Database Info

HELP ME!! ive been infected with a serious RAT/virus

my phone is infected with a virus that has imbedded itself in my system settings, any anti malware apps used do not detect it. when plugging my phone into my computer (for developer access) it began to install the device driver. once the "device driver" installed it took all administrative use away from me and locked all drives. I do not have ABD access or any computer access at this point. this phone has killed 3 laptops and a desktop. the only way ive been able to partially stop the virus is using a firewall to block it. since my phone is NOT rooted I cannot delete system files containing the virus. I noticed the virus will edit apps and system functions to try and hide itself (Google play services) for example. someone is using a form of remote access to control things and change settings. it is possible that someone (close family or friend) may have gotten their hands on it to install the virus. factory reset does nothing as the virus is stored in system settings. phone cannot be hooked to Pc without severe repercussions. I cannot gain root access through any rooting apps for some reason. only tried to access system settings. I believe the virus may be using KNOX for execution but that is just a theory. Sanding galaxy S6. I HAVE TRIED EVERYTHING. please please help me. -jesse

Pretty hard for an android to get infected by any kind of virus, especially if not rooted.
Maybe it's made specifically to deal and block access from Windows, so maybe try Linux to deal with it?

Defeated01 said:
my phone is infected with a virus that has imbedded itself in my system settings, any anti malware apps used do not detect it. when plugging my phone into my computer (for developer access) it began to install the device driver. once the "device driver" installed it took all administrative use away from me and locked all drives. I do not have ABD access or any computer access at this point. this phone has killed 3 laptops and a desktop. the only way ive been able to partially stop the virus is using a firewall to block it. since my phone is NOT rooted I cannot delete system files containing the virus. I noticed the virus will edit apps and system functions to try and hide itself (Google play services) for example. someone is using a form of remote access to control things and change settings. it is possible that someone (close family or friend) may have gotten their hands on it to install the virus. factory reset does nothing as the virus is stored in system settings. phone cannot be hooked to Pc without severe repercussions. I cannot gain root access through any rooting apps for some reason. only tried to access system settings. I believe the virus may be using KNOX for execution but that is just a theory. Sanding galaxy S6. I HAVE TRIED EVERYTHING. please please help me. -jesse
Click to expand...
Click to collapse
Sounds like a nasty one! Yes "friends" & family could have installed it, physical access makes it easier, but maybe more likely you downloaded a dodgy app (some have been known to wait weeks before acting), or a website tricked you with an overlay to install a malicious file .... or benign app may have downloaded something worse ....
Did all your computers get compromised over your network or did you plug phone in individually to each? Isolate each from each other and try to recover individually, but first check your router & reflash that with new password if required as it's a possible route for reinfection so to usb etc
You may have to reflash stock Samsung ROM (will loose all photos etc) as CLEAN install. But before that look at settings>apps>burger menu>special access and disable any apps that have given themselves special rights eg in "device admin apps". Also look at other special settings and disable any suspicions apps (or most even eg in "apps that can appear on top" if you are still getting issues), repeat for other sections in special access eg install unknown apps, data access etc etc (I don't have an S6 but it should be similar to above on S6 depending on software version)
Also try boot phone into "safe mode" hopefully that will stop malicious app running.
Submit any suspect files to virustotal and/or any virus company for analysis if not identified yet. (logs might given you some clues as to source depending on cache)
Then you should be able to root to fix or just flash latest stock (maybe install Lineage OS if S6 not getting regular security updates anymore)

Delete RAT From Your Device Easily
The appearances of RAT on your phone is really a bad sign for you because it is not only capable to ruin your device badly but also endangers privacy. RAT is also capable to cause various serious damages, so you must opt RAT removal tricks after noticing it's any symptom on your device.

Aplications or daemons in total background

Hello everyone!
I have simple, but difficult at same time question:
Is there any possibility to install any process thats working total independlytly to system?
I mean - you install, for example something like 'gps tracker' or any else kind of spy software on your phone - after all, someone steals your phone, uploads a new firmware and after that you still have access to gps?
Sec question - if you can't do this because new firmware remove all aplications and daemons working in background - can you do this when "new owner" of phone only make "factory reset" without upload new firmware?

In case that your phone is stolen or lost, why not to take advantage of the Android system security features, Factory Reset Protection (FRP) as well as 'Find My Device'?
'Find My Device' makes it easy to locate, ring, or wipe your device from the web.

