I think my samsung s7 edge has the autoclean maleware. - Android Q&A, Help & Troubleshooting

I think my s7 edge android phone has the autoclean malware.
Malwarebytes does not find any problem, but how can I eliminate the autoclean malware?

That's a windows malware... Seems a bit unlikeley.
If you believe your system might be infected, a reflash of the AP file and a factory reset should clean it up in most cases, but you'll lose all data.

I think my samsung s7 edge has the autoclean maleware
DavidxxxD said:
That's a windows malware... Seems a bit unlikeley.
If you believe your system might be infected, a reflash of the AP file and a hard reset sould clean it up in most cases, but you'll lose all data.
Click to expand...
Click to collapse
How can I do it without losing all data?

- Copy the contents of your internal storage to a safe place.
- If you're using TWRP, backup /data and Copy the Backup folder to a safe place, you will have to reinstall TWRP as well. Google Play will offer to reinstall the apps when you log in. Also you can backup all app data to your computer with the adb backup command.
- Put the phone in download mode.
- Open Odin flash tool and make sure the cable is good and your device is properly recognized.
- Select the AP file from your current firmware, if it has a USERDATA file select that as well, you won't have to factory restet after. When using Heimdall remove the .md5 file extension first.
- Turn off auto-reboot if you don't have a USERDATA file.
- Begin installing and hope for the best.
- Reboot to recovery and select Wipe Data/Factory reset.
- Phone should be clean now, only restore the stuff you are absolutely sure isn't infected.
If the weird stuff persists, try repeating these steps with the full firware.

Related

[Q] Any way of recovering data after doing a factory reset?

