What is proof that my ex spies on my phons - Security Discussion

So my recent ex boyfriend did something to my phone and was spying on me. He knew things that he would only know bc he had access to everything on my phone. Before u think I'm just paranoid I will say that he has been charged with a crime for doin this to someone else years ago. I think he flashed my phone to do whatever he did. He's very very smart when it comes to technology, he has about 6 laptops and works with computers. He even made the comment once that if he wanted to spy on my phone that it wouldn't matter bc I could never prove it. With one of my phone's I used to could put it in recovery mode but then one day it wouldn't go into recovery mode anymore, I have two build prop files when I used to have only 1. My question is where exactly would a folder be that has a file that wpild prove he spies on me, he's too confident that he can't be caught and admitted he's done it to his exes. This is illegal and wrong and he shouldn't get away with it. I saw something called conspy and cttyhack but I'm not sure if he put it on my phone or if that's just on some phones help me please, there has to be something in a folder I'm just unsure where to look

You could try Malwarebytes and scan your phone. I seem to mention this a lot around here but I've had good results helping friends and family when they screw something up.
Best bet is to wipe and factory reset.

KernelCorn said:
You could try Malwarebytes and scan your phone. I seem to mention this a lot around here but I've had good results helping friends and family when they screw something up.
Best bet is to wipe and factory reset.
Click to expand...
Click to collapse
Factory reset doesn't help. I know he flashed my phone so idk what he has programmed in the phone but he did something and I need to find the proof

Really really good question but you will hate the answer lol
To answer your question, you would need to seek someone with a reasonable level of tech (ideally) who is preferably certified or holds some form of IT credentials to present your case to the authorities. They would use a forensics program (such as EnCaseĀ® Forensic ) to make an exact replica of your phones data. Not to mention you would also need someone else (with a very high tech skill set) to be able to actually identify the malicious behaviour of your phone.... not super hard but can be.... if you were to just take your phone straight to the police yourself with your story .... I highly doubt much would come from it. Even if you can prove what you are saying is true AND you have your infected phone as evidence..... you still have no evidence he did it. Even if your friend was there with you and both watched the entire re flashing etc.... You are still beat... I am going to guess you would need no less than full video of him doing it and even then it would be very shaky.... who's phone was it etc etc ....non malicious hacks (to non celebs and elites) is run of the mill and they probably have about 0.1% of the IT personnel needed at their disposal.... long story short.... errr longish ... I would HIGHLY suggest replacing your phone or taking a chance and getting help from random "tech" Those are your two options.... or you could also get famous overnight I guess..... your call. :good:

Basically you can't prove he did it
But you can testify that he manually flashed a rom to your phone
You can get any decent intelligent tech company to dump your Rom
And compare it to the original rom for changes..
And if those changes are detrimental you have a civil case against him..
But for what it will cost you in tech fees and lawyer bills
Buy 10 new phones and don't let anyone touch them.

cutie28345 said:
So my recent ex boyfriend did something to my phone and was spying on me. He knew things that he would only know bc he had access to everything on my phone. Before u think I'm just paranoid I will say that he has been charged with a crime for doin this to someone else years ago. I think he flashed my phone to do whatever he did. He's very very smart when it comes to technology, he has about 6 laptops and works with computers. He even made the comment once that if he wanted to spy on my phone that it wouldn't matter bc I could never prove it. With one of my phone's I used to could put it in recovery mode but then one day it wouldn't go into recovery mode anymore, I have two build prop files when I used to have only 1. My question is where exactly would a folder be that has a file that wpild prove he spies on me, he's too confident that he can't be caught and admitted he's done it to his exes. This is illegal and wrong and he shouldn't get away with it. I saw something called conspy and cttyhack but I'm not sure if he put it on my phone or if that's just on some phones help me please, there has to be something in a folder I'm just unsure where to look
Click to expand...
Click to collapse
Use a firewall and see which apps have UNUSUALLY many permissions.
i think he used d*****ack, (sorry, i will not post the name of the hack)
Its quite easy to use and CAN be combined with an existing app
it can be used to record voice/video
can even see call logs, messaging history, whatssap etc.
so boot into recovery mode and wipe factory reset FROM recovery, not settings.(if you dont want to check each app manually)

I think he used d- r- o- i- d- j- a- c- k

cutie28345 said:
So my recent ex boyfriend did something to my phone and was spying on me. He knew things that he would only know bc he had access to everything on my phone. Before u think I'm just paranoid I will say that he has been charged with a crime for doin this to someone else years ago. I think he flashed my phone to do whatever he did. He's very very smart when it comes to technology, he has about 6 laptops and works with computers. He even made the comment once that if he wanted to spy on my phone that it wouldn't matter bc I could never prove it. With one of my phone's I used to could put it in recovery mode but then one day it wouldn't go into recovery mode anymore, I have two build prop files when I used to have only 1. My question is where exactly would a folder be that has a file that wpild prove he spies on me, he's too confident that he can't be caught and admitted he's done it to his exes. This is illegal and wrong and he shouldn't get away with it. I saw something called conspy and cttyhack but I'm not sure if he put it on my phone or if that's just on some phones help me please, there has to be something in a folder I'm just unsure where to look
Click to expand...
Click to collapse
you are just paranoid.
about the build.prop, whenever a change is made, the system saves the original as a backup. so youll have 2. if you dont want to be paranoid anymore, in twrp or cwm recovery, wipe the system then flash another rom or a factory image. wiping the system will delete any rom or anything that was added into your system. you will need to flash a rom before you could boot up again.

I think getting a new phone will be the most hassle free and likely cheapest solution. Turn off the other phone, take out the battery and you will have nothing to worry about it anymore.
Yes you can go and do al kinds of checks yourself, reset it and have some people look at it. But will you ever be sure that there is nothing malicious left on your phone? Just holding the phone that was once (or still is) infected by your (evil?) ex-boyfriend might bring up many emotions. Please don't lose your sleep over this. Spare yourself the trouble and get a new device.
Maybe it was time for an update anyway
Good luck!

If it is a good device, give it to me
Or even a crappy one I have a collection of both)
I'll use it
That will mess with your exs mind..

