Hi, I'm running the latest rootfs and Ril on Rhod400, even though this issue is almost definitely not related. I think that the battery died in middle of the night (I forgot to plug it in), and when I turned it on after charging it, a lot of apps started to Force-Close. This happens even after a reboot.
Thanks for all the help.
yelped said:
Hi, I'm running the latest rootfs and Ril on Rhod400, even though this issue is almost definitely not related. I think that the battery died in middle of the night (I forgot to plug it in), and when I turned it on after charging it, a lot of apps started to Force-Close. This happens even after a reboot.
Thanks for all the help.
Click to expand...
Click to collapse
Delete the data.img, let the system create a new one. Problem solved.
So it got corrupted? I feared so. At the rate I'm re-creating Data Images, I should buy the Pro version of Titanium Backup for Batch Restore.
yelped said:
So it got corrupted? I feared so. At the rate I'm re-creating Data Images, I should buy the Pro version of Titanium Backup for Batch Restore.
Click to expand...
Click to collapse
That's what I did! I found myself using the app so frequently, I decided to pay for it.
Advanced users willing to do a little research will also find that sometimes the fix_permissions script will fix your data.img in these situations, it fixed mine a few days ago.
rpierce99 said:
Advanced users willing to do a little research will also find that sometimes the fix_permissions script will fix your data.img in these situations, it fixed mine a few days ago.
Click to expand...
Click to collapse
Yea, I always forget that. I haven't had to blast out a data.img in a while tho... Hrm.
yelped said:
Hi, I'm running the latest rootfs and Ril on Rhod400, even though this issue is almost definitely not related. I think that the battery died in middle of the night (I forgot to plug it in), and when I turned it on after charging it, a lot of apps started to Force-Close. This happens even after a reboot.
Thanks for all the help.
Click to expand...
Click to collapse
Happened to me also after it paniced and rebooted one day. I had to install all of the apps that force closed over again after uninstalling them. Seems like info got corrupted. I didn't want to start from scratch, especially since I just successfully got my work VPN working, so I just spent the time to uninstall and reinstall the stuff as I go. Have no clue what causes this other than something got corrupted.
slickdaddy96 said:
Happened to me also after it paniced and rebooted one day. I had to install all of the apps that force closed over again after uninstalling them. Seems like info got corrupted. I didn't want to start from scratch, especially since I just successfully got my work VPN working, so I just spent the time to uninstall and reinstall the stuff as I go. Have no clue what causes this other than something got corrupted.
Click to expand...
Click to collapse
I ran into a similar issue. My phone hard locked after running Android for the better part of a day. When I rebooted it ran extensive disk checks on the system. It still does every time I boot and I am get force close messages constantly. Windows also found and fixed errors with the FAT32 partition on the card. It's possible my card is dying but I also didn't notice any of that until the forced reboot. It didn't say what file was damaged but I can take a guess.
I believe that the FAT32 file system on the card was corrupted because files were open when I was forced to reboot. Because the linux file system is hosted as a file on the fat32 partition, it is subject to damage if the host file system gets messed up. It's sort of like when MS offered the option in DOS to compress your hard drive. It was all stored as a giant compressed file on your disk. If something happened to the integrity of that file it caused all sorts of problems.
This is why I use a partitioned build...
might be a stupid question but what is that ^
manny05 said:
might be a stupid question but what is that ^
Click to expand...
Click to collapse
Instead of using looped files (system.ext2 file is really an entire file system that is 'loop mounted' within Linux/Android) you use native partitions.
So a separate partition for data, separate partition for system, etc. It's a little more difficult to setup, but in theory it causes less corruption. Not sure if it's true or not, hyc is pretty convinced it does .
arrrghhh said:
Instead of using looped files (system.ext2 file is really an entire file system that is 'loop mounted' within Linux/Android) you use native partitions.
So a separate partition for data, separate partition for system, etc. It's a little more difficult to setup, but in theory it causes less corruption. Not sure if it's true or not, hyc is pretty convinced it does .
Click to expand...
