How to know that you have spyware on your S4 - Galaxy S 4 Q&A, Help & Troubleshooting

How to know that your phone is beaing monitered,what service in app can tell you that is not casual procces, than suspicious?

quick way to remove them without downloading third party apps is through a factory reset, which can be done using the following steps:
a. Press the Menu key.
b. Open the Settings.
c. Choose Accounts.
d. Select the Back up and Reset options.
e. Tap the Factory Data Reset command.
f. Confirm your action when a prompt shows up.
Just be sure to backup all the important data in your Android phone though before doing this. It should be noted that the above steps for factory reset are for the Galaxy S4. The method may vary depending on the version of your Android OS or unit. For instance, instead of selecting Accounts, other phones require selecting Privacy.

placitum said:
How to know that your phone is beaing monitered,what service in app can tell you that is not casual procces, than suspicious?
Click to expand...
Click to collapse
There are plenty of security apps on the play store. Below are a couple that are useful.
Blue wall - Checks for major exploits within Android and confirms if your system is vulnerable or secure.
https://play.google.com/store/apps/details?id=com.bluebox.labs.onerootscanner
Malware bytes - Check for any malware/malicious apps
https://play.google.com/store/apps/details?id=org.malwarebytes.antimalware

Related

[WARNING] NookColor Tools can cause forced factory reset

I couldn't see anything about this on the forum so far so I thought I ought to post a warning myself....
NookColor Tools is a great app, but don't be tempted to experiment with the menu entries further down the "All Settings" menu, as some of them (for example the multiple "Settings" entries) will force your NST/N2G to factory reset. Basically a B&N dialog appears and says something about a security or permissions breach detected, then forces a reboot and factory reset.
You have been warned!
The following [useful] menu entries are known to be safe:
About Your NOOK
Battery use
Development
Device Info
Diagnostics and Logging
Locale
Manage applications
Quick settings
Running services
Screen
SD Card
(Tested using N2G running 1.2.0 firmware, rooted using GlowNooter 1-12-25)
I can confirm this - just happened to me.
And me
Sent from my Nexus 4 using xda app-developers app
Yup! This happened to me too last week when I first rooted my Nook. I wish I had seen this earlier. It would have saved me from having to root again.
This has happen to me too yesterday. +1
I have made CWM backup just one day before it, but I should mention that it doesn't backup My Files folder from internal storage partition actually, because the 'media' partition just wasn't mount by CWM at all (at least it worked that way in my particular case). So be careful and backup your books and etc from internal storage partition manually if you need them.
I would recommend to have whole ROM (internal storage flash memory) backup to everybody (nookmanager or nogie will help to do it if you don't know how to use dd in adb shell). It obviously rules. I'm glad I had it.
Why isn't this thread stickied? This seems like Need to Know Information.
Oh crap. Does this mean that secret Barnes & Noble stuff is breached? Or does it just mean that the system finds out that it is rooted? Either way, that isn't good. This did get me thinking, if those settings exist, are they included, but blocked by the stock ROM? We already know about the secret factory menu, so is it possible that there are more menus like that? Possibly some that allow acces to that part of settings without causing a security breach?
Sent from my NookColor using xda app-developers app