Related

Remote task29 as security

Hi Guys
Is there a application that could execute a remote task29 if phone gets stolen?
Most of theves are dump so would not know how to put the OS back on.
The normal way of IMEI blocking does not work, some networks will not care to block, some will not communicate to others so it will be blocked for example on O2 but not t-mobile... We all also know that you just need to sell a IMEI blocked unit abroad.
Two functions would need to be present:
Function 1 a remote wipe so you send a txt message.
Function 2 is to wipe the phone if new sim is inserted and password is not provided. Such software would need to be able to cook itself in to rom.
Second possibility for Function 2 is each time new sim is inserted a txt message is sent on pre-arranged mobile number and then use remote wipe.
lookout mobile security has that feature of remote wipe.
www.mylookout.com
antivirus, remote wipe, and gps locator all work.
nrfitchett4 said:
lookout mobile security has that feature of remote wipe.
www.mylookout.com
antivirus, remote wipe, and gps locator all work.
Click to expand...
Click to collapse
It is not even remotely the same as even if you do wipe the device it is still usable, there is just you data erased. I am talking OS erased so phone does not work, so you can get it to bootloader and only if you know how.
ruscik said:
It is not even remotely the same as even if you do wipe the device it is still usable, there is just you data erased. I am talking OS erased so phone does not work, so you can get it to bootloader and only if you know how.
Click to expand...
Click to collapse
considering you cannot even task29 unless you are synced to a computer, how do you suppose this can be accomplished???
nrfitchett4 said:
considering you cannot even task29 unless you are synced to a computer, how do you suppose this can be accomplished???
Click to expand...
Click to collapse
I am not a software developer but I would say a app that works just before OS boots.
TBH task29 seems like the best idea as if you were to get the phone back you could get it back online but any app that would brick the phone remotely is what one needs.
I am quite certain something like that could be done.
why not have it flash a bricking radio from sd card or within the rom, if the command is send?
how about an app then makes the phone transform into a plane and fly back to you?
its impossible what you are asking for afaik
davidgk said:
how about an app then makes the phone transform into a plane and fly back to you?
its impossible what you are asking for afaik
Click to expand...
Click to collapse
Bolox I can flash radio or OS from SD card. All a app would need to do is get phone to bootloader on command and have, as suggested, a bricked rom for radio on SD card. A bricked radio rom would not need to be big in size so a cab installer would work.
Its a very good idea, hope some1 can do it..
my hats off to you sir, a very good idea!
Now if there is only a developer skilled enough to realise it!
ruscik said:
Bolox I can flash radio or OS from SD card. All a app would need to do is get phone to bootloader on command and have, as suggested, a bricked rom for radio on SD card. A bricked radio rom would not need to be big in size so a cab installer would work.
Click to expand...
Click to collapse
but what does this achieve for you???
A phone wiping program would wipe personal data.
What would bricking the phone do except make the phone unusable?
You'll still be out a phone...
nrfitchett4 said:
but what does this achieve for you???
A phone wiping program would wipe personal data.
What would bricking the phone do except make the phone unusable?
You'll still be out a phone...
Click to expand...
Click to collapse
Might be so, but if knowledge gets around that more and more phones can (and will) be bricked remotely once stolen, why steal?
I think it would be a very useful feature on any phone.
So I agree with the question for such an app.
Regards,
nrfitchett4 said:
but what does this achieve for you???
A phone wiping program would wipe personal data.
What would bricking the phone do except make the phone unusable?
You'll still be out a phone...
Click to expand...
Click to collapse
Well why do you fit a alarm on a car when it is gone it is gone, why do you put alarm in a house when they come they come.
Something odd with this statement. Why would you think it is ok for some one who stole my phone to use it when I had to work for it?
For me best solution would be to have it wired with C4 and 5s in to first phone call boom!!!
As that would be illegal second option brick the phone.
ruscik said:
Well why do you fit a alarm on a car when it is gone it is gone, why do you put alarm in a house when they come they come.
Something odd with this statement. Why would you think it is ok for some one who stole my phone to use it when I had to work for it?
For me best solution would be to have it wired with C4 and 5s in to first phone call boom!!!
As that would be illegal second option brick the phone.
Click to expand...
Click to collapse
Since when does a car alarm or home alarm burn down my house or car? That is essentially the same thing. If someone breaks into my house and steals my 60" dlp, I can't remote detonate it either.
I'm guessing that I don't understand. Maybe it is my long history with cdma phones that had esn's that could be blocked making the phones worthless (usually) once stolen.
Ill build it .... i just need a few beta testers?
Any takers?
jk.. i actually like the idea of disabling my phone if i knew it was gone for sure. .but i dont think i would be comfortable running around with this bomb in my phone unless i knew how to fix it.. and a bricked radio (easiest remote detonate solution) is obviously unfixable.
you know I was hoping this topic was headed in a different direction. like the phone company or microsoft running ras commands. like injecting and changing your files around so when you go to flash the seed will be planted for later execution. but dude if your phone gets stolen beat the punk bastards ass. or make sure you have handset protection. stupid topic. its just gonna add to the bricked my phone posts but not before they go on a couple of paragraphs of how they know what there doing but this and but that. wow then its gonna keep spreading like a ****ing plauge of dumb ass questions instead of keeping their cocksucker shut and read and learn. if your not f-ing it up, then your not learning.
i remember the sony ericsson p910, p990, and p1i could have set a sim password that works the same way the bios password works on most laptops with this feature... once the sim changed or the phone is flashed, the password must be entered to boot into the OS, personally i think this should be standard on every mobile OS...
and regardless how much times you reinstall windows, flash the bios, or remove the bios battery, the password remains, kinda annoying but at least it works
There are already some really good apps available for if your phone is lost or stolen. I don't know the names off the top of my head but I did some help on development on one 2 years ago and it was quite advanced and will send you silent text containing the new IME number if changed and the GPS location. Rendering the phone useless would be stupid in my opinion if you intend on retrieving it. let the security software do it's job and be happy to get your phone back.

How safe are used phones?

