S2 GT-i9100 Google Play Services randomly causes *unimaginable* battery drain - Android Q&A, Help & Troubleshooting

Disclaimer: I have already posted this in the S2 specific forum, unfortunately a lack of response is why I am also posting this here.
Hello Everyone
Start off by saying I have little to no Android knowledge (rooting, custom ROMs, modding or programs for such things), however I have basic knowledge of linux and the command line.
My S2 GT-i9100 rapidly heats up and its battery is *unimaginably* and randomly depleted by Google Play Services and quickly renders it useless as a device. I want to fix it and not turn it into a brick.
I got the phone from a family member from Europe (I live in Australia), who had used it for about 6 months. When I got it, it was already unlocked and rooted by some phone place over there. I didn't have any problems.
Recently however Google Play Services (size 127 MB) (version 9.2.56) has randomly started doing *something*, this despite no mobile broadband and almost no internet usage from wifi either to invoke it. Considering it is on ICS (no idea how to upgrade, or whether i should upgrade, or what to upgrade to) it has to be either a bug or a virus considering all those Android exploits in the news recently.
To fix it whenever it occurs, I clear the RAM twice then go into the list of Applications and Force Stop Google Play Services (more than once if the button isn't greyed out).
I tried to disable the components of Google Play Services(listed below) but the problem continued AND it erased the names of my contacts meaning I was left with a bunch of numbers with no name.
Google Bookmarks Sync
Google Play services
Google Services Framework
Google Account Manager
Network Location
Google Contacts Sync
Some details:
Wi-Fi use only (and nonexistent nowadays), no mobile broadband
GT-i9100 running Android 4.0.3 (ICS)
ROM, unknown if original / custom, has a T-Mobile animation screen on bootup and shutdown
It also has a yellow triangle at the bottom when I turn it on (don't care about cosmetics)
Rooted with CWW (no idea about how that works or what it means) and SuperSU (i do know how root user works in linux)
Root Browser + Terminal Emulator installed (my doing)
Google Authenticator + Microsoft Account Authenticator (i don't wanna screw up anything with these, got codes for google authenticator, need to research microsoft)
Call history and text messages (I would like to keep these and would like to know how to backup the phone first of all)
So I'm looking to figure out what would be the best course of action to fix this without screwing up anything. I know the standard solution would be a factory reset but I don't have any backups (also don't know how to), don't want to brick the phone and don't know what it would actually do, and even if it worked, how to root the phone again.
Any help would be greatly appreciated.

Related

[Q] Why do apps need gapps to work?

I used to have a huawei ascend p1 phone with gapps preinstalled (good phone). People first complain about its build quality but it that plastic they used on it can withstand many drops without even scratching the phone. I sort of found the gapps annoying because the first time I set it up, it asked me for my physical location and a google account and asked me to store home wifi passwords, contacts, etc in google servers and all that those data stuff google wants from people. I know I can back up my own things so I don't need google to do all these things for me, I tried to disable as much of these features as I could and it was okay for a while until my phone got stolen at a sports center and couldn't find it back despite having installed tracking apps on it.
So I got a new phone, the nexus 4 because it had a booloader that was easy to unlock. I decided to start fresh without all those data sucking features and remove the stock firmware to flash cyanogenmod on it. It was my first time using cyanogenmomd and I gotta say it's wayyy better than the stock firmware in terms of useful features. I really liked it because of all the customizations it offered. As a replacement for google play I installed 1mobile, and fdroid/slideme they worked wonderfully without a google account (I never had one). When I started to install apps from these markets, some apps would work and some would not and some wouldn't even install. I used adb logcat to figure out what was wrong with them and it showed that they required some permissions from the gapps package mainly "com.google.android.maps.xml" and few others. I decided to just copy this file over to the permissions folder on my device and the apps that wouldn't install before installed but most of them would crash easily. Subway sufer was one of my favourite games but it wouldn't work without gapps along with other apps. I figured I had to install gapps and all the data sucking questions and features poped up after I rebooted my phone prior to the installation so I set it up just like previously did on the huawei ascend p1. I noticed that 1modile wouldn't work as smoothly as it did anymore because the searches don't return the official apps. It's like something's been changed in its search algorithm because it when I search for subway surfers it used to return the official game as #1 result but after gapps it dosn't show at all, it just shows tricks, cheats and other apps for the game. The same things goes with other apps I tried to find from it.
To sum everything up, my question would be something like "Is there a way to have all those dependencies apps rely inside cyanogenmod without gapps?".

[Q] App installed automatically

Hi there,
I have facing issue in my Android 4.2.1 JB from alst 7 days. There are few apps which automatically getting installed without asking my permission. It hapeens when they detect i am connected to Wi-Fi or mobile data connection. i didn't rebooted my device. Everytime i have to uninstall these apps but after few hours they get automatically installed . Device rooted 2 months back
Apps are:
Baidu Browser
UC browser
Flapy Bird
Poker
Option like USB debugging and installed from unknown source are turned off. Even scanned by device through multiple anti-virus like Avast, AVG & CM Security. Below are the apps which are currently in my device:
Adobe reader, all-in-one toolbox, angry bird, avg, avast, axis bank app, B1 free archiver, backup& restore, barcode scanner, battery doctor, call control, cam-scanner, chrome, clean master, CM Security, Easy Video player, EN-HI dictonary, fusion (music player), goggles, hdfc app, iMedia share, kickass torrent, linkedin, FB messanger, My Tom, Next Launcher 3D, Outlook, Oaytm, Push mail, Quickoffice, Rails, Ringtone Editor Pro, root uninstaller, skype, speedtest subway surfer, superuser, temple run 2, tubemate, whatsapp, youtube.