Click to collapse
I've been running with the same data partition since the middle of January, haven't needed to recreate it even once. It boggles my mind how often you tell people to blow away their data.img and start over whenever they run into problems. That just ain't right, and an approach that encourages that style of problem-solving is inherently flawed, IMO. And a build layout that leads to that type of solution is also inherently flawed.
Plus the simple existence proof - my /data partition is fine, despite having reinstalled /system several times, switching between original FRX05 and FRX06, rewritten rootfs scripts, plus all of the built-from-scratch system images I've tested, replacing framework.jar, etc. etc... My SDcard has seen a lot of churn, but all of my downloaded apps, settings, and data have come thru unscathed.
A couple times I've needed to run fix_permissions. But now with my current framework and rootfs that does a clean shutdown and unmount of /data, I haven't needed that in a while either.
Oh, and also, with a partitioned build, you get full use of USB mass storage. Everything just works.
highlandsun said:
I've been running with the same data partition since the middle of January, haven't needed to recreate it even once. It boggles my mind how often you tell people to blow away their data.img and start over whenever they run into problems. That just ain't right, and an approach that encourages that style of problem-solving is inherently flawed, IMO. And a build layout that leads to that type of solution is also inherently flawed.
Click to expand...
Click to collapse
I agree, it's horrible troubleshooting - but it works, and until we get a solid fix then there's really not much to do...
I know you love your partitions, but that's not going to be for everyone. Anyone can do it, and how many do?
highlandsun said:
Everything just works.
Click to expand...
Click to collapse
LOL at this statement. I won't poke holes in it, c'mon guy, that's just silly.
arrrghhh said:
LOL at this statement. I won't poke holes in it, c'mon guy, that's just silly.
Click to expand...
Click to collapse
Ok fine. 500 patches later, and everything works...
Sent from my TP2 using Tapatalk
highlandsun said:
Ok fine. 500 patches later, and everything works...
Click to expand...
Click to collapse
Heh, much more accurate statement .
Also good to note - everything works, related to USB mass storage, etc. This isn't some magic voodoo fix for BT, so don't take this out of context people!
rpierce99 said:
Advanced users willing to do a little research will also find that sometimes the fix_permissions script will fix your data.img in these situations, it fixed mine a few days ago.
Click to expand...
Click to collapse
Nearly all other post-crash forceclose issues seem to be database corruption.
Android seems to like to store a LOT of stuff other than contacts (including call logs) in the contacts database. As a result it tends to be more prone to corruption.
Piece of advice - when complaining about an issue like this where obtaining a logcat is possible, please do so. (A logcat would be able to narrow down exactly where your problems likely were.)
DB corruption can still happen even on partitioned builds. I forget where the best HOWTO for this is, but it involves partitioning your SD card such that:
Partition 1 is FAT (main sdcard stuff)
Partition 3 is ext2 (system partition)
Partition 4 is ext2 (data partition)
I can provide a reasonably good HOWTO for doing this on a Linux box when I return from business travel, can't help the Windows-only users.
fix permission script? where can i find more about this?
Related
First time topic so sorry if im a noob.
My SD card became disconnected from my phone whilst in operation. I use a2sd. All of my apps are no longer starting up, force closing on click. Exceptions are Rom apps, such as phone, browser etc.
I had a look around the forum and on Google but there appears to be not much info on a2sd. Is there a way u could fix this? I've restarted at least twice and tried repair ext and the other repair thing in amonra recovery, to no avail. I ended up doing a bart restore, (hence writing using tapatalk) but I have lost texts and apps etc.
Any help would be appreciated for the inevitable next time this happens. What happened and is there any way to fix it painlessly?
-------------------------------------
Sent via the XDA Tapatalk App
Re: A2SD problems
Sorry I think I posted this in the wrong place, feel free to bump it to q&a.
-------------------------------------
Sent via the XDA Tapatalk App
adb shell
fix_premissions
might work?
Let's say hypothetically I do not know where to type this in. Can I use a terminal in the phone, or do I need to type it in using the sdk on my pc?
-------------------------------------
Sent via the XDA Tapatalk App
If your SD card became disconnected you still should have no problems as soon as it was reconnected. Try turning off the phone, remove the SD card. Reinsert it to make sure it's inserted correctly. Then turn on the phone.
