Related
Hello, I have a question I hope you can help me with...
I've got a nexus S 2.3 and Ive just deleted a very important text msg thread, have I lost it forever or is there anyway that I can recover it??
If I can recover it can you please tell me what I should do as I ve never done anything ike this before. Many thanks, concerned android user.
Never tried anything like this before, so just some ideas as a general outline:
The first thing you should do is a complete image of the phone before the data can be overwritten (if it isn't already).
There is no convenient way to undelete that I know of.
I would search for the sms database file and try some sqlite tools on it. Look if there are entries that are marked as deleted or something.
If that doesn't bring anything up, I would use a good (hex-)editor to extract the strings from the file and see, if the data is somehow still there.
Anyway it will probably mean a lot of work, depending on how many sms you have stored and the best you should hope for is that you can manually reconstruct the thread in a text file or on a piece of paper.
Hello cgi,
thanks for the reply with advice!!
what is a complete image? how do i do this?
how do i search the sms database?
where do i get hex editor from?
do i need to back up any data before trying to recover anything?
many thanks,
Ray
what is a complete image? how do i do this?
Click to expand...
Click to collapse
An image is a complete copy of the data on the phone. The easiest way to do that is to use a custom recovery system like clockworkmod recovery. If you have a custom ROM installed, chances are, that you already have it.
First: Is your bootloader locked or unlocked?
Second: Which version of Android exactly is one your phone?
If your bootloader is unlocked, you can install a recovery image that will let you backup the data partition where your sms database should reside.
If your bootloader is locked but your Android version is 2.3.3 or lower, you can use an exploit that let's install a different recovery image.
If your bootloader is locked and your Android version 2.3.4 (and your phone is not rooted), then AFAIK you are out of luck.
how do i search the sms database?
Click to expand...
Click to collapse
I don't know in which files your sms are being stored, but it should not be that hard to find out.
where do i get hex editor from?
Click to expand...
Click to collapse
There are a lot out there. I use okteta from the KDE project, but you can use whichever you want. You could use notepad, too, i guess, but that won't make things any easier.
do i need to back up any data before trying to recover anything?
Click to expand...
Click to collapse
That's the image I was talking about. You would first copy all the data on your computer.
CGIi,
Many many thanks for taking the time to reply to my question!!
I dont think there is much chance of recovering this thread, my friend has about half of the 900 texts in the thread which makes it slighty easier to swalow.
once again the importance of backing things up is key to keeping the pics, files, texts you want to keep. I'l try to do this even more in the future, I'm so sick of losing data from old mobiles, PC'S etc, I'm gonna back up everything from now on!!
Many thanks again, RAY
Hi,
So I'm trying to fix this device for a friend of mine... He seems to have some sort of virus on it - Malwarebytes finds the following:
Android/Trojan.Rootnik.K
Android/PUP.Riskware.Ninap.a
Android/Trojan.Rootnik.K
Android/Backdoor.Triada.av
Android/Backdoor.Triada.J
Android/Trojan.Dropper.Agent.we
Android.PUP.Riskware.Smspay.BY
Android.PUP.Adware.Sprovider.F
Android/Backdoor.Triada.prl
Android/Trojan.Triada.m
Android/Backdoor.Triada.prl
I've tried a factory reset whiping all data - I've tried wiping the data from CWM.
As soon as the phone boots back up and I go through the device registration etc I can see various pop-ups, apps trying to install themselves.
Simply cannot get rid of thios virus/malware/trojan...
Does anyone know how to do a low level format on this device? Or if the process for low level format its generic (hopefully) for all Android devices?
If not, does anyone know how to get rid of this virus?
Many thanks,
Ryan
Hi
Assist is where we guide new members. As a senior member, you should know where to ask for help
Sorry but thread closed
Below you will find instructions how to root this device.
The following procedure has been tested up to firmware J120AUCU2APJ2
KNOX should remain 0x0
However you undertake this at your own risk.
Issues:
Wifi passwords not remembered (fix below)
Stock Flashlight app not working.
Model number may be missing from build.prop (fix below)
Instructions
1. Flash the eng boot image.
This is a special boot image normally used by engineers, it allows selinux to be booted in permissive mode with relaxed root restrictions.
