Hey there, got a few questions that I'm hoping someone knowledgeable could answer for me. If this should be posted elsewhere let me know, any advice would be great! DM replies are welcome.
I'll be vague but recently I've begun to notice inconsistencies on my phone that I share with someone very close to me. They are more technologically capable than I am and have so far protested their innocence. so I'd really like to know what's happening if at all possible, may be nothing but I don't have the experience to know either way.
1. Found a series of txt logs that I didn't seem to be able to open, they appeared - after my phone powered off - in my documents folder with time stamps that appear to be shortly before the phone was turned on again (images included below). What are they? I have never noticed these before.
https://ibb.co/DV512T4
2. Whether coincidentally or not I also noticed 2 entries in my notifications for "download.bin" and "unknown" each from before the power off however when searching my download manager, found nothing, what could this be? Come to think of it I have noticed very similar occurrences in the past however didn't think of it as odd until recently.
3. My notification history has reset about 4 or so times in the past few months, to my understanding this should only be possible when disabling and reenabling the setting - I am referring to the 24 hour breakdown. I cannot find any mentions of this and with other things I've noticed recently (permissions manager being accessed multiple times during the play time of one particular game interspersed with the use of chrome observed through app manager, empty notification categories etc). Phone has been out of my possession each time. Am I correct in saying that this is evidence of the data being manually cleared/affected, can I even find evidence as to whether or not that's happened? I have not found any information on the 24 hour breakdown disappearing other than "turn it off and on again to wipe" - If so, is there a way of accessing or restoring old logs so I can check the days where the history went?
I had a talk with the person about things like hidden apps, operating system changes and a load of other stuff that went over my head so I really don't know what to expect but I've since changed my passcode and restricted their access until I have a better view of how my phone's been used.
Final question, I've noticed a large number of screenshots and camera photos being taken according to my device care setting and history, problem is when I go to access my gallery, recycle bin etc - They aren't there. I haven't yet tried recovery methods as I am unsure about my options but advice on that one would be good.
Thanks for your time and any help offered in advance!
I remember a similar post not too long ago, that was almost exactly the same. Now it seems the same post, but posted as a first post of a new member. I find this dubious...
My advise: do not share your phone with anyone, especially when in doubt what they do with your phone.
If you are suspicious of what they may have done/installed on you phone, do a factory reset and continue with a clean phone. Before factory reset, back up only files/data that you trust.
Finaly, this post seems to have no relation with the S21 Ultra, so you're in the wrong forum.
Baguete2963 said:
I'll be vague but recently I've begun to notice inconsistencies on my phone that I share with someone very close to me. They are more technologically capable than I am and have so far protested their innocence. so I'd really like to know what's happening if at all possible, may be nothing but I don't have the experience to know either way.
Click to expand...
Click to collapse
This reminded me about my ex wife who always protested her innocence.
Do a factory reset (hard reset) and NEVER EVER give your phone to anyone!
mobnoob said:
This reminded me about my ex wife who always protested her innocence.
Do a factory reset (hard reset) and NEVER EVER give your phone to anyone!
Click to expand...
Click to collapse
Problem here is that I can ask her about things like this and get an "oh I don't know" etc etc. When you lack the technical knowledge to know for sure it's a real downer because frankly I could be staring evidence dead in the face and be unable to see it. Looking at these logs, what would you say is going on here? I need someone that actually understands this stuff to put my mind at ease, or alternatively tell me exactly what's gone on.
I've asked about the facebook downgrade attempt and simply got asked "Why would I do that, there's no benefit to it. Wouldn't even know how". I am not having a fun time right now lol.
Thanks a lot for your reply
OnnoJ said:
I remember a similar post not too long ago, that was almost exactly the same. Now it seems the same post, but posted as a first post of a new member. I find this dubious...
My advise: do not share your phone with anyone, especially when in doubt what they do with your phone.
If you are suspicious of what they may have done/installed on you phone, do a factory reset and continue with a clean phone. Before factory reset, back up only files/data that you trust.
Finaly, this post seems to have no relation with the S21 Ultra, so you're in the wrong forum.
Click to expand...
Click to collapse
You seem to have missed the point, the idea is to try and gain understanding on the log and to determine what process would have caused it to generate and contain the data it does over 3 months after purchasing the phone. I don't know if I explained that well enough so if so my apologies.