I am looking to buy a used captivate soon and I had an alarming thought..
To make purchases from google market you do have to enter credit card info..
So what if someone bought the phone, installed monitoring software on the phone, turned around and sold it.. They could break even on cost.. *AND* if they were lucky when someone else went to use the phone.. they would get the cred card info of that person..
And on ebay/craigslist... its not like you could pin it back to the person very easily..
Assuming I bought a phone and master reset it would that fix any possibly problems? I know in windows you reinstalling the OS will usually wipe just about anything out..
However, I know that if you have root.. on a phone you can do far more.. I don't know if having root would be enough to put something on the phone that could not be gotten rid of with a simple master reset.
I am sorry if this sounds paranoid.. But, I am a comp sci major.. Software security isn't my specialty.. but, I am hoping to dev for phones soon and think this is a pretty fair question, since the information is handled differently in linux (and I suppose now android) than it would be on a comp running windows xp for example..
I am asking because i know even after a master reset some things linger on most phones... so if someone installed a keylogger of some sort.. would it be able to survive a master reset?
x.x
Just because you're paranoid doesn't mean the're not after you.
Sent from my SGH-T959 using XDA App
Lol... Let me put it this way.. I once read an article hear with some one talking about how he doesn't want "google knowing where he is" and "google reading his mail" ect ect ect.
And I understand privacy concerns.. but, he was well.. reaching the point of flat out goofy.
I am asking based on what I perceive to be a valid fear looking at it from a logical perspective.
If someone installed some sort of keylogger for the phone, would it be able to survive a master reset?
I mean I know that whats on your sim card is not usually deleted.. and I forget if this phone has dedicated or removable memory or some combination of both..
However, assuming its a 16gb removable.. You could hypothetically install it to the flash memory.. If its not removable.. I am less certain how that dedicated storage is handled on phones. I know that you generally format a hard drive before installing an os.. or it gets partitioned off..
So if a logger was installed onto the dedicated/removeable memory would it be partitioned off and allowed to continue working?
If I didn't see valid cause for concern I wouldn't be here.. But, I'm sure the devs around here know more about this and can give a good answer!
If this is all coming to my mind... I'm sure some crazy cracker out there has already thought of and either created/working on implimenting it.
google will nevr read your mail. google is your friend!
if you have a virus on it or think you have, plug it in your computer and scan with av software.
i don't think that a virus could survive master reset.
and why are you worrying about this? ive bought second hand phones before and they have been ok.
try eBay.
You don't seem to have read my thing properly.
What I am trying to say is I have read an thread with a guy who was paranoid google was going to read his mail ect.
What I am saying is I'm worried about a second hand person creating a virus.
I could be wrong but, plugging the phone into a computer would do absolutely nothing as far as antivirus protection if I'm worried about protecting the phone.
The reason why is because anti virus protection only picks up virus's it is designed to pick up.
It is designed to pick up viruses that are a threat to computers.
I would imagine that computer anti virus software would worry about a different set of exploits than a linux based phone.
Making scanning with a computer completely useless.
yes, keylogger can survive hard reset. you have to reflash your phone completely to be sure. or don't provide your credit card number in any market
Hard reset and reflash official software. Everything will be like it just rolled out of the factory.
Pretty silly thing to ask really.
obviosuly if teh key logger was cooked into the rom then a master reset wont do sweet FA as it would simply be re-installed with the rom.
As mentioned your only way is flash the phone with a fresh rom.

Rooting Phones When On Verizon Edge?