A couple of weeks ago, my SGS II crashed really badly and affected my phone in that I kept getting force close messages as well as "System UIDs Inconsistent" ones plus I couldn't access the partitions within my phone in Windows Explorer even though the phone was recognised by it.
It looks as though I may need to do a factory reset which to me is going to be a pain in the ass especially where videos and MP3's are concerned.
Another problem is that even though I installed VillainROM and followed the rules to the letter concerning its installation, supposedly I didn't install the system recovery that was unique to it and which would have made things a lot easier for me.
I don't even know if there is a way to backup data from the partitions to a 16GB or bigger micro SD card within the regular system recovery or not.
If I do need to a factory reset, are there any Apps out there that will let me recover data from the internal partitions as long as I don't write over the lost data concerned? (I know there's software available for PC that does something similar with data stored on hard drives)
Well on Cutom ROM you can use Titanium Backup Pro for Backup and Restoring. On Stock ROM's even Kies would do.
Regards.
ithehappy said:
Well on Cutom ROM you can use Titanium Backup Pro for Backup and Restoring. On Stock ROM's even Kies would do.
Regards.
Click to expand...
Click to collapse
That's the irony, I actually had Titanium Backup installed on my VillainROM custom ROM and I'd even bought an upgrade to the Pro version but for some reason, it wouldn't let me upgrade to the full version even though I had a license for it that I paid for, and as a result, it wouldn't let me do a full backup without having to do it slowly.
If I did reinstall Titanium Backup and managed to get my problem sorted out, would it recover deleted data or not?
Titanium Backup would only restore what it previously backed up.
The most easy way would be to just dump your data partition into a tarball (given you have root access on your phone).
Just hop into a terminal or adb shell and do
Code:
su
busybox tar zcvf /sdcard/data.tar.gz /data
That will give you a full .tar "backup" of all the data on the internal data partition.
Restoring that to app after a wipe and reinstall can be a bit pain in the poo, but it's better than nothing - and a recovery of previous files after a wipe would at best give you the same.
HellcatDroid said:
Titanium Backup would only restore what it previously backed up.
The most easy way would be to just dump your data partition into a tarball (given you have root access on your phone).
Just hop into a terminal or adb shell and do
Code:
su
busybox tar zcvf /sdcard/data.tar.gz /data
That will give you a full .tar "backup" of all the data on the internal data partition.
Restoring that to app after a wipe and reinstall can be a bit pain in the poo, but it's better than nothing - and a recovery of previous files after a wipe would at best give you the same.
Click to expand...
Click to collapse
How do I go into a terminal or adb shell? I'm using Windows 7 if that's any help?
For Terminal install a Terminal App from the marketplace on your phone and run it directely on it.
ADB you get from the Android SDK.
HellcatDroid said:
For Terminal install a Terminal App from the marketplace on your phone and run it directely on it.
ADB you get from the Android SDK.
Click to expand...
Click to collapse
I take it that once I do the factory reset on the phone and install a Terminal App on it via Android Market, I just need to run the command that you recommend that I do and I should be able to recover the data that was on my partitions, pre factory restore?
(Apologies for asking all these questions as I'm still a newbie when it comes to Android and I'm just pissed that this happened in the first place because of the overheating that caused it to happen in the first place)
What if I select advance restore in CWM recovery and restore data? Will it affect the flashed rom?
borgmanjayce said:
I take it that once I do the factory reset on the phone and install a Terminal App on it via Android Market, I just need to run the command that you recommend that I do and I should be able to recover the data that was on my partitions, pre factory restore?
Click to expand...
Click to collapse
No, you run the command BEFORE the factory wipe and use the tarball you got to restore any data you still need.
kryptoner said:
What if I select advance restore in CWM recovery and restore data? Will it affect the flashed rom?
Click to expand...
Click to collapse
Should work too, but depending on *what* borked up the install (might be some setting/config/piece-of-data somewhere) it will be restored as well - but definitaly worth a shot and pretty much "a must" to do those backups (I do them regulary).
gillian07 said:
It is possible to restore deleted files deleted from samsung galaxy s2 android phone after factory reset, take a look at this guide: recover data after android phone factory reset
You'd better do not use the phone before you get back lost files.
Click to expand...
Click to collapse
Blair Miller said:
You can check this related atciel recover files after restore factory settings
Click to expand...
Click to collapse
No program is free without compromise. If you factory reset without backup, there is not much you can do to recover deleted files. That's why such warnings exist before reverting back to a clean state.
You can try a Recuva download the program connect as storage device and try to scan Hope it helps
ma11221 said:
You can try a Recuva download the program connect as storage device and try to scan Hope it helps
Click to expand...
Click to collapse
Recovery programs such as recuva work best on magnetic media such as pc hard drives. Flash storage on mobile phone are different as there are no moving parts, so recovery is not that easy. There is also a much higher likelihood of corruption on flash storage too when restoring deleted files, so that's why there is really no 'best' method for recovery.
How to Recover Deleted Data from Android after Factory Reset
When you perform a factory reset on Android, you will return the device to the condition it was when shipped from the factory. A factory data reset can help fix most issues that occur on Android. Any incorrect settings, glitches, bugs, viruses, or software problems on the device will be wiped clean.
But the files deleted from an Android phone aren’t actually wiped from its memory. Instead, the files are only marked as deleted and invisible. The system will write data over those files in the future. You can later use specialized data recovery tool to scan the Android memory for deleted files and try to recover them.
mendywen0322 said:
When you perform a factory reset on Android, you will return the device to the condition it was when shipped from the factory. A factory data reset can help fix most issues that occur on Android. Any incorrect settings, glitches, bugs, viruses, or software problems on the device will be wiped clean.
But the files deleted from an Android phone aren’t actually wiped from its memory. Instead, the files are only marked as deleted and invisible. The system will write data over those files in the future. You can later use specialized data recovery tool to scan the Android memory for deleted files and try to recover them.
Click to expand...
Click to collapse
Got any tips on what software?