I don't know how to answer that myself so I used a public forum to try gain the answer, I don't feel like that's wrong?
Also this is a log from an S21 Ultra 5g so it made sense to post it there
Baguete2963 said:
Also this is a log from an S21 Ultra 5g so it made sense to post it there
Click to expand...
Click to collapse
Please check your PM inbox. Thank you.
-Regards: Badger50 FSM
Related
Hello!
I would like to ask for help installing either a new Cubot X6 Android or a linux based system. Until recently I wasn't aware of what kind of aggressive trojans for Android happen to compromise a phone to a degree where the solution is to buy a new one. I do not want to accept that. Therefor I am here to ask for help.
WLAN enabled - the phone runs nutts. It causes unknown apps to be installed, ruining the function of the phone completely. I bought it via ebay, a used Cubot X6. I had the device years ago until i sat on it which happened to break the display, but I liked it and bought it again, used. (The used one cost 60 bucks, a replace-display would have cost 35, so I ran with the used one - big mistake as it turned out).
Now, it's root-system is compromised. I set it to only allow apps from trusted sources. I did not download any apps beside well known trust-worthy ones, like google-maps, WhatsApp, all together.
When I first enabled WLAN, it suddenly started to display a message of the shutting down of "org.rain.ball.update" and also "ssCleaner ("suc", "chengele") is trying to obtain your current position", "ymm" cancelled, and several others. If I allow WLAN it automatically downloads 10-20 apps, some of which correlate with my laptop visited websites (alibaba), others apps from sites I have never visited ("sexy videos"). Basically the phone gets so busy that it needs to be restarted to allow any control of the phone.
I tried to fix it with Avaast, Avira, and Malewarebytes without success. With Avaast it also displays: "/storage/sdcard0/.androidsdata/is.jar", but is unable to fix it. I guess I would have to erase the SD-Card too, if I were to have the system replaced, once. None of the above things can be fixed with the tools at hand. The deletions are always interrupted, nothing gets improved permanently.
I immediately did a "Reset to factory condition", but when I enabled WLAN I didn't even install an app - it all started again, as described above.
So, a quick Google-Research turned out, there are trojan-horses, that cover themselves by pretending to be system applications, so that it would be nearly impossible to get rid of the trojan - only solution: buy a new one (See this article wwwDOTblog.lookout.com/blog/2015/11/04/trojanized-adware/).
Now, while I have a broken device and a trojan device, one solution would be to mount the display of the compromised one onto the broken one. I know it's easy to break the display during this. That's why I am here to ask, if someone might have suggestions of what else could be done to have this fixed?
Maybe it would be possible to get an uncompromised mirror-image of a Cubot X6 from the internet that would replace every data on mine? Would it fix it, if I were to install this: "Ubuntu Touch - Version 15.04 Phone"?
Any help would be appreciated. If I were to take a wild guess, I'ld say the trojan horses might have been developed by Apple...... So what am I to do now? Buy a new one?
EDIT: If you were to not believe this to be true, I could shoot a video of it with my laptop. It's really strange, but it is as it is. EDIT 2: Avaast displays a message, the phone has been rooted.
Please help!! Thank you so much!!
You won't get the virus to YOUR phone from replying ...
Am I here at the right forum for this technical problem?
Thanks
Do a search for your rom and instructions on how to flash. It will replace system partition and problem should then be gone.
tys0n said:
Do a search for your rom and instructions on how to flash. It will replace system partition and problem should then be gone.
Click to expand...
Click to collapse
I will try that. Im total newb to smartphone software. any linking would be appreciated. thanks so far!
CubotX6 said:
I will try that. Im total newb to smartphone software. any linking would be appreciated. thanks so far!
Click to expand...
Click to collapse
A google search for "cubot x6 firmware" will give you some good results.
Here's also Cubot forums, with link to downloads.
Hope that will help, and be sure to read up on the subject on how to flash before you start
So many Thanks! You linked me to the perfect spot! Thank you!
While i will redo my laptop with linux soon, you got experience with having linux on the phone? If i wee to try and mes up, it still were possible to go bac to the original cubot files u linked to, correct?
Thank you!!
Hello,
I have a lg ls775 and under the user security certificates there is one called sprfw01. I have no idea why or what its for. Im on the sprint network. Is there a way i can inspect the cert or atleast figure out whats using it? Any info is greatly appreciated. Thnx guys!