Do not replace this image with the stock image after rooting your device or you will possibly soft brick your device.
(See below for how to recover)
ENG_BOOT_J120A_PG1
Download Odin v3.11.1
Reboot Phone in Download Mode (press and hold Home + Power + Volume Down buttons)
Connect phone and wait until you get a blue sign in Odin
Download the ENG_BOOT_J120A_PG1.tar to your PC and add it to AP / PDA in ODIN.
Make sure re-partition is NOT ticked
Click the start button, sit back and wait few minutes
2. Install and run Kingroot:
http://www.apkmirror.com/apk/kingro...-release/kingroot-5-0-5-android-apk-download/
You may need to run Kingroot several times to gain successful root.
3. Install and run SuperSU me to remove Kingroot and convert to SuperSU (not required) :
https://play.google.com/store/apps/...ore&pcampaignid=APPU_1_uzPDVbGyFcGNyATHrqmoCA
Alternative (free) method to replace Kingroot:
Follow Steps 3 to 12.
https://forum.xda-developers.com/ga...ide-how-to-root-tripping-knox-kitkat-t3129484
Don't flash the boot partition with Flashfire, uncheck.
You will also need to flash the system version of SuperSU not EverRoot.
When you get to step 12, don't flash the firmware. Disable EverRoot and just flash this:
https://forum.xda-developers.com/apps/supersu/v2-64-2-66-supersu-mode-t3286120
4. Wifi fix:
modify the line below in /system/build.prop:
ro.securestorage.support=true to false
5. To fix “Unauthorized actions have been detected”
disable 'security log agent'
6. Model number missing fix:
http://www.techgainer.com/change-fake-android-device-model-number-and-brand-name/
Enjoy your rooted device
To recover from a soft brick flash the firmware below.
https://firmwarefile.com/samsung-sm-j120a
FEEDBACK IS APPRECIATED PLEASE.
THANKS.
DONATE ME HERE IF YOU WANT TO BUY ME A BEER OR HIT THE THANKS BUTTON IF I HELPED YOU
Still no TWRP, though, right?
fbueller said:
Still no TWRP, though, right?
Click to expand...
Click to collapse
Not possible I'm afraid.
ashyx said:
Not possible I'm afraid.
Click to expand...
Click to collapse
As ashyx mentioned in a previous post, Flashfire works. Loaded Xposed for Samsung via the Wa?? version.
spicybeansandricey, to clarify, Wanam is a modified version of Xposed for Samsung phones. Google is my friend, Google is your friend and Google is our friend. If you Googled it, you will find links to the same/similar packages linked by ashyx to get Xposed on Samsung phones. Since I was skimming the articles and successfully installed on a 4" screen, I wasn't sure about the name but only remembered the first 2 letters. In fact, the tutorial I followed was different from ashyx's post and gave no credit to XDA.
As an addendum, Flashfire works great and was able to back up EFS files. I just chose to backup EVERYTHING since I don't know what I will need later. My 128GB sd card cost more than the phone! LOL As for my vacation reading list and Google, I still have to read up on new superuser and root that can survive OTAs and root detection.
shirleys143 said:
Flashfire works. Loaded Xposed for Samsung via the Wa?? version.
Click to expand...
Click to collapse
Yeh flash fire is pretty much the next best thing to custom recovery with a few little tricks of its own.
Anyone have a list of garbage that can be safely removed? Even after stripping some of the obvious stuff there's over 4Gb of system stuff.
Can I remove the Samsung stuff like Galaxy Apps and such? I don't want to remove anything that will make it unstable so that I can still reset it back to fresh and begin over, but without the bloat ware of that makes sense?
ViralThread said:
Anyone have a list of garbage that can be safely removed? Even after stripping some of the obvious stuff there's over 4Gb of system stuff.
Can I remove the Samsung stuff like Galaxy Apps and such? I don't want to remove anything that will make it unstable so that I can still reset it back to fresh and begin over, but without the bloat ware of that makes sense?
Click to expand...
Click to collapse
No matter how much you remove from system the size will never change, it's rather a pointless exercise. All you're doing is creating unused space.
ashyx said:
Yeh flash fire is pretty much the next best thing to custom recovery with a few little tricks of its own.
Click to expand...