More likely the settings entry is doing exactly what it is supposed to, and the way it's triggered stock just happens to show it as an entry. I just did this myself on accident, I think I'll leave it in reader only mode for a while, I rarely use the "tablet mode" features.
==EDIT== I do miss the screensaver banner editing (had it as an "if found, contact" notice) and the persistent battery bar I had though. I guess it's less likely to die quickly in reader only mode so the bar isn't really needed any more
I can confirm this. A few NookColor Tools settings don't work (they throw me back to main NCT menu), and at least one of them shown me the security breach message and then restarted my Nook Simple Touch.
After restart, Nook started to boot, but never finished doing that. Eventually i pushed at the top part of the screen - and that brought up the Quick Settings dialog (where you can enable/disable WIFI). After that, the top Android bar appeared, but the screen remained black.
My guess is that since i disabled B&N tools with NookManager, Nook had no home to run, or something like that.
Eventually i had to restore pre-rooting backup i've had.
Goggles2114 said:
Why isn't this thread stickied? This seems like Need to Know Information.
Click to expand...
Click to collapse
+1 for making this thread Sticky!!
Just reporting:
Device Registrator can force factory-reset as well. If you register with it and then tap "unregister user."
I was running rooted 1.0.1 rooted with nookmanager.
Mineturtle33,
I'm thinking it's interesting, because the "security breach" problem may be related or the same of you first try to port CM7.
You agree?
Maybe better understanding of that can also solve some of the problems of the port!
Yes, and no. When it recently factory reset on me it was related. When I first tried to port SnowMod (not CM7 btw, but a NST optimized CM7-like ROM) It factory reset when I tried to open an app in the android launcher. This may or may not be related.
Sent from my NookColor using xda app-developers app
This is an old thread but I found this error myself much to my chagrin. I decided to test every selection. Every menu is okay to go through except the second settings down on the list and the registration menu. Some of them cause weird behavior (one of the timezone selections killed button savior after opening the registration menu) but are harmless from what I can tell. I wish there was some way to remove the second "settings" selection since it is on the bottom of the first page and someone could accidentally click on it instead of going to the next page. I tried backing up, letting it reset itself. and restoring, but it seems to be a flag that is on the system. Perhaps there is a way to turn it off but that is beyond me.
Agree
t_0_0_l said:
This is an old thread but I found this error myself much to my chagrin. I decided to test every selection. Every menu is okay to go through except the second settings down on the list and the registration menu. Some of them cause weird behavior (one of the timezone selections killed button savior after opening the registration menu) but are harmless from what I can tell. I wish there was some way to remove the second "settings" selection since it is on the bottom of the first page and someone could accidentally click on it instead of going to the next page. I tried backing up, letting it reset itself. and restoring, but it seems to be a flag that is on the system. Perhaps there is a way to turn it off but that is beyond me.
Click to expand...
Click to collapse
This happened to me too! I was looking for a way to change the time, as the UK has just changed to DST, and hit upon a "settings" that caused a bricking! I agree that this should be a "sticky" warning for noobs (such as me) to read first

