from that menu. I do not have SuperSU installed.
Milimbar said:
It is there, on the carrier models it may be blocked from access by you, however LG can access it if you send it in for warranty replacement or repair.
Click to expand...
Click to collapse
Factory reset and solution solved. Plus I dont factory reset before sending a phone in
LancerV said:
I couldn't find that menu
Sent from my LG-H811 using Tapatalk
Click to expand...
Click to collapse
It's under SVC MENU>>LG RCT
What if u uninstall the Superuser?
Sent from my LG-H815 using XDA Free mobile app
liamR said:
It's under SVC MENU>>LG RCT
Click to expand...
Click to collapse
Mines not there
This is what you see on a unlocked EU version.
rogconnect said:
When first installing APPs from Google, there are option for you to choose which apps to install from your previous device. You should have un checked those Apps which required Root including SuperSU.
Mine just shown Official from that menu. I do not have SuperSU installed.
Click to expand...
Click to collapse
I have never been asked or given a choice which apps I would like to install on the new device from old devices. Google just starts installing them upon logging in. I usually have to stop the auto install and go through the list and pick.
CAG-man said:
I have never been asked or given a choice which apps I would like to install on the new device from old devices. Google just starts installing them upon logging in. I usually have to stop the auto install and go through the list and pick.
Click to expand...
Click to collapse
You have to select where it says all apps
CAG-man said:
I have never been asked or given a choice which apps I would like to install on the new device from old devices. Google just starts installing them upon logging in. I usually have to stop the auto install and go through the list and pick.
Click to expand...
Click to collapse
There is a drop box on the installed Apps ...you choose which Apps to install check or uncheck the box ..attached pic is an example:
Sent from my LG G4 H815 US 4G LTE
Not only LG RCT check, but LG has also added "bootloader unlocked" check test in the hidden menu.
My Verizon LG G4 came out of the box with the "Modified" tag in settings. Lots of people are reporting it.
Not sure if Verizon had to root each one to install their system level apps, then had a failure at cleaning it up... or what?
I wanted to see if mine did the same thing but when I do the 277634#*# nothing happens on the device....weird.
Sent from my LGUS991

Phone Bricked or Infected - weird artifacts and bootloop (S4 i9505)

MY PROBLEM IS INSANELY RARE AND (propably) HARD TO FIX
Hello!
I've had i9505 for over 4 years now, I had many problems with root, custom rom etc but I always find ways to fix them - not this time!
Since yesterday, I can't boot to the system. It started when I was just in my ES file explorer and suddenly some weird artifacts popped up and I couldn't see anything (its not a physical screen problem!) then my phone turned off itself so now, I'm trying this:
Hikd power button --> *short vibration* --> Samsung S4 logo pops up --> black screen --> again vibration --> ... and again and again. It just loops here.
So I left it for a night hoping that when I wake up it will be finally working again but no, NOW it was stuck on 'SAMSUNG' logo (the one with a blue background). So I pulled out the battery and the phone started restarting again (boot loop).
But there is something new about this situation. Every 2 or 3 restarts there are ARTIFACTS on the screen. For now, I've experienced 3 different ones and I managed to catch one of them with camera (see image below)
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
There is another one with a blue code in really small size, couldn't catch it fast enough tho.
This is what I have been doing with my phone before all this crap happened:
1. I installed 'Udemy' app from Google Play
2. I installed Modded Google Play via Lucky Patcher
3. I updated Lucky patcher
4. I edited build.prop to make my phone visible as s7, but then i changed it back
I think these artifacts may be caused a virus or just broken system files - I don't know :/
And pretty much that's it. I really want to know what possibly could cause this issue.
Please, everyone, I've always found ways to fix problems without flashing phone, so I believe I can now.
I have access to download mode and TWRP recovery.
But one more thing about TWRP - when I try to copy a file or wipe cache, error message pops up "E: Unable to mount storage". Is it possible, that for the first time ever my phone actually got infected?
If I catch any new artifacts, I will show them here.