How do I delete all my data

I'm selling my Galaxy Tab (wifi) and I have already dropped the stock rom on the device and done a hard reset. Is there any way to delete all the data (in the sdcard mount) through the UI? Or do I need to go back and install a console so I can do it with the command line?
almus said:
I'm selling my Galaxy Tab (wifi) and I have already dropped the stock rom on the device and done a hard reset. Is there any way to delete all the data (in the sdcard mount) through the UI? Or do I need to go back and install a console so I can do it with the command line?
Click to expand...
Click to collapse
Factory reset.
almus said:
I'm selling my Galaxy Tab (wifi) and I have already dropped the stock rom on the device and done a hard reset. Is there any way to delete all the data (in the sdcard mount) through the UI? Or do I need to go back and install a console so I can do it with the command line?
Click to expand...
Click to collapse
What the guy above me said, Factory reset should work but it won't actually wipe the data inside it, Best bet would be to flash CWM and wipe it clean of it's /datadata, But don't wipe the system files.
OR
Flash a pit file and stock firmware. The pit file (Should be on the overcome site or sammobile) should repartition the device and make it all brand new with just the contents of the stock firmware.
?
Misledz said:
What the guy above me said, Factory reset should work but it won't actually wipe the data inside it, Best bet would be to flash CWM and wipe it clean of it's /datadata, But don't wipe the system files.
OR
Flash a pit file and stock firmware. The pit file (Should be on the overcome site or sammobile) should repartition the device and make it all brand new with just the contents of the stock firmware.
Click to expand...
Click to collapse
I am not sure if that is an accurate statement. When I soft-bricked my Samsung galaxy S phone and had to reuse a stock pit and firmware file, it left my data intact that was not related to the OS (pics, vids, etc.). There may be an option in Odin or Heimdall to wipe the drive clean,but I don't know enough to give advice on that.
ninor9 said:
I am not sure if that is an accurate statement. When I soft-bricked my Samsung galaxy S phone and had to reuse a stock pit and firmware file, it left my data intact that was not related to the OS (pics, vids, etc.). There may be an option in Odin or Heimdall to wipe the drive clean,but I don't know enough to give advice on that.
Click to expand...
Click to collapse
That's cause of repartitioning wipes it clean.
here is how I did it.
Installed stock rom via odin.
entered recovery mode
apply everything that says wipe on it.
You can probably still see any information on your sdcard if that's all you did. might want to check to make sure.
If you can read this it was sent using my GT-P7510.
Afaik, Just getting rid of your Google Account should render the tab to be like a stock, HC is very dependent on a Google Account to save things. Other than that I don't see how "Free Apps" can be a threat. Just clear the data via Application Settings on those apps you don't want to keep your personal data on.

