[Completed] [Q] Maleware on Galaxy Note 3 - XDA Assist

Hello!
I didn't know, where I should post this. I'm new here by the way and sorry for my bad English. I have a Samsung Galaxy Note 3 with Android 4.4.2, rooted and no Custom Rom (The 'problem' appeared befor I rooted it). I think there is Spyware or something ralated on my phone. I know, it's normal that some apps create folders on my SD Card. But I know every folder and which app creates them. Except for two. These Folders are always generated at the same time. But there is no special time or action which creates them (Or I simply don't know which 'action' by me creates them). The Point is, that Google doesn't find anything conserning the folders. I can search up all others except these two. One folder is named '. DataStorage' and the other '. UTSystemConfig'. The UTSystemConfig folder contains an XML file called 'Alvin2.xml' and the '. DataStorage' folder contains a file called 'ContextData.xml'.
I searched up 'Alvin2.xml and found two suspicius links. Both lead to a Cloudscan (NVISO) of apk's. In both cases, the alvin2.xml was one of the detected files (see: screenshots and links).
Links (To the Cloudscan, the Space between bit. and ly is because I can't post links.):
bit. ly/1LjuTtk (TTPod.v7_.5_.1_.apk)
bit. ly/1MFdVCU (爱淘宝.apk)
I don't have any of the two APK's installed but the Alvin2.xml from 'TTPod.v7_.5_.1_.apk' (First link) is exactly in the same dictionary (.UTSystemCofig).
The Alvin2.xml contains this code:
<map>
<long name="timestamp" value="8276bla..."/>
<long name="t2" value="9287bla..."/>
<string name="UTDID">U75z/Ph3B bla...</string>
<string name="DID">359bla...</string>
<long name="S" value="193bla..."/>
<string name="SI">232bla...</string>
<string name="EI">359bla...</string>
</map>
Click to expand...
Click to collapse
ContextData.xml contains this code:
<map>
<string name="K_1171477665">
5B27423 bla...
</string>
<long name="t2" value="1404bla..."/>
</map>
Click to expand...
Click to collapse
I couldn't find anything about ContextData.xml.
If I delete the folders, there is a pause about one to five weeks until they appear again. I have CM Security an it detects nothing. Even SD Card Scan finds nothing. Any suggestions? Maby is there a way, to find out, which app creates the folders? (If it is necessery: My phone is rooted but the folders appeard before I rooted it. I don't have a custom rom and I don't want to make a factory reset if that's possible.)
Thank you!

Hi
Thanks for writing to us at XDA Assist. Have you tried using an anti-malware app to scan your device?

Maleware on Galaxy Note 3
Hi! Thanks for the reply.
Yes of course! I wrote it in the last paragraph.
I have CM Security and it detects nothing. Even SD Card Scan finds nothing. Any suggestions?
Click to expand...
Click to collapse

JigSaw101 said:
Hi! Thanks for the reply.
Yes of course! I wrote it in the last paragraph.
Click to expand...
Click to collapse
Apologies, I must have skimmed past that section. If the files are indeed malicious, and if they keep returning after being deleted, they must be caused by an app that you use or a site you visit. Unfortunately it's impossible to know which one it is. I'd suggest you run at least two other anti-virus apps over your phone, if none of them are able to detect the source and/or remove the threat then you'll have to factory reset.
Transmitted via Bacon

No response in two days, thread closed.

Related

where is Google translation keeping offline dictionaries?