Hey folks,
Does anyone know for certain (not speculation) how Verizon treats phones that have been rooted when you go to trade them in on the Edge program? Will a phone that's been rooted in the past be denied for Edge trade-in?
Thanks
So I called Verizon. They said that I would need to remove root in order to trade it in or "Edge-Up". I've read recently though that even if you unroot your phone, carriers can now detect the fact that at one point time it was rooted. Is this true?
MSmithXDA said:
So I called Verizon. They said that I would need to remove root in order to trade it in or "Edge-Up". I've read recently though that even if you unroot your phone, carriers can now detect the fact that at one point time it was rooted. Is this true?
Click to expand...
Click to collapse
most phones can be returned to stock without a trace of root as long as the stock files are available.
check your phones specific forum for return to stock guides and methods to remove root indicators if that applies.
calling verizon and asking about root really was not wise. they usually make notes on your account when you call for future reference.
you may not have an issue later from calling them, but you defiantly stirred the hornets nest, so it is possible you will.
---------- Post added at 09:01 PM ---------- Previous post was at 08:55 PM ----------
MSmithXDA said:
Hey folks,
Does anyone know for certain (not speculation) how Verizon treats phones that have been rooted when you go to trade them in on the Edge program? Will a phone that's been rooted in the past be denied for Edge trade-in?
Thanks
Click to expand...
Click to collapse
btw,
it doesnt matter what plan you are on, they dont allow rooting period.
as far as they are concerned, "when they find out it is rooted", your warranty is void, returns are not accepted, and trade ups are denied.
bweN diorD said:
calling verizon and asking about root really was not wise. they usually make notes on your account when you call for future reference.
you may not have an issue later from calling them, but you defiantly stirred the hornets nest, so it is possible you will.
Click to expand...
Click to collapse
Well I didn't tell them it was me :silly: I pretended to be a new customer interested in service and just had these hypothetical questions. But they didn't have my account # or anything to trace it back to me. Thanks for the info though!
MSmithXDA said:
Well I didn't tell them it was me :silly: I pretended to be a new customer interested in service and just had these hypothetical questions. But they didn't have my account # or anything to trace it back to me. Thanks for the info though!
Click to expand...
Click to collapse
I hope you didn't call them from the phone that's on your account.
I really wouldn't worry about returning a phone that is/was rooted, unless perhaps it was a Samsung with Knox tripped and/or a yellow triangle. It's simply not cost effective for them to check every phone. The reps at the store aren't trained for that sort of thing, and when it goes back to wherever they get refurbished, it's only the hardware that gets tested, and they flash a new factory image. They have to flash a new image, because even after a factory reset, sensitive data can still exist in the memory on the phone (data isn't actually deleted when you delete it, until it gets overwritten, formatted, or you use a special app that does that sort of thing). Certain things can remain the same after doing a factory reset as well. I did a factory reset on a Nexus 4 rooted with Towelroot, and root remained.
Case in point: When I was with Verizon, I rooted my Razr Maxx. I was new to this whole "root" thing (I did it to bypass their hotspot crap). I was having a problem with the Play Store; it wouldn't let me purchase/download ROM Toolbox Pro, regardless of if I did it on my phone or off the website. So I got clever and deleted it (with a warezed Titanium - I'm not proud, I paid for the legit version later) and reinstalled it. And every time I tried, the Play Store would FC instantly.
So I did a factory reset, and WTF? The Play Store was GONE. Some bloatware was back, like the Madden NFL demo and some stupid cartoony golf game, but the Play Store was GONE. Not so clever, I guess. So I bit the bullet and took it to a Verizon store, told them I did a factory reset and Play Store was gone (I left out the other stuff). They googled it for like half an hour before giving up and ordering me a warranty replacement.
At one point, a rep did ask me if I hacked it - I played dumb (how do you hack a phone?). If they were trained or experienced in the sort of things we do, they would have known that the only way this could have happened was if the phone was rooted and I did something. And, if I wasn't such a n00b, I would have known to change Play Store to a system app and it probably would have worked fine (this occurred to me the day after). I got the replacement, and never heard anything about the old phone. I didn't feel too bad about "screwing" them in to giving me a new (refurb) phone, because when I got the replacement, I saw that the screen on the old one was dim, yellow, and sickly compared to the newer one, so apparently there was something actually wrong with it. Months later, the battery on the replacement expanded to the point that it popped the screen loose. The battery expanded on it's replacement too. But that's beside the point.
The point is, when you return a phone, it gets tossed into a pile, and that pile gets sent back to whatever it is they do with them. The sales reps aren't trained for that sort of thing - if you have a problem they don't know off the top of their head, they just google it on the iPads they carry around, and if they come across a site like XDA, they probably ignore it because the lingo and jargon here is gibberish to them (hell, most of it's still gibberish to me, and I've been learning all I can for 2 years). So it gets tossed in to a pile and sent wherever, and wherever it's sent gets hundreds of piles a day, and it's simply not cost effective to check every device. The parts get refurbed, the factory images get flashed (to eliminate any residual sensitive data and ensure the version is up to date), and that's that.
So I really, really, wouldn't worry about it. Unless it's a Samsung and you tripped Knox, have a yellow triangle, or it reads as "custom" or whatever. If you unlocked the bootloader, relock it. Beyond that, don't worry about it. I'm not saying it's impossible that something might happen and they "find out", but it's extremely unlikely. And unlikely to have repercussions. Remember, they want your money. Above all, they want your money. Are they going to keep getting your money if they piss you off by not honoring a phone exchange plan that you're already paying more for? Are they going to keep getting your money if you're dissatisfied and choose to switch providers? Unlikely. A new phone to them is a couple hundred bucks. One more year of service is a grand. Don't worry about it.
Planterz said:
I hope you didn't call them from the phone that's on your account.
I really wouldn't worry about returning a phone that is/was rooted, unless perhaps it was a Samsung with Knox tripped and/or a yellow triangle. It's simply not cost effective for them to check every phone. The reps at the store aren't trained for that sort of thing, and when it goes back to wherever they get refurbished, it's only the hardware that gets tested, and they flash a new factory image. They have to flash a new image, because even after a factory reset, sensitive data can still exist in the memory on the phone (data isn't actually deleted when you delete it, until it gets overwritten, formatted, or you use a special app that does that sort of thing). Certain things can remain the same after doing a factory reset as well. I did a factory reset on a Nexus 4 rooted with Towelroot, and root remained.
Case in point: When I was with Verizon, I rooted my Razr Maxx. I was new to this whole "root" thing (I did it to bypass their hotspot crap). I was having a problem with the Play Store; it wouldn't let me purchase/download ROM Toolbox Pro, regardless of if I did it on my phone or off the website. So I got clever and deleted it (with a warezed Titanium - I'm not proud, I paid for the legit version later) and reinstalled it. And every time I tried, the Play Store would FC instantly.
So I did a factory reset, and WTF? The Play Store was GONE. Some bloatware was back, like the Madden NFL demo and some stupid cartoony golf game, but the Play Store was GONE. Not so clever, I guess. So I bit the bullet and took it to a Verizon store, told them I did a factory reset and Play Store was gone (I left out the other stuff). They googled it for like half an hour before giving up and ordering me a warranty replacement.
At one point, a rep did ask me if I hacked it - I played dumb (how do you hack a phone?). If they were trained or experienced in the sort of things we do, they would have known that the only way this could have happened was if the phone was rooted and I did something. And, if I wasn't such a n00b, I would have known to change Play Store to a system app and it probably would have worked fine (this occurred to me the day after). I got the replacement, and never heard anything about the old phone. I didn't feel too bad about "screwing" them in to giving me a new (refurb) phone, because when I got the replacement, I saw that the screen on the old one was dim, yellow, and sickly compared to the newer one, so apparently there was something actually wrong with it. Months later, the battery on the replacement expanded to the point that it popped the screen loose. The battery expanded on it's replacement too. But that's beside the point.
The point is, when you return a phone, it gets tossed into a pile, and that pile gets sent back to whatever it is they do with them. The sales reps aren't trained for that sort of thing - if you have a problem they don't know off the top of their head, they just google it on the iPads they carry around, and if they come across a site like XDA, they probably ignore it because the lingo and jargon here is gibberish to them (hell, most of it's still gibberish to me, and I've been learning all I can for 2 years). So it gets tossed in to a pile and sent wherever, and wherever it's sent gets hundreds of piles a day, and it's simply not cost effective to check every device. The parts get refurbed, the factory images get flashed (to eliminate any residual sensitive data and ensure the version is up to date), and that's that.
So I really, really, wouldn't worry about it. Unless it's a Samsung and you tripped Knox, have a yellow triangle, or it reads as "custom" or whatever. If you unlocked the bootloader, relock it. Beyond that, don't worry about it. I'm not saying it's impossible that something might happen and they "find out", but it's extremely unlikely. And unlikely to have repercussions. Remember, they want your money. Above all, they want your money. Are they going to keep getting your money if they piss you off by not honoring a phone exchange plan that you're already paying more for? Are they going to keep getting your money if you're dissatisfied and choose to switch providers? Unlikely. A new phone to them is a couple hundred bucks. One more year of service is a grand. Don't worry about it.
Click to expand...
Click to collapse
the reason root remained after you did a factory reset is, factory reset does nothing more than wipe the data partition. root code is not inserted there, so it will remain in tact with the exception of the su app unless it is installed in system/apps..
the fact that you had bloatware return after a reset is odd, i have never heard this happen before. resetting does not modify, restore, or change the system partition in any way.
as for them finding the root, i agree it is unlikely, but it can and has happened. also, it doesn't have to happen right away. there have been several reports of charges for replacement phones applied to your bill, from modifications found after the return.
as for them caring if you leave for another carrier, they don't, plain and simple. this has been shown countless times over the years. many people leave them every day, and they don't do the slightest thing to try and stop them.
i seriously doubt they will let you strong arm them by threatening to leave after they find out you returned a modified phone.