Its not about functionality. I would not like to buy a used phone with additional pre-instaled "software". If it is possible and I cant remove it by reinstall software it will be scary. So I want to know if it is possible at all and if so, how can I check it?
If it will be possible it can be used to protect device too, every stolen phones got instant flash so when it happen 'Find My Device' would't be work.

Data Recovery, but its my laptop this time.

Laptop - Dell Inspiron 15 3567, i3 6th gen, 4GB RAM (later upgraded to 8 GB) 1TB HDD (with only one partition, OS C: ), Windows 10 Home Single Language.
Background - I was using my laptop 4 days ago to read my notes for my upcoming exams. The built-in keyboard started behaving weirdly all of a sudden. Apparently, all the other keys on the keyboard somehow got attached to the Enter key. As soon as I pressed a key it shifted me to a new line with the simultaneous press of the Enter key. It made it so difficult to even type my password that I decided to detach it from the back. This mishap has been faced by my keyboard previously as well. But back then only a specific set of keys stopped working or they combined with each other. This time though, the entire keyboard got attached to my Enter key, even the NumPad on the right side. This problem almost always gets fixed when I perform a system restore, which I've set up a trigger for in my laptop that makes automatic restore points every Wednesday [Task Scheduler]. The keyboard thing happened on 25th Sep and luckily, I had a restore point from 3 days back i.e. 22nd Sep. So as always, I did the system restore, waited for an hour+, and the system restore was done. The laptop opened up and displayed the message, "System has been successfully restored to Sep 22 2021. Your files and documents were not affected". Now my laptop lags a lot after a system restore so I quickly did a hard reboot and that's when it happened. When the laptop initiated booting it got stuck in the Bitlocker Auto Recovery Loop. It asked me to type in the Bitlocker Recovery Key which I am dead sure, I never set up by myself. I rebooted it quite a lot of times but to no avail, which made sure that something had gone wrong. Since then I have attempted quite a lot of fixes for it, despite knowing the fact that Bitlocker is prolly one of the most secure and powerful drive encryption systems in the world. The fixes have yielded me no good but have provided me with quite a lot of info about the issue.
Fixes I have already tried/didn't work -
1. I have tried looking up my Microsoft account for any Bitlocker keys as suggested by a few on the web. The Bitlocker section in my account shows the message, "There are no Bitlocker Keys uploaded to your Microsoft account.".
2. I have tried various cmd commands in the Command Prompt interface the Recovery Advanced Options provide. I found these commands from different sources on the web but none of them did any good to my situation or even helped me out with something in that relation. Here are some commands that I tried-
Code:
bcdedit /set {default} safeboot minimal
bcdedit /deletevalue {default} safeboot
bcdedit /set {default} bootmenupolicy legacy
bcdedit /set {default} safebootalternateshell yes
Code:
manage-bde -off C:
manage-bde -protectors -get C:
manage-bde -unlock C: -pw
Code:
BOOTREC /FIXMBR
BOOTREC /FIXBOOT
BOOTREC /RebuildBcd
There were a lot more commands I tried but these are some I remember.
3. I have tried making a bootable USB drive with the Hiren's Boot CD/DVD PE. As soon as the laptop powers on, I spam the F12 key which takes me to the Boot Menu. From there I select my USB drive as the booting device and it loads me into the HBCD environment as expected. But since the environment is working in the system itself, it does not have access to anything that the system contains. So all the above mentioned commands don't work in the same as well.
4. I have tried using the WinImage tool in the HBCD environment to at least create an image of my original drive into an external 1TB drive that I own. But again, since HBCD lacks system access, it does not let me install any third party softwares into it.
Fixes I have researched/am willing to try/have given thoughts to -
1. I was suggested by some Microsoft chat support agents, the use of a bootable installation media USB drive to install a temporary copy of Windows. This, according to them, won't get my files deleted and would be helpful. However during my researches of the same, I found out that there is quite a good chance of data loss from my PC which, in any case whatsoever, I don't want.
2. I have thought of physically removing the original affected drive, using it with another computer and then making an image out of it. Now this image can be used for any Bitlocker cracking purposes by any agency that would be willing to do so. The only concern I have is that the original data shouldn't be lost, instead an image could be used for all purposes related to the cracking of the Bitlocker. I am not sure if this is gonna work though.
I need help, urgent help!
Please contact me in my pm here if anyone has knowledge about cracking bitlockers and is willing to help me out.​