If for some reason the ext2 or ext3 partition is corrupt I'm not sure if there's a chkdsk equivalent for the phone.
Thread moved to Q&A
Russ
pananza said:
If your SD card became disconnected you still should have no problems as soon as it was reconnected. Try turning off the phone, remove the SD card. Reinsert it to make sure it's inserted correctly. Then turn on the phone.
If for some reason the ext2 or ext3 partition is corrupt I'm not sure if there's a chkdsk equivalent for the phone.
Click to expand...
Click to collapse
I have definitely made sure that upon restart the SD card is readable. I get the feeling that the partition has become corrupt. I'm curious as to whether anyone else has a problem like this and how they would solve it.
So far I have updated the filesystem to ext3: considering it's journalled I reckon it might solve the problem in future. Any ideas?
pananza said:
If your SD card became disconnected you still should have no problems as soon as it was reconnected.
Click to expand...
Click to collapse
That's not true. If Android is allowed to run while the card is disconnected, simply restoring the card won't resolve the apps2sd issues. This doesn't mean the card is physically faulty. The only workaround I've seen so far is remove/reinstall all affected apps. Titanium Backup helps with this.
cauli said:
That's not true. If Android is allowed to run while the card is disconnected, simply restoring the card won't resolve the apps2sd issues. This doesn't mean the card is physically faulty. The only workaround I've seen so far is remove/reinstall all affected apps. Titanium Backup helps with this.
Click to expand...
Click to collapse
Thanks for this, does anyone know why these problems exist then? Isn't there a script or something that can undo the damage that is done? My phone did it again and I tried the recovery options in Amon_Ra and have also run fix_permissions too - very little difference was made.
If it helps - the XDA app is throwing up some kind of internet permissions problem. I'll take any help I can get.
By the way I'm almost certain it's a web permissions problem. Apps such as newsroom open up ok, but report not having any internet despite wifi/3g reception. Web only apps FC immediately.
Most likely as you say it is a permissions issue of some kind. Certain, typically simple, apps are fine. Others FC on launch, while a few FC on certain user actions, all of which suggest the FC occurs when the app tries to do something it needs permission for & which it thinks it already has permission for. It seems the permissions granted upon app installation are somehow lost when Android notices the apps are missing.
Someone suggested this is down to the user/group ids each app runs under. That the temporary removal of the sdcard causes this allocation to change, while stored permissions still pertain to the original install ids. I wasn't able to confirm this last time I looked & I eventually gave up the search.
Good luck finding the cause & a fix or workaround.
I have found on several occasions that the music on the "internal" drive is suddenly completely missing. Cannot explain it; obviously, can't "pull" the internal card, haven't flashed anything recently.
Anyone with a clue why this happens. I have had images periodically vanish from my EXTERNAL sdcard, too, but this seems to accompany pulling the card.
I've been switching batteries and I'm starting to wonder whether part of the internal RAM is not genuinely nonvolatile or something.
UPDATE: I believe I have figured this out, it's related to flashing a new recovery. See post #13 below.
Are you not seeing it in your music player library? Any chance you changed a setting for where it looks to see the music? I don't mean to insult you , I just ask because there was an issue before of dupes showing up in the music library and it was happening because of those settings.
feralicious said:
Are you not seeing it in your music player library? Any chance you changed a setting for where it looks to see the music? I don't mean to insult you , I just ask because there was an issue before of dupes showing up in the music library and it was happening because of those settings.
Click to expand...
Click to collapse
I likewise would have asked that question first (Occam's razor and all that). No, I don't see it on mount to PC or in my file explorer (and I see everything else on the drive.) It's as if something went in there and wiped the directory.
Dumped into the innertubes from my Rezound
some PB98IMG.zip files will erase internal memory in install.
Are you just doing a battery pull or are you actually shutting the phone down before swapping batteries? I've had hard times with SD Cards(and flash memory in general) without shutting down the phone first. I know it's an extra few seconds but it may save your information.