[Q] Unknown PIN - recovery of device

Hi all
I'm attempting to fix a Nexus 7 2012 for a family member. I know that they never used a PIN previously and have been told that the PIN lock was activated when browsing the web and pressing the volume up button. Naturally I'm absolutely baffled as to how that set a PIN code but that's apparently what happened. Is there any Android malware that could have been downloaded which could cause this?
Either way, I've used a variety of resources to attempt to recover the device WITHOUT resorting to a factory reset (which I would like to avoid if possible), however I've reached an impasse so decided to ask about my specific case directly. At this stage I'd be happy to just find a way to somehow remotely backup the device so that the appdata etc. could be restored following a factory reset.
Here are the routes I've eliminated so far:
As this is a PIN code the option to login after 5 incorrect attempts is not available (that's for pattern locks only, unfortunately).
The Android Device Manager has not been set up with this device for Remote Wipe & Lock so I cannot change the PIN code remotely in this manner. Nor are there any other installed apps which would be of any similar use according to the list of installed apps on the corresponding Google Account.
Screen Lock Bypass Pro is incompatible with the device according to Google so I can't install that remotely from the Google Play store. Plus I don't know of any way to sideload it given the below two points (even if that were safe to do given that it's "incompatible"). This would have been sufficient to disable the lock screen long enough to back up the device using say Titanium Backup before wiping & restoring.
USB Debugging is not enabled which means I cannot do anything via ADB. Nor am I therefore able to backup by any means I've looked at thus far.
The bootloader is locked. To unlock you need to wipe the device, which as I mentioned above I want to avoid. This means I can't use a custom recovery to turn on USB Debugging and use ADB to load Aroma File Manager in order to delete the password database files.
So, I would like to know a way to do any of the following without a factory reset:
Remotely enable USB Debugging.
Remotely install Screen Lock Bypass Pro.
Backup the device.
Any other method to achieve the backup of the device or a PIN code reset that I'm currently ignorant about.
Please let me know if this is just impossible. I realise that the PIN code is there for a reason however I'm being persistent in case I'm overlooking something simple. Thanks in advance!
NB: Apologies but I can't yet include any URLs. Please let me know if you need any of my sources for the above information and I'll see what I can do.
Apart from sending a password request to your Gmail or linked email, unfortunately I don't think you can do anything without wiping. If it's a 4 digit pin code try guessing the basics. 1234, 0000, 4321,etc.
The Nexus 5 advocate (Team Inferno)
TheLastSidekick said:
Apart from sending a password request to your Gmail or linked email, unfortunately I don't think you can do anything without wiping. If it's a 4 digit pin code try guessing the basics. 1234, 0000, 4321,etc.
The Nexus 5 advocate (Team Inferno)
Click to expand...
Click to collapse
I have the Google Account e-mail and password so that isn't an issue. How would the above help to obtain the PIN code or to change it?
If I'm not correct somewhere at the bottom of the screen after entering it incorrect twice or three times, should display an email reset option. Let me try it and get back to you in just a moment.
Edit : was able to get it working for a friend on Android 2.2 but it is no longer working for me on 4.4.2 sorry.
Double edit : It is the pattern lock you can reset from but there used to be a way to do pin reset. I'll update my post if I find anything else. All the best.
The Nexus 5 advocate (Team Inferno)
TheLastSidekick said:
If I'm not correct somewhere at the bottom of the screen after entering it incorrect twice or three times, should display an email reset option. Let me try it and get back to you in just a moment.
The Nexus 5 advocate (Team Inferno)
Click to expand...
Click to collapse
No, as I said in my OP that's only for pattern locks.
I don't think there is any way to do it without wiping the device. Try safe mode though it may temporarily disable the pin. That would allow you to backup the device
Programming is a race between engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning.
Captain Sweatpants said:
I don't think there is any way to do it without wiping the device. Try safe mode though it may temporarily disable the pin. That would allow you to backup the device
Programming is a race between engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning.
Click to expand...
Click to collapse
Just tried Safe Mode but no luck. It really must be the OS that's responsible and not an app.
Thanks anyway!! I'll just have to wipe it.

how is the new touch wiz?

how is the new touch wiz on this phone?
how is the new touch wiz on this phone?
First you need to factory reset your Samsung phone. Go to the Apps page, and then head to 'Backup and reset', under 'User and backup'. Scroll down to 'Personal Data', and choose 'Factory data reset'. All data will be erased from device memory, so make sure you have backed up all the files and documents you need. You will be able to reinstall contacts, emails and apps by re-synching with your Google account.
Once you have hit 'Erase everything', your Samsung phone will reboot and reset. To avoid the worst of Samsung's TouchWiz excesses, you need to discipline yourself not to accept Samsung updates (pictured below), and not to sign up for a Samsung account. You may find that the behaviour of TouchWiz that previously bothered you is now absent.
mohinipollob said:
First you need to factory reset your Samsung phone. Go to the Apps page, and then head to 'Backup and reset', under 'User and backup'. Scroll down to 'Personal Data', and choose 'Factory data reset'. All data will be erased from device memory, so make sure you have backed up all the files and documents you need. You will be able to reinstall contacts, emails and apps by re-synching with your Google account.
Once you have hit 'Erase everything', your Samsung phone will reboot and reset. To avoid the worst of Samsung's TouchWiz excesses, you need to discipline yourself not to accept Samsung updates (pictured below), and not to sign up for a Samsung account. You may find that the behaviour of TouchWiz that previously bothered you is now absent.
Click to expand...
Click to collapse
Hmmm....I've done the exact opposite and my device flies. I'd say only do that if you're actually experiencing issues.
There is a theme engine built in, and there are material design themes that are available and extremely well done. This pared with a launcher change makes it appear that tw is almost absent.
Additionally, there is some very good functionality that TouchWiz provides, such as the edge stuff, fb contact sync, a close all windows option in the multitasking menu, area code lookup within the dialer, ultra power saving mode, etc.
For the first time ever, I believe TouchWiz is an asset.