Use another PC to access the data, copy.
Stop screwing around before you lose the data!
Reload the OS... possible malware or hardware failure.
Always redundantly backup critical data to at least 2 hdds that are physically or electronically isolated from each other and the PC.
Do this or you will lose data, sooner or latter.
You can never have too many backup drives....
Use Acronis to make a clone copy of the OS disk after configured but before loading antivirus or crapware. Learn how to do this.
Whenever possible use a separate data drive ie a dual drive setup. All critical data goes on data drive. Only the OS and apps go on the OS drive.
You see why now...

blackhawk said:
Use another PC to access the data, copy.
Stop screwing around before you lose the data!
Reload the OS... possible malware or hardware failure.
Click to expand...
Click to collapse
@blackhawk I'm sorry but I don't quite get what you mean by reloading the OS. As I mentioned, I had only one drive partition which was C:. It had my Windows and all my files and data. Since I have been locked out of that, I can't even get into the computer's OS. As soon as the laptop boots up it displays the message, "Preparing to Recover". It then asks me for the Bitlocker key, which, since I don't have it, I am not able to input. The only option it gives me next is to skip the drive. It then shows the message, "Diagnosing for problems" and then brings me back to the recovery options. There is nothing I can do in those recovery advanced options.

Chinmay47 said:
I'm sorry but I don't quite get what you mean by reloading the OS. As I mentioned, I had only one drive partition which was C:. It had my Windows and all my files and data. Since I have been locked out of that, I can't even get into the computer's OS. As soon as the laptop boots up it displays the message, "Preparing to Recover". It then asks me for the Bitlocker key, which, since I don't have it, I am not able to input. The only option it gives me next is to skip the drive. It then shows the message, "Diagnosing for problems" and then brings me back to the recovery options. There is nothing I can do in those recovery advanced options.
Click to expand...
Click to collapse
I mean reload from scratch.
You should have made a clone image when you first got it if you don't have a installable Windows OS image. I normally upgrade from the hdd the laptop comes with to a better one. I then clobe the old hdd image to the new one. The old hdd is my backup.
First things first, before your critical data gets corrupted, overwritten, whatever... copy it off that disk!
Windows crash and burn, it a traditional
Be ready for it next time.

Chinmay47 said:
As I mentioned, I had only one drive partition which was C:. It had my Windows and all my files and data.
Click to expand...
Click to collapse
Serious Windows OS user always at least have these 2 drives /partitions:
C: -> Windows OS
D: -> User data incl. user installed apps
Keep this in mind when it comes to re-install Windows OS.

blackhawk said:
I mean reload from scratch.
You should have made a clone image when you first got it if you don't have a installable Windows OS image. I normally upgrade from the hdd the laptop comes with to a better one. I then clobe the old hdd image to the new one. The old hdd is my backup.
First things first, before your critical data gets corrupted, overwritten, whatever... copy it off that disk!
Windows crash and burn, it a traditional
Be ready for it next time.
Click to expand...
Click to collapse
That essentially means a data loss doesn't it?

jwoegerbauer said:
Serious Windows OS user always at least have these 2 drives /partitions:
C: -> Windows OS
D: -> User data incl. user installed apps
Keep this in mind when it comes to re-install Windows OS.
Click to expand...
Click to collapse
I don't know what you mean by a serious Windows OS user, but when I boot up into the HBCD environment, I do see some extra drives such as a D: drive, an E: drive called IMAGE and an F: drive called Dell. Could this be related?

Chinmay47 said:
That essentially means a data loss doesn't it?
Click to expand...
Click to collapse
Yes... completely.
You should zero fill at least the boot sector before a reload.
That's one reason why you use a data drive(s) and always redundantly backup critical data.

@blackhawk Would you be having in your knowledge, any person here on the forums, or a service that owns expertise in Bitlocker recoveries? Or should I consider my case a game-over now?

Chinmay47 said:
@blackhawk Would you be having in your knowledge, any person here on the forums, or a service that owns expertise in Bitlocker recoveries? Or should I consider my case a game-over now?
Click to expand...
Click to collapse
Are you saying the data is encrypted and that you lost the encryption key?
If so you got gigantic problems.
No encryption key means no chance of access.
Stop messing with it and find a certified MS tech to try to repair the load.