MrSmith317 said:
Are you just doing a battery pull or are you actually shutting the phone down before swapping batteries? I've had hard times with SD Cards(and flash memory in general) without shutting down the phone first. I know it's an extra few seconds but it may save your information.
Click to expand...
Click to collapse
Good point. I'm pretty sure I haven't pulled the battery ever when the device is on (except when completely crashed, which hasn't happened in a long time). I never used to pull the battery with the power on EXCEPT that once in a great while the phone boots normally when I was trying to get it to go to bootloader and I pull it as soon as I see the splash screen. I cannot tie any data loss to doing that (this stuff vanished after I flashed a new ROM with the 4-in-1 power menu enabling reboot to bootloader, obviating the need for a battery pull altogether; and I haven't had any crashes on the new ROM/kernel, and besides, all this stuff was there after the flashing).
Do you think in that moment internal memory would be affected in such a selective way?
andybones said:
some PB98IMG.zip files will erase internal memory in install.
Click to expand...
Click to collapse
What he said. Installing a new kernel will cause the internal sd card to get erased, so if you are installing a ROM that requires a new kernel, that would explain the vanishing trick you are seeing.
b5fan said:
What he said. Installing a new kernel will cause the internal sd card to get erased, so if you are installing a ROM that requires a new kernel, that would explain the vanishing trick you are seeing.
Click to expand...
Click to collapse
I haven't installed a kernel yet that touched the internal sd card. And I'm on ICS right now which requires a kernel install...
Yeah, the music was there *after* I flashed my ROM and my kernel. And I always remove the .zip file so that the bootloader doesn't actually try to re-run it. The one thing I have noticed since before I rooted is that occasionally after any battery removal, something comes off the internal (and sometimes the external) memory. The only things that typically disappear though is music and/or photos, i.e. media.
I just can't figure that part out.
hgoldner said:
Yeah, the music was there *after* I flashed my ROM and my kernel. And I always remove the .zip file so that the bootloader doesn't actually try to re-run it. The one thing I have noticed since before I rooted is that occasionally after any battery removal, something comes off the internal (and sometimes the external) memory. The only things that typically disappear though is music and/or photos, i.e. media.
I just can't figure that part out.
Click to expand...
Click to collapse
That's almost scary. You don't use HTC Sync do you? I'd hate to think an underlying process from Sync was doing you in.
MrSmith317 said:
That's almost scary. You don't use HTC Sync do you? I'd hate to think an underlying process from Sync was doing you in.
Click to expand...
Click to collapse
Nope. I'm pretty sure it's unrelated to connect to PC. I actually have a spare 32gb card and a spare 16gb card and every Monday I use MS Synctoy to copy my external memory and internal memory to hard drive, thence to the external backup cards (I know, it's belt and suspenders, but it also means I never lose anything ever).
The only commonality I can come up with is the battery. Saturday I tried out my 2750 mAmp battery and kept the device off charger all day, then Sunday I switched back to my stock battery. Monday the music was there, at some point yesterday it simply wasn't (and I hadn't touched the battery).
Have had these type of issues since I got the phone. Can't quite put my finger on the cause, but since I back everything up, and since otherwise I love the thing, I'm just trying to find a pattern.
I had the exact same problem, one day, none of my music was there anymore. I finally rebooted and it was all back.
Sent from my HTC Rezound using Tapatalk. Forgive autocorrect.
RED ZMAN said:
I had the exact same problem, one day, none of my music was there anymore. I finally rebooted and it was all back.
Sent from my HTC Rezound using Tapatalk. Forgive autocorrect.
Click to expand...
Click to collapse
I believe I have figured it out.....when I update my recovery (as I have done every time drelisdee improves RA Vigor) it happens. I just happened to read on another thread about the CWM recovery update for the Rezound that running the PB98IMG wipes the internal memory (as somebody above in this thread suggested).
It's possible flashing kernels this way does, but clearly flashing a new recovery will mess with the internal drive.
Good to know.
Thanks everyone for helping to solve this.
By any chance did you use the make more space option in the storage card settings? Using that option support erase cache,but on the stock rom it end up erasing my pictures and music.