Please help.
aadishivan said:
Hi there,
I have facing issue in my Android 4.2.1 JB from alst 7 days. There are few apps which automatically getting installed without asking my permission. It hapeens when they detect i am connected to Wi-Fi or mobile data connection. i didn't rebooted my device. Everytime i have to uninstall these apps but after few hours they get automatically installed . Device rooted 2 months back
Apps are:
Baidu Browser
UC browser
Flapy Bird
Poker
Option like USB debugging and installed from unknown source are turned off. Even scanned by device through multiple anti-virus like Avast, AVG & CM Security. Below are the apps which are currently in my device:
Adobe reader, all-in-one toolbox, angry bird, avg, avast, axis bank app, B1 free archiver, backup& restore, barcode scanner, battery doctor, call control, cam-scanner, chrome, clean master, CM Security, Easy Video player, EN-HI dictonary, fusion (music player), goggles, hdfc app, iMedia share, kickass torrent, linkedin, FB messanger, My Tom, Next Launcher 3D, Outlook, Oaytm, Push mail, Quickoffice, Rails, Ringtone Editor Pro, root uninstaller, skype, speedtest subway surfer, superuser, temple run 2, tubemate, whatsapp, youtube.
Please help.
Click to expand...
Click to collapse
Is someone messing around with your Google Account?
If someone login from your google account from computer and install app from play store site, it is installed from internet.
When you say it happens when you are connected to Wi-Fi or data, so I am 99.99% sure, it is due to messing with Google Account.
ok. Let me try removing my all google account from device and some other account to see if this happen again.
Thanks
hnkotnis said:
Is someone messing around with your Google Account?
If someone login from your google account from computer and install app from play store site, it is installed from internet.
When you say it happens when you are connected to Wi-Fi or data, so I am 99.99% sure, it is due to messing with Google Account.
Click to expand...
Click to collapse
Hi there,
I removed all my google account from mobile and added new gmail account. But issue is still same.
Maybe you could try to disable "Auto-update apps" in google play.
Even i have the same problem. I even removed the auto-update but still its happening.
Please help ?
he_arslan said:
Maybe you could try to disable "Auto-update apps" in google play.
Click to expand...
Click to collapse
"Auto-update apps" is disabled in google play. But same this is keep happening. Did hard reset of my phone but same issue.
i have that same problem with my tablet from ebay running 4.2.2 app DU Battery Saver & Widgets is installed without my permission and i don't even have google account on this device, but tablet is connected on wifi 24/7 and all apps are stock i have original firmware and i try to reflash device but this is happening again
Very odd... Have you tried disabling the Install from Unknown Sources option?
now it is, let's see if this will help
i have something the same problem
I bought on e-bay a Chinese 10.1" M10 type with MTK8127 chipset and Android 4.4.2 Kernel: 4.3.67 tablet.
It works great except that it is every day i get a new surprise "great" application that are installed on their own, do not ask for anything and ready to license to be posted.
The tablet was rooted with VRoot_1.7.3.4863_english_cid1005_7337ba1e_89.exe and with MtkDroidTools_v253 do full backups.
TelepĆ¼tek follows so far:
27/10/2014 1:16:17 DU Battery Saver
28/10/2014. 1:07:51 Flappy Cow
10/29/2014. Happy Jump 1:39:45
30/10/2014. 1:39:13 Freaking Math
31/10/2014. 1:49:11 Amazing Candle
11/1/2014. 1:28:43 Monkey (/data/app/com.candh.game.monkey-1.apk)
In addition, after each start / restart after a few minutes received a message in the notification area:
Du Battery Saver -> The key to optimize, clean up backstage power applications, rapid power
What I have tried:
Factory reset, after of course, google restore disabled and manually put up everything again.
Note that this is after factory reset the same applications in the same order almost exactly in same time per day.
The version numbera are earlier or actual that you can download from play.
The applications that I use on that device are the same that i use on other (Samsung) device so it is sure that there is no problem with them but i think the system itself compromised.
I tried Avast, Avira, eset, AirPush Block, Network connections, OS Monitor, Addons Detector, Trust - Event Logger but not found anything and I could not figure out what was happening.
I put CatLog - Logcat Reader to get it know whats happening but could not really understand what was happening.
Please help to figure it out based on the log to see what happens and how it happens and how can I get rid of this.
The following is a brief log details, of course, I will send out more on request.
See attachment.
kisger13 said:
I bought on e-bay a Chinese 10.1" M10 type with MTK8127 chipset and Android 4.4.2 Kernel: 4.3.67 tablet.
It works great except that it is every day i get a new surprise "great" application that are installed on their own, do not ask for anything and ready to license to be posted.
The tablet was rooted with VRoot_1.7.3.4863_english_cid1005_7337ba1e_89.exe and with MtkDroidTools_v253 do full backups.
TelepĆ¼tek follows so far:
27/10/2014 1:16:17 DU Battery Saver
28/10/2014. 1:07:51 Flappy Cow
10/29/2014. Happy Jump 1:39:45
30/10/2014. 1:39:13 Freaking Math
31/10/2014. 1:49:11 Amazing Candle
11/1/2014. 1:28:43 Monkey (/data/app/com.candh.game.monkey-1.apk)
In addition, after each start / restart after a few minutes received a message in the notification area:
Du Battery Saver -> The key to optimize, clean up backstage power applications, rapid power
What I have tried:
Factory reset, after of course, google restore disabled and manually put up everything again.
Note that this is after factory reset the same applications in the same order almost exactly in same time per day.
The version numbera are earlier or actual that you can download from play.
The applications that I use on that device are the same that i use on other (Samsung) device so it is sure that there is no problem with them but i think the system itself compromised.
I tried Avast, Avira, eset, AirPush Block, Network connections, OS Monitor, Addons Detector, Trust - Event Logger but not found anything and I could not figure out what was happening.
I put CatLog - Logcat Reader to get it know whats happening but could not really understand what was happening.
Please help to figure it out based on the log to see what happens and how it happens and how can I get rid of this.
The following is a brief log details, of course, I will send out more on request.
See attachment.
Click to expand...
Click to collapse
Did you disable the option to install from unknown sources?
es0tericcha0s said:
Did you disable the option to install from unknown sources?
Click to expand...
Click to collapse
Yes, sorry i forget to write it.
I just. This morning also am getting random apps installed. Dominos pizza, panda pop and cookie jam the newest app i have installed is brave frontier can it be malware or something else.
4218kris said:
I just. This morning also am getting random apps installed. Dominos pizza, panda pop and cookie jam the newest app i have installed is brave frontier can it be malware or something else.
Click to expand...
Click to collapse
It could be if you got it from anywhere but the official play store. Never install apps not from a trusted source.