Chinmay47 said:
I don't know what you mean by a serious Windows OS user, but when I boot up into the HBCD environment, I do see some extra drives such as a D: drive, an E: drive called IMAGE and an F: drive called Dell. Could this be related?
Click to expand...
Click to collapse
When you boot into Hiren ( what simply is a rudimentary Windows 10 OS bloated with tons of tools ) then the Windows computer is mapped as drive X:. All other drives you might see are partitions the Windows PE is divided into.

blackhawk said:
Are you saying the data is encrypted and that you lost the encryption key?
If so you got gigantic problems.
No encryption key means no chance of access.
Stop messing with it and find a certified MS tech to try to repair the load.
Click to expand...
Click to collapse
My laptop had only one partition, the OS C:. which ran the windows and had all my files. When I rebooted after that system restore, the C: drive itself got locked and the system asked me for its Bitlocker Recovery Key. Now if I never setup the bitlocker myself, why would I have the recovery key on me? Theoretically, while setting up a bitlocker manually, there is an option to "Backup Bitlocker Keys" which, upon clicking, uploads the recovery key to your Microsoft account as well as gives you a notepad file of the same. But before this happening I had absolutely no knowledge of the Bitlocker's mere existence! So if the system set it up itself, shouldn't it have uploaded the bitlocker keys to my account itself too? In my knowledge, I had not even received the slightest of warnings related to bitlocker mishaps in the past. That's what makes this experience feel like hell.

jwoegerbauer said:
When you boot into Hiren ( what simply is a rudimentary Windows 10 OS bloated with tons of tools ) then the Windows computer is mapped as drive X:. All other drives you might see are partitions the Windows PE is divided into.
Click to expand...
Click to collapse
That sounds just about right, cause when the PC was "alive" and usable, I never saw any other partitions other than the C: drive itself. It surprised me too to see 5 other drive partitions accompanying the C: in the HBCD environment, but I guess all those were useless. I am not sure though; could they be holding some important data?

Also, just my own thought but, could there be any way to brute force the bitlocker recovery key? I mean its a heck lot of combinations but, is it even possible? I do have access to some info that might help in reducing the number of combinations greatly and make the work easier, but I just want to confirm if started, it would bring out some result.

With regards to BitLocker:
The BitLocker recovery key is a unique 48-digit numerical password.
How to obtain the BitLocker recovery key is described here:
Finding your BitLocker recovery key in Windows - Microsoft Support
Learn different ways to locate your BitLocker recovery key in Windows, and learn about how BitLocker might have been activated on your system.
support.microsoft.com

jwoegerbauer said:
With regards to BitLocker:
The BitLocker recovery key is a unique 48-digit numerical password.
How to obtain the BitLocker recovery key is described here:
Finding your BitLocker recovery key in Windows - Microsoft Support
Learn different ways to locate your BitLocker recovery key in Windows, and learn about how BitLocker might have been activated on your system.
support.microsoft.com
Click to expand...
Click to collapse
That article is probably what everyone suggests when mentioned the term Bitlocker Recovery. I have of course read it thoroughly and found nothing of relevance to my case. The key is not in my Microsoft account as I stated before. I have not printed out a single sheet of paper in the past 2 years. I have checked every single USB drive I have at home for even the slightest mentions of a recovery key. I don't have an Azure account. And lastly, I am the only administrator if that system, there are no other users attached to my laptop. Would you be having any other suggestions?

Chinmay47 said:
My laptop had only one partition, the OS C:. which ran the windows and had all my files. When I rebooted after that system restore, the C: drive itself got locked and the system asked me for its Bitlocker Recovery Key. Now if I never setup the bitlocker myself, why would I have the recovery key on me? Theoretically, while setting up a bitlocker manually, there is an option to "Backup Bitlocker Keys" which, upon clicking, uploads the recovery key to your Microsoft account as well as gives you a notepad file of the same. But before this happening I had absolutely no knowledge of the Bitlocker's mere existence! So if the system set it up itself, shouldn't it have uploaded the bitlocker keys to my account itself too? In my knowledge, I had not even received the slightest of warnings related to bitlocker mishaps in the past. That's what makes this experience feel like hell.
Click to expand...
Click to collapse
Do you have a MS account? You may have inadvertently setup bitlocker when you opened that account. If so you might be able to retrieve through your MS account.
I turn off system restore because it slows the machine down and it has failed me more than once. My clone copies have not.
Keep the OS and data on different drives whenever possible. I set up my Androids like this too; the SD card is the data drive.
Learn and come back stronger.