Could this be from pairing my phone with some device ie. Smart watch or another phone?
Its actually under User credentials. Hope that can jog anyones memory as to what this may be.
I'm currently using the same phone as you and on the same carrier, and just noticed this user credential the other day as well. I didnt recognize it so I deleted it. I'm afraid I cant tell you if it really affected my device as it was already giving me some issues before I deleted the credential. At the time, and again today, I looked for the same answer as you and haven't found any additional information on it, so I can't be much help with exactly why it's there or what put it there.
However, I may be able to help put your mind at ease since I did happen to do a factory reset today and even though I deleted it before, it was back afterward. So my guess is that its not dangerous. (again, thats my opinion, hopefully someone can confirm if I am correct)
Some details to that lead me to think it's safe:
My LG G6 isn't rooted, and was not before the redo. (so technically nothing should have been able to reinstall it that was nefarious)
I didn't install any potentially shady apps when I did the factory reset ( at time of writing this, just a few big name apps from the play store, no random restored apks or anything like that).
I pulled my SD card out before the wipe and haven't put one back in yet, so that rules out something left over on there working itself back in somehow.
I allowed google to "restore" my most recent backup it made, but the most recent backup was AFTER I removed the credential so it shouldn't have been on there (google backups seems to restore very little anyway, and requests all backed up app downloads from the Play store) .
I have connected it to my home secured wifi.
No bluetooth connections yet.
No sharing to any devices or NFC usage, etc.
So from all of that, I believe it is either a Sprint thing, an LG UI thing, or something specific to the LG g6 model, and built into the factory settings. That's just my thoughts, but I thought maybe my experience might make you feel a little more at ease. Hopefully someone can reply with what the heck it actually is though, because little things like not being able to figure out the source of this drive me crazy even after all of that.
Just an update, I was looking through my LG V30+ and found the same credentials stored on this device too. No additional details on it's purpose were really gained from it though. Picture attached.
"User Credential" "sprfw01" also on LG ls 775
I saw the same thing and I searched "sprfw01" . I was wondering what it was. I also have this "User Credential" on an LG ls 775 on Sprint.
Passwords Saved Credential
I did some research into this and what I see is it's a credential from when you saved your passwords for an example unlock screen & any passwords like I have to specific websites.
Jusy my thoughts...
*Any good unlock or root for the ls993?
THIS IS BASED ON SUSPICION. TOO MANY COINCIDENES FOR IT TO BE LUCKY GUESS. I HAVEN'T READ OR HEARD OF A PROGRAM LIKE THIS. COULD THIS BE POLICE INVOLVEMENT?IF ANYONE HAS ANY IDEA EVEN A GUESS PLZ COMMENT. TIA SORRY FOR SPELLING
Recently I found that someone close to me had been using a purchased spy prog. Thanks to Google alerting me that unauthorized login and sync occurred.
I quickly recognized the phone found the program and cancelled their membership since I originally made the account/email address for them and they told me what password to use. But somehow that phone has continued to sync from their phone.
To this point I've been being safe; I've been messaging or texting lies along w/ truth. Yet somehow all that information makes it back by a simple slip up of words by the other person in house. They accidentally repeat in general something I mentioned in text/fb message/phone call/information/etc.
I've literally deleted everything I could find that was left after factory reset. (EVERY FILE!!) I had root and end up with a virus I couldn't remove & didn't want to factory reset. The virus took over screen and no matter what, I couldnt get it off. In the end, only way phone company could get it off was gain access with use of a computer & prog to factory reset. While talking, it updated from 6.0 to 7.0. So I'm going to have reroot.
QUESTION FINALLY: How can I remove or atleast find the hack or exploit ( or whatever it is) that is reporting or cloneing everything word & information? Yes, I've tried every possible virus/spy pro/spyware/malware/hack/exploit detector remover I read about. PLEASE advise.
The person( I suspect) is currently charged with domestic violence w/ prejudice, I cannot drop the charges they won't allow me. Due to it being domestic violence against someone disabled.