4218kris said:
I just. This morning also am getting random apps installed. Dominos pizza, panda pop and cookie jam the newest app i have installed is brave frontier can it be malware or something else.
Click to expand...
Click to collapse
I got the same apps today - Domino's PandaPop, and Cookie Jam plus Drippler. I did not install Brave Frontier, so that isn't the source.
The only things done recently for me are:
- Connected up to my work Office 365 service, which requires admin access (for wipe, etc)
- Updated su binaries a few days ago - at prompt from SuperSU
Oh lovely...
http://www.pcworld.com/article/2853...aller-spotted-on-t-mobile-verizon-phones.html
yep thats it i bet, its on my tablet. thanks carrier...
Doktor-X said:
i have that same problem with my tablet from ebay running 4.2.2 app DU Battery Saver & Widgets is installed without my permission and i don't even have google account on this device, but tablet is connected on wifi 24/7 and all apps are stock i have original firmware and i try to reflash device but this is happening again
Click to expand...
Click to collapse
I just got DU Battery Saver installed on my Onix tablet. You read stuff on the internet about cheap Chinese tablets coming loaded with spyware and other sorts of stuff and I wonder whether apps can be freely installed via some hidden app on the device.
You all suck dumb asses
Thats why i hate these blog sites they call themselves experts but cant solve any damn thing untick auto updates, really you think we didn't knew that much really man,my problem never got solved in online sites infact you will get more confused why would some hack someone's google account and download du app make some sense guys you all suck

S2 GT-i9100 Google Play Services randomly causes *unimaginable* battery drain

Hello Everyone
Start off by saying I have little to no Android knowledge (rooting, custom ROMs, modding or programs for such things), however I have basic knowledge of linux and the command line.
My S2 GT-i9100 rapidly heats up and its battery is *unimaginably* and randomly depleted by Google Play Services and quickly renders it useless as a device. I want to fix it and not turn it into a brick.
I got the phone from a family member from Europe (I live in Australia), who had used it for about 6 months. When I got it, it was already unlocked and rooted by some phone place over there. I didn't have any problems.
Recently however Google Play Services (size 127 MB) has randomly started doing *something*, this despite no mobile broadband and almost no internet usage from wifi either to invoke it. Considering it is on ICS (no idea how to upgrade, or whether i should upgrade, or what to upgrade to) it has to be either a bug or a virus considering all those Android exploits in the news recently.
To fix it whenever it occurs, I clear the RAM twice then go into the list of Applications and Force Stop Google Play Services (more than once if the button isn't greyed out).
I tried to disable the components of Google Play Services(listed below) but the problem continued AND it erased the names of my contacts meaning I was left with a bunch of numbers with no name.
Google Bookmarks Sync
Google Play services
Google Services Framework
Google Account Manager
Network Location
Google Contacts Sync
Some details:
Wi-Fi use only (and nonexistent nowadays), no mobile broadband
GT-i9100 running Android 4.0.3 (ICS)
ROM, unknown if original / custom, has a T-Mobile animation screen on bootup and shutdown
It also has a yellow triangle at the bottom when I turn it on (don't care about cosmetics)
Rooted with CWW (no idea about how that works or what it means) and SuperSU (i do know how root user works in linux)
Root Browser + Terminal Emulator installed (my doing)
Google Authenticator + Microsoft Account Authenticator (i don't wanna screw up anything with these, got codes for google authenticator, need to research microsoft)
Call history and text messages (I would like to keep these and would like to know how to backup the phone first of all)
So I'm looking to figure out what would be the best course of action to fix this without screwing up anything. I know the standard solution would be a factory reset but I don't have any backups (also don't know how to), don't want to brick the phone and don't know what it would actually do, and even if it worked, how to root the phone again.
Any help would be greatly appreciated.
Hi,
i had the same massive battery draining. Problem was Google Fit App. After uninstalling the app the battery draining is gone. I think this app prevented the google services to fall in "doze" mode. Perhaps you have a similar app!?

Remove System Apps

Hi Guys
I have a quick question - How do i remove system apps on the Tab S3.
Everytime i go to remove and app thru Tit Backup - It restores it after reboot.
Rooted with SuperSU - Id like to uninstall Knox etc but cant?
I had this on the S8 - Is this to do with the Kernel needing to be permissive? Any help would be welcome.
fkofilee said:
Hi Guys
I have a quick question - How do i remove system apps on the Tab S3.
Everytime i go to remove and app thru Tit Backup - It restores it after reboot.
Rooted with SuperSU - Id like to uninstall Knox etc but cant?
I had this on the S8 - Is this to do with the Kernel needing to be permissive? Any help would be welcome.
Click to expand...
Click to collapse
I think you have no R/W access to the system. Did you flash the no-verity-opt-encrypt patch when rooting? Download root essentials from the play store. There you have the option to mount system R/W. After enabling that removing the system apps should work.
Verstuurd vanaf mijn SM-T825 met Tapatalk
Thanks... Completely slipped my mind about the RW access
I'll give it a go
Nope didnt work - Trying to delete anything of the system partition doesnt go anywhere
Solution I found for my Galaxy S7 was to use /system/app mover available from F-Droid.Org
Move apps first to be User apps, reboot and you can uninstall them.
Judging by the number of Thanks on this thread, I can see that problems with apps have been an issue with rooted Tab S3s for quite some time.
The problems I am having are actually the reverse, however; whenever I delete system apps my device becomes all but soft-bricked (Android strips me of many user privileges).
Makes me sick for a device I paid $500 for and own.
Now this is for a recent root "professionally" performed just the other day by OneClickRoot using Magisk.
Having said that, I would suggest that anyone having difficulty removing apps really doesn't want to experience the consequences of what happens when you do.
So far OneClickRoot has been MIA as far as providing assistance for an improperly performed root that voided my warranty and which I cannot use.
But what they do not know (yet) is that I screen recorded the sessions while they had remote access to my PC and were rooting my device. I haven't yet investigated whether there are newer files they could have used, but I do know that I was prompted to update Magisk on my device almost immediately afterward.
It does seem clear that Android came out with some kind of a patch that thwarted the plan. And it was seriously harrowing.
