Hello, I am currently rooted on OK3 using the new method.
My question is can I completely wipe out all internal data via SafeStrap? Or would I have to flash via Odin?
The issue is Factory Reset does not remove a specific Malware component. So it is likely installed in system partition. Is there a way to erase all content internally via SafeStrap and then flash new ROM (so I do not have to go through root process again)?
Thanks!
smokerbond said:
Hello, I am currently rooted on OK3 using the new method.
My question is can I completely wipe out all internal data via SafeStrap? Or would I have to flash via Odin?
The issue is Factory Reset does not remove a specific Malware component. So it is likely installed in system partition. Is there a way to erase all content internally via SafeStrap and then flash new ROM (so I do not have to go through root process again)?
Thanks!
Click to expand...
Click to collapse
have you tried going into titanium backup and freezing and deleting the malware? and what is it and howd u get it? also try a full wipe even ur sd card if you think it might be on there if not then dont worry about it also try root uninstaller from the app store and try uninstalling it that way or going into a file explorer app and deleting it in there (file explorer, root explorer, etc etc)
Veid71 said:
have you tried going into titanium backup and freezing and deleting the malware? and what is it and howd u get it? also try a full wipe even ur sd card if you think it might be on there if not then dont worry about it also try root uninstaller from the app store and try uninstalling it that way or going into a file explorer app and deleting it in there (file explorer, root explorer, etc etc)
Click to expand...
Click to collapse
Thank you for the information, but given the nature of the code, it is not possible for me to determine what it has and has not infected. Obviously I would format the SD card, but that is not my primary concern. My question is will I be able to clear everything via Safestrap or will I have to use Odin to do a true 100% reset.
This is a controlled test (intentionally infected device) to test how effective the malware is at evading removal.
I guess the real question I am asking is "does flashing a new rom delete all previous data"
smokerbond said:
Thank you for the information, but given the nature of the code, it is not possible for me to determine what it has and has not infected. Obviously I would format the SD card, but that is not my primary concern. My question is will I be able to clear everything via Safestrap or will I have to use Odin to do a true 100% reset.
This is a controlled test (intentionally infected device) to test how effective the malware is at evading removal.
I guess the real question I am asking is "does flashing a new rom delete all previous data"
Click to expand...
Click to collapse
SafeStrap can selectively wipe any or all of the system partitions.
Flashing a ROM in SafeStrap overwrites the system partition, but does not by default wipe the cache and dalvik cache automatically (so if those remain, provided the ROM even boots with the wrong data in the caches, the malware may remain there depending on what files are infected).
Now...dare I ask why you are developing malware?
painiac said:
SafeStrap can selectively wipe any or all of the system partitions.
Flashing a ROM in SafeStrap overwrites the system partition, but does not by default wipe the cache and dalvik cache automatically (so if those remain, provided the ROM even boots with the wrong data in the caches, the malware may remain there depending on what files are infected).
Now...dare I ask why you are developing malware?
Click to expand...
Click to collapse
I don't think he's developing male are I think he's been infected by some but I didn't even realize they had malware out there for our phones
Veid71 said:
I don't think he's developing male are I think he's been infected by some but I didn't even realize they had malware out there for our phones
Click to expand...
Click to collapse
He said he intentionally infected his device in order to test how difficult the malware is to remove.
Android phones now make up the bulk of all computing devices, so they're a huge target for malware developers. Malware is mostly spread through intentionally-infected pirated apps, but occasionally some slips through into the Play Store for short periods.
painiac said:
SafeStrap can selectively wipe any or all of the system partitions.
Flashing a ROM in SafeStrap overwrites the system partition, but does not by default wipe the cache and dalvik cache automatically (so if those remain, provided the ROM even boots with the wrong data in the caches, the malware may remain there depending on what files are infected).
Now...dare I ask why you are developing malware?
Click to expand...
Click to collapse
painiac said:
He said he intentionally infected his device in order to test how difficult the malware is to remove.