Minimal Android OS for Note 4 Audio & Video?

Am thinking about using a Note 4 for Audio and Video only (no phone or Internet).
Hope someone else has tried this and has some suggestions concerning reducing Android OS to minimum.
Also instead of reducing the Android OS if it would be better to use a 3rd party ROM?
Open to all comments
KermitJ said:
Am thinking about using a Note 4 for Audio and Video only (no phone or Internet).
Hope someone else has tried this and has some suggestions concerning reducing Android OS to minimum.
Also instead of reducing the Android OS if it would be better to use a 3rd party ROM?
Open to all comments
Click to expand...
Click to collapse
If you're not interested in internet, yet want reliable audio and video, maybe try old kk roms that are optimized or some lollipop aosp roms. That way the software is at its lightest.
QuoPrimum Thanks for the tips!
Forgot to add that I am new to Android but have been using Windows for a while.
For Windows there are a number of ways to remove unnecessary parts
1. preformed like Micro XP v0.82
2. make your own using nLite
Anything like this for Android?
Also have been searching for a description what each Android file does like Black Viper does for Windows. Windows Services Information http://www.blackviper.com/windows-services/
Hope someone knows about an Android (or even Linux) info similar to this.
KermitJ said:
QuoPrimum Thanks for the tips!
Forgot to add that I am new to Android but have been using Windows for a while.
For Windows there are a number of ways to remove unnecessary parts
1. preformed like Micro XP v0.82
2. make your own using nLite
Anything like this for Android?
Also have been searching for a description what each Android file does like Black Viper does for Windows. Windows Services Information http://www.blackviper.com/windows-services/
Hope someone knows about an Android (or even Linux) info similar to this.
Click to expand...
Click to collapse
You could disable/freeze apps with titanium backup or using adb.
QuoPrimum Thanks for the suggestion "You could disable/freeze apps with titanium backup or using adb."
Checked "Titanium Backup User’s Guide" https://www.titaniumtrack.com/kb/titanium-backup-kb/titanium-backup-user-guide.html Was especially interested in 7. Manage Applications List of apps Tapping the “Backup/Restore” button brings you to the application list – or rather the list of available “items”. Here you can see which applications and settings are available on your phone, and what has already been backed up (the symbols to the right tell you the latter – hit your phones menu button and select “Legend” for details on what they mean). Tapping an application brings up a popup from which you can select actions to be taken with the selected item: You can e.g. run an application, back it up, restore it (or its settings). You also may also decide to un-install the application – even if it is a system app! But with the latter, you should be very careful: Remove the wrong thing, and your phone may start malfunctioning. Which is why you should first try whether it’s safe to remove that system application. This can be done by “freezing” it.
Clarification: What type of information is available when select legend.
Also do you know of a beginners guide for Android OS services?
KermitJ said:
QuoPrimum Thanks for the suggestion "You could disable/freeze apps with titanium backup or using adb."
Checked "Titanium Backup User’s Guide" https://www.titaniumtrack.com/kb/titanium-backup-kb/titanium-backup-user-guide.html Was especially interested in 7. Manage Applications List of apps Tapping the “Backup/Restore” button brings you to the application list – or rather the list of available “items”. Here you can see which applications and settings are available on your phone, and what has already been backed up (the symbols to the right tell you the latter – hit your phones menu button and select “Legend” for details on what they mean). Tapping an application brings up a popup from which you can select actions to be taken with the selected item: You can e.g. run an application, back it up, restore it (or its settings). You also may also decide to un-install the application – even if it is a system app! But with the latter, you should be very careful: Remove the wrong thing, and your phone may start malfunctioning. Which is why you should first try whether it’s safe to remove that system application. This can be done by “freezing” it.
Clarification: What type of information is available when select legend.
Also do you know of a beginners guide for Android OS services?
Click to expand...
Click to collapse
I don't know of any specific guides, but if you look around xda, there should be a few debloating guides for roms.