Robert235 said:
By any chance did you use the make more space option in the storage card settings? Using that option support erase cache,but on the stock rom it end up erasing my pictures and music.
Click to expand...
Click to collapse
BINGO! Yup, I just happened to do that, thinking it would only clear cache, and that was shortly before I discovered the missing music. I am running the stock ROM, only it's deodexed so I can put mods into it. That must be the explanation.
OK I came across this problem last month & tried to find a solution. I discovered many posts to the same problem however I was only able to fix it by doing a factory reset. The problem has come up again & I'd rather not reset it again. It only comes up after numerous picture uploads to Facebook. Until I do that my phone runs fine. I'm running Open Kang if that makes a difference. Given this information does anyone have a suggestion as to how to fix it? It was suggested that I flash a new ROM as maybe the one I have is too big? Starting to get extremely frustrated with a phone I've only had since April & really know nothing about
Sent from my SGH-T959 using xda app-developers app
Mentalmama said:
OK I came across this problem last month & tried to find a solution. I discovered many posts to the same problem however I was only able to fix it by doing a factory reset. The problem has come up again & I'd rather not reset it again. It only comes up after numerous picture uploads to Facebook. Until I do that my phone runs fine. I'm running Open Kang if that makes a difference. Given this information does anyone have a suggestion as to how to fix it? It was suggested that I flash a new ROM as maybe the one I have is too big? Starting to get extremely frustrated with a phone I've only had since April & really know nothing about
Sent from my SGH-T959 using xda app-developers app
Click to expand...
Click to collapse
This is (as others suggested) a problem with the ROM you have installed. There really is no way of getting around a wipe, but you can download an app called "Titainum Backup" and backup your apps from there. Once you get into your new ROM, simply download Titainium Backup again and restore your apps.
As far as fixing the problem goes, I would reccomend using ODIN to flash back to stock, then flash CM9. (However, I am sure that flashing from your current rom directly to CM9 would work just as well)
The real reason this is occurring is the mounting of the /datadata simlink to the /data/data partition, this is actually in the kernel and sets it when flashing, not the rom. That partition stores the data for applications, and continues to grow as apps run. Often times when you sync alot of emails it will also fill the partition when its mounted as /datadata, so that makes sense with your pic uploads to facebook, now I'll tell you why.
Early on in ICS builds, we had two schools of thought. If you mount with the /data/data partition, you have essentially 2GB of space for that app data, however, this comes at the cost of decreased performance and much slower application response times. If its mounted with /data/data symlinked to /datadata, it clips that partition at about 180MB, a lot smaller, but the increase in performance is phenomenal.
So it was damned if you do (slow response times) or damned if you don't (less space) for those of us in the rom game. I think most (myself and DD included) made a conscious decision after lots of testing, to use /datadata with less space, for faster performance.
You may be easily able to resolve it by performing some simple app maintenance. On apps like email and gmail, set your sync interval down to a few days, uninstall unnecessary applications, and with facebook, I don't use it myself, but try clearing its cache if there is a setting for that, or go into apps in settings, and clear the data for the application. You may have to sign in again, but it should not effect your uploaded content, merely clear the local cache on the phone freeing up that /datadata space.
Hope this sheds some light on the issue for you, and how you can avoid it or remedy it going down the road.
Sent from the ICZen Experience
Br1cK'd said:
The real reason this is occurring is the mounting of the /datadata simlink to the /data/data partition, this is actually in the kernel and sets it when flashing, not the rom. That partition stores the data for applications, and continues to grow as apps run. Often times when you sync alot of emails it will also fill the partition when its mounted as /datadata, so that makes sense with your pic uploads to facebook, now I'll tell you why.
Early on in ICS builds, we had two schools of thought. If you mount with the /data/data partition, you have essentially 2GB of space for that app data, however, this comes at the cost of decreased performance and much slower application response times. If its mounted with /data/data symlinked to /datadata, it clips that partition at about 180MB, a lot smaller, but the increase in performance is phenomenal.
So it was damned if you do (slow response times) or damned if you don't (less space) for those of us in the rom game. I think most (myself and DD included) made a conscious decision after lots of testing, to use /datadata with less space, for faster performance.