Android phones now make up the bulk of all computing devices, so they're a huge target for malware developers. Malware is mostly spread through intentionally-infected pirated apps, but occasionally some slips through into the Play Store for short periods.[/Qrjght
0.o I didn't even realize malware for phones was real I thought people were just being dramatic about their phones breaking or downloading porn xD
Click to expand...
Click to collapse
painiac said:
SafeStrap can selectively wipe any or all of the system partitions.
Flashing a ROM in SafeStrap overwrites the system partition, but does not by default wipe the cache and dalvik cache automatically (so if those remain, provided the ROM even boots with the wrong data in the caches, the malware may remain there depending on what files are infected).
Now...dare I ask why you are developing malware?
Click to expand...
Click to collapse
So if I wipe the cache and dalvik cache (including the other partitions) with Safestrap the phone will be completely "fresh" after flashing a new ROM ?
painiac said:
He said he intentionally infected his device in order to test how difficult the malware is to remove.
Android phones now make up the bulk of all computing devices, so they're a huge target for malware developers. Malware is mostly spread through intentionally-infected pirated apps, but occasionally some slips through into the Play Store for short periods.
Click to expand...
Click to collapse
Exactly. There are many malicious insertions into the pirate scene. I am researching old malware to get a better understanding of android security.
smokerbond said:
So if I wipe the cache and dalvik cache (including the other partitions) with Safestrap the phone will be completely "fresh" after flashing a new ROM ?
Click to expand...
Click to collapse
In SafeStrap, choose "Advanced Wipe" and select everything except the "external SDcard". It should wipe out everything.
Related
Hey, just had a quick question. I am a crack flasher, I flash many ROMs..and I saw someone recommend a complete flash, not use titanium, and let google backup/restore their apps/data. How do I get thsi to work properly? I have done multiple full wipes, and it has only done it for me ONCE, where I logged into GMAIL and it downladed all my apps back automatically...I tried the "market doctor" feature in Titanium, that didn't help. Anyone?
It has to be a fresh install, and as far as I know, AOSP-based, such as CM. The first time you run the Market, it will download and install anything on your userid's list of installed (or, depending on your sync config, downloaded and later deleted). In the case of CM7 with gapps, which is where I've used it, the Market runs during first boot sequence, but you can cancel it to set up WiFi and/or restore apps from TB and run it later.
jggimi said:
It has to be a fresh install, and as far as I know, AOSP-based, such as CM. The first time you run the Market, it will download and install anything on your userid's list of installed (or, depending on your sync config, downloaded and later deleted). In the case of CM7 with gapps, which is where I've used it, the Market runs during first boot sequence, but you can cancel it to set up WiFi and/or restore apps from TB and run it later.
Click to expand...
Click to collapse
Run what later? Market, or a some setup app? If its like a run on first boot, setup app, how do I run it later? And also, when you say clean you just mean, factory/data reset, wipe cache, wipe davlik, flash new rom? I saw something about reformatting in clockwork or something...?
Market. If you install CM7 and gapps, you will be prompted at the startup of Market to Cancel or run. If you cancel, just start Market later...
And by clean, I mean a "factory wipe/reset" -- and in some cases, reformatting /system. Yes.
jggimi said:
Market. If you install CM7 and gapps, you will be prompted at the startup of Market to Cancel or run. If you cancel, just start Market later...
And by clean, I mean a "factory wipe/reset" -- and in some cases, reformatting /system. Yes.
Click to expand...
Click to collapse
Thanks... So I went into mounts and storage, should I also format cache and other things in there, or just format system?.. And should I do the format before or after I do a factory wipe?
Also... There isn't a way to turn this back up off so that it won't restore my apps?
You can damage your phone with indiscriminate formatting. It's best if you do some reading and research on your own so that you gain a basic understanding of how your device operates under the hood.
A factory reset formats /data and /cache, it does not do anything else.