Samsung Galaxy note 20 ultra Europe exynos sm-986b debloat/decrapify

Hi,
Samsung Galaxy note 20 ultra Europe exynos sm-986b debloat/decrapify (Switzerland/Swisscom).
I'm starting my journey to debloat that phone which is entirely unusable for me, due to the unwanted presence of hundred of junk apps.
After realizing that I was not using a data cable but only a charging cable (computer not having usbc, I had to use another cable than the official one). I manage to get my bearings a bit.
So the connection is sorted out (out of topic), now start the actual decrapifying:
1) I used/will use this program, to list all programs:
https://forum.xda-developers.com/an...easy-management-android-applications-t4147837
Note: I could have used adb directly but this seems easier, especially as we talk about hundred of lines.
Note 2: each time I installed "ACBridge" which appears to show nice icons for that program.
2) I have compiled a list of applications currently installed. I did not install anything manually myself yet, not even connected to Android Play:
442 apps by default.
https://gofile.io/d/xGHoff
Note: Are some of these apps only specific to my seller and my region? It's possible, since the phone clearly had some of the FYI operator branded options installed.
3) I'm going to factory reset now. Again, nothing was really installed, just official rom updates done. But I want to start from fresh.
4) After I will reinitiate the phone, I will redo the list of applications capture, and start trimming down.
5) After the factory reset, it seems I had a new screen (unless I skipped it by mistake last time) proposing me to install additional apps like spotify, linked in... I refused this time. Last time I had the apps installed maybe a mistake click, or something new thanks to newer firmware.
6) Use the program again, I now have 429 apps only instead of 442.
7) I tried the list mentioned a starting point, I will look into this user list, allegedely 109 apps removed from a S20 (which is a different phone, I know):
https://forum.xda-developers.com/t/tool-windows-adb-appcontrol-v1-4-5.4147837/post-83980273
First that only has 104 apps over 109.
Second, I found a few items I wanted to keep and a few I wanted to remove.
Customization Work required here...!
Caution: the list of 109 items contains what is described elsewere as dangerous:
com.samsung.android.authfw ; Not Recommended: Used for password autocompletion, can be removed if you don't use it. This app is sometimes called by the system and might cause battery drain if removed
com.serv.android.preloadinstaller : App that install other application, do not remove!
I will check each non-obvious items.
This list seems more pro:
Samsung full apps list
Feuille 1 LAST UPDATED 01/09/2022,Reinstall an app using pm install-existing [the app package],Enter in shell using adb -d shell before running the command,Enter in shell using adb -d shell before running the command,<a href="https://docs.samsungknox.com/CCMode/G988B_Q.pdf">https://docs.samsungk...
docs.google.com
I made a custom preset with the 85 items in the list of " Safe to uninstall ". Only 71/86 where showing, some I wanted to keep like Android Auto.
--> I seems to have to choice but start from a bigger list and go through it myself.
After checking each items of that 109 list, vs the spreadsheet and sometimes google, I actually ended up reducing the list, or keeping more items. My final list is currently 68 applications to remove.
I also removed additional things like Netflix.
FINAL LIST:
Samsung SM-N986B_[All]_presetJSDec2020.txt
In the process I learned that this list seems rather personal to do. Yet, some items are marked not to be removed due to battery drain, so the initial list of 109 seems risky. I would say some manual work is mandatory.
8) Moving on, time to uninstall. Done.
9) Time to configure the basics again (basically language, etc...). Done.
10) Time to migrate data from old phone to new phone, I used "Samsung smart switch" app, installed it on both phone, used wifi, and unselected unwanted things. Done after some 1-2 hours (not so much data but it was slow and I interrupted twice).
11) Now the phone looks ok, a few apps had to be manually reinstalled like MCDonald's crapp.
12) Time to recover authenticator, relogin to apps, etc...Some apps I can't do now like RSA token, needs to regenerate a token elsewhere. GoogleAuth was simple, I could easily export from old phone/import new phone..
13) Phone works for now. I see I missed to remove some stuffs like "My files" which was basically simply like file explorer but from Samsung. That was indicated as "not remove" but probably can be ( com.sec.android.app.myfiles ).