Click to collapse
SO i tried to flash xposed via flashfire and got the old "system software not authorized by at&t has been found on your phone..." brick.
How to get xposed on there without bricking?
ashyx said:
No matter how much you remove from system the size will never change, it's rather a pointless exercise. All you're doing is creating unused space.
Click to expand...
Click to collapse
So what's the point of rooting? The primary reason was to remove the bloat and recover some usable space on the device. Out of 8GB there's less than 3gb of usable storage on it rendering it mostly useless for anything but a media player or emulator box loading crap off the SDCard.
What a waste.
ViralThread said:
So what's the point of rooting? The primary reason was to remove the bloat and recover some usable space on the device. Out of 8GB there's less than 3gb of usable storage on it rendering it mostly useless for anything but a media player or emulator box loading crap off the SDCard.
What a waste.
Click to expand...
Click to collapse
Rooting is about more than debloating. It's about having control over your device.
Why don't you use adoptable storage if you need more space?
You can always move user apps to system to take up the space you've created. There are plenty of apps that can do this such as system app remover. That way not only do you utilise that space but you also free up storage space.
spicybeansandricey said:
SO i tried to flash xposed via flashfire and got the old "system software not authorized by at&t has been found on your phone..." brick.
How to get xposed on there without bricking?
Click to expand...
Click to collapse
How do you class a message, which is easily removed, as a brick?
ashyx said:
Rooting is about more than debloating. It's about having control over your device.
Why don't you use adoptable storage if you need more space?
You can always move user apps to system to take up the space you've created. There are plenty of apps that can do this such as system app remover. That way not only do you utilise that space but you also free up storage space.
Click to expand...
Click to collapse
Adoptable storage is useless. Most of the apps will not see it and refuse to install data there, making it impossible to install anything large on the device or more than a few small apps/games.
I hadn't considered moving installed apps to system space I will give system app removed a glance. Thx
ashyx said:
How do you class a message, which is easily removed, as a brick?
Click to expand...
Click to collapse
i just asked how to install xposed on there, who cares about what i feel is a brick or not. a brick, soft or hard is still a brick.
is there a way to get xposed on the j120a without custom recovery? i tried flashfire, maybe my setting were incorrect? do you have a method?
thanks in advance.
spicybeansandricey said:
i just asked how to install xposed on there, who cares about what i feel is a brick or not. a brick, soft or hard is still a brick.
is there a way to get xposed on the j120a without custom recovery? i tried flashfire, maybe my setting were incorrect? do you have a method?
thanks in advance.
Click to expand...
Click to collapse
Yes there is, but due to your attitude sort yourself out. I honestly don't know why I bother sometimes with this forum.
ashyx said:
Yes there is, but due to your attitude sort yourself out. I honestly don't know why I bother sometimes with this forum.
Click to expand...
Click to collapse
thats kind of harsh considering i just asked for instructions on how to get xposed on my phone. instead of helping you wanted to put me down for not using the word "brick" in a manner thats acceptable to you.
im sorry that we dont agree on semantics. i really have no "attitude" and how one can attribute an attitude to text on a website is debatable at best.
I have no ill-will, malice, or attitude, i had a general question that i was asking about and was looking to someone who looked like they had the answer for it. Normally, i "sort" these things out myself, but i went against my better judgement and asked here...(hence my 2 reply post history.)
if you can help me, i would gladly reward you for your time, via bitcoin, etc; I honestly have no issue other than i dont have the time to sit and look into this stuff like i use to 4-5 years ago. I promise you, i have no sort of attitude. this is just a forum FFS, and above all else, im not an 'ingrate.' i am always appreciative for any help that i receive.
If you could find the will to help me i would greatly appreciate it, otherwise lets not part ways with any ill-will, that's the last thing that i would ever want to happen.
thanks again for your time.
Ok so here's what my experience with system app remover was, and I hope I wasn't sounding rude or unappreciative, Immsimply trying to work towards a certain endpoint solution if possible.
System app remover did not permit me to relocate user apps into system space, in fact it won't let me move any apps as it claims "sdcard share the same disk with os", both in "move to phone" and in "move to sdcard" options.