YOU should take the time to find out for yourself what information is stored in each partition. Knowledge is safer than blindly following some instructions you find online somewhere, eh?
HTC Glacier running CM7 #31
Yea... I don't get it. I just fully wiped, reformatted system, and reflashed cm7 and gapps, and market doesn't restore nearly all my applications that I had previously installed...? Is there an option somewhere that isn't allowing some apps to be backed up, or restored or what?
This has worked for me with certain phones, but only that the apps were restored. The data for the apps were never restored for me, and I don't think it ever intended to.
To be clear, Google keeps a list of the Market apps you acquire. They don't actually back up any application data. That's yours, and is private. They may know you've aquired a Pr0n video player, but not your particular category favorites. Well, they will know from your Google search terms. But not from your application list, unless there are specific apps dedicated to your peccadilloes.
The FIRST time Market is run with an existing account, the list will be used to download those applications once more. That's all.
jggimi said:
To be clear, Google keeps a list of the Market apps you acquire. They don't actually back up any application data. That's yours, and is private. They may know you've aquired a Pr0n video player, but not your particular category favorites. Well, they will know from your Google search terms. But not from your application list, unless there are specific apps dedicated to your peccadilloes.
The FIRST time Market is run with an existing account, the list will be used to download those applications once more. That's all.
Click to expand...
Click to collapse
google should make something like the itune, where you can backup apps, contacts, data and stuff in your computer in one place. this is the only thing i like about an iphone.
Basically, I'm running unrooted FW2.3.3 and was wondering if there was a method to root my device in which I can keep all my data/settings? Cheers
No. To get rooted on 2.3.3 your will have to flash 2.3.2 (which will wipe everything on your phone, sd card data wont be wiped) then root then do the ota update. Best you can do is try backing up apps/settings without root.
I think (not used myself) MyBackup pro will let you backup apps but the free version only lets you back up 2mb of data lol. So you will need the piad version.
App List Backup to help reinstalling of market apps.
MyPhoneExplorer Client use to backup text messages, call logs e.t.c
Or just see some of the free backup apps on the market https://market.android.com/search?q=backup&so=1&c=apps
Thank you! Backed everything up using your suggested programs - but there was an option to 'keep all user data' during flashing which didn't seem to lead to any issues for me, always good to be doubley sure though so thanks for your advice
crimsonnight said:
Thank you! Backed everything up using your suggested programs - but there was an option to 'keep all user data' during flashing which didn't seem to lead to any issues for me, always good to be doubley sure though so thanks for your advice
Click to expand...
Click to collapse
If you flash without ticking the wipe user data box you could get alot of system errors / force closes. Its best to wipe user data and do a clean install to avoid problems. I suppose its ok aslong as no problems appear, maybe?
Hey guys, I'm trying to root my Desire HD with AAHK.
The problem is, it says that I'll need to downgrade and downgrading will wipe my data.
Now I don't have a problem with downgrading, but I'd like to keep my data.
So I was wondering WHAT data will it wipe and how do I back-up?
I have titanium back-up installed but it needs root access, so that won't work.
I've copied all the files on my SD card to my laptop, to keep my images and stuff...
Is there a way to back-up other important files (if there are any?) before rooting?
Thanks in advance!
Laatst said:
Hey guys, I'm trying to root my Desire HD with AAHK.
The problem is, it says that I'll need to downgrade and downgrading will wipe my data.
Now I don't have a problem with downgrading, but I'd like to keep my data.
So I was wondering WHAT data will it wipe and how do I back-up?
I have titanium back-up installed but it needs root access, so that won't work.
I've copied all the files on my SD card to my laptop, to keep my images and stuff...
Is there a way to back-up other important files (if there are any?) before rooting?
Thanks in advance!
Click to expand...