Edit: day +1 after the step 13. Phone works properly. No visible impact on battery drain (seems high, as usual and with little usage overnight, same as before any intervention from my side). Unable to continue anything for now, being ill. Everything seems to work, even without the stuffs I removed.
On that note, I got rid of youtube and yt music, and installed YoutubeVance.
I tested the basics (phone, camera...) looks ok.
Note: this is WIP and more sharing the journey, as well as learning. Usually I would unlock bootloader, root, and install a decent ROM from XDA; but not happening this time.
Thanks for sharing cyber.cat thread ! Used it and removed 20+ useless app
ouroukai90 said:
Thanks for sharing cyber.cat thread ! Used it and removed 20+ useless app
Click to expand...
Click to collapse
Glad that could help- The tool from Cyber Cat and the threads are useful. Yet I saw quite a few tools/options around.
The idea was to share the experience of using one, do some sort of decrapifying/debloating and comment.
For me even if I expected a bit that, I was a bit surprise that this operation needs a lot of customization.
Let's say it was easier to start from a fresh Android ROM and add some selected Google apps, rather than trimming down that Samsung junk (That something I usually do with custom roms, here I stayed with official Samsung ROM, so I did not have that possibility to start fresh).
I see Android 11 update should come soon (around January 2021?).... I take it that they will reinstall all their garbage in the OTA update... And we will have to decrapify again!?
Yes I guess for a major update it will maybe reinstall crap like "tips" from Samsung. But i've done this using beta4 OneUI3.0 and it work very well
Is it possible to uninstall the google app? And then install it again? I have problems with hey google not working
Anskjer said:
Is it possible to uninstall the google app? And then install it again? I have problems with hey google not working
Click to expand...
Click to collapse
Yes, which app specifically?
Not sure what is "hey google", are you talking about "Google Assistant"?
Anyway, usually clear cache, not uninstall/reinstall...(then clear data when sure what you doing...)
htchd2sucks said:
Yes, which app specifically?
Not sure what is "hey google", are you talking about "Google Assistant"?
Anyway, usually clear cache, not uninstall/reinstall...(then clear data when sure what you doing...)
Click to expand...
Click to collapse
The assistant is inside the google app. Clear cache I have try but didn't work. Thanks for the help
The phone shown me an update yesterday (01/01/2021), OneUI3, Android 11.
It updated without any issue, and all my apps and things are properly there after.
One strange thing is it was allegedely updating 470 apps on my phone, I don't remember having so many.
Another thing to notice, is that I did not notice any new garbage apps after the update. For example, some emoticons junk was not reinstalled. Also, the default keyboard remains Gboard, like I set myself before the update.
Anyway, time to check now, in details.
Verdict: # Total applications: 421
Some junk have been installed again during the update. (after my previous cleaning, I was at:
# Total applications: 361)
I don't see the same type of junk as it was before, like Netflix apps, Bixby...etc... So it's rather strange.
One horrible app I found is "eBay Partner Attribution". What is it? Affiliate marketing is a referral program where sites pay commissions to affiliates who send traffic to their site that results in a sale.
Well done Samsung, installing junk to get additional money...
App killed on sight (com.ebay.carrier).
I also removed com.google.android.videos.
That will be all for now, don't have the time to do better.
Is it really safe to debloat all knox related stuff? just asking if it helps anything?
jirka607 said:
Is it really safe to debloat all knox related stuff? just asking if it helps anything?
Click to expand...
Click to collapse
I think knox junk tripping is only if you replace your bootloader:
Knox
I think removing the apps only is not tripping it (anyway, if it is, my phone is fine without it).
It depends what you mean "safe" anyway, if you are talking about some features that might not work, or a broken phone for example.
Thanks, im not sure if you should put the Knox app in the safe list.
danterape said:
Thanks, im not sure if you should put the Knox app in the safe list.
Click to expand...
Click to collapse
Try to delete it then u'll see xD

Categories

Resources