System and user apps accidentally frozen

READ AT THE END OF THIS POST FOR THE SOLUTION
I accidentally used Titanium Backup's widget to frost all system and user apps, leaving mi phone in a infinite boot animation loop. I dont have aNandroid Backup and I would really love to solve this issue without flashing.
I found at Titanium Backup's troubleshooting webpage that I could use this command with adb to solve my issue:
Code:
Type the following command (replace with /dbdata/system/packages.xml if you have a Samsung phone):
busybox sed -n 's/<package name="\([^"]\+\)".*enabled="false".*/\1/p' /data/system/packages.xml | while read PKG; do pm enable "$PKG"; done
but it just says: No such file or directory (yes, I changed /data to /dbdata as stated in the webpage)
Any idea on how to solve this issue?
Thank you!
**EDIT:
This is the way I managed to get my phone working again without having to flash or wipe:
1. Boot in recovery mode and used adb pull command to extract "packages.xml" and "packages-more-backup.xml" from /data/system/
2. Open both files with Wordpad and replaced all protection="2" or "3" lines to protection="1".
3. Also, and very important, replaced all enabled="false" lines to enabled="true"
4. Boot in recovery again and used adb to delete old "packages.xml" and "packages-more-backup.xml" files and push the new ones.
5. Reboot and Voila!
6. Boot once again in recovery mode and fix permissions to avoid any problem.
Hope that this could be usefull to someone else having this horrible problem.
Thank you all!
Checked for that file on my phone, it doesn't exist in /dbdata/system/, but it does in /data/system/
It's probably fixable from the command line with Linux but that is over my head, one option would be to Odin or heimdel back to stock, and start from scratch. You might need a jig to get into dlmode.
Sent from my SAMSUNG-SGH-I777 using xda premium
nitox.n2o said:
Checked for that file on my phone, it doesn't exist in /dbdata/system/, but it does in /data/system/
Click to expand...
Click to collapse
I tried with /data too but same result.
shadow65781 said:
It's probably fixable from the command line with Linux but that is over my head, one option would be to Odin or heimdel back to stock, and start from scratch. You might need a jig to get into dlmode.
Sent from my SAMSUNG-SGH-I777 using xda premium
Click to expand...
Click to collapse
I know I could do that but I would really like to restore my system as it was
Help please
I wonder what would happen if you removed the app (its apk) via adb from /data/app. Would it retain the freeze settings? Something to consider trying.
This happened to me. I reflashed the ROM without wiping and all was back to normal
Sent from my FrankenTAB using Tapatalk
Simba501 said:
I wonder what would happen if you removed the app (its apk) via adb from /data/app. Would it retain the freeze settings? Something to consider trying.
Click to expand...
Click to collapse
Pretty sure that's not gonna work because the frozen apps settings are at packages.xml file, but I can't access it I don't know why
jhermit said:
This happened to me. I reflashed the ROM without wiping and all was back to normal
Sent from my FrankenTAB using Tapatalk
Click to expand...
Click to collapse
I tried doing that right now but it didn't worked
I got a little too punchy with titanium on my 3 year old original Galaxy tab 7 and froze a samsung system app. Got irreversibly stuck is soft brickland - Tried various methods before giving up and hitting the wipe and reset to factory restore in the system recovery mode. Everything was backed up except recent photos, so it was more annoying than the end of the world.
Odd thing was when it reset to factory, it appeared to do just that, yet when I plugged it into PC and mounted it - the memory was full and all my files and app data files were there - untouched. The apps themselves have gone except one - Superuser is still there, Does Superuser somehow override being reset? and act as a guardian of your data in the event of reset?
Odd. I was expecting to run some file recovery software to a salvage what i could, but viola - it was all there.
shokuchi said:
I got a little too punchy with titanium on my 3 year old original Galaxy tab 7 and froze a samsung system app. Got irreversibly stuck is soft brickland - Tried various methods before giving up and hitting the wipe and reset to factory restore in the system recovery mode. Everything was backed up except recent photos, so it was more annoying than the end of the world.
Odd thing was when it reset to factory, it appeared to do just that, yet when I plugged it into PC and mounted it - the memory was full and all my files and app data files were there - untouched. The apps themselves have gone except one - Superuser is still there, Does Superuser somehow override being reset? and act as a guardian of your data in the event of reset?
Odd. I was expecting to run some file recovery software to a salvage what i could, but viola - it was all there.
Click to expand...
Click to collapse
Wrong forum dude
Sent from my Zanpakuto using Getsuga Tensho!
<deleted>
ZIP for unfreezing apps
For those, who accidentally frozen important system app: here quick solution without factory reset, reflashing and ADB
It automatically edits files as described in first post.
You should have unlocked bootloader. If no, ZIP useless because unlocking wipes all data.
Download both ZIP's and just flash them via custom recovery (TWRP / CWM)
If first throws error try second and vice versa. 2nd with mark "New" contains newer updater-binary that must be compatible with recent TWRP.
Then all apps will be unfrozen, so phone will boot.
Fix compatible with all Android versions.
Note: also you can somehow (ADB or filemanager in TWRP) delete file /data/system/0/package-restrictions.xml
More correct to edit that file which ZIP actually do, but deleting not harmful too.
tags: unfroze apps, auto-unfroze, defrost apps, unfreeze apps, 5596
Bonoboo said:
For those, who accidentally frozen system app there is quicker solution without factory reset and ADB.
It automatically edits files as described in first post.
Just flash this ZIP through recovery and all apps will be unfrozen.
Compatible with all Android versions.
Click to expand...
Click to collapse
THANKS MAN!! i just signed up to say thanks! you just saved my life :highfive:
Bonoboo said:
For those, who accidentally frozen system app here quicker solution without factory reset and ADB
It automatically edits files as described in first post.
Just flash this ZIP through recovery and all apps will be unfrozen, so phone will boot.
Compatible with all Android versions.
tags: unfroze apps, auto-unfroze
Click to expand...
Click to collapse
Thanks very much for the zip. It worked great
Same Problem
Does anyone have an updated version of that zip? I also froze an app linked to the device and it won't boot, even after factory resetting it. Tried running the zip on my t-mobile GS4 (probably newer than that zip) from the SD card in recovery mode, however it didn't unfreeze it.
Any help greatly appreciated!
pianoplayer55 said:
Does anyone have an updated version of that zip?
I also froze an app linked to the device and it won't boot, even after factory resetting it.
Click to expand...
Click to collapse
1. To flash that ZIP you need have custom recovery (CWM or TWRP), not stock.
No update needed, it still works in this case.
2. That strange. Maybe you not really performed reset?
Double check all and try again.
Bonoboo said:
1. To flash that ZIP you need have custom recovery (CWM or TWRP), not stock.
No update needed, it still works in this case.
2. That strange. Maybe you not really performed reset?
Double check all and try again.
Click to expand...
Click to collapse
Yup, unfortunately I did select wipe data on the recovery screen. I am also stuck in an infinite boot up loop and cannot access the phone to install any apps. How can I use a custom recovery to run the zip file if i cannot access the phone? Instructions much appreciated. Thanks again.
pianoplayer55 said:
How can I use a custom recovery to run the zip file if i cannot access the phone?
Click to expand...
Click to collapse
ZIP – it's not app.
Again, you need to install custom recovery.
Here link to TWRP and how install it via Odin on PC.
You need place that ZIP on sdcard.
Enter in recovery (don't know how on your model), select Install > find ZIP > confirm > reboot,
Bonoboo said:
ZIP – it's not app.
Again, you need to install custom recovery.
You need place that ZIP on sdcard.
Enter in recovery (don't know how on your model), select Install > find ZIP > confirm > reboot,
Click to expand...
Click to collapse
Downloaded TWRP with Odin and ran custom recovery without a change after the zip (this must have been a deeper-rooted problem in the OS itself), however in the meantime I formatted the system partition, removing the operating system. Installed Kies and ran the update. It reinstalled the OS and I'm good now. Most stuff was backed up anyways. Thanks guys for your time :good::good:
Which apk is the culprit?
Man, I wish I'd found this thread before restoring my phones internal ROM. Had it rooted and set up in every way I like except removing bloatware.
Using TB, I froze a system apk that shut down my System UI and sent the phone bootlooping. What I'm trying to determine is WHICH apk(s) I froze that caused this. I thought I had researched each one that didn't seem obvious, but I musta missed one or one of the 'obvious' ones wasn't so obvious.