I would be grateful for any help at this point, thanks
LOGCAT FILE:
https://pastebin.com/sPDJ0QQP
TWRP RECOVERY FILE:
https://pastebin.com/2Y0Fmew5
//Edit I'm not sure if the images are visible although the links are okay
I tried to enter safe boot by editing persist.sys.safemode file but it didn't work :/
@S4von
I can't see your screenshots in ur post.
You have high chance got infected, why you install Lucky Patcher and Modded Google play? These have high chance to contain malicious stuff. NEVER-EVER use Lucky Patcher again and apps like this.
Try these steps:
Reboot to TWRP Recovery (power button+vol.up+home button) go to Advanced-File Manager-external_sd and delete all folders on ur ext sd card (For example you should delete: Android, .android_secure, LOST.DIR, DCIM, etc) except your personal files/folders.
Now still on TWRP select Wipe-Format Data and type yes-then go back and press-Advanced Wipe-Select Dalvik / ART Cache, System, Data, Internal Storage, Cache and then Swipe to Wipe.
If you have mount errors, go back to TWRP home screen go to Mount-and select the partitions you can't mount. Then try again.
If you still have problems try to flash stock Rom via Odin, if flashed normally but got bootloop - flash TWRP via Odin and wipe everything - then reflash stock Rom via Odin.
Retrial said:
@S4von
I can't see your screenshots in ur post.
Click to expand...
Click to collapse
I don't know why these are not working, but I can't post direct links because of junior account :/
https://imgur.com/a/VhSBMvr
https://imgur.com/a/gEyLjgk
I have been using Lucky patcher for 7 years, it's not a virus itself, it helped me a lot - turning off ads, patching or cloning apps etc - its amazing and maaany people use it.
And still, I want to get the best results as possible without deleting data. For example, I had several important notes in my S Note app and I can't lose them, they are too important.
S4von said:
I don't know why these are not working, but I can't post direct links because of junior account :/
https://imgur.com/a/VhSBMvr
https://imgur.com/a/gEyLjgk
I have been using Lucky patcher for 7 years, it's not a virus itself, it helped me a lot - turning off ads, patching or cloning apps etc - its amazing and maaany people use it.
And still, I want to get the best results as possible without deleting data. For example, I had several important notes in my S Note app and I can't lose them, they are too important.
Click to expand...
Click to collapse
You can use Adaway to turn off ads. Patching clone apps are not legit and you should avoid it. I will say it once again, never-ever use lucky patcher and apps like this again. You should know that apps like this may contain various of malicious stuff.
At this point you are now, you need to wipe your phone and lose your data.
Btw your TWRP is so old....Download and flash 3.2.3-0 HERE. Then try the steps I told you above.
Retrial said:
You can use Adaway to turn off ads. Patching clone apps are not legit and you should avoid it. I will say it once again, never-ever use lucky patcher and apps like this again. You should know that apps like this may contain various of malicious stuff..
Click to expand...
Click to collapse
Well, if you don't mind, please provide evidence that lucky patcher contains malicious stuff because you can save thousands of people actually.
//edit
you dont need to quote last post.
S4von said:
Well, if you don't mind, please provide evidence that lucky patcher contains malicious stuff because you can save thousands of people actually.
Click to expand...
Click to collapse
Dude I was trying to help you. You are the one who can't boot your phone not me. Goole Play and Antivirus marked it as Malware. Stay with ur Lucky Patcher :fingers-crossed:
Also let me remid you some of the rules of XDA:
6. Do not post or request warez.
If a piece of software requires you to pay to use it, then pay for it. We do not accept warez nor do we permit members to request, post, promote or describe ways in which warez, cracks, serial codes or other means of avoiding payment, can be obtained or used. This is a site of developers, i.e. the sort of people who create such software. When you cheat a software developer, you cheat us as a community
I'm sorry but may I ask you where did I request warez?
S4von said:
I'm sorry but may I ask you where did I request warez?
Click to expand...
Click to collapse
"I have been using Lucky patcher for 7 years, it's not a virus itself, it helped me a lot - turning off ads, patching or cloning apps etc - its amazing and maaany people use it." This is your words.
Rule 6. Do not post or request warez.