The person is beyond clueless about technology but their brother worked for govt many yrs ago installing, none other than CAMERAS. He now prides himself as being a computer expert & dev.(he's not bad at it). He knows LINUX exceptionally well. Also I found an old outdated voice recorder. I took it to a shop then to some who is genius with things he agreed. Both said it went with a small old spy camera. I have it still it. Since I am a "rentor/tenant" (correct if wrong) using audio with recording is illegal. Also video recording if used for a malicious or personal gain/pleasure without letting the person know is illegal. I'm a man so man things would have been recorded.
Quick Question...should I go ahead with rooting or wait?
PLEASE HELP AND IF POSSIBLE FIND THE FOOTPRINT HE MIGHT HAVE LEFT BEHIND. PRIVATE MESSAGE ME IF NEED MORE DETAILS ON PHONE INFORMATION
* * *
***
Hi folks,
a family friend inherited an A22 from a deceased friend, but she did not have the password for it.
As I had never heard of FRP before, I advised her to reset the phone, which is how the FRP took effect. I now feel guilty for giving obviously wrong advice and would like to fix it.
I guess there is no proof of purchase for the phone anymore and all the passwords from the documents didn't work. A Vodafone employee advised me to scrap the phone, but I don't think so.
I found the software "**** your FRP" here in the forum and tried it, but the A22 is not on the list of Knox-compatible devices. Therefore, the code #*0#* does not work either and I can't get any further.
I got a little further with the talkback function. I was able to open the Google Assistant and navigate to Chrome or the settings. Unfortunately, I could not activate the developer options, couldn't navigate to the app settings or allow the installation of apps from unknown sources.
After about 8 hours and several attempts, I am at my wit's end. I have the deceased's email address and name. Unfortunately, this was not enough to reset the password. If I am informed correctly, his number has also been deactivated, so I can no longer receive SMS. I don't have the SIM card either, but I might be able to get it.
I hope you guys can help me.
Best regards,
Felix
Contact Samsung service / a phone service.
You could so it yourself, but the time needed will be too much
As I said, the people at Vodafone said you can only scrap it. I had read that you can get the device unlocked with the help of the proof of purchase, but no one knows exactly where the receipt could be.
dotuletz said:
You could so it yourself, but the time needed will be too much
Click to expand...
Click to collapse
I'm not in a hurry, I'm just looking for a tool to do this with, or instructions on how to bypass the FRP.
I can forget Google, as 99% of the results are scam and the remaining 1% did not work.
Ive heard that YouTube has just the right type of guide for almost exactly those probs, and by all accounts very very simple to follow, as I did recently on my sister's device she left at home, no longer wanted, ditched for an apple contraption. I will add, no one with nefarious reasons, stolen devices should use the helpful tools there. Getting a job and buying a device the bloody deviants should....damn the swines.
ianreesdavies said:
Ive heard that YouTube has just the right type of guide for almost exactly those probs, and by all accounts very very simple to follow, as I did recently on my sister's device she left at home, no longer wanted, ditched for an apple contraption. I will add, no one with nefarious reasons, stolen devices should use the helpful tools there. Getting a job and buying a device the bloody deviants should....damn the swines.
Click to expand...
Click to collapse
The problem with YouTube videos is that Samsung (and pretty much every other major manufacturer) has teams of employees whose sole job is to look through the internet for how-to videos and posts, make a note of how the trick/bypass works, and submit it to the software development team to be fixed in the very next update. That's why the how-to videos are full of comments saying "this didn't work for me" or "I don't have that option on my device".
There's a professional 3rd party business that I've used for things like this before. Discussion of paid services isn't allowed in the forums, but anyone who wants a recommendation can DM me
I completely agree mate, it's hit and miss, there are plenty of other sources out there. Just coincidentally, I found myself reading a comment that was the exact situation I was in yesterday. Obviously, not wanting the member to be struggling I gently nudged him towards a simple and 100% idiot's guide that will put him right. Admittedly a large majority of these things are countered/blocked or absolute bollox as I have encountered many times lmfao
BooWseR said:
Hi folks,
a family friend inherited an A22 from a deceased friend, but she did not have the password for it.
As I had never heard of FRP before, I advised her to reset the phone, which is how the FRP took effect. I now feel guilty for giving obviously wrong advice and would like to fix it.
I guess there is no proof of purchase for the phone anymore and all the passwords from the documents didn't work. A Vodafone employee advised me to scrap the phone, but I don't think so.