where is Google translation keeping offline dictionaries?
Device storage > Android > data > com.google.android.apps.translate > files > ol > v3r1 > language code (de, fr, zh, etc)
fishstik said:
Device storage > Android > data > com.google.android.apps.translate > files > ol > v3r1 > language code (de, fr, zh, etc)
Click to expand...
Click to collapse
from which website we can download our desired language package and then copy it in the data directory ???because i couldn't download language package in my phone.(because i get this error on google translate in my phone: failed to get offline package profile) and i have to download it manually from internet and then copy files in the android data directory.but i don't know from which site i can download offline language package data,anyone knows?
ghahremanimehdi said:
from which website we can download our desired language package and then copy it in the data directory ???because i couldn't download language package in my phone.(because i get this error on google translate in my phone: failed to get offline package profile) and i have to download it manually from internet and then copy files in the android data directory.but i don't know from which site i can download offline language package data,anyone knows?
Click to expand...
Click to collapse
Wondering if you've tried clearing data of Google Translate, then uninstalling and reinstalling? In any case, if that doesn't work and you can't find it through a Google search, perhaps you can be more specific about which languages you're after.
PantsDownJedi said:
Wondering if you've tried clearing data of Google Translate, then uninstalling and reinstalling? In any case, if that doesn't work and you can't find it through a Google search, perhaps you can be more specific about which languages you're after.
Click to expand...
Click to collapse
spanish pack please
thx
roggox1 said:
spanish pack please
thx
Click to expand...
Click to collapse
When I downloaded Spanish, it first said "Downloading Core File" or something along that line, and it had a ? next to it which I clicked and it said that its a separate download necessary for off line translation. More importantly, where the translation files are stored, it appears that the files, since I only have english and spanish installed, are labeled in the fashion of en_es and es_en. Note though, that I hadn't previously installed Spanish but that it is the only language I've used with Google Translate, so this may be a factor but my guess is that its a result of what's installed as there's more than one of these files and the directory is sort of large.
So that said, I'm not sure if this would actually work if we had all the same languages installed, or that since mine defaults to English, and the phone's locale for English is Australia, if it makes a difference.
This is what I pulled from /sdcard/Android/data/com.google.android.apps.translate/files though, which is where the data seems to have gone as near as I can tell. There are some database files in /data/data/com.google.android.apps.translate/ along with some other stuff and it a small amount of data in there, but this too may be important but if its linked to my account then it wouldn't work I don't think so I'm not including it.
Okay so as stated, here's what I pulled and its at /sdcard/Android/data/com.google.android.apps.translate/files
https://docs.google.com/file/d/0BzBXVgEr6tYzQlg1WHlla0RkZ3M/edit?usp=sharing
I'm deficient when it comes to making zip files at the command line. If you're unfamiliar with .tar files, you can put it on the sdcard, then open terminal emulator and in the case of this particular tar file, enter cd /sdcard/ and then after that tar -vxf translate-files.tar -C /
you might want to backup that directory yourself first or delete it and reinstall google-translate if it breaks things or simply doesn't work.
Also, if you need differant languages than just Spanish and English, especially since it seems to create things corresponding to what I have installed, I don't mind downloading other languages and trying it out like that, but quote this post if its the case or I won't know you replied. Hopefully the core file didn't go to the /data partition as it might then be linked to my account and replacing that wouldn't work in that case.
---------- Post added at 05:15 PM ---------- Previous post was at 04:17 PM ----------
roggox1 said:
spanish pack please
thx
Click to expand...
Click to collapse
If this is for a reason of country restriction, by the way, if you install MarketEnabler along with Hotspot Shield, you can still spoof the country your in. Hotspot Shield should be uninstalled after you're done though, and uninstall it by stopping the app then clearing the data, then uninstall, or freeze it (also after clearing the data) if you're rooted. I've used that to install apps only available in the U.S.
I don't remember why I had a problem with HotSpot Shield being on the device. It autostarts at boot (and probably on other system events) which can be disabled if you're rooted so it must have gone beyond that. I think it was more than just not wanting a proxy that logs stuff or can man in the middle... maybe it had push ads or something else that wasn't appropriate, I can't remember now.
If answer to original question is still needed, it's there: http://forum.xda-developers.com/showthread.php?p=42500594#post42500594
Is it possible to save the offline dictionaries in the sd card? I have tried moving the google.translate folder to my sd card, but the application does not see them. Another try was to first install the application in the sd card, then try to download them, but without success. Also, having the app installed in the sd card, I moved the files to the sd card, again with no success.
I have a Galaxy S4 mini, and I amasking for a solution without having to root the phone.
I have the same question for Google music, but I think it is more difficult to this app. I know that there is a solution in rooted phones, with mounting drives. But I need a simplier solution.
diofar said:
Is it possible to save the offline dictionaries in the sd card? I have tried moving the google.translate folder to my sd card, but the application does not see them. Another try was to first install the application in the sd card, then try to download them, but without success. Also, having the app installed in the sd card, I moved the files to the sd card, again with no success.
I have a Galaxy S4 mini, and I amasking for a solution without having to root the phone.
I have the same question for Google music, but I think it is more difficult to this app. I know that there is a solution in rooted phones, with mounting drives. But I need a simplier solution.
Click to expand...
Click to collapse
have you found the answer? I have exactly the same issue with the same cell phone. I have as well tried the same steps . Thanks