Anyway, with the guidance of the screen recordings I was able to do some experimenting with app removal and unroot/reroot at my leisure.
It didn't take much in the way of app removal to throw the system into a state of angst like I've never seen (I rooted my Galaxy S3 phone a long time ago on my own and it went peacefully and without incident). I never once touched [removed] a single core system file on this S3 tablet (of course, that may be understating it; apps like Chrome could be considered to contain core system files - after all, it is an Android). I also did not remove Google Play Services or Google Play because I kinda had a hunch.
Incidentally, I used ES File Explorer to remove the apps. A decent reputation with Google. Downloaded with Yalp Store. (After removing the apps, some time later I went back to the root section of ES and got a notification that said "Sorry. That feature is not available on this device.")
At the moment I am back in re-rooted state and experimenting with an app disabler/freezer. So far so good. It's interesting to see what I haven't been able to disable - Chrome being one of them. The others (Music, Movies, Maps, Hangouts, OneDrive, etc. were disabled without incident). I'm wondering if this experiment is demonstrating which apps I can safely remove with the root.
Oh, I disabled Google Text-to-Speech and once in a while I get a feeble notification alerting me that it has stopped which is fine by me. I'm sick of them stalking me all over the Internet let alone logging my every keystroke.
Anyway, that's my story and the current forecast where uprooting is concerned.
I looked at oneClickRoot. It wants access to all your accounts. Why does it need that? That scares me. I also don't see how it would root your device without tripping Knox. Maybe it doesn't, I don't know.
Sent from my [device_name] using XDA-Developers Legacy app
jd1639 said:
I looked at oneClickRoot. It wants access to all your accounts. Why does it need that? That scares me. I also don't see how it would root your device without tripping Knox. Maybe it doesn't, I don't know.
Click to expand...
Click to collapse
JD, sometimes roots trip Knox and sometimes they don't. They didn't advise me of that either way.
I'm not sure why they want access to all your accounts. Maybe it's just because a root requires total access to your device.
There's nothing you don't see while they are performing the root so I don't think it's much to be concerned about.
Picking up where I left off with my original post, I soon discovered Terminal Debloater developed by Magisk (a means of removing apps systemless-ly!).
OneClickRoot didn't advise me of that method (and still hasn't gotten back with me, incidentally). Of course, they do make money selling extended support packages (and it's worth noting that they didn't flash TWRP to my device either).
I thought if Terminal Debloater didn't do it nothing would. And it didn't work, even though I didn't uninstall Google, Google Play Services or Google Play.
I mean, it got rid of the apps just like ES File Explorer did, but my device once again became nearly unusable (unable to open Google Play Store or Amazon Appstore among other features of my device). But systemless-ly? Not so sure about that.
Resetting the device remedied the problem(s) and reinstalled everything without requiring a re-root (minus 3rd party apps that I already had installed, of course). I had forgotten about the previous backup that I had performed with Titanium Backup but it was like 4am and I was getting foggy, you know - there have been a lot of late nights lately. My device was still rooted after the reset and I was able to reinstall Magisk Manager with an .apk (Google Play Store banished it). Maybe that's what they meant by systemless uninstall - the relative ease of reinstall.
So I think that after all of this experimentation it is fair to say that unless you have goals other than uninstalling meaningless stuff like that withTV app it isn't going to work out. And for an app freezer/disabler to work properly you need a root. And an app/freezer disabler won't disable them all. I still have a lot of Google apps it won't disable like Gmail, Chrome, Photos, Movies & TV and Google Play Music (although I realize most people aren't interested in disabling Google apps). I could probably safely remove YouTube, Maps and Drive (I was only able to partially able freeze the former but I was able to fully freeze the latter). There are others I could probably uninstall too - OneDrive, other Microsoft apps, Weather, etc. - it would just seem pointless though since they are already frozen. So maybe freezing is a good enough reason to root for those who only want minimal removal of apps and still want Google where the sun doesn't shine.
Anything that can be frozen can probably be safely removed with the root but I haven't experimented with that. It might require a 4th reset and/or reroot. But you will never have total freedom to do what you want.
As far as OneClickRoot, it is fortunate that I paid with PayPal because I am going to file a claim based on many factors. They asked me why I was rooting my device and I told them I was going to remove apps. They didn't advise me on that either way. They didn't tell me that the root would trip Knox. It says on their Galaxy Tab S3 page, "After the rooting process is completed and done, you may start installing carrier-blocked applications" "you may positively eliminate preinstalled crapware" and "Remember that after rooting, you are the administrator of your own phone so have the freedom to do anything you want with your phone." If they made the mistake of referring to a phone on their tablet page then that's their bad. I do not yet qualify to post links on this forum, but you can find the page by using DuckDuckGo to search "Galaxy S3 Tab OneClickRoot" and it's the first search result).
I paid them $60 total to root my device; the first time I thought I removed too many apps and that it was my fault so I paid them an additional $20 to re-root it. Turns out it really wasn't my fault at all because with the 2nd root I uninstalled even fewer apps than the first time (and like I said before, never any core system apps or even any major android apps like Google Play Services). I figured out how to unroot it on my own (with firmware files from SamMobile and flashed with Odin) and then screen recorded the 2nd root.
At the end of the day I'm not sure it's really worth it to root just to remove a few apps and void your warranty if you're still covered (I have only owned my device for just over a week).
But then, not everyone has the same objectives I do. I am completely crazy serious when it comes to my privacy. One might ask why I even purchased this device and it's because it affords customizations that Apple doesn't (or so I thought). But I can still run Linux. And, of course, I have no intent of setting up a Samsung account or a real Google account. I bought a cheap sim card from TracFone to use with my old S3 phone to set up a fake Google account (because of course you have to have a phone to register a Google account). My TracFone account is under a fake name, my phone number has a Chicago area code (I live across the country), my Google account will be under a fake name and I use a paid VPN on my device(s) using a Chicago IP address. They deserve it.
All just so I can get a few paid - but important - apps. If it weren't for that, Google account be damned. I sold my black little soul to Amazon a long time ago but their selections are limited.
---------- Post added at 09:31 PM ---------- Previous post was at 08:48 PM ----------
Oh, and for those who aren't rooted and simply want to uninstall system apps for more space, you can force 3rd party apps to SD by enabling that feature in Developer Options.