@Chinmay47
My final post here:
Whether Bitlocker is enabled or not is steared by an entry in Windows' registry
Subkey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker
Value: PreventDeviceEncryption equal to True (1|0)
Type: REG_DWORD
Hence try to reset this registry setting to 1
You may use HIREN to achieve this.

There's no way to access the registry on a locked encrypted volume...

blackhawk said:
There's no way to access the registry on a locked encrypted volume...
Click to expand...
Click to collapse
The official Windows PE allows you to load / edit offline Windows' registry hives by means of REGEDIT
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Question GPS stopped working as it used to after debloating. Which GPS Apks are pre-installed in the phone?

Hey, title is very much self descriptive. After debloating and removing a lot of what i would think were not essentials for the phone, GPS STILL does work, but only on OsmAnd, and not on other aps that use the map, and even then it takes several minutes for me to find location on the map. I ASSUME that this is because i removed something that lets app interact with mobile towers to get location and instead it relies only on sattelites to know where i am however this is mere speculation. I'd like to know if anyone with a lot more knowledge than i have could point me at which apps this phone would use stock with GPS or location services so that i could reinstall them and see what exactly did i break.

Consider this a bump, but in more specific terms. Could anyone help me identify or show me a list of potential GPS-related functionality APKs that would make other map apps not work properly?

Come on dude. Re-flashing is clearly your only option.
You would be better asking in other more popular Samsung Galaxy forums for general advice.

TimmyP said:
Come on dude. Re-flashing is clearly your only option.
You would be better asking in other more popular Samsung Galaxy forums for general advice.
Click to expand...
Click to collapse
This is usually where most of the advice regarding modifying the OS and debloating came from so i suspected it was the best place to ask.

Releases · 0x192/universal-android-debloater
Cross-platform GUI written in Rust using ADB to debloat non-rooted android devices. Improve your privacy, the security and battery life of your device. - 0x192/universal-android-debloater
github.com
use this and connect your phone via USB cable and enable ADB debugging in developer settings and give it perms when it pops up a prompt. Then set the 3 menus on the right to say All, Disabled/Uninstalled(Try Disabled and if it doesn't show anything try Uninstalled), and All Lists. It should show you a list of all the apps you have that you got rid of and you can press the button to get it back. It might work for you or it might not. If you mess up your phone even more its on you not me.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

CloudRealm said:
Releases · 0x192/universal-android-debloater
Cross-platform GUI written in Rust using ADB to debloat non-rooted android devices. Improve your privacy, the security and battery life of your device. - 0x192/universal-android-debloater
github.com
use this and connect your phone via USB cable and enable ADB debugging in developer settings and give it perms when it pops up a prompt. Then set the 3 menus on the right to say All, Disabled/Uninstalled(Try Disabled and if it doesn't show anything try Uninstalled), and All Lists. It should show you a list of all the apps you have that you got rid of and you can press the button to get it back. It might work for you or it might not. If you mess up your phone even more its on you not me.View attachment 5476313
Click to expand...
Click to collapse
Interesting, so that way i can keep track of which apk i removed?

Well, i just installed a maps app in the phone after having a reset from factory and.... Its working exactly like it used to? It still wont get GPS signal. Now im wondering what's going on.

hahaNSAgoBRRRR said:
Interesting, so that way i can keep track of which apk i removed?
Click to expand...
Click to collapse
Yep

hahaNSAgoBRRRR said:
Well, i just installed a maps app in the phone after having a reset from factory and.... Its working exactly like it used to? It still wont get GPS signal. Now im wondering what's going on.
Click to expand...
Click to collapse
Strange... maybe update the os?

You need to reflash everything with Odin *mod and start again. Sorry I cant help you as I needed it myself when I did the same with camera as I was debloating, and Im not sure how to do it.
I am, however, sure this is what you need to do. It is more than a factory reset.

Well... I did a factory reset again and this time the second that i connected the phone to the internet i downloaded a maps apk that i was using and... Yeah, it cant locate the phone, so either using only GPS no wifi the phone is hardly able to locate itself, or the phone is doing something weird about the GPS that my previous phone didn't, or the only time i accidentally dropped my phone from like 1 feet into the ground i broke something which is real unlikely, or the GPS receiver of this phone is THAT bad and my house is THAT good at blocking GPS signal.
What a weird conondrum.
I mean, crap, even google maps doesn't know where i am. Is this because i refused google's location services?