Mixzing app won't open

I updated my phone to4.4.1 today and ever since I haven't been able to open my music player 'Mixzing'. When I click on the App icon it goes to a black screen momentarily then back to the home screen without starting the app (this is the only app that it happens on)
I have wiped dalvik ect and deleted any folders that have 'mixzing' on and tried re-installing but nothing has helped.
Any ideas?
anyone?
Same here
I couldn't post my question on the corresponding Dev Thread for CM11 on i9300, but found this post for Nexus 5. Unfortunately without an answer.
I have the same problem (MixZing app doesn't open) on i9300 with CM11 nightly (Android 4.4.2). On CM10.2 (Android 4.3.1) it worked fine.
Have you found an answer somewhere else?
storchp said:
I couldn't post my question on the corresponding Dev Thread for CM11 on i9300, but found this post for Nexus 5. Unfortunately without an answer.
I have the same problem (MixZing app doesn't open) on i9300 with CM11 nightly (Android 4.4.2). On CM10.2 (Android 4.3.1) it worked fine.
Have you found an answer somewhere else?
Click to expand...
Click to collapse
Same here, no solution yet.
I made a modded version of the mixzing app to get it to launch for me:
All I did was replace the following in com.mixzing.android.SdCardHandler.getCardId()
Code:
invoke-static {v10}, Landroid/os/FileUtils;->getFatVolumeId(Ljava/lang/String;)I
move-result v4
with
Code:
const/16 v4, 0xBEEF
You should use your own random number instead of BEEF since this effectively means that you are always returning the same value for getFatVolumeId as far as the app is concerned.
Can you explain this to the developer of MixZing? So they can update the original App.
Would be nice, thanks.
storchp said:
Can you explain this to the developer of MixZing? So they can update the original App.
Would be nice, thanks.
Click to expand...
Click to collapse
They have said that they know about it. They were just taking too long for my taste, so I did it myself instead.
If you can't wait I can post my modded version if you want, but I highly recommend doing the mod yourself rather than simply trusting that my posted version does not contain any malware. It's just a good habit to get into IMO.
Never modded an App. But I'm eager to learn. Any resource (document, blogpost, etc.) I should look into?
storchp said:
Never modded an App. But I'm eager to learn. Any resource (document, blogpost, etc.) I should look into?
Click to expand...
Click to collapse
You can technically use a combination of 7zip (or another zip utility), smali, baksmali, and signapk to do this mod, however this is not the most user friendly way to do it. I would suggest using one of the following:
Here is one way, apktool (Linux, Mac OS, Windows): http://forum.xda-developers.com/showthread.php?t=2195680
The other is Virtuous Ten Studio (Windows Only): http://forum.xda-developers.com/showthread.php?t=1619473
*EDIT*
It is important to note that since this is not a system apk -- I.E. one that comes with the phone -- you will have to re-sign the apk after adding, removing, or changing any of the files inside. If it were a system apk, you could place the classes.dex file directly into the apk (which is secretly a zip file) without re-signing. (VTS does this for you automatically).
Thanks, I'll check it out.
Ok, decompiled it and found the lines you mentioned in a file called SdCardHandler.smali.
Before I change it I want to understand a little bit what I'm doing.
The method getFatVolumeId() returns the Id of a given Mount Point. It's a native method call which I guess causes the trouble here.
If I change it to a static value, does it do any harm? I mean I have an internal and external SD card. Does MixZing check both?
You should use your own random number instead of BEEF
Click to expand...
Click to collapse
Just some hex value I can think of? e.g. AEEF, CEEF, ABCD, ...
Couldn't wait, wanted to try anyway
Did the changes, compiled a new apk, signed it, but it doesn't install :crying:
When installing via the phone itself it just tells me that the App hasn't been installed.
When installing via ADB it get an INSTALL_FAILED_SHARED_USER_INCOMPATIBLE error. Need to figure out, how to fix this.
storchp said:
Couldn't wait, wanted to try anyway
Did the changes, compiled a new apk, signed it, but it doesn't install :crying:
When installing via the phone itself it just tells me that the App hasn't been installed.
When installing via ADB it get an INSTALL_FAILED_SHARED_USER_INCOMPATIBLE error. Need to figure out, how to fix this.
Click to expand...
Click to collapse
The problem is that on our devices, that native method does not exist, so we just arbitrarily use a value such that it always returns the same value (I.E. always the same card) As for the error, uninstall any applications signed by the same certificate as Mixzing was or sign your modded copy with debug keys, and it should install just fine.
*edit*
Other fun values:
DEAD, F00D, B00B, BABE, C0DE.
Thanks. A little research brought me to the packages.xml file. In there I found the shared user attribute for the MixZing Upgrader App. I was not sure if I want to edit the file. But after your tip I just uninstalled the Upgrader App and I could install the modded version.
Thanks a lot
Meanwhile they have fixed the App in the store.