Go to Settings > About tablet > Model number > Software information
Click on Build number 7 times. That will activate Developer Options which you will then find at the bottom of the column on the left side.
Click on Developer Options and scroll way down to Force Allow Apps on External.
Then scroll up to Running Services and observe what's going on behind the scenes. Especially if you have denied (and even frozen) location permissions, deactivated bluetooth, limited background processes to "none" and deactivated automatic updates. They will grab at ANYTHING - your bluetooth, phone, etc. You can stop the processes but they still keep coming back. It's fun to give them an occasional punt anyway.
I did manage to finally disable blutooth but that *had* to be frozen. Disabling in settings wasn't good enough. Google Location Service cannot be stopped ever.
I should set up the fake Google account on my S3 phone with the Chicago IP address and then play Ingress in my real neighborhood just to taunt them.
Blue team!!!!
You do know there is a root method by ashyx in the development section, right. Also, I'd just freeze apps with tibu. That way if your system starts to freeze you can just unfreeze them.
Sent from my [device_name] using XDA-Developers Legacy app
jd1639 said:
You do know there is a root method by ashyx in the development section, right. Also, I'd just freeze apps with tibu. That way if your system starts to freeze you can just unfreeze them.
Click to expand...
Click to collapse
Hi JD.
No, I didn't know about ashyx. Thanks for that though. I might end up looking into it. I'm wondering if a root is just a root, though? There are a couple of apps that have given me errors that said "Your SU binary is functional but might not work reliably on some Android 4.3+ ROMs. If you encounter any issues in TB, please try SuperSU instead." I got that error from Titanium Backup today and I think also from Malwarebytes the other day.
So I'm wondering if uninstalling Magisk and installing SuperSU instead might make a difference.
I reallly have no clue. I'm going to try it though. As a last resort I will probably try re-rooting. Have you used ashyx? If so, were you able to remove apps without a hassle?
Also, is that your Porsche? Nice . . . . . if you're in Minnesota, bet you can't wait until June lol.
I'm from the Midwest orignally - I guess it was kind of a rough winter, no? I know last winter was.
You'll get the same message with supersu as magisk in TB. It's not an issue. And, yes, I use @ashyx method for root. It's worked for all firmwares so far, but I'm almost sure it won't (twrp) if Samsung ever gives us Oreo. But I have confidence in ashyx that he'll modify it so it will, he's the man!
jd1639 said:
You'll get the same message with supersu as magisk in TB. It's not an issue. And, yes, I use @ashyx method for root. It's worked for all firmwares so far, but I'm almost sure it won't (twrp) if Samsung ever gives us Oreo. But I have confidence in ashyx that he'll modify it so it will, he's the man!
Click to expand...
Click to collapse
Hi JD. Long time no see. Or so it seems.
My head has actually been far removed from the Tab this past week. I actually had my S7 rooted just a couple of days before the Tab and so I have been juggling both devices. I think I'm about to pop a blood vessel. I honestly would have rooted them myself but there was just too much scattered information and since I was dealing with two devices I had OCR do it.
But anyway, I haven't been much invested in the Tab over the past several days. I broke a few too many green antennae again and bricked my S7 for the third time. Whenever I have fresh firmware flashed to my device I get those uninstall apps and become possessed. At least I can reinstall the firmware and re-root on my own now.
Things sure have changed since the S3 (phone) and the Galaxy Tab Pro (which was introduced before app permissions became an option). I never did root that device. I guess that's about 4 years old now.
I do believe my S7 was rooted with the ashyx method. I saw a file or something somewhere. It is easier to remove system files on that device but more complicated as there are so many more of them being a phone and all.
As far as Oreo . . . . .ugh. Something about the potential for crush injuries doesn't seem really appealing. I can imagine the "system" is only going to become more oppressive and Google more invasive. Right now I'm still trying to figure out wtf Nougat is.
Besides, Nougat will be a good OS for a long, long time. The OS on my S3 phone [Lollipop?] is still adequate. And developers are still trying to perfect apps for rooted Nougat OS's. A lot of stuff is still buggy.
I'm not *quite* as fanatical about privacy on my S7 since my phone number was tied to my Google account long before I decided to stop being lazy about privacy issues. But once I get the paid apps I need I immediately freeze Google Play Services and Google Play Store. And before I use the store I remove my SD card before they can rape my app settings and data. And, of course, I pay for a Google Play gift card with cash. It's extremely difficult going to these extremes but I am still new at it on my devices so it will just take time to adjust. I went through the same grief with my PCs but it's all good now. My banks and creditors no longer hassle me when I use private browsing and a VPN when I log in. Google will never give in though. Ever. And that really is something scary.
I actually did acquire Windows 10 Enterprise for both of my PCs after many fruitless and failed attempts at tweaking my registry. Now I have full access to Group Policy Editor and live in relative privacy [and peace] where Microsoft is concerned. Wish android had a Group Policy Editor.
Anyway, as far as where I left off with app uninstalls on my Tab, I had only just flashed the stock firmware on that before I bricked my S7 so there are still what I call "secondary" Google apps like Maps, Gmail, Movies & TV, etc. Those are frozen, however. It still might be a couple of days before I get to uninstalling those but I will update. I have no life. I need to come up for air lol. It is important to me to post about this experience; I guess I feel somewhat like an activist in a sense. Google just runs roughshod over everything and everyone like they OWN, you know? And they don't. They don't own me, or you, or our devices. And so this is for people - not "advertising IDs" - who feel similarly and don't want Google invading their devices and private information.
Umm . . . . I know there are a lot of individuals who want to root their Tab S3s and I may at some point post instructions on how to do that using Magisk (it really is simple) but right now I just feel that it would be unethical to do so until I can figure out which apps are truly safe to remove without bricking. And, of course, I can post instructions on how to flash the stock firmware as well.
Thanks for the info about the messages, btw. Still trying to figure out how to disable those. There has to be an .obb tweak somewhere for that. As I recall, the primary reason I rooted my S3 (phone) to begin with was to disable the shutter sound on my camera! And that required an .obb tweak. For the life of me I can't remember what app I used to accomplish that.