Click to collapse
Consider purchasing Titanium Backup. It just started letting you backup app data WITHOUT root using ADB. See: http://www.androidpolice.com/2012/0...-adb-backups-without-root-other-improvements/. It will also very much come in handy once you are rooted.
bananagranola said:
Consider purchasing Titanium Backup. It just started letting you backup app data WITHOUT root using ADB. See: http://www.androidpolice.com/2012/0...-adb-backups-without-root-other-improvements/. It will also very much come in handy once you are rooted.
Click to expand...
Click to collapse
Only works for 4.0+
marsdta said:
Only works for 4.0+
Click to expand...
Click to collapse
Ooh, good to know. I hadn't tried it; I just saw the bit about ADB backup.
Files and documents are stored on your SD, just copy that out.
What you do lose are all your apps, app data, accounts, desktop layout, etc. If you use a custom launcher (go, adw), then chances are the app supports backup. It's like having a factory reset, or like when you first got your phone. Nothing on it. the SD card isn't effected though. There's a small chance rooting will corrupt your SD card. You can always format it to make it working again, but you loose all your data.
I use a program called Android Commander. Allowing inter alia copies of APK's. So, I have created a folder on my SD with programs and then use a clean reinstall of the rom, added applications. So just lose data and accounts.
App manager pro, download it from play store, and backup all your app's
Sent from my Desire HD using Tapatalk 2
Try to use MyBackup Pro or Safe Backup. But anyway, you should know, data loss while rooting is inevitably. For example, your settings for email accounts, desktop layout and other data, stored inside system memory will be lost. Using semi-backup application (without root) will save for you all important information (SMS, Calls log, Contacts and Applications). I think there's no problem with downgrading and losing system data. After rooting process and installing a custom rom you will be able to restore your settings by manual assignment - this is very easy
Hi!
[First of all, sorry for bad english ]
I have Nexus 4 E960
Android 4.4.2
I want to recover some photos I have deleted a week ago!
And for this I need to run app Undelete, but to run this app, need ROOT and unlock bootloader
But I DON'T WANT to ROOT and WIPE the phone (because it will make the deleted photos "cache" disappear too, right?
So, complicated situation! haha :crying:
Can please someone help me?
Thank you so much for your attention!
hellffer said:
Hi!
[First of all, sorry for bad english ]
I have Nexus 4 E960
Android 4.4.2
I want to recover some photos I have deleted a week ago!
And for this I need to run app Undelete, but to run this app, need ROOT and unlock bootloader
But I DON'T WANT to ROOT and WIPE the phone (because it will make the deleted photos "cache" disappear too, right?
So, complicated situation! haha :crying:
Can please someone help me?
Thank you so much for your attention!
Click to expand...
Click to collapse
Anybody have any info on this? I am in the same boat here.
As much as i know, you once have to unlock bootloader with full wipe (this is required for flashing superSU which in turn is required for things like Bootunlocker.)
I have never tried this but does adb pull work for cache? you can get a copy of your cache with it. Also stock gallery stores thumbnails, these are not high quality and without root, they may only be option.
RohMish said:
As much as i know, you once have to unlock bootloader with full wipe (this is required for flashing superSU which in turn is required for things like Bootunlocker.)
I have never tried this but does adb pull work for cache? you can get a copy of your cache with it. Also stock gallery stores thumbnails, these are not high quality and without root, they may only be option.
Click to expand...
Click to collapse
EEEEK...No way of rooting without unlocking bootloader huh?
Not sure how undelete works, but you are better off using diskdigger, you can root and use this as when you delete something it is not removed from the storage, it just removes the link to the files location and says that the location can now be overwritten. This means that if it is not overwritten then the data is still there, this is what diskdigger uses.
This also means you don't want to write any more data to your phone than is necessary until you recover your files as this will increase the chance of corrupting them.
(Rooting is write heavy)
The way to recover without rooting is to mount your phone to your computer as an external storage device then run the desktop disk digger application targeted at the phone storage, this should recover the files.
http://diskdigger.org
Note: this will recover all the files that have traces left on the drive so be prepared to trawl through them all looking for what you want.