Is there any reliable way to install apps directly to the external SDCard? Maybe install them to internal storage and then manually move them and symlink them? That wouldn't work for large apps but might allow installation of more smaller apps?
Essentially what you've stated means even the system is on its own "partition" right? So as I remove stuff that's stored in the /system folder, it's freeing space but not space my Android can access for the purpose of installation ?
Is that a proper summary of my situation?
Thanks in advance
spicybeansandricey said:
thats kind of harsh considering i just asked for instructions on how to get xposed on my phone. instead of helping you wanted to put me down for not using the word "brick" in a manner thats acceptable to you.
im sorry that we dont agree on semantics. i really have no "attitude" and how one can attribute an attitude to text on a website is debatable at best.
I have no ill-will, malice, or attitude, i had a general question that i was asking about and was looking to someone who looked like they had the answer for it. Normally, i "sort" these things out myself, but i went against my better judgement and asked here...(hence my 2 reply post history.)
if you can help me, i would gladly reward you for your time, via bitcoin, etc; I honestly have no issue other than i dont have the time to sit and look into this stuff like i use to 4-5 years ago. I promise you, i have no sort of attitude. this is just a forum FFS, and above all else, im not an 'ingrate.' i am always appreciative for any help that i receive.
If you could find the will to help me i would greatly appreciate it, otherwise lets not part ways with any ill-will, that's the last thing that i would ever want to happen.
thanks again for your time.
Click to expand...
Click to collapse
OK, let's start again. Maybe I mistook your response, it just seemed a little snipey. To get help in the right direction, proper details of what the actual issue is goes a long way to obtaining the solution. Stating a message caused a brick isn't anything I've ever come across before which is why I asked the question? However it seems further to that post you actually meant Xposed caused the brick after you saw that message and rebooted.
So going back to what I previously stated about correct details, here we are 3 unnecessary posts later.
Moving on...to install Xposed you need to ensure you use the wanam build of Xposed.
https://forum.xda-developers.com/xposed/unofficial-xposed-samsung-lollipop-t3180960
.
ashyx said:
OK, let's start again. Maybe I mistook your response, it just seemed a little snipey. To get help in the right direction, proper details of what the actual issue is goes a long way to obtaining the solution. Stating a message caused a brick isn't anything I've ever come across before which is why I asked the question? However it seems further to that post you actually meant Xposed caused the brick after you saw that message and rebooted.
So going back to what I previously stated about correct details, here we are 3 unnecessary posts later.
Moving on...to install Xposed you need to ensure you use the wanam build of Xposed.
https://forum.xda-developers.com/xposed/unofficial-xposed-samsung-lollipop-t3180960
.
Click to expand...
Click to collapse
thank you so much!! that was what the "wa???" was in the first few post of this thread that i didnt understand. i sincerely was not trying to come off as pompous, snipey etc; so thank you for helping me. I run a vbulletin forum myself so im no stranger to miscommunication.
I appreciate your help, honestly and sincerely. ill give this a try and be back, my sincerest thanks again.
ViralThread said:
Ok so here's what my experience with system app remover was, and I hope I wasn't sounding rude or unappreciative, Immsimply trying to work towards a certain endpoint solution if possible.
System app remover did not permit me to relocate user apps into system space, in fact it won't let me move any apps as it claims "sdcard share the same disk with os", both in "move to phone" and in "move to sdcard" options.
Is there any reliable way to install apps directly to the external SDCard? Maybe install them to internal storage and then manually move them and symlink them? That wouldn't work for large apps but might allow installation of more smaller apps?
Essentially what you've stated means even the system is on its own "partition" right? So as I remove stuff that's stored in the /system folder, it's freeing space but not space my Android can access for the purpose of installation ?
Is that a proper summary of my situation?
Thanks in advance
Click to expand...