WHATSAPP CALLING 100% Guarantee {ROOT}

YOU NEED 3 THINGS :
1. An Android Phone Running on 4.4.x or above.
2. Whatsapp 2.11.508 installed.
3. Root Exporer/Root Browser apk installed.
If you have all these mentioned things installed in your phone then proceed ahead.
Steps :-
1. Open Root Explorer and go to Data>Data>com.whatsapp>Shared_prefs>com.whatsapp_preferences.xml.
2. Open it in RB Text Editor and then you see something like this after opening .xml file :
<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
<map>
After that <map> you have to write <boolean name="call" value="true" />
<string name="call_allowed">all</string> in the next line after <map>.
3. Now, Save that .xml file and go to settings>apps>Whatsapp and select FORCE CLOSE.
4. You are all done. Open your WHATSAPP and enjoy !!
This method is 100% Working as i am also using this method.
Hit Thanks :good: if you like my work.
Mod Edit: Thread closed as a duplicate. Please continue the discussion here: http://forum.xda-developers.com/android/general/guide-enable-whatsapp-call-feature-t3019489
Screenshot
SS of com.whatsapp_preferences.xml after edit pls
Sent From My XT1068{LP} Using TapatalK
Good I will try it so the opposite person also should do the same and do we need an invite to active pls
Enter that string after <map> line.
In screenshot,my all new coding was hidden after saving .xml file.
Rishabh-The Developer said:
Enter that string after <map> line.
In screenshot,my all new coding was hidden after saving .xml file.
Click to expand...
Click to collapse
I used this method but the call lasts 0.5 seconds and the recipient does not have evidence.
Note N7100 - Rom Carbon Nightly 4.4.4 KK
uzas said:
I used this method but the call lasts 0.5 seconds and the recipient does not have evidence.
Note N7100 - Rom Carbon Nightly 4.4.4 KK
Click to expand...
Click to collapse
Have you done all methods sucessfully ?
I Think u forgot to Force Close the app.
Rishabh-The Developer said:
Have you done all methods sucessfully ?
I Think u forgot to Force Close the app.
Click to expand...
Click to collapse
I did everything and calls are enabled but the ringing is 0.5 second, then nothing.
Note N7100 - Rom Carbon Nightly 4.4.4 KK
So then you have to wait for a official update from play store(not with whatsapp website).
Rishabh-The Developer said:
So then you have to wait for a official update from play store(not with whatsapp website).
Click to expand...
Click to collapse
Maybe! So, even you can't call?
Note N7100 - Rom Carbon Nightly 4.4.4 KK
Call hack by: Ishaqzaada Rishabh????
I bet you wont believe that even by yourself. This method was posted couple days ago in several places, at least here and here.
Your guide tells to edit Data>Data>com.whatsapp>Shared_prefs>com.whatsapp_p references.xml.
There is no such a file, it should be /data/data/com.whatsapp/shared_prefs/com.whatsapp_preferences.xml
In screenshot,my all new coding was hidden after saving .xml file.
Click to expand...
Click to collapse
If you look close enough, you might find out that this code doesn't get 'hidden' anywhere. It's still there, it just might not be in same row where you typed it.
Anyway, thanks for failing the copypaste work you did to make this guide :good:
Solution
Spere said:
Call hack by: Ishaqzaada Rishabh????
I bet you wont believe that even by yourself. This method was posted couple days ago in several places, at least here and here.
Your guide tells to edit Data>Data>com.whatsapp>Shared_prefs>com.whatsapp_p references.xml.
There is no such a file, it should be /data/data/com.whatsapp/shared_prefs/com.whatsapp_preferences.xml
If you look close enough, you might find out that this code doesn't get 'hidden' anywhere. It's still there, it just might not be in same row where you typed it.
Anyway, thanks for failing the copypaste work you did to make this guide :good:
Click to expand...
Click to collapse
Dude most of the Xiaomi users have this problem ,they are able to locate data/data folder. just Google your location of com.Whatsapp folder for your device,then you might be able to locate the com.Whatsapp_prefs file.
I cracked up when I saw that screenshot too. :laugh::laugh::laugh::laugh: Just another typical noob kanger.
Spere said:
Call hack by: Ishaqzaada Rishabh????
I bet you wont believe that even by yourself. This method was posted couple days ago in several places, at least here and here.
Your guide tells to edit Data>Data>com.whatsapp>Shared_prefs>com.whatsapp_p references.xml.
There is no such a file, it should be /data/data/com.whatsapp/shared_prefs/com.whatsapp_preferences.xml
If you look close enough, you might find out that this code doesn't get 'hidden' anywhere. It's still there, it just might not be in same row where you typed it.
Anyway, thanks for failing the copypaste work you did to make this guide :good:
Click to expand...
Click to collapse
Sorry but can we continue the discussion in the previously opened guide for this: Thread closed as a duplicate. Please continue the discussion here: http://forum.xda-developers.com/android/general/guide-enable-whatsapp-call-feature-t3019489
Thanks!