Hope this helps, post back if needed.
Sent from my Nexus 4 using Tapatalk
With Titanium Backup, when you backup your apps and other files it creates a folder full of files that only it can read. When I flashed Jasmine, I copied those files to my computer and then flashed, then redownloaded Titanium Backup and moved those files as well as the license back into the correct folders. Is this the correct way to use TB, or is there a route that I am missing? It worked fine, just not sure if it is the recommended way of use or not.
More or less.
The folder is usually in the /sdcard area which is NOT wiped by custom recovery (default) "factory reset", so I'm not sure there is any reason to back it up and restore it. If you are using the default wiping method in TWRP, the (internal, psuedo-) /sdcard folder is not wiped.
But there's no harm in a PC backup. A backup that goes unused can just be deleted some time down the road; disk space is cheap & it's there in a disaster. The same can not be said for not making backups.
Warning: since you are newish to this stuff this behavior is VERY different in stock recoveries - the stock recovery version of "factory reset" wipes out EVERYTHING. In that case it would be mandatory that you backup the entire /sdcard if you want to save things. It's a little bit unfortunate that Android named this type of procedure "Factory Reset" instead of something more accurate, which would be something like "User Data Wipe", as it leads new rooters to erroneously conclude that random modifications to the /system and boot partitions can be un-done using something called "factory reset". NOT TRUE AT ALL; IT'S JUST FOR WIPING USER DATA.
Different apps use different strategies for "Pro" version licensing. If they stick with the Google Play ("market") best-practice recommendations, there shouldn't be any need to manipulate license files, so long as the app is downloaded from the Play Store with the same google login that was used to originally purchase the app. But I can't say for sure if that's the mechanism with TiBu.
I use TiBu kind of sparingly - typically only for market apps I am interested in, and even in those cases I usually download the app from the market and restore only the data from TiBu (to avoid missing market registration bugs, etc). Folks on small data plans might have different ideas about it because of data usage issues (and timeliness of restore procedures). I don't use TiBu for things like backup of data stores for launcher apps, ROM frameworks (e.g. "Settings"). There probably is some degree of compatibility from ROM to ROM with those items, but it is certainly not guaranteed. (Things like word dictionaries & dialer blacklists fall into this category - it would be nice if they were guaranteed to be compatible, but there is no way to know in advance. You sort of have to experimentally determine whether you have broken anything.)
Alternatively, you could keep a copy of the TiBu .apk file in your SD card somewhere. That would allow you to do whatever restores you like without connecting to the Google Play market. Just copy it to /data/app using TWRP after flashing/wiping and then on first boot it will be ready to do your restores.*
* in TWRP via Advanced -> Terminal
This requires getting comfortable with a minimum number of Unix command line commands, e.g. "cd", "cp", "ls", "pwd", etc.
I did download it from the store, but had previously read that the license would need to be moved in a thread not on this website. When I redownloaded it from the store, it automatically added the license back, so I ended up not needing it.
I only use TB to backup things like my offline games I want my scores saved, or apps that it logs me back into when it loads it back (Facebook, Reddit, Messenger, Twitch, Twitter, etc).
What I was looking to do was just keep the files for the backups of those apps on my SD card (or whatever is the recommended method), rather than stored to the phones internal memory since it gets wiped during the reset.
Your internal /sdcard should not be getting wiped by TWRP's default wipe method (which is used for installing ROMs for instance). You would have to go into the Advanced Wipe submenu for that to happen. A stock recovery "factory reset" would nuke the "internal" /sdcard though.
That said, there is nothing wrong with having backups off the device - especially for people that remain on a locked bootloader and do not have a (independent boot) custom recovery.
TiBu has a place in its settings where you can choose to place it's backups on the external sdcard if you want to do that. Then they would be safe from any type of factory reset, and could be retrieved if the phone suddenly died.