If a piece of software requires you to pay to use it, then pay for it. We do not accept warez nor do we permit members to request, post, promote or describe ways in which warez, cracks, serial codes or other means of avoiding payment, can be obtained or used. This is a site of developers, i.e. the sort of people who create such software. When you cheat a software developer, you cheat us as a community.
Read the rule again.
I was triying to help you but you are rude. Sorry
Copy your personal data to your PC, and flash stock ROM.
If it solves the issue, then it's very likely that installing Lucky Patcher caused it.
To try and prove that, follow the exact steps that you performed that lead to the issue and see if it happens again.
But I don't post aka share this program. I don't encourage people to use it either.
All right, thanks for your help, maybe it will help someone else.
MeltdownSpectre said:
Copy your personal data to your PC, and flash stock ROM.
If it solves the issue, then it's very likely that installing Lucky Patcher caused it.
To try and prove that, follow the exact steps that you performed that lead to the issue and see if it happens again.
Click to expand...
Click to collapse
But I've had it installed for over 7 years - You may be right, of course, but it just seems impossible to be causing this issue.
Except of that, I've updated messenger and youtube app. Maybe several factors made the system crash and prevent me from booting.
You know, I'm kinda unlucky. 2 weeks ago I installed Peters Jackons King Kong (PC) on Windows 10 and you know what happened? It broke the system, seriously. This game just crashes new windows 10. First PC, now phone.
And just a question, can I install this ROM without any problems here?
https://forum.xda-developers.com/ga...m-stockwiz-stable-mods-stock-09-2019-t3929193
Or should I wipe whole phone first?
S4von said:
But I've had it installed for over 7 years - You may be right, of course, but it just seems impossible to be causing this issue.
Except of that, I've updated messenger and youtube app. Maybe several factors made the system crash and prevent me from booting.
You know, I'm kinda unlucky. 2 weeks ago I installed Peters Jackons King Kong (PC) on Windows 10 and you know what happened? It broke the system, seriously. This game just crashes new windows 10. First PC, now phone.
And just a question, can I install this ROM without any problems here?
https://forum.xda-developers.com/ga...m-stockwiz-stable-mods-stock-09-2019-t3929193
Or should I wipe whole phone first?
Click to expand...
Click to collapse
Wipe the whole phone first. Flash stock ROM, then update your TWRP and flash a custom ROM of your choice.
MeltdownSpectre said:
Wipe the whole phone first. Flash stock ROM, then update your TWRP and flash a custom ROM of your choice.
Click to expand...
Click to collapse
I flashed ROM I9505XXUHOJ2 and i can't even get into recovery now :/ Only download mode, I tried installing twrp again via odin but still, cant get into recovery.
Any ideas now? I can boot into download mode, but I can SOMETIMES boot into recovery (which isn't twrp).
I wouldn't answer you after your irony attitude but you seem desperate. Take a look on my guides, you need the "clean install from the scratch guide. Read whole the guide and follow the steps there and I guess you will be able to boot your device.
Retrial said:
I wouldn't answer you after your irony attitude but you seem desperate. Take a look on my guides, you need the "clean install from the scratch guide. Read whole the guide and follow the steps there and I guess you will be able to boot your device.
Click to expand...
Click to collapse
Nope, its not possible to fix it because its not a software issue.
S4von said:
Nope, its not possible to fix it because its not a software issue.
Click to expand...
Click to collapse
You can boot to download mode and to recovery. What else it could be? Hardly believe it is a hardware issue with the description of the problem you gave.
Retrial said:
You can boot to download mode and to recovery. What else it could be? Hardly believe it is a hardware issue with the description of the problem you gave.
Click to expand...
Click to collapse
But it is, factory defect and and a few hits on the ground. I don't remember exactly what is causing it, but it has something to do with motherboard.
I can buy another cheap I9505 and just replace its motherboard with mine, but its too much work. Gonna say good bye to my good old friend
//can be locked
S4von said:
But it is, factory defect and and a few hits on the ground. I don't remember exactly what is causing it, but it has something to do with motherboard
Click to expand...
Click to collapse
Your whole OP is wrong then.
//can be locked
Click to expand...
Click to collapse
I agree.

Categories

Resources