My device was destroyed by something that I flashed here on the threads.

I can't say when it happed. Evidently, it has been on my phone for a long time. I can remember seeing some of this funny crap months ago when I first rooted my phone. One of the mods here has a surfaceflinger hack that will take over your entire system. Your accounts will get hacked. First it was my Google drive. There was a zip file in there that I did not place. It said it was a Metro PCS Note5 zip. It was shared to my drive by someone else, and I could not remove it. So any time I did a factory reset and logged into my Google account, it would be loaded onto my phone. I finally got that cleaned up, but they had moved to my OneDrive storage with the same thing under a different file name. This hack is so smooth, that your phone won't even hesitate. It is disguised as Android OS, but if you check the battery stats, it says surfaceflinger. It is located in your data partition. It is a add on script, and it will eventually infect about 20 more apps with add on scripts. It will load up tons of /data/data along with a recovery from boot script, and..... I just discovered a little too late that there is a script that will destroy your device if you remove it the wrong way. I think the name of it is sec_device_destroy but I can't be sure. I saw the code in a system log file, but I do not know what it is yet. I am 100% positive that some of you have the same problem, you just don't know it. I'm gonna start taking apart every singe file in the development threads until I find it. As for now.... My device is stuck in a infinite bootloop. It won't recover from ODIN, and I have a new LED llight that is white. I can answer any questions and provide screenshots, and system logs if anyone wants to help uncover this beast. It is super legit. Best Android hack I've ever seen. It does every thing. Who is gonna help me locate this b.s? My Note 5 is useless now. Somebody here has it, I assure you, and when you discover it, you should ask for help. If you don't remove every bit of it, the device will not boot again. I'm gonna keep playing with mine, but I'm pretty sure it is toast. ( EDIT---> I was able to get to boot again by flashing TWRP and using the wipe option to repair each partition. I had to change them to exFAT then back to EXT4 to get them to mount.)
Sounds like my boot loop of death. Where everything was Odin flashed and still wouldnt load. Quick question when you were on Odin did you select the band erase all option? And do you still have acesss to recovery? Was all this weird stuff going on when you firmware was load? Did anything strange happen while in recovery? And why didn't u send it back to sprint)
---------- Post added at 10:22 PM ---------- Previous post was at 10:19 PM ----------
If I was in your shoes I would select the band erase all and repartition option. Re download stock firmware from sammobile, go back to Odin to root and add twrp, select the erase button again to flash moar ROM and see what happens. If it's a hack like u said then I'd use my insurance
The potential for having your personal security and financial disaster that something like this could cause is why i stopped rooting.
Rumning other none store apps is like letting a guy you dont know come over and say "hey, i have these cool mods i can do to your car's brakes! I take out a few parts, replace others with parts I made in my garage, and load my own software into your anti-lock brake system".
Sent from my SM-N920P using Tapatalk
You can't blame no one if your phone gets fried or blown up, you take the risk at your own discretion . No one force you to flash anything. To avoid any problems don't flash anything your not sure what's going to happen. If i see someone post a s7 edge port, I'm not gonna flash it until i get some good feedback or take one for the team and hope it don't destroy my phone. Goodluck fixing your phone don't seem like it's too hard to fix depending your experience . I would help but it's too time consuming helping fix a phone i can't even see or test out.
Sent from my SM-N920P using XDA-Developers mobile app
I'm really sorry that this happened to you. But @bonebeatz1234 is right. There is a disclaimer at the beginning of every rom, feature add-on, theme, kernel, etc. The whole point of Q&A & replys are so you can find out if something is "okay" to flash. There are so many known developers that have built stuff for so many devices. Its rare to find something on XDA that is "unsafe." I can't even remember ever finding anything that is "unsafe" or nearly as bad as you are describing. Especially for the Sprint Note 5. I'm assuming you have a SM-N920P do to the fact that you're posting it here. There have only been a few roms for this device & maybe a couple handfuls of add-ons. The one or two things I've seen that have caused problems with this device, they were removed with-in a few hours. You weren't very clear on where you got this hack at all. Are you saying it was something you downloaded from one of the Sprint Galaxy Note 5 threads? You are a Senior Member. So, I'm assuming you know what you are talking about. I believe that it is very possible you did get it from some place on here. But, in order for me to believe that, I have to also believe that it is just as possible that it could have came form anywhere else on the web via public WiFi connection, email, file download, text message, USB connection or at least 100 other ways. @DAvid_B made a point about the risk of rooting your device. Although the risk can go up for threats. The same rules apply for rooted device as they do for non-rooted devices. BE CAREFUL! Use software to protect yourself, read reviews, don't be the guinea pig. If you are like me & are addicted to putting yourself at some (if even the smallest) amount of risk, HAVE INSURANCE! Most if not all people have to agree that it's worth the $11 a months & $200 deductible to have as much fun as we all do. Its a hobby. People spend more money on model airplanes, playing golf & hunting. I haven't had to file a claim in over 6 years. I say all that to say this... Anyone that see's this thread & decides its too much of a risk to root, I promise you, IT ISN'T! The advantages out way the risk by about a 1000! The members of XDA are here to help with any issues you may have. There are VERY FEW things that are UNFIX-ABLE! And when I say "very few" I mean little to non! When I say little to non, I mean NONE! AT ALL! Even the problem he described IS FIXABLE! Like he stated, ask for help. @Sleepycloud, I pray you get this resolved. Even if you have to Odin back to stock & backup/wipe your Google Drive & OneDrive account, I know you can fix this. Please don't think that I meant any disrespect for posting this. I just want people to know this is extremely rare & only a one in a million chance it could happen.
Sleepycloud said:
I can't say when it happed. Evidently, it has been on my phone for a long time. I can remember seeing some of this funny crap months ago when I first rooted my phone. One of the mods here has a surfaceflinger hack that will take over your entire system. Your accounts will get hacked. First it was my Google drive. There was a zip file in there that I did not place. It said it was a Metro PCS Note5 zip. It was shared to my drive by someone else, and I could not remove it. So any time I did a factory reset and logged into my Google account, it would be loaded onto my phone. I finally got that cleaned up, but they had moved to my OneDrive storage with the same thing under a different file name. This hack is so smooth, that your phone won't even hesitate. It is disguised as Android OS, but if you check the battery stats, it says surfaceflinger. It is located in your data partition. It is a add on script, and it will eventually infect about 20 more apps with add on scripts. It will load up tons of /data/data along with a recovery from boot script, and..... I just discovered a little too late that there is a script that will destroy your device if you remove it the wrong way. I think the name of it is sec_device_destroy but I can't be sure. I saw the code in a system log file, but I do not know what it is yet. I am 100% positive that some of you have the same problem, you just don't know it. I'm gonna start taking apart every singe file in the development threads until I find it. As for now.... My device is stuck in a infinite bootloop. It won't recover from ODIN, and I have a new LED llight that is white. I can answer any questions and provide screenshots, and system logs if anyone wants to help uncover this beast. It is super legit. Best Android hack I've ever seen. It does every thing. Who is gonna help me locate this b.s? My Note 5 is useless now. Somebody here has it, I assure you, and when you discover it, you should ask for help. If you don't remove every bit of it, the device will not boot again. I'm gonna keep playing with mine, but I'm pretty sure it is toast.
Click to expand...
Click to collapse
If you are willing to send me the phone, I could probably fix it for you and send it back. I know it's hard to trust people these days so it's totally up to you.
bonebeatz1234 said:
You can't blame no one if your phone gets fried or blown up, you take the risk at your own discretion . No one force you to flash anything. To avoid any problems don't flash anything your not sure what's going to happen. If i see someone post a s7 edge port, I'm not gonna flash it until i get some good feedback or take one for the team and hope it don't destroy my phone. Goodluck fixing your phone don't seem like it's too hard to fix depending your experience . I would help but it's too time consuming helping fix a phone i can't even see or test out.
Sent from my SM-N920P using XDA-Developers mobile app
Click to expand...
Click to collapse
I'm not mad. Lol Not at all. I am a true geek to the heart. This is fun stuff to me. You learn more when you are challenged beyond your current skillset. I'm just putting everybody up to the fact that there is something malicious here in the threads. I have a strong feeling of where it came from. I already to apart the "Stock" .tar and found 3 extra files in it. A param.bin file, a carrier .img and a PIT file. I am one hundred percent sure that when I take that PIT file apart later that I will be able to confirm my suspicions. According to the thread here by @tdunham in this thread; http://forum.xda-developers.com/spr...sprint-galaxy-note-5-sm-n920p-partition-There are 19 partitions. I believe that I have 24 or 25. I'll have to get back with y'all on this one. Can anybody confirm that this partition table is still viable for Marshmallow? I'll post screenshots in about an hour or two for everyone to examine. I would love some help on this. I have never removed partitions before and my knowledge on how to go about it is limited. I'm reading, but most of it is unrelated garbage. If anyone has a link that will help me educate myself and remove these partitions, I would be super thankful.
MrMike2182 said:
If you are willing to send me the phone, I could probably fix it for you and send it back. I know it's hard to trust people these days so it's totally up to you.
Click to expand...
Click to collapse
That is pretty awesome of you bro. I am pretty sure I have correctly identified the problem. I have 4 or 5 extra partitions. This is why it keeps coming back, and that is why ODIN and Smart Swithc does not fix it. They are only going to see the 19 partitions they are supposed to see and they will not even look anywhere else. I bought a root partition app on Google Play for $9.99 and that is how I saw the extra partitions. This has been on my phone for a long time. A very long time. Like 6 months, but I never knew it. I can remember seeing about 5 USB folders that I could not open. They are labeled as external usb storage. I'll post screen shots later. So now that I know what the problem is, I see a bright side coming soon. lol
Sleepycloud said:
That is pretty awesome of you bro. I am pretty sure I have correctly identified the problem. I have 4 or 5 extra partitions. This is why it keeps coming back, and that is why ODIN and Smart Swithc does not fix it. They are only going to see the 19 partitions they are supposed to see and they will not even look anywhere else. I bought a root partition app on Google Play for $9.99 and that is how I saw the extra partitions. This has been on my phone for a long time. A very long time. Like 6 months, but I never knew it. I can remember seeing about 5 USB folders that I could not open. They are labeled as external usb storage. I'll post screen shots later. So now that I know what the problem is, I see a bright side coming soon. lol
Click to expand...
Click to collapse
Some times when a Samsung device gets bricked you need whats called a PIT that can reflash the partitions. It's on here somewhere or I have one.
MrMike2182 said:
Some times when a Samsung device gets bricked you need whats called a PIT that can reflash the partitions. It's on here somewhere or I have one.
Click to expand...
Click to collapse
I have one. It doesnt work because a PIT file will only reset the factory image partitions. When there are additional partitions, it does not touch them. I have one extended partition after boot. Everything gets rearranged under /sys/dev/block/8:0 have you ever heard of that? Me neither. Lol I need to disect this and remove the script after a fresh flash before the first boot. Something tells me that it would be easier to deal with then. Ill post some pics from my computer here in a bit. I dont have the option on my phone
Here are some pics of the new extended partition and the logical partitions within.
Sleepycloud said:
I have one. It doesnt work because a PIT file will only reset the factory image partitions. When there are additional partitions, it does not touch them. Inhave one extended partition after boot. Everything gets rearranged under /sys/dev/block/8:0 have you ever heard of that? Me neither. Lol I need to disect b this and remove the script after a fresh flash before the firsy boot. Something tells me that it would be easier to deal with then. Ill post some pics from my computer here in a bit. I dont have the option on my phone
Click to expand...
Click to collapse
I've seen some pretty crazy partition set ups the HTC Desire for instance has over 20 partitions and all of them have close to 200MB of free space on them that you can't even use! Talk about a waste of space lol.. But /sys/dev/block/8:0?!?! The fuuu... What kind of partition is that?!
Damn, your phones using almost all the ram/memory that you have.. Are you running a lot of apps or something else that's memory intensive?
So now the million dollar question is..... What is it gonna take to remove this b.s. from my phone. Removing the folders does not work. They get reinstalled upon every boot. I need to find the script(s) and where they are hidden, and delete them, then remove the partitions form the logical folder. I am tempted to just wipe the logical partition it its entirety then create a whole new partition table based on my unrooted Note 5. However, I am going to wait until I get some solid feedback from one of y'all. Who has an idea of what I need to do here. Repartitioning with a PIT file does not work. IT does not touch these extra partitions. I think they are labeled, sdb, sdc, and sdd.
I'm just gonna go ahead and let the world know who the piece of crap is. Here... go take a look for yourself. Download the "stock" tar and extract it, then extract the .tar itself. You'll find the extra files there. It contains a param.bin file, a carrier.img, and a modified PIT file that will give you the crap on my phone. If I could be my hands on this dude, I would choke him until he was purple. This has been a major pain in my ass for over 3 months now. My accounts were hacked, all of them, files were deleted, and I had no privacy what so ever. Here... This is where it came from. http://forum.xda-developers.com/note5/general/project-noble-firmware-pit-file-galaxy-t3179529
Sleepycloud said:
So now the million dollar question is..... What is it gonna take to remove this b.s. from my phone. Removing the folders does not work. They get reinstalled upon every boot. I need to find the script(s) and where they are hidden, and delete them, then remove the partitions form the logical folder. I am tempted to just wipe the logical partition it its entirety then create a whole new partition table based on my unrooted Note 5. However, I am going to wait until I get some solid feedback from one of y'all. Who has an idea of what I need to do here. Repartitioning with a PIT file does not work. IT does not touch these extra partitions. I think they are labeled, sdb, sdc, and sdd.
Click to expand...
Click to collapse
Deleting them is not going to work no matter which way you remove them they'll come right back after a reboot and the only way to stop that from happening is to flash a custom kernel/boot that's got write protection off. If you don't have that they just keep coming back no matter what.. All the apps are usually always in these 2 places /system/apps and /system/priv-apps
---------- Post added at 11:00 AM ---------- Previous post was at 10:55 AM ----------
Sleepycloud said:
I'm just gonna go ahead and let the world know who the piece of crap is. Here... go take a look for yourself. Download the "stock" tar and extract it, then extract the .tar itself. You'll find the extra files there. It contains a param.bin file, a carrier.img, and a modified PIT file that will give you the crap on my phone. If I could be my hands on this dude, I would choke him until he was purple. This has been a major pain in my ass for over 3 months now. My accounts were hacked, all of them, files were deleted, and I had no privacy what so ever. Here... This is where it came from. http://forum.xda-developers.com/note5/general/project-noble-firmware-pit-file-galaxy-t3179529
Click to expand...
Click to collapse
I'd report this to one of the moderators if I was you so they can check it out and remove it if it's harmful to people's devices I don't think xda would be happy hosting that type of ****!
MrMike2182 said:
Deleting them is not going to work no matter which way you remove them they'll come right back after a reboot and the only way to stop that from happening is to flash a custom kernel/boot that's got write protection off. If you don't have that they just keep coming back no matter what.. All the apps are usually always in these 2 places /system/apps and /system/priv-apps
Click to expand...
Click to collapse
I hava already tried that. These are add on scripts. They work on any kernel. I have to delete the partions themselves but I'm not exactly sure which ones or how to do it without bricking my phone. I'm gonna move slow on this one until I am sure that II have the right solution. I'm certain it is the sda, sdb, sdc, and sdd partitions that need to be deleted. First I need to know if this partition table is still valid for Marshmallow. http://forum.xda-developers.com/note5/general/sprint-galaxy-note-5-sm-n920p-partition-t3190326 Once I know that, I can proceed. Is this PIT still the same in marshmallow?
Sleepycloud said:
I hava already tried that. These are add on scripts. They work on any kernel. I have to delete the partions themselves but I'm not exactly sure which ones or how to do it without bricking my phone. I'm gonna move slow on this one until I am sure that II have the right solution. I'm certain it is the sda, sdb, sdc, and sdd partitions that need to be deleted. First I need to know if this partition table is still valid for Marshmallow. http://forum.xda-developers.com/note5/general/sprint-galaxy-note-5-sm-n920p-partition-t3190326 Once I know that, I can proceed. Is this PIT still the same in marshmallow?
Click to expand...
Click to collapse
Yeah that PIT is fine but if I were you I'd try to flash a different kernel because I had the same problems with apps returning after a reboot and the only way to stop that from happening again was to flash the custom kernel. That stopped them from coming back. <----This was on an HTC device so maybe Samsung is different?
This b.s. has my ADB disabled somehow. Even when I open the IOT Menu and switch from MTP to MTP+ADB it still does not work. It does work upon a fresh flash if I let the stock recovery update the system image then immediately go back into download mode before it boots up. After that, I have no ADB capabilities. Would that be a build.prop issue?
So was my advice useless oo?
djhulk2 said:
So was my advice useless oo?
Click to expand...
Click to collapse
No. It was pretty good, but I already have a good Note 5. I'm trying to learn more about Android bro. I wanna fix this one, not replace it. Give me some more solid ideas!!! I'm open to suggestion. Thank you.