You need to reflash everything with Odin *mod and start again. Sorry I cant help you as I needed it myself when I did the same with camera as I was debloating, and Im not sure how to do it.
I am, however, sure this is what you need to do. It is more than a factory reset.

TimmyP said:
You need to reflash everything with Odin *mod and start again. Sorry I cant help you as I needed it myself when I did the same with camera as I was debloating, and Im not sure how to do it.
I am, however, sure this is what you need to do. It is more than a factory reset.
Click to expand...
Click to collapse
Dont worry dude, i already did a factory reset. My problem persists with the factory reset is the current topic of trouble to me.

FACTORY RESET WILL NOT FIX. REFLASHING ROM WILL NOT FIX.
I screwed my Camera up the same way, with just removing apks. You need to reflash the slots in odin and run multi-disabler and all that again.

TimmyP said:
FACTORY RESET WILL NOT FIX. REFLASHING ROM WILL NOT FIX.
I screwed my Camera up the same way, with just removing apks. You need to reflash the slots in odin and run multi-disabler and all that again.
Click to expand...
Click to collapse
Is it really "again" if i never did it to begin with?

Yes.

TimmyP said:
Yes.
Click to expand...
Click to collapse
Im a bit lost, how does this all work, what do you say i broke, and why do i need to use odin that factory reset wont fix?

idk why did I need odin when my camera stopped from doing the same thing? I flashed a new rom and went through initial setup, also did a factory reset, it still didnt work! Its a guess obviously since its not the exact same problem, but id say something similar is happening to your gps hardware.

TimmyP said:
idk why did I need odin when my camera stopped from doing the same thing? I flashed a new rom and went through initial setup, also did a factory reset, it still didnt work! Its a guess obviously since its not the exact same problem, but id say something similar is happening to your gps hardware.
Click to expand...
Click to collapse
Well, my issue so far seems to be quite similar to this one:
Is there a way to get GPS to work without Google Location Service constantly enabled?
The GPS on my Samsung Galaxy S2 cannot find my current location whenever Google Location Service is disabled. I have it disabled most of the time because my battery drains much faster when the ser...
android.stackexchange.com

If I were you (op) I would reflash stock, copy everything to PC (all apps/apks) and slowly remove a few at a time and test gps as I go along. I know that would take some time but eventually you would find which ones have to do with gps. You could also make a list of all the names of the apks and throw them in your "search" on a browser and see what all you can find out about them that way..
The most detailed explanation I have ever seen of descriptions of apps is definitely xXx No Limit magisk rom for OnePlus 6,7,8 devices. The dev has a user configuration file where you choose whether you want to keep, delete, replace each apk in the entire device and he has an explanation for every single app that tells what it's used for and if it's safe to delete or not. I would search all I could, and maybe do the copy/delete apk first and see what all you can find then maybe shoot No Limit rom dev a msg asking him. IDK him personally except from here using his rom when I had a OnePlus 6t but I bet he would respond. Most people will help you out "if" they can see whoever is asking for the help has already done some work in to whatever it is themselves.

note 20 android 13 0 B storage Bug

Hi all
I updated my note 20 ultra 5g from 12 to 13 by OTA PDA: N986BXXS5GVK9 and working fine but when I wake up morning while my device charged I found it 0 B storage so I restart my device and memory again normal. This practice am doing daily without any improvement.
If I go into the Settings > Storage section, all I see are 0 B everywhere. Calls, and receiving & sending messages in WhatsApp/SMs app works fine too. All apps that needs to store on internal user storage can't do it because its not there.
I did some actions like below:
I disabled the 4GB of extra RAM.
I cleared applications cache by ccleaner.
in the apps section in settings, 3 dots top right, special access and activate access to all media storage.
I am attaching some images if they can be of any help to anyone.
still issue not solved and I don’t want to reset format my device
regards
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

That last image is showing -1B available storage.
Try clearing the system cache on the boot menu. Otherwise you're headed for a factory reset. Make sure all critical data is redundantly backed up... now.
Lol, Android the 13th

blackhawk said:
That last image is showing -1B available storage.
Try clearing the system cache on the boot menu. Otherwise you're headed for a factory reset. Make sure all critical data is redundantly backed up... now.
Lol, Android the 13th
Click to expand...
Click to collapse
thanks a lot
but these pictures not mine but same my issue 0 B.
i tried yesterday to off my device and push power & + volume tell Samsung display appear but i cant find recovery and device start normal

the dreamer said:
thanks a lot
but these pictures not mine but same my issue 0 B.
i tried yesterday to off my device and push power & + volume tell Samsung display appear but i cant find recovery and device start normal
Click to expand...
Click to collapse
You need to have a usb cable plugged in to get to recovery. Can't remember when they changed this .....