[Completed] GT-I9060L stuck in bootloop after setting up "Android Device Manager"

Ok, so I think I was prepared for something like this, but it seems that this is too much for me:
(I don't want to bother any of you, so you can skip the story and go to the summary down there)
I have a very normal Samsung Galaxy Grand Neo, GT-I9060L (the "L" stands for latin, as I'm chilean). Since with an older phone (Galaxy Y) I had some... issues, this time I wanted to play safe and decided to not root it. Ok, so no problem since 2014... until now. This morning I went to the Google's Android Device Manager website, and noticed that, where the buttons "Lock" and "Erase" should have been, there was something like "Setup Lock & Erase". I didn't do that before? So I clicked it, and it sent a notification to my phone, requiring the activation of "Android Device Manager" as a "Device Administrator". Ok, I read and accepted. The problem then began. I mean, the phone rebooted immediately, and it got stuck in the "SAMSUNG" splash screen, with a little vibration every few seconds (usually it's once, and then it shows the lock screen). Damn! As I had enabled USB Debugging, I thought that I could do something to at least backup the data there. Well, executing `adb devices`, and trying different states of the phone (I can get it to recovery mode, and ODIN mode, but not to safe boot), the only things that I could get to were "offline" (Linux) or "unauthorized" (OS X) under Recovery Mode (there wasn't anything to do, as any command lead me to an "error: device offline."), and "sideload" under Recovery Mode > apply update from ADB, which I think is one of the two only ways to try a firmware update (I don't know if that would solve anything), but I don't know if it would delete any data. Going to the main boot loop and trying `adb wait-for-device` didn't work (it just goes offline), so there isn't a way to get the phone to a normal state of "device" in adb (in other words: i cannot start the daemon on the phone, I suppose). Another thing I could do is to install Kies and try that "Firmware Upgrade and Initialization" thing, but I'm afraid that it could also mean to wipe the data there. I don't want to do so.
I'm sorry, I always write that long (in every language...), but at least there are more details with all of it.
So, summary:
– Grand Neo stuck at the SAMSUNG boot screen, right after setting Android Device Manager as a Device Administrator.
– USB Debugging is enabled, the phone is not rooted, and the firmware is the official, I mean, never touched.
– Some time ago I dumped the ".pit" file and also got the firmware (I9060LUBUANG1) from samsung-updates, just in case.
– I can get the phone to Recovery and ODIN modes, and so I just could do `adb sideload <file>` with some <file> (zip?).
– Can't even wipe the cache partition. I think it's game over with that one.
– I could try reinstalling the firmware with Kies, but don't know (as it doesn't recognize the phone) if I could do a backup.
– I don't want to wipe, erase, nor delete any data in the phone. It's the last resource for me.
Could I get some help with this? What should I do? ADB sideload? Kies? Something about Heimdall? I use OS X, but I've got a Pi, so there shouldn't be any problems with software (also, I've got a super-slow-netbook with Win XP hidden somewhere... I wish I could install Win 10 in Boot Camp inside this MBP Mid 2009). Thank you if you get to read this, and try to understand and help me with this.
Also, I'm sorry if this doesn't belong here (or anywhere...), but I couldn't post this on the Grand Neo forum (and it confuses me: is that forum for I9060i Grand Neo Plus as it states or for every I9060?).
Hi !
Please refer to this forum
https://forum.xda-developers.com/t/galaxy-grand-neo
Good luck !
Thaanks i solved it!!
xanthrax said:
Hi !
Please refer to this forum
https://forum.xda-developers.com/t/galaxy-grand-neo
Good luck !
Click to expand...
Click to collapse
Oh, simply thank you! Thanks to you I solved it! I owe you my phone's warranty!! (now voided, but whatever!)
[((Solution: DELETE THAT FILE `/data/system/device_policies.xml` through any recovery that lets you delete such file))]
You know something? I looked there before, but after your post I decided to go further (on my own!) into that forums, did some research about some things... and decided to flash a recovery. And I researched that it wouldn't do anything to the partitions I didn't want to lose, because the recovery has its own partition. Well, looking into the Grand Neo forum, I chose the TWRP recovery over the CWM one, because the latter was way older. And as I don't have Win, I used Heimdall with my Pi (Raspbian), but when I started I had some problems with the connection to the device. I discovered that the problem that I had with this version of the Heimdall package (1.4.0) had been already solved with the commit #329 on GitHub, so I tried compiling from source, and it successfully worked.
Then, I got amazed because, on recovery, I could get root access to every file, and also the device was detected over ADB as "recovery", and could do everything. Gladfully, I copied every file in the internal storage and the external SD Card to my Mac, then formatted the SD, then made backups of the Data and System partitions. Later, I discovered the difference between the Data, System, Internal Storage, Micro SD Card, Cache, Dalvik Cache, and Recovery partitions.