Lost Oneplus One ... afraid if data can be stolen

Hello everyone.
Due to some circumstances I lost my oneplus one.
It was snatched from me by two guys
I was already using some other phone and kept Oneplus One as reserve.
My question is what are the chances to extract data from that phone.
TWRP was already there
(1) Dalvik cache, System, Cache Data and Internal Storage was wiped through twrp
http://www.technobuzz.net/wp-content/uploads/2015/01/TWRP-Wipe-Cache-and-Data-System.jpg
(2) Data was formatted
http://cloud.addictivetips.com/wp-content/uploads/2013/05/TWRP-Recovery-Format-Data.jpg
(3) Fresh rom was installed using USB-OTG
(4) Complete internal storage was filled with dummy data and deleted it
(5) Then I was using that phone for emails and gaming purpose only.
Phone was not encrypted
Do data which were stored in that mobile before wiping and fresh installation of rom can be recovered by those culprits?
Hello Experts,
Please provide your valuable views
As you know with TWRP you can bypass and access files. However if you only used it for email and gaming purposes last. I don't think you have much to worry about.
It really sucks that there's such low people out there. I wish all phones came with the 'kill switch' feature by default.
forid200 said:
As you know with TWRP you can bypass and access files. However if you only used it for email and gaming purposes last. I don't think you have much to worry about.
It really sucks that there's such low people out there. I wish all phones came with the 'kill switch' feature by default.
Click to expand...
Click to collapse
Hi forid200
Thanks for reply.
Before I was using it as my primary phone.
As I already have one more cellphone, I'd kept Oneplus One as spare.
Before keeping it ,below procedure has been done :-
TWRP was already there
(1) Dalvik cache, System, Cache Data and Internal Storage was wiped through twrp
http://www.technobuzz.net/wp-content...ata-System.jpg
(2) Data was formatted
http://cloud.addictivetips.com/wp-co...ormat-Data.jpg
(3) Fresh rom was installed using USB-OTG
(4) Complete internal storage was filled with dummy data and deleted it
In such case is there still chances for old data to be stolen?
hoppingpanda said:
Hi forid200
Thanks for reply.
Before I was using it as my primary phone.
As I already have one more cellphone, I'd kept Oneplus One as spare.
Before keeping it ,below procedure has been done :-
TWRP was already there
(1) Dalvik cache, System, Cache Data and Internal Storage was wiped through twrp
http://www.technobuzz.net/wp-content...ata-System.jpg
(2) Data was formatted
http://cloud.addictivetips.com/wp-co...ormat-Data.jpg
(3) Fresh rom was installed using USB-OTG
(4) Complete internal storage was filled with dummy data and deleted it
In such case is there still chances for old data to be stolen?
Click to expand...
Click to collapse
I'm seriously not seeing what you're worrying about, you barely had any data on that phone and when people steal a phone they want to sell it 99% of the time not get your personal data. Unless you're a very influential/famous person in your country whose data is extremely important hence more valuable than the phone itself, which I highly doubt you are. Whether there's a chance or not is irrelevant at this point, the phone is gone what happens to it is out of your control. Get a new phone and enjoy your life
Renosh said:
I'm seriously not seeing what you're worrying about, you barely had any data on that phone and when people steal a phone they want to sell it 99% of the time not get your personal data. Unless you're a very influential/famous person in your country whose data is extremely important hence more valuable than the phone itself, which I highly doubt you are. Whether there's a chance or not is irrelevant at this point, the phone is gone what happens to it is out of your control. Get a new phone and enjoy your life
Click to expand...
Click to collapse
That's very bluntly said, however, it is true. The phone is gone, the thieves are probably more interested in selling it rather than looking through your porn collection. There's a few things you can try and do, you can try wiping it through Android device manager. Truthfully, if the sims out and the phone has no data connection. It will fail.
You can report it to the carrier/police and get the devices IMEI blocked. If you kept your OnePlus box like I have, you will see a small sticker with the devices IMEI written on it. This will render it useless as a mobile.
I know how annoyed you must feel, losing your device, data. And I understand that after you have a phone for a while, it starts to have slight 'sentimental' value to you, you could say. Thieves attempted to rob me a few times (here in London), I nearly got sprayed with corrosive acid, I nearly got stabbed, I put up a good fight and they couldn't get anything from me. But it did get me to think, how much is a device worth to you man? Is it worth more than your life?
These people robbing, they have no heart, no soul, they don't give a ****. I think cellphone manufacturers should all become more responsible and start building in kill switches.
My best advice to you is the above, these thieves will be out there. And it can happen, the OnePlus One is pretty old now. So I guess it should hurt less, get yourself a OnePlus 3, or as you said, it was your spare device. So just use whatever you have.
forid200 said:
That's very bluntly said, however, it is true. The phone is gone, the thieves are probably more interested in selling it rather than looking through your porn collection. There's a few things you can try and do, you can try wiping it through Android device manager. Truthfully, if the sims out and the phone has no data connection. It will fail.
You can report it to the carrier/police and get the devices IMEI blocked. If you kept your OnePlus box like I have, you will see a small sticker with the devices IMEI written on it. This will render it useless as a mobile.
I know how annoyed you must feel, losing your device, data. And I understand that after you have a phone for a while, it starts to have slight 'sentimental' value to you, you could say. Thieves attempted to rob me a few times (here in London), I nearly got sprayed with corrosive acid, I nearly got stabbed, I put up a good fight and they couldn't get anything from me. But it did get me to think, how much is a device worth to you man? Is it worth more than your life?
These people robbing, they have no heart, no soul, they don't give a ****. I think cellphone manufacturers should all become more responsible and start building in kill switches.
My best advice to you is the above, these thieves will be out there. And it can happen, the OnePlus One is pretty old now. So I guess it should hurt less, get yourself a OnePlus 3, or as you said, it was your spare device. So just use whatever you have.
Click to expand...
Click to collapse
Hi,
Thanks a lot for nice reply which really made my day.
I was only afraid for my old personal scanned documents and family photographs.
Any how, your words have provided me potency and ray of light that let bygones be bygones
I'll try to search that box and request for IMEI block.
Thanks you so much
hoppingpanda said:
Hi,
Thanks a lot for nice reply which really made my day.
I was only afraid for my old personal scanned documents and family photographs.
Any how, your words have provided me potency and ray of light that let bygones be bygones
I'll try to search that box and request for IMEI block.
Thanks you so much
Click to expand...
Click to collapse
Glad to have helped you out! Sorry for the late reply. If you need anything feel free to PM, or just join my WhatsApp group for faster reps from other OnePlus power users.

Categories

Resources