dvhttn said:
You need to have a usb cable plugged in to get to recovery. Can't remember when they changed this .....
Click to expand...
Click to collapse
Samsung's a mess. It's not like that on the N10+ Android 9/10. I think it's hardware mod rather than firmware?
Lol, I forgot abut that because I don't have to do it. Guess some fools were pocket factory resetting. Can't have that

yesterday i wiped cash & repair apps by connecting USB cable to my laptop by recover mode and working ok
but
today early morning 2:30AM i used my devise and found it -1 B like the picture so i did wipe cash again and waiting today if again memory storage lost or not

the dreamer said:
yesterday i wiped cash & repair apps by connecting USB cable to my laptop by recover mode and working ok
but
today early morning 2:30AM i used my devise and found it -1 B like the picture so i did wipe cash again and waiting today if again memory storage lost or not
Click to expand...
Click to collapse
Yeah, that's not acceptable behavior.
Dismount and remove SD card. See if that helps.
If you're stateside take it to a Samsung Experience center at a Best buy. They have advanced diagnostics, allegedly.
Factory reset. This could be malware. Reload with care, keep the trashware like WhatsApp off it. Bare bones load at first and then gradually add more apps. Social media apps are malware and should never be installed; login by browser only if you must visit them. This saves your battery and decreases your exposure.
If all that fails reflash firmware to last known good version ie older than is on it preferably. This is another reason I don't upgrade/update firmware; less variables and you can spot odd behavior faster . A known playing field makes troubleshooting much easier. Troubleshooting new firmware can be very time consuming*...
That last possibility is a hardware failure. However I still think the most likely suspect is a 3rd party app. If you do a reload lockdown all updates for all apps. Do a few or one at a time over the course of days. Keep a log*.
*this can get bloody. Consider using more advanced tools to find the app or process responsible for the behavior. I never had to do this with Android but you may need to. With Windows I did it more than once.

blackhawk said:
Yeah, that's not acceptable behavior.
Dismount and remove SD card. See if that helps.
If you're stateside take it to a Samsung Experience center at a Best buy. They have advanced diagnostics, allegedly.
Factory reset. This could be malware. Reload with care, keep the trashware like WhatsApp off it. Bare bones load at first and then gradually add more apps. Social media apps are malware and should never be installed; login by browser only if you must visit them. This saves your battery and decreases your exposure.
If all that fails reflash firmware to last known good version ie older than is on it preferably. This is another reason I don't upgrade/update firmware; less variables and you can spot odd behavior faster . A known playing field makes troubleshooting much easier. Troubleshooting new firmware can be very time consuming*...
That last possibility is a hardware failure. However I still think the most likely suspect is a 3rd party app. If you do a reload lockdown all updates for all apps. Do a few or one at a time over the course of days. Keep a log*.
*this can get bloody. Consider using more advanced tools to find the app or process responsible for the behavior. I never had to do this with Android but you may need to. With Windows I did it more than once.
Click to expand...
Click to collapse
thanks a lot for support
since my last wipe for cash my note working fine and no issue for memory tell now

the dreamer said:
thanks a lot for support
since my last wipe for cash my note working fine and no issue for memory tell now
Click to expand...
Click to collapse
Did you try to clear the davlik cach in recovery mode sometimes it help to refresh it

next_1989 said:
Did you try to clear the davlik cach in recovery mode sometimes it help to refresh it
Click to expand...
Click to collapse
i don't remember if i saw this option or no
but i did 2 steps only
wipe catch
&
repair apps
working fine tell now

Sometimes it happens like this because of flashing wrong pit files or after you remove frp or change the system files so the best way to make sure is do s backup with switch on your pc and flash the stock rom and restore your backup and check again

Try it and let me know

next_1989 said:
Sometimes it happens like this because of flashing wrong pit files or after you remove frp or change the system files so the best way to make sure is do s backup with switch on your pc and flash the stock rom and restore your backup and check again
Click to expand...
Click to collapse
why should i flash my device while its working fine

the dreamer said:
why should i flash my device while its working fine
Click to expand...
Click to collapse
If its working fine then dont flash sir