I found the software "**** your FRP" here in the forum and tried it, but the A22 is not on the list of Knox-compatible devices. Therefore, the code #*0#* does not work either and I can't get any further.
I got a little further with the talkback function. I was able to open the Google Assistant and navigate to Chrome or the settings. Unfortunately, I could not activate the developer options, couldn't navigate to the app settings or allow the installation of apps from unknown sources.
After about 8 hours and several attempts, I am at my wit's end. I have the deceased's email address and name. Unfortunately, this was not enough to reset the password. If I am informed correctly, his number has also been deactivated, so I can no longer receive SMS. I don't have the SIM card either, but I might be able to get it.
I hope you guys can help me.
Best regards,
Felix
Click to expand...
Click to collapse
Also mate, getting to chrome is most of it done. 4 files to download, 2 through the galaxy store which allows them to install, then through those, sorry, plus ios14 launcher allows you to activate unknown sources etc..it's not difficult. Worked like a charm. Just find the Samsung a22 5g frp unlock, activate unknown sources how to.
Hello there,
I have accidently broke my phone app by uninstalling a system app that must interact with phone. How I got to this is a very long story involving samsung and customer service but I won't get into that.
instead of factory resetting my phone which is my last resort if all fails here. I have submitted my logs from cmd to show exactly what I uninstalled. One of these system apps is it and I hope someone with knowledge in the A53 5G can show me which one rather then taking wild guesses at it.
Also once the apk is pinpointed where can I go to get a copy of this system app to install it back?
That's a mess to try and read. Is that like 200 packages?! Yeah you're going to have issues.
At this point I would factory reset and then be much more conservative which packages you disable. 80 is a more reasonable number.
blackhawk said:
That's a mess to try and read. Is that like 200 packages?! Yeah you're going to have issues.
At this point I would factory reset and then be much more conservative which packages you disable. 80 is a more reasonable number.
Click to expand...
Click to collapse
im going to assume based off your comment you didn't even try to read the file. Your give up and just factory reset attitude is not what im looking for. Your just trying to put 2 cents in to get your post count up. You can be helpful by asking someone who is advanced with an A53 5G to take a look.
its only 46 packages uninstalled.
Moxiipc said:
im going to assume based off your commenrlt you didn't even try to read the file. Your give up and just factory reset attitude is not what im looking for.
its only 46 packages uninstalled.
Click to expand...
Click to collapse
I tried to read it for 5 minutes.
It looks like a lot more than 46 lines...
Best to leave the many Samsung system apps alone. Disable only power hogs and completely worthless apps like Digital Wellbeing, FB etc.
This is my list for my stock N975U running on Pie. The list for my N975U1 running on Android 10 is almost identical in spite of having around 100+ new Samsung system apps added from Samsung.
No issues. Google play Services is normally disabled unless needed.
blackhawk said:
I tried to read it for 5 minutes.
It looks like a lot more than 46 lines...
Best to leave the many Samsung system apps alone. Disable only power hogs and completely worthless apps like Digital Wellbeing, FB etc.
This is my list for my stock N975U running on Pie. The list for my N975U1 running on Android 10 is almost identical in spite of having around 100+ new Samsung system apps added from Samsung.
No issues. Google play Services is normally disabled unless needed.
Click to expand...
Click to collapse
Do you have an A53 5G?
Moxiipc said:
Do you have an A53 5G?
Click to expand...
Click to collapse
Really? Just told you what I got.
Instead of wasting others time at least edit that list so it shows only the names of the blocked apps? Here I thought you were busy reloading.
I would have it sorted out by now if I made that mess.
blackhawk said:
Really? Just told you what I got.
Instead of wasting others time at least edit that list so it shows only the names of the blocked apps? Here I thought you were busy reloading.
I would have it sorted out by now if I made that mess.
Click to expand...
Click to collapse
So you don't have an A53 5G okay well if you can't provide a solution then your the one wasting time. I posted the whole text so whoever looks can see exactly what I did. If you can't be bothered to read through the text and demand that I edit it to cater to your preference then you are the one wasting my time.
I don't have to edit it just because you don't know how to read it. You didn't even look and just assumed I uninstalled 200 packages because you saw you had to scroll a little. If you took the time you would have known it was 46 and would have helped to provide an answer instead of encouraging me to give up finding a solution and just factory reset.