So if anyone out there wants a bit of info (at least about my phone), the System partition works like the Mac's System folder, containing things that almost never get modified by the end user, unless you flash some image to that partition (a custom or stock ROM, ideally), or delete accidentally causing broken things. The Data partition is mounted in /data, and contains (almost) everything that gets modified over the time. It also contains mount points for the Internal Storage, at /data/media/0 (there are several mount points for this over all the drive, and it's quite confusing), and I don't know exactly, but I think for Dalvik Cache and the Cache. The Micro SD Card partition is almost independent from everything else, but it also has several mount points along the Internal Storage one. the Cache is, well... the cache, and is mounted at /cache. The recovery partition is what I touched, and I think it explains itself a lot if you've used a Mac (pressing command+R at startup). The Dalvik Cache is quite interesting. I think it's mounted at /data/dalvik-cache, but I'm not sure. Well, it apparently has "optimized" versions of your apks stored in /data/app.
When I thought that wiping the Dalvik Cache would solve something, I discovered that the phone almost booted properly, but came back to the boot loop after the process of "optimizing" all of my 157 apps, with the difference that the device got recognized this time (only when booting after wiping the Dalvik!) by the ADB as a "device". Well played, at least. I went back to TWRP and made a backup of the Data, so now I can come back to that error whenever I want.
As I could get back in time, I decided to look for that little thing that was preventing my phone from booting. First, I dumped over 15 MB of logs, by ADB, the Recovery and the Shell. Now I can see that everything relates to some "policies" (more on that later). Then, I wiped the /data partition, as I had a backup. And I saw the phone booting to that "Welcome to your new Android!" thing. Thanks, the problem wasn't on the system! It was the Data! And, to confirm myself, I went to the settings, and activated that Google Device Administrator Thing again. Boom! Bootloop. It got wiped again by me, just to go there and do some "testing". I was going to see exactly what changed with that option, so went to that menu, and just before "pressing the button" (!), I went to recovery, and got every regular folder and regular file (because any symlink and stuff just made the copy fail) copied from /data to my computer. Then, I booted the phone, changed the setting, powered it off, and copied the /data again. In bash I made a `diff -r`, and also listed (from the original /data that I wanted to recover) every file there (this time of any kind) and on my computer sorted them all by date, to see the last files touched. Well, the diff resulted on various things, like a new line on the file /data/data/com.android.settings/shared_prefs/com.android.settings_preferences.xml:
Code:
<boolean name="pref_device_provision" value="true" />
It wasn't so important, as I deleted it and rebooted and nope, the bootloop continued. Backup restored again.
Then, something more interesting on the file /data/data/com.google.android.gsf/shared_prefs/update.xml: some name "provisioned" changed its value from zero to a UNIX timestamp in milliseconds. I didn't do anything on that because it wasn't so important, a timestamp. There was a ton of files with such timestamps, and also some new files from certain background apps, and the diff also showed up several xml files differing because the sorting. Dismissed all that and kept looking, and...
THERE IT WAS:
Code:
Only in /Users/Benja/Desktop/pos/data/system: device_policies.xml
(for the record: there was a "pre" and a "pos" folder, one for each /data)
I HATE IT. Out of rage, I looked at the file:
Code:
<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
<policies>
<admin name="com.google.android.gms/com.google.android.gms.mdm.receivers.MdmDeviceAdminReceiver">
<policies flags="28" />
<allow-storage-card value="true" />
<simplepassword-enabled value="true" />
<allow-wifi value="true" />
<allow-text-messaging value="true" />
<allow-popimap-email value="true" />
<allow-browser value="true" />
<allow-internet-sharing value="true" />
<allow-bluetooth-mode value="2" />
<allow-Desktop-Sync value="true" />
<allow-IrDA value="true" />
<require-StorageCard-Encryption value="false" />
<allow-list-thirdparty value="" />
<block-list-InRom value="" />
<allow-unsignedapp value="true" />
<allow-unsignedinstallationpkg value="true" />
</admin>
</policies>
THAT FILE WAS CAUSING ALL OF THIS. There was also a backup of that file, that had nothing else than the xml header and an empty `<policies />`. But well, that file appeared also in the list of the most recently touched files (it took a while to do that list, because I couldn't figure out a better way than listing /data recursively and with full dates with the `-re` options (looked up for those at the help there, because the options were different and `find` didn't have printf) and parsing it with awk (stackoverflow #1767384), then on my Mac did the rest of the date parsing and sorting with date and cut and date again).
I DELETED THAT FILE `/data/system/device_policies.xml` (and obviously made a backup, even though I'll never want to bootloop it again, lol). Then rebooted and... finally I was able to see again my Little Prince lock background: Il tomba doucement comme tombe un arbre.
Now I'm restoring the files that I got from the Internal and External Storages. Then everything will continue as usual. Thank you so much for referring me to that forum again.
Also, after all of this, I googled the file and magically found this russian website (to prevent spamming, I cannot post a href): http://juick.com/PoZitron/2801749
That site (through the Google Translator (irony)) had just the info that I'd want to have read before (in russian, lol).
Well, as the site points, всегда делайте бэкапы!
Thanks again, and good luck to everyone else with problems out there.
Hi !
I`m glad you solved it , thanks for letting us know
Cheers !
thread closed