You may be easily able to resolve it by performing some simple app maintenance. On apps like email and gmail, set your sync interval down to a few days, uninstall unnecessary applications, and with facebook, I don't use it myself, but try clearing its cache if there is a setting for that, or go into apps in settings, and clear the data for the application. You may have to sign in again, but it should not effect your uploaded content, merely clear the local cache on the phone freeing up that /datadata space.
Hope this sheds some light on the issue for you, and how you can avoid it or remedy it going down the road.
Sent from the ICZen Experience
Click to expand...
Click to collapse
Br1ck'd to the rescue! I knew you still lurked these threads!!
Sent from my GT-I9000 using xda premium
So I have a s9+ snapdragon running the latest Android 9 pie. My files got wiped out after a factory reset and I wanted to get some closure. Can I get those files back? It was not backed up on Google or Samsung cloud. Nor was it on a sd card. It was in the internal phone storage.
I hear you can recover the data so long as you don't overwrite the data. Files aren't really lost and still technically in your phone. These are pics and video actually. It's all I care about. I hear people saying you have to root phone and do a deep scan of the phone to try to recover the data but I hear you can't root cause it doesn't work on my version of s9+. (Snapdragon and android 9) I also heard you gotta take it to forensics data recovery. I called them but they said nope files are gone. But I read on Google recoverable.
Please anyone, help me. I've been down since I lost my pics and video. I took vids and pics back to my homeland where I haven't been back in 10 years.
PS. I was on vacation when this happened. My company unfortunately has access to my phone and if you miss type your password a certain amount of times it triggers the factory reset and wipes it out. I decided to stop a certain amount of times and then my 20 month old son started pushing buttons and there you have it. Factory reset.
files are lost bud. Sorry
did you ever connect your phone to any cloud for backup purposes?
It's connected but I didn't back up photos or vids. Everything else I did. Is there a way to root this version of phone I have? Temp root at least without tripping Knox?
No you can't ...it's gone...
Factory reset wipes /data internal storage
Sent from my SM-N960F using Tapatalk
Asepriest said:
No you can't ...it's gone...
Factory reset wipes /data internal storage
Sent from my SM-N960F using Tapatalk
Click to expand...
Click to collapse
mostly correct. It wipes the table of contents of storage, but doesnt actually wipe(remove) anything. The issue is that it starts writing 1's and 0's wherever it wants to because as far as it knows, the internal storage is empty (which it isnt). It then starts unintentionally corrupting file after file as it writes system data and everything else it writes. Can he recover the data? Maybe. Is it likely? Not even remotely. The only way to recover it is to turn it off, like now and get it connected to a lunix instance, adb into it and see whats still there. Which is likely nothing usable.
Completely unrelated side note: Youre from Sibiu? I visited there about 2 years ago. Positively GORGEOUS place!! We saw the sun set over cobblestone right between two rows of buildings. It was surreal!
bluerogue85 said:
It's connected but I didn't back up photos or vids. Everything else I did. Is there a way to root this version of phone I have? Temp root at least without tripping Knox?
Click to expand...
Click to collapse
yes there is a way to root it, and thats probably your only hope. Turn the phone off, read up on the new-ish root methods, apply them to your phone and see what you can get via ADB. Dont hold your breath, but that is the only way to get there. Treat it like a recently wiped hard drive, because thats technically what it is. Its the "C: drive" of your phone essentially
Youdoofus said:
mostly correct. It wipes the table of contents of storage, but doesnt actually wipe(remove) anything. The issue is that it starts writing 1's and 0's wherever it wants to because as far as it knows, the internal storage is empty (which it isnt). It then starts unintentionally corrupting file after file as it writes system data and everything else it writes. Can he recover the data? Maybe. Is it likely? Not even remotely. The only way to recover it is to turn it off, like now and get it connected to a lunix instance, adb into it and see whats still there. Which is likely nothing usable.
Completely unrelated side note: Youre from Sibiu? I visited there about 2 years ago. Positively GORGEOUS place!! We saw the sun set over cobblestone right between two rows of buildings. It was surreal!