If you want to be useful instead of argumentative you can help trying to find com.samsung.android.providers.contacts the system app for the A53 5G I believe this is the one I need to get it working again.
Moxiipc said:
So you don't have an A53 5G okay well if you can't provide a solution then your the one wasting time. I posted the whole text so whoever looks can see exactly what I did. If you can't be bothered to read through the text and demand that I edit it to cater to your preference then you are the one wasting my time.
I don't have to edit it just because you don't know how to read it. You didn't even look and just assumed I uninstalled 200 packages because you saw you had to scroll a little. If you took the time you would have known it was 46 and would have helped to provide an answer instead of encouraging me to give up finding a solution and just factory reset.
If you want to be useful instead of argumentative you can help trying to find com.samsung.android.providers.contacts the system app for the A53 5G I believe this is the one I need to get it working again.
Click to expand...
Click to collapse
Done the same thing multiple times over the last 3 years. No threads or posts from me asking what I blocked that was caused by my mistakes. Only solutions when I spot them in threads like this. That list is a mess as I pointed out at the beginning, it gave me a headache trying to read it. I grouped it into tens then counted down the groups to come up with 100+ apps I should have seen a list of 46 apps.
Either way I saw some on there that probably shouldn't be disabled. You should know what the app you're blocking does and any dependencies it has... before you block it. In the time all this has dragged out for I could have done a complete reload and be good to go. Had you used a package disabler it would have been much simpler to fix. You can really screw up a system with bad adb editing... I make sure all my critical data was backed up redundantly if I was you.
All it takes to fix this is someone with an A53 5G use apk extractor and extract the com.samsung.android.providers.contacts app from their phone and upload it. This system app is the one that interacts with storing contact data and I believe this is the one I need to get my contacts and phone app working again.
Moxiipc said:
All it takes to fix this is someone with an A53 5G use apk extractor and extract the com.samsung.android.providers.contacts app from their phone and upload it. This system app is the one that interacts with storing contact data and I believe this is the one I need to get my contacts and phone app working again.
Click to expand...
Click to collapse
Here..
Contacts_Storage_SamsungContactsProvider.apk
drive.google.com
Marvin.the.Martian said:
Here..
Contacts_Storage_SamsungContactsProvider.apk
drive.google.com
Click to expand...
Click to collapse
Yours in a more current version I believe.
However there are two, both maybe needed.
Don't disable Samsung system apks... the Google contacts can safely be disabled if you don't want it.
blackhawk said:
Yours in a more current version I believe.
However there are two, both maybe needed.
Don't disable Samsung system apks... the Google contacts can safely be disabled if you don't want it.
Click to expand...
Click to collapse
I upgraded to Android 13 yesterday so it probably newer..
Marvin.the.Martian said:
I upgraded to Android 13 yesterday so it probably newer..
Click to expand...
Click to collapse
Much of it is open source Apache dating back to 2004. Yours is a newer, larger version.
How's 13 running for you so far?
blackhawk said:
Much of it is open source Apache dating back to 2004. Yours is a newer, larger version.
How's 13 running for you so far?
Click to expand...
Click to collapse
OneUI 5 seems snappier... I don't see many feature difference so far, at least visually, but i didn't had much free time too look into it yet.
Appalling.
I screwed the pooch and broke my phone.
Help me help me !!!!
No, your help is not good enough, you are not a worthy person!
Give me, give me, give me!!!!!!11
That about sum it up ?
BTW, I do have a A53 5G and I will NOT be helping after seeing how well treated people that DID honestly try to help got....well......treated.
Where did you learn about uninstalling system apps with adb?
Shouldn't there also be the way to re-install them in that tutorial? The XDA tutorial does include it so that's why I'm curious where did you get the adb tutorial. It'd be very unprofessional if they left that part out.
ShaDisNX255 said:
Where did you learn about uninstalling system apps with adb?
Shouldn't there also be the way to re-install them in that tutorial? The XDA tutorial does include it so that's why I'm curious where did you get the adb tutorial. It'd be very unprofessional if they left that part out.
Click to expand...
Click to collapse
There's a couple threads on XDA about it. Easiest way to find them is a Google search with xda in it. There's a variant that needs no PC too.
The changes are stored in the user data partition so a factory reset will return everything to default if you make a mess of things