I've deleted some important files by mistake and I would really like to recover them.

Hello,
I hope that this is the right side of the forum to describe my problem. I desperately need help. It's a long story:
I had on my Samsung phone the app of "Chrome", which I always use to surf the internet. Using the google browser IN THAT APP, I have downloaded lots of things (I'm a scholar, so I like to read and I use to download everything that I found interesting). I have updated the app and I was frustrated, because I couldn't take anymore screenshots while surfing in "incognito mode". So, I decided to delete the update: i went into "settings", then "apps", and then I have brought back the app of "Chrome" as it was when i bought my phone. Sadly, I then noticed that I had lost every file in my download folder; I had lost every file downloaded with that app.
I had not synchronized my Google account, I can do no backup. I'm so angry and sad because I've always thought that the files downloaded would have stayed in my phone until I and only I would have decide to delete them.
I have done a lot of research on the internet and I have found out that there are some apps that can recover a very large part of lost files. But, in order to do this, I have to root my phone.
My phone is a Samsung Galaxy J2 SM-J250Y/DS, and the Android version is 7.1.1. I have seen that rooting a phone could be very dangerous; also, to me is very complicated. But there is a program called Kingoroot, which, once installed on my computer, could (it's a possibility, I know!) rooting my phone easily.
What should I do? Should I try the rooting method? It seems to me the only way...
I ask you any suggestions... Please help me. I am a depressed student that, in this life, can only enjoy reading and books...
(I am Italian, and I hope my English is understandable. If I did any mistake, please forgive me.)
Sorry can't help you get what you lost back... I feel your pain.
After losing thousands of bookmarks over the decades I started using Colornotes to save my important bookmarks.
You can save the hyperlink with a title, color, and whatever text you want to add. If you punch the hyperlink it opens in the default browser.
The app allows you to save it's data to your sd card which you can backup on your PC.
Use ApkExport to make a loadable copy of the app to future proof it.
ColorNote Notepad Notes - Apps on Google Play
ColorNote® - Easy to use notepad for notes, shopping list, to-do list, calendar
play.google.com
Thank you very much for your reply.
But... If I root my phone, and if the rooting is done without any damage, is there a possibility to get most of my files back? Or, even if I root my device, I will never be able to recover them?
It sounds like it deleted the data when you rolled the apk back (to factory load?).
If so it's going to be very sketchy at best to recover them.
I guess history's been deleted as well?
There are many coders here that have far greater knowledge than myself with Chrome.
My understanding of rooting is very basic as with Chrome which I rarely use.
If no one else replies in a day or two, bump it back to the top. Hope you find a work around solution.
AlexiusFrigerius said:
But... If I root my phone, and if the rooting is done without any damage, is there a possibility to get most of my files back? Or, even if I root my device, I will never be able to recover them?
Click to expand...
Click to collapse
Rooting Android by means of TWRP and/or Magisk ( keyword: SuperSU ) affects its /data partition where phone's data typically are housed. Therefore it cannot be excluded that data stored there is overwritten and can therefore no longer be restored.
jwoegerbauer said:
Rooting Android by means of TWRP and/or Magisk ( keyword: SuperSU ) affects its /data partition where phone's data typically are housed. Therefore it cannot be excluded that data stored there is overwritten and can therefore no longer be restored.
Click to expand...
Click to collapse
Is there the possibility if deleted that it's still on the system cache and is there a way to recover it if so on a none rooted phone?
Maybe using ABD?
Don't some on the "one touch" root solutions claim to preserve the data?
Android doesn't have a recycle bin thus nothing gets cached. Deleting a file means nothing else than marking the space it occupies - whereever this disk space is located - as usable so that it can be overwritten by the system.
Have never used a "One-Click-Root" utility ...
blackhawk said:
It sounds like it deleted the data when you rolled the apk back (to factory load?).
If so it's going to be very sketchy at best to recover them.
I guess history's been deleted as well?
There are many coders here that have far greater knowledge than myself with Chrome.
My understanding of rooting is very basic as with Chrome which I rarely use.
If no one else replies in a day or two, bump it back to the top. Hope you find a work around solution.
Click to expand...
Click to collapse
Yes, it's just like I told. And yes, even history has been deleted.
Thank you for your help! I will wait until someone may give me a solution, or a possibility for a solution.
jwoegerbauer said:
Rooting Android by means of TWRP and/or Magisk ( keyword: SuperSU ) affects its /data partition where phone's data typically are housed. Therefore it cannot be excluded that data stored there is overwritten and can therefore no longer be restored.
Click to expand...
Click to collapse
Ok, I understand...
jwoegerbauer said:
Android doesn't have a recycle bin thus nothing gets cached. Deleting a file means nothing else than marking the space it occupies - whereever this disk space is located - as usable so that it can be overwritten by the system.
Have never used a "One-Click-Root" utility ...
Click to expand...
Click to collapse
Thank you for your explanation.
jwoegerbauer said:
Android doesn't have a recycle bin thus nothing gets cached. Deleting a file means nothing else than marking the space it occupies - whereever this disk space is located - as usable so that it can be overwritten by the system.
Have never used a "One-Click-Root" utility ...
Click to expand...
Click to collapse
Yeah I was aware of the overwrite issue but on an unrooted device I don't think you can access the system cache. Even if you could the data could be so juxtaposed from lose of file structure as to be unusable.
One-Click-Root worked on older versions of Kitkat allegedly.
So... I understand. But I want to try. I want to root my phone. But I have to know how and I must prevent my phone from all the risks.
blackhawk: you said that the "One-Click-Root" method worked only for Kitkat Android. But I have read here that with Kingoroot i could have a chance:
How to Root Android Nougat (7.0/7.1) | KingoRoot Apk
Root any Android Nougat 7.0 7.1 device with KingoRoot.
www.kingoapp.com
(It's important: I AM NOT SPAMMING Kingoroot, I just want to understand If I can trust what it's written in their site. Also, in the link, at the end of the page, there is written that I can root my phone with my PC, which, to me, seems a safer way. It's the main idea I had when I decided to write in this forum, because I wanted to know the opinions of people that are very able to use these methods and these kind of programs.)
AlexiusFrigerius said:
So... I understand. But I want to try. I want to root my phone. But I have to know how and I must prevent my phone from all the risks.
blackhawk: you said that the "One-Click-Root" method worked only for Kitkat Android. But I have read here that with Kingoroot i could have a chance:
How to Root Android Nougat (7.0/7.1) | KingoRoot Apk
Root any Android Nougat 7.0 7.1 device with KingoRoot.
www.kingoapp.com
(It's important: I AM NOT SPAMMING Kingoroot, I just want to understand If I can trust what it's written in their site. Also, in the link, at the end of the page, there is written that I can root my phone with my PC, which, to me, seems a safer way. It's the main idea I had when I decided to write in this forum, because I wanted to know the opinions of people that are very able to use these methods and these kind of programs.)
Click to expand...
Click to collapse
You can try it; it will either work or nothing will happen. Even if it works it's likely those files are gone. Maybe better to chalk it up to another lesson from the University of Hard Knocks.
You could try contacting Google tech support to see if they have any ideas.
The last AT&T firmware update was specifically to block easy rooting by Kingroot; the rats learn quick.
blackhawk said:
You can try it; it will either work or nothing will happen. Even if it works it's likely those files are gone. Maybe better to chalk it up to another lesson from the University of Hard Knocks.
You could try contacting Google tech support to see if they have any ideas.
The last AT&T firmware update was specifically to block easy rooting by Kingroot; the rats learn quick.
Click to expand...
Click to collapse
Thank you very much for your help. I understand: I must give up. But the most important thing is to learn something about anything we do. Anything could help for future situations.
"It's a shame to stumble twice on the same stone" (Polybius, 31,11, 5).
Thank you again. Goodbye!
AlexiusFrigerius said:
Hello,
I hope that this is the right side of the forum to describe my problem. I desperately need help. It's a long story:
I had on my Samsung phone the app of "Chrome", which I always use to surf the internet. Using the google browser IN THAT APP, I have downloaded lots of things (I'm a scholar, so I like to read and I use to download everything that I found interesting). I have updated the app and I was frustrated, because I couldn't take anymore screenshots while surfing in "incognito mode". So, I decided to delete the update: i went into "settings", then "apps", and then I have brought back the app of "Chrome" as it was when i bought my phone. Sadly, I then noticed that I had lost every file in my download folder; I had lost every file downloaded with that app.
I had not synchronized my Google account, I can do no backup. I'm so angry and sad because I've always thought that the files downloaded would have stayed in my phone until I and only I would have decide to delete them.
I have done a lot of research on the internet and I have found out that there are some apps that can recover a very large part of lost files. But, in order to do this, I have to root my phone.
My phone is a Samsung Galaxy J2 SM-J250Y/DS, and the Android version is 7.1.1. I have seen that rooting a phone could be very dangerous; also, to me is very complicated. But there is a program called Kingoroot, which, once installed on my computer, could (it's a possibility, I know!) rooting my phone easily.
What should I do? Should I try the rooting method? It seems to me the only way...
I ask you any suggestions... Please help me. I am a depressed student that, in this life, can only enjoy reading and books...
(I am Italian, and I hope my English is understandable. If I did any mistake, please forgive me.)
Click to expand...
Click to collapse
Hi, I would suggest you can try free tool for Android Phone such as Stellar Data Recovery for Android which easily recover deleted files like, photos, audio files, videos files from your Android phone internal memory storage.
Source: https://www.stellarinfo.com/media-tools/android-data-recovery.php
{Mod edit: Quoted post has been deleted}
That drfone again. Scamware.
Do Not Use.
Drfone if used will encrypt "recovered" data and ask you to pay for it. After which the original data is gone leaving only the encrypted copy.
It is not free... not to be trusted!
Ran into this scam many years ago.

Categories

Resources