---------- Post added at 05:36 AM ---------- Previous post was at 05:16 AM ----------
When I get a message telling me that something I don't want has stopped working, it would at least be nice to see a bow on top of that bubble with some streamers and balloons in the background.
:laugh:
The Battle Of Jorte.
The night before last I was making some tweaks to my S7. I had just finished up purchasing some apps I needed from the Play Store and had refrozen that app and Google Play Services. Some time before I had previously installed a day-planning type app called Jorte.
All of a sudden I started getting notifications in my notification area that said "Jorte will not run unless you enable Google Play Services." I tolerated this for a while and then finally thought, "Ok, well, I'll just uninstall Jorte and that will put an end to that." (I didn't really want Jorte anymore - I had installed it along with a couple of other day-planning apps I was making comparisons with and had decided on a different one - one that wasn't "dependent" on Google Play Services.)
So I uninstalled Jorte and realized that there was another app that I forgot to purchase. When I went back into Application Manager to reactivate Google Play Services and Google Play Store they were gone! Well! I wasn't sure if that was a good or a bad thing. I opened my App disabler app and sure enough - they were still installed on my phone, just hidden. How trite! How petty! I was furious.
I decided at that point that I had all the paid apps I needed.
One would THINK that an ETHICAL company without nefarious intentions would take the position that if an individual isn't using their services that they would be more than HAPPY that they be disabled especially if they are "FREE". After all, why waste resources?? To whose benefit is it to leave Google Play Services running in the background when it isn't needed?
I did something then that hadn't yet dawned on me. I have an app disabler that allows one to disable all of the services associated with that app (specifically Google Play Services). Uninstalling "GPS" bricked my device before so that wasn't an option. So I went offline and disabled my mobile data (also something I hadn't done before) and went into the app disabler (which I will not name [yet]) and started disabling everything with the word "sync", "collection", forwarding", "uploading", "geolocation", "account", "transfer", "advertiser", "notification", "analytics", "indexing", "listener", "secret", "logger", "metadata", "reporter", "credentials", "metrics", "watcher", "sharing", "monitor", "phenotype?!", "detection", "stats", "supervision", "VACUUM". . . .amongst several others. (Are you guys getting alarmed yet?.) Out of 276 services I disabled 105. I had to disable them one by one because the app would stop each and every time.
I also disabled 4 out of 6 services belonging to Google Services Framework (which were all that the app disabler were able to freeze).
All of these actions effectively disabled Google from running on my device as observed from Running Services in Developer Options (that, of course, combined with disabling/uninstalling Samsung apps and associated services). Staying offline and disabling mobile data prevented my actions during this process from being reported (and interfered with).
So far over the past couple of days all has been quiet. No more '"________ will not run without Google Play Services" or "________ has stopped" notifications, no more Google running in the background and helping itself to my data like a smorgasbord.
I attempted to apply these same settings to my Tab S3 and it didn't fly. I had to disable ALL of the subservices associated with Google Play Services and I also uninstalled Google Services Framework entirely.
That debacle is for a different post.
I want to add that most any app can be uninstalled on the Tab S3 once the disabling of Samsung, Google Play Services and Google Play is achieved. Prior to this, for whatever reason I had a great deal of difficulty uninstalling Chrome and Google Play Music. If you think really, really hard in advance about all of the paid apps that you want that are critical to your root and whatever other paid apps you want, you can install them and ditch Google Play Services. They got their money and earned what they deserved. There is no reason to keep Google services continuously running in the background. You can get top notch apps that don't depend on them. I have My Backup Pro, Servicely, SD Maid, an APK extractor, a couple of really good disablers/uninstallers, ES File Explorer, Root Explorer, etc. Really consider your privacy - your data is important. Would you let a stranger rifle through drawers at your house? Even if Google has been collecting your data for years, all hope is not lost. You have many years ahead of you. Most of the data they have collected becomes obsolete over time and they don't need to keep collecting it. There are many, many apps that are not dependent on Google Play Services. There's an app called F-Droid that has an .apk installation file that can be directly downloaded from the Internet and which offers LOTS of great apps. They have an app called Yalp Store that shows you which apps Google Play Store offers that don't depend on Google Play Services and you can filter those results. You can even download and install them manually. The developers of F-Droid are privacy-conscious and all of the apps that they offer are geared with that in mind.
I paid a lot of money for my devices - what, $1300 overall? The manufacturers are not entitled to more than that, especially if I have paid for additional apps. I do have a dummy YouTube account - I consider it free cloud storage for my videos in exchange for the the data they have stolen from me over the years (I've got some cool videos, too - I'd link to my channel but it would blow my cover).
To achieve all of this you will need to start fresh - uninstall your apps, remove your SD card, clean your device really well, wipe your device and close your Samsung account. You don't need a Samsung account to run your device. You can decline both Samsung and Google services at setup but all of those choices are meaningless because they take what they want anyway.
There may be a few sacrifices that may be a dealbreaker to some such as Facebook, but there are a few apps that work around that limitation such as Tinfoil for Facebook. You may also be able to log into Facebook using a privacy web browser. I have Firefox on my devices using a VPN, Privacy Browsing and multiple privacy plugins and it works just fine for every website I have visited (I can't speak for Facebook, though, because I don't use it (not for privacy reasons, though - I have unresolved mixed feelings about it). It should be fine to use with a web browser although some websites do badger you to use their app. You can try it though before uninstalling the Facebook app and see how it goes. Granted it won't be as convenient but you can bookmark it and still have access. Twitter is dependent on Google Play. As I was writing this paragraph I just found a highly rated app called Metal for Facebook & Twitter which isn't dependent on Google and which allows you to access both of them. No ads, gets you notifications from Facebook, supports Orbot/Tor, etc. Sounds excellent.
So there's some stuff to consider.
Between both of my devices I had become really mentally/emotionally stressed and exhausted and had a short but intense cry yesterday. I would have benefited from a longer one.
Last night I woke up to discover that Google had added another hundred or so services to the Google Play Services app on my S7 which brought the number up to 300+. (As an aside, the same thing happened on my Tab S3 several days ago.) I'm not sure if I had wi-fi or mobile data turned on when it happened or both - I had been turning them both on and off intermittently throughout the day. All I can think is that Verizon must have been sharing data. It happened on the S3 for a different reason and I caught that while it was happening.