Click to collapse
Whoops, my bad. That's was the wrong app to suggest. I actually meant this one that DOES move user apps to system. You can see the mistake with the similar names!
https://www.google.co.uk/url?sa=t&s...CBowAA&usg=AFQjCNFe58rupOZgD6hS3UfXr-2rkHxsyQ[/url]
By the way I suggest this busybox:
https://www.google.co.uk/url?sa=t&s...CB8wAg&usg=AFQjCNGS1LQ2kB8PZ4Y--lzVTOG1SKQWvA
ashyx said:
Whoops, my bad. That's was the wrong app to suggest. I actually meant this one that DOES move user apps to system. You can see the mistake with the similar names!
https://www.google.co.uk/url?sa=t&s...CBowAA&usg=AFQjCNFe58rupOZgD6hS3UfXr-2rkHxsyQ[/url]
By the way I suggest this busybox:
https://www.google.co.uk/url?sa=t&s...CB8wAg&usg=AFQjCNGS1LQ2kB8PZ4Y--lzVTOG1SKQWvA
Click to expand...
Click to collapse
Thanks for the quick response.
I installed /system/app/remover and it seemed to offer a solution. However upon moving few apps to system with the app, it's merely removing them. So more tweaking needed.
Will keep update on progress.
Thanks again
---------- Post added at 03:53 PM ---------- Previous post was at 03:29 PM ----------
Is it safe to remove all of the Samsung stuff? Will that break the reset ability?
Hi,
i had root my O+7 pro and didn't seen the warning that it's wip datas ...
is there any way to recover theme?
Thanks a lot in advance
You can try disk recovery from the play store and give it root permissions, but I can't say if it will recover anything. But to be fair, there were warnings given when unlocking the bootloader, etc about the wiping of data. So possibly a hard lesson learned
Always backup... Backup... Backup... Even if just doing an update. Since you are rooted now I would get titanium backup and do a backup before any update or flashing that u r not comfortable with and back up to Google drive or push to an OTG also back up ur sdcard files by manually moving to an OTG or use twrp to backup data to an OTG... Preferably before u set a pass code or pin securities. Hope u can recover bud.
i'll try the first solution.
in all the case i'll use a good backup solution after that. and i know, i usualy alaways backup but idn, this way my brain had decided it was useless *facepalml*
hallo dare said:
You can try disk recovery from the play store and give it root permissions, but I can't say if it will recover anything. But to be fair, there were warnings given when unlocking the bootloader, etc about the wiping of data. So possibly a hard lesson learned
Click to expand...
Click to collapse
can't find the app, sorry but do you have the link of the app you have in mind?
thanks a lot for your help in all the cases :good: :highfive:
Zeirman said:
can't find the app, sorry but do you have the link of the app you have in mind?
thanks a lot for your help in all the cases :good: :highfive:
Click to expand...
Click to collapse
https://play.google.com/store/apps/details?id=com.defianttech.diskdigger
hallo dare said:
https://play.google.com/store/apps/details?id=com.defianttech.diskdigger
Click to expand...
Click to collapse
Already tried DiskDigger pro (root allowed), and only finded some icone in JPG and PNG, a blank TIF, 16 .zip, and thousands of SQLITE files (don't know what it is)... i had guess it hadn't work
Any other idea? (and thanks a lot again for your help!)
Zeirman said:
Already tried DiskDigger pro (root allowed), and only finded some icone in JPG and PNG, a blank TIF, 16 .zip, and thousands of SQLITE files (don't know what it is)... i had guess it hadn't work
Any other idea? (and thanks a lot again for your help!)
Click to expand...
Click to collapse
Think you're out of luck.
hallo dare said:
Think you're out of luck.
Click to expand...
Click to collapse
No other idea? even through adb or a soft, even not free solution? :/
i don't understand why nothing work
i had almost writte no data since i had root, and my phone has 256Go
even by writte a little with the root process and install 3 app, i couldn't writte 256Go so... why nothing work? why realy no data is found? that's not strange? :/
Maybe you can dumb and pull your userdata partition to an .img file via adb to your pc and then use softwares like recuva to recover data on windows, i don't guaranty it will work , but it's Worth the shot, i tried it one time when i had the OPO (i changed to f2fs partition without backing up and lost everything) annnnnnnndddddd...... no i found nothing lol, but maybe you can find since it's a different type of format i guess" but worth a try
Chinaroad said:
Maybe you can dumb and pull your userdata partition to an .img file via adb to your pc and then use softwares like recuva to recover data on windows, i don't guaranty it will work , but it's Worth the shot, i tried it one time when i had the OPO (i changed to f2fs partition without backing up and lost everything) annnnnnnndddddd...... no i found nothing lol, but maybe you can find since it's a different type of format i guess" but worth a try
Click to expand...