[Q] Wondering if i can do this

I have a Verizon droid RAZR that the screen has cracked in many places. I have bought a new phone and have no plans for ever using this as a phone. What I would like to do is install a ROM over the stock one, not dual boot both. I was also wanting to get rid of all of the phone stuff, no Verizon apps, no SMS, and no phone logs. I would use this like a tablet and would love to save as much space as possible. I don't need the moto docks (I don't have one). Basicly strip this thing down to just bare necessities. Is it even possible to do this? If so is there a ROM that gets great battery life? Thanks for reading my question.
Nomad7801
You can flash ROM on your stock slot and then delete the useless apks.
Try any AOSP ROM. It should work fine.
Tapatalk with RAZR HD
I have downloaded tonyt's aokp rom. I have extracted the rom to its own folder and have looked at the apps in the app folder. System>app. I am not sure which of these I can get rid of. I would like to get ride of anything that is VZW or phone related just keeping maybe the contacts. I dont know what apps should be gotten rid of with out breaking the rom. Sorry I'm a noob. All I have done was flash a few roms, never tried to remove apks before. Do I need a cellphone broadcast for location services like maps and for the in browser location? I have safestrap installed. It will not let me flash a rom over stock rom. I am trying to find a way to get cwm or twrp installed instead.
ok bricked my phone. Device would restart and get the red moto logo, then nothing, blank black screen. rebooted the phone and could not get to safestrap. Used Matt's utility to install jb and reroot phone.
The procedure that I used to install the rom on my stock image is as follows:
1. copied rom zip to micro sd card
2. booted to safestrap
3. wiped cache, delvic, and system
4. installed rom zip through safestrap
5. no errors got success
6. reboot got nothing
I think anything could still happen even if SafeStrap didnt indicate any error after installation, that's why backup is important, also this ;
ChungHung.Chen said:
Notice 2 - MAKE SURE you see "Update partition detail...." in SafeStrap log console before you press "Reboot System" or you will not get boot!
Click to expand...
Click to collapse
Just sharing what I heard
Cheers
nomad7801 said:
ok bricked my phone. Device would restart and get the red moto logo, then nothing, blank black screen. rebooted the phone and could not get to safestrap. Used Matt's utility to install jb and reroot phone.
The procedure that I used to install the rom on my stock image is as follows:
1. copied rom zip to micro sd card
2. booted to safestrap
3. wiped cache, delvic, and system
4. installed rom zip through safestrap
5. no errors got success
6. reboot got nothing
Click to expand...
Click to collapse
You will need to do a complete wipe when flashing a new ROM, including /data.
Use latest SS. And make sure the ROM is compatible with the latest SS.
neo.ank said:
You will need to do a complete wipe when flashing a new ROM, including /data.
Use latest SS. And make sure the ROM is compatible with the latest SS.
Click to expand...
Click to collapse
How do I format the internal storage? I have about 3 roms I have running and I have games and apps that I have uninstalled that left behind folders in root folders and some apps that did not get uninstalled also left behind some data. I tried doing a factory reset and also tried using safestrap to wipe internal but it fails. I made a folder in my system folder and put 2 pics in it then factory reset, wiped system data, and checked every box in the advance wipe options and that folder (along with the others) are still there.
nomad7801 said:
How do I format the internal storage? I have about 3 roms I have running and I have games and apps that I have uninstalled that left behind folders in root folders and some apps that did not get uninstalled also left behind some data. I tried doing a factory reset and also tried using safestrap to wipe internal but it fails. I made a folder in my system folder and put 2 pics in it then factory reset, wiped system data, and checked every box in the advance wipe options and that folder (along with the others) are still there.
Click to expand...
Click to collapse
Every slot has its own /data partition.
After you activate a slot, wipe /data along with system and cache.
That is called full wipe. It will remove all your apps,files and user settings will be deleted.
Then flash your desired ROM.