I thought that I was using Verizon simply for a signal. I don't use their cloud and I don't sync any data to their servers in any other manner. Come to discover there were a couple of settings I overlooked.
Google and Verizon are in bed together - I did discover that much. I really did want to maintain a location with Verizon so I could at least locate my device if I were ever to lose it; they charge enough and I can be incredibly absentminded at times, like using the calculator on my phone while shopping, lying it down on a shelf when picking something up and walking away. But when I went to Verizon's website to see if they offered such a service I was redirected straight to Google. They're kidding, right?
Google is so unbelievably insidious. You really don't know until you try to escape.
I'm a quiet, introverted person - all I want is my privacy, my freakin' Kindle app and a few simple others. And I WOULD get a Kindle, but even the best one only records video in 720p! But no - 4k or no 4k, I'm not about to curl up in a hollow log with a Kindle.
The S3 has been turned off for the past couple of days; both devices present challenges of their own. The S7 is worse I think with Verizon in the mix. My S7 has turned out to be the guinea pig it seems.
I know how to re-root the S7 if I brick it again but I'll spare myself the hassle. I paid One Click Root for the 6-month extended support package and I'll make them work for it. They pretty much dissed me on the S3 so they deserve it.
Right now the S7 is stable (and functional) again - I was up for hours last night after my ghastly, half-conscious discovery disabling another hundred Google Play subservices. Right now I'm backing up to My Backup Pro's cloud and after that I think I'm going to go offline and uninstall The Framework and Google Play Services. Surely Google can't coerce Verizon to cut off data services to a loyal customer.
A few updates and and an apology. . . .but not in that order. Ummm. . . .I realize that this whole Google privacy thing is a touchy subject and I'm really sorry for having brought it up here (kind of, you know?). I mean, in the sense that this is a really helpful place for what it is and I do understand something about getting knocked back in Google search rankings. I'd really hate to see something like that happen.
So this will be my last post on this topic.
This whole endeavor has really been a nightmare - a real war and I have lost tons of sleep. I'm amazed that I haven't hard-bricked my devices. One day I re-rooted my S3 three times. Yesterday I re-rooted my S7 twice. There is no compromising with Google. None. I thought that I could whittle it down to just not using any of their apps, you know? What other business do they have running data collection or location services on my device? I don't have a connected Samsung or Google account, I declined app usage data, location services and diagnostic usage at setup. I disabled all of those plus everything else that could be disabled in settings and everything possible in permissions. Yet settings keep being switched back on which is the whole reason I rooted my devices. THEN after I root, I install these 3rd party freezing apps and watch Google behind the scenes with their 380 hidden services going to town collecting all sorts of data - Bluetooth, radios, geofencing, storage. . . .it's absolutely unreal. They hide and disable apps I paid to 3rd parties on independent websites. . . .I just don't even know where to begin. I started getting screenshots of all of this and they started deleting and disabling those.
Anyway, I don't know how much longer I have now to return my S3 to Amazon but it might be going back in a pine box. It's defective. I mean, seriously. The permissions keep turning themselves off. Inherently defective perhaps, but defective nonetheless. I've had the S7 since November so I don't know what Verizon can do for me but I think California has some laws.
Anyway, I'm in the midst of preparing some killer videos on rooting and flashing stock firmware to both the Tab S3 and S7 and I will come back and post YouTube links to those when they're done. They will no doubt be immediately removed unless Google finds them lucrative enough to keep, and if they are removed I will PAY Vimeo to host (and protect) them.
Oh - heh - before I forget: YES, you CAN remove every single Google app from your S3 EXCEPT for Chrome. It's part of the infrastructure, man. You will brick your device every time you try to remove it. But remember this - and this is CRUCIAL - install an app freezer (better yet, two), then turn off wi-fi making sure to disable auto-reconnect because everything you do is transmitted and they will brick you. You don't want to clue them into anything. Then use your best judgement to freeze and disable every possible permission before you start Also reboot after every app uninstall (or two). It takes a lonnnng time depending on how many you remove but trust me on this. If you intend to maintain a Google account you should be all good.
I acually use TITANIUM BACKUP
for freezing , u freezing & uninstalling system application's:good:
JackieBlue said:
A few updates and and an apology. . . .but not in that order. Ummm. . . .I realize that this whole Google privacy thing is a touchy subject and I'm really sorry for having brought it up here (kind of, you know?). I mean, in the sense that this is a really helpful place for what it is and I do understand something about getting knocked back in Google search rankings. I'd really hate to see something like that happen.
So this will be my last post on this topic.
This whole endeavor has really been a nightmare - a real war and I have lost tons of sleep. I'm amazed that I haven't hard-bricked my devices. One day I re-rooted my S3 three times. Yesterday I re-rooted my S7 twice. There is no compromising with Google. None. I thought that I could whittle it down to just not using any of their apps, you know? What other business do they have running data collection or location services on my device? I don't have a connected Samsung or Google account, I declined app usage data, location services and diagnostic usage at setup. I disabled all of those plus everything else that could be disabled in settings and everything possible in permissions. Yet settings keep being switched back on which is the whole reason I rooted my devices. THEN after I root, I install these 3rd party freezing apps and watch Google behind the scenes with their 380 hidden services going to town collecting all sorts of data - Bluetooth, radios, geofencing, storage. . . .it's absolutely unreal. They hide and disable apps I paid to 3rd parties on independent websites. . . .I just don't even know where to begin. I started getting screenshots of all of this and they started deleting and disabling those.
Anyway, I don't know how much longer I have now to return my S3 to Amazon but it might be going back in a pine box. It's defective. I mean, seriously. The permissions keep turning themselves off. Inherently defective perhaps, but defective nonetheless. I've had the S7 since November so I don't know what Verizon can do for me but I think California has some laws.
Anyway, I'm in the midst of preparing some killer videos on rooting and flashing stock firmware to both the Tab S3 and S7 and I will come back and post YouTube links to those when they're done. They will no doubt be immediately removed unless Google finds them lucrative enough to keep, and if they are removed I will PAY Vimeo to host (and protect) them.