Click to collapse
i had try this tutorial: https://howtorecover.me/data-recovery-internal-storage-android-phone-guide
but the list_of_partitions.txt file is blank, no matter if i do it from the phone or computer
Zeirman said:
i don't understand why nothing work
i had almost writte no data since i had root, and my phone has 256Go
even by writte a little with the root process and install 3 app, i couldn't writte 256Go so... why nothing work? why realy no data is found? that's not strange? :/
Click to expand...
Click to collapse
There is no data found because it is encrypted.
All phones that ship with Android 6 or higher have user data encrypted by default from first boot, without the user enabling encryption.
This is intentionally designed to protect against data recovery by an attacker.
Even if you don't use a PIN or password, Android creates a random encryption key to secure the data. When the phone is wiped the keys are deleted making it difficult to recover data without said keys.
KemikalElite said:
There is no data found because it is encrypted.
All phones that ship with Android 6 or higher have user data encrypted by default from first boot, without the user enabling encryption.
This is intentionally designed to protect against data recovery by an attacker.
Even if you don't use a PIN or password, Android creates a random encryption key to secure the data. When the phone is wiped the keys are deleted making it difficult to recover data without said keys.
Click to expand...
Click to collapse
I understand better now!
that's a good news that people can't recover datas from a second hand phone
but... does it mean it's impossible for me? 0% chances? or is there a maybe complicated but possible way?
Zeirman said:
I understand better now!
that's a good news that people can't recover datas from a second hand phone
but... does it mean it's impossible for me? 0% chances? or is there a maybe complicated but possible way?
Click to expand...
Click to collapse
Not possible. The encryption keys are protected by what is called hardware-backed encryption. The Snapdragon chip binds the keys to a specific device so the data can't just be copied to a computer and recovered. It would take a major security flaw (that hasn't already been patched) to get through this system.
It is designed to be very secure. It is also used to protect fingerprint data and Netflix DRM.
KemikalElite said:
Not possible. The encryption keys are protected by what is called hardware-backed encryption. The Snapdragon chip binds the keys to a specific device so the data can't just be copied to a computer and recovered. It would take a major security flaw (that hasn't already been patched) to get through this system.
It is designed to be very secure. It is also used to protect fingerprint data and Netflix DRM.
Click to expand...
Click to collapse
You don't give me good news but at least i know why i can't recover theme
Thanks a lot for your help!
Found my old phone from high school. Turned it on and looks like I never factory reset it, and I would love to see all of the photos and messages I left behind, however I can not for the life of me remember the pin I used. Browsed around and tried to delete the gesture.key using ADB but permission is denied, and I wasn't able to find a custom recovery tool for this specific phone either. Anyone have any possible solutions? Thank you
Shiiiba said:
Found my old phone from high school. Turned it on and looks like I never factory reset it, and I would love to see all of the photos and messages I left behind, however I can not for the life of me remember the pin I used. Browsed around and tried to delete the gesture.key using ADB but permission is denied, and I wasn't able to find a custom recovery tool for this specific phone either. Anyone have any possible solutions? Thank you
Click to expand...
Click to collapse
If you cannot remember the PIN, you're most likely going to have to factory reset. There is no way around this that I know of, unfortunately.
you can just dump the whole userdata partition off flash memory in EDL mode, loop mount partition image from linux and modify it's content (like deleting locksettings.db)
Shiiiba said:
Hi there, thanks for responding to my forum post. I can give it a shot, however I was wondering if you would be willing to help me with attempting this. Im familiar with root and devices but I’ve not had any experiencing with dumps or tools like the one you provided on github. I have an extra ZTE Flash to test on but some extra insight would be nice. I also had two questions:
1: can I just take the locksettings.db and somehow retrieve my pin from it instead of modifying and dumping?
2: if I do end up having to dump, will the environment be the same (IE logged in apps, id like to see my message history in apps that are there)
Thanks so much, and sorry for disturbing.
Click to expand...
Click to collapse
you need a firehose programmer matching your SoC and OEM. the tool comes with collection (loaders) for quite few devices, just give it a try.
1. might be possible with password.key
2. yes by just deleting locksettings.db nothing is changed