GT-I9100 cwm / cm13 bootloop - data recovery?

My galaxy S2 (gt-i9100) was running cm13 for about half a year. Some days ago I let google play update my apps. The result is a bootloop.
I've used the voice recorder to record a lot of notes I need to remember. Is there any way to get those files out from the phones internal storage?
The CWM recovery installed lacks the option to wipe cache / dalvik, which I would hope could get the device out of the bootloop.
When booted into recovery, I've tried adb, but the device is unauthorized.
I think usb debuging was disabled, however, I'm not sure about that.
The ideas I have to solve this are:
1) flash some other recovery that will give an option to wipe cache/dalvik and be able to boot cm13
2) flash some other recovery that will make adb able to pull the files while in recovery mode
3) flash some recovery that is able to copy files from internal storage to sd card
4) factory reset, and hope the files don't get deleted (this is the very last resort)
The thing is that it seems like I'll need to do all installations from SD card via the current CWM recovery. Does anyone know of a suitabel download / howto that can help me get my files off the phone?
If reason for boot loop is Xplore file explorer latest update , uninstall it with developer advices:
http://www.lonelycatgames.com/wiki/xplore/crash_on_cm
I did factory reset twice because of app.
Thank you, Kepsilla. Unless that is an app that is installed with cm13 or gapps, I don't have it installed. But your link gave me hope:
If you have custom recovery on your device (such as TWRP), enter recovery mode, open file manager and delete folder /data/app/com.lonelycatgames.Xplore-1
Click to expand...
Click to collapse
That means that if I can install TWRP recovery from CWM recovery, I should be able to access the filesystem. That should open up to two possible solutions:
a) Copy my files from internal storage to SD
b) Delete / modify some files to take all apps I've installed from play store will not start automatically.
Does anyone know of a TWRP that would give any of these possibilities and install on a i9100 using CWM?
(I can't really experiment iwht this - I feel the risk of loosing the files is too high. I have to know I'm going the right direction when I do something.)
Solution was very simple: By holding volume down pressed during boot, the device boots into safe mode - no apps started. Then I could just uninstall the apps that were set to autostart. Reboot and problem was solved.
I came across this way to enter safe mode when googling a error message that started to pop up frequently on my S5 mini. S2 with cm13 appears to have the same way to enter safe mode as S5 mini with factory rom.

Categories

Resources