Oh - heh - before I forget: YES, you CAN remove every single Google app from your S3 EXCEPT for Chrome. It's part of the infrastructure, man. You will brick your device every time you try to remove it. But remember this - and this is CRUCIAL - install an app freezer (better yet, two), then turn off wi-fi making sure to disable auto-reconnect because everything you do is transmitted and they will brick you. You don't want to clue them into anything. Then use your best judgement to freeze and disable every possible permission before you start Also reboot after every app uninstall (or two). It takes a lonnnng time depending on how many you remove but trust me on this. If you intend to maintain a Google account you should be all good.
Click to expand...
Click to collapse
Watch out the Russians are coming too.

Nexus 5X weird behavior (malware?), possibly caused by FB Messenger or Pixel Launcher

Some very weird things started happening on my phone earlier today. It's a Nexus 5X, running 8.0 Oreo, with the October security patch. I'm not rooted and I'm careful about what I install. The phone is fairly new, from this summer.
I will begin with describing what I did in the hours before this started. I can think of two things that possibly could have started it:
1) Two of my Facebook contacts sent malicious links to me an hour before. It looked like Youtube videos but was not. I did NOT open any of these links, knowing directly they were harmful (not sure if you can be affected by just receiving them, not clicking on them?). I received them in the Messenger Lite application (an official app from Facebook with scaled-down functionality).
2) A few hours before the Facebook links, I sideloaded an APK containing the new Pixel Launcher. I got the APK from Android Police/APK Mirror.
Can't attach links, but Google for: Hands-on with the updated Pixel Launcher, including the new Pixel 2 features [APK Download]
The APK was working fine and nothing seemed odd with it (I used the launcher for a few hours). As long as Android Police know what they uploaded, this shouldn't be the cause for my problems. I bet on Facebook Messenger instead. (People that click such malware links typically get their Facebook accounts hacked, however my account seems fine and my account didn't spam others with the same link. I did not change password or did anything else to "recover" my account yet).
So what happened after this on my phone?
Here is the first thing I noticed. I open Play Store to install updates. It turns out I have one update pending, it's called BankID. This is a major Swedish app used by nearly every smartphone user in the country, and it's for signing into government websites, bank websites, insurance company websites, and much more. When I click update in Play Store two things happen almost instantly:
1) Six pictures are downloaded from Messenger Lite to my phone. That makes no sense, how could clicking a button in Google Play trigger something to happen in Messenger Lite? In fact I tried it three times, with the same behavior every time. (Well, actually opening the Messenger Lite photo album, there are only photos there I already downloaded, so nothing new seems to be added there - but the photos were probably re-downloaded I believe).
2) The BankID update downloads to 100 % (the downloading takes a little longer than expected), then it halts and does nothing, i.e. it's not installing. No error message, it just stops there. I can choose to abort and try again, which I do three times or more, with exactly the same behavior.
Also, I now notice Play Protect hasn't run for two days, but when I try to run it, it seems to be down. After ~30 seconds of scanning it says "App verification temporarily down". "App verification temporarily down" could very well be connected with the halted update I just described? It still says it hasn't run for two days after this.
When I experiment, I notice other things that are very weird indeed.
1) Notifications in Gmail, Snapchat and possibly other apps aren't coming through. By opening the apps, I can sync manually.
2) When I move a file to a new folder using the Downloads app (Files app, stock one) I get a error message saying the move operation failed. This also triggered the photo notifications from Messenger Lite (same behavior as described above, with six photos). However, after a while the moved pictures are indeed in the right folder, even though the error message saying otherwise.
3) After some time I remove "app data" for the Google Play app. When I open it after that, there are now three app updates pending (e.g. Google Wifi also). But the same behavior occurs, when I try to download one or all of them, I get the Messenger photo notifications and the updates halt at 100 % without installing. So the BankID app - which could be targeted by attackers for obvious reasons - could just be a coincidence. It could have happened with any app I suppose, this was the only one pending right then. But still, why couldn't Play Store detect other pending app updates until I refreshed it the way I did? Was Play Store blocked from connecting to Google (or forced to connect to some other server, perhaps?).
What did I do after all of this?
I uninstalled three apps:
-Facebook Lite
-Facebook Messenger Lite
-Pixel Launcher APK
However the uninstall process was very odd. A process called "Package Installer" had a notification saying "Uninstalling Lite" and "Uninstalling Messenger Lite". It didn't seem to be working, it was stuck after some time. I restarted my phone and the apps seem to be gone now, at least they aren't listed in Settings --> Apps. So the uninstall process was successful I suppose, even though it didn't seem to work.
After I restarted my phone I also noticed:
-When I install Messenger Lite from Play Store now, it's easy to uninstall it the way it should be - in mere seconds.
-When I open Play Store, updates are now installing fine. Play Protect is also scanning fine now.
Everything looks back to normal now. But I'm not trusting my device. I'm gonna factory reset it. Before I do, I wonder:
-Can I feel safe the wipe would erase whatever malware I might have had on the phone?
-Is there something I could do to let us know what caused this? Upload a log here somehow?
The only piece of advice I have received as of now is: "Try restarting in safe mode, installing some AV software, and generally looking for suspicious processes." I haven't done that yet, would it still be a good thing to do? Must I install AV software before rebooting into safe mode, or could I install it directly from safe mode? (App suggestions, AV software?).
Usually I'm very careful and security-minded. I haven't had something like this happen before. So I'm very intrigued and mad about this. I'm gonna change my Google account and Facebook account passwords later on I think (I already have 2-factor authentication enabled).
One last thing: When I install Pixel Launcher on my non-rooted phone, it's not running as a system app if my understanding is correct. (At least it shouldn't be). But none the less, when I wanted to uninstall it I had to go into Settings --> Apps and tap "Show system apps" to find it in the list. Is that normal? Perhaps it doesn't mean anything, I just want to know.
Thanks for your advice in advance. Anything else to add? What should I do know? All you might have to say is appreciated.
Come on now guys, someone must be able to help?
If I factory reset the device, will it be clean? I didn't mess with custom ROMs, root, the bootloader or something else. (I suppose the bootloader is locked).

Categories

Resources