Click to expand...
Click to collapse
Can you please teach me step by step how to do that or point me to a link. Cause thats what i read about how its not really gone. Has to have data over write the existing that was supposedly deleted. Did you mean Linux or lunix?
bluerogue85 said:
Can you please teach me step by step how to do that or point me to a link. Cause thats what i read about how its not really gone. Has to have data over write the existing that was supposedly deleted. Did you mean Linux or lunix?
Click to expand...
Click to collapse
if i typed lunix, then i meant Linux, and if i typed Linux, i meant Linux. Either way, i meant Linux. So, step by step... eesh thats gonna be a lot. First thing is to turn your phone off if you havent already. Itll keep writing stuff to the internal storage even if it doesnt say its doing so. Thats jsut what it does and it doesnt know that you dont want it to do that while its powered on. If youre able to do so, you can just turn on USB debugging in developer options and connect it to your computer without rooting it but granting permissions for your computer to access the drive. All of this requires having your phone powered on. The most dangerous thing ive told you to do is turn on usb debugging since it will write to the internal storage that you now have access to dev options, and then usb debugging. When the phone is powered on, try to keep it on airplane mode to avoid giving it reasons to actually do stuff. Linux isnt really necessary either as most software recovery tools will recognize the device and storage just fine, but the likelihood of it being able to actually recover anything is slim. If that doesnt get you full access to the internal storage, then youll have to either root or use linux or both. Its been a while since ive attempted this, so forgive me if my steps are off. That being said, these are the progressive steps one would need to take in order to do what youre trying to do.
does it wipe the phone though? Or does the phone allocate the areas where data is as free? If it only installs system and sets the previously used memory as "available or free". it can be recovered
Edit : if your phone was encrypted it wouldn't matter. Did your phone use secure start-up? (required a pin or password etc) then it would show adblock opening.
Nigmea said:
does it wipe the phone though? Or does the phone allocate the areas where data is as free? If it only installs system and sets the previously used memory as "available or free". it can be recovered
Edit : if your phone was encrypted it wouldn't matter. Did your phone use secure start-up? (required a pin or password etc) then it would show adblock opening.
Click to expand...
Click to collapse
my company triggered the factory reset after failed attempts of putting password in. see it uses a thing called airwartch or vmware not sure what its called but yea..still hoping to recover vids and pics if i can root my phone and just do a deep scan just not sure how. esp for my version phone of s9+ snapdragon android pie. i have not taken pics or vids. just twitter, fb, email. some internet browsing. but not sure if those overwrite new data as well.
bluerogue85 said:
my company triggered the factory reset after failed attempts of putting password in. see it uses a thing called airwartch or vmware not sure what its called but yea..still hoping to recover vids and pics if i can root my phone and just do a deep scan just not sure how. esp for my version phone of s9+ snapdragon android pie. i have not taken pics or vids. just twitter, fb, email. some internet browsing. but not sure if those overwrite new data as well.
Click to expand...
Click to collapse
You can try an app called disk digger. It's your best bet. About the best on the market. If you root. Or reinstall the firmware in Odin. Kiss em good bye
The way this works is front to back. A file is normally written from front to back. Once it gets the end. It starts over. Then there goes old deleted files
Files are not deleted until over written. But actually marked for deletion. Not gone till next write cycle
If it can't then their gone. But every day you use your device the chance gets slimmer. Just cause your not downloading stuff. Cache and sick files are over writing.
TheMadScientist said:
You can try an app called disk digger. It's your best bet. About the best on the market. If you root. Or reinstall the firmware in Odin. Kiss em good bye
The way this works is front to back. A file is normally written from front to back. Once it gets the end. It starts over. Then there goes old deleted files
Files are not deleted until over written. But actually marked for deletion. Not gone till next write cycle
If it can't then their gone. But every day you use your device the chance gets slimmer. Just cause your not downloading stuff. Cache and sick files are over writing.
Click to expand...
Click to collapse
Is there a way to root my phone without wiping it out first? Really trying this as my last option. To at least get some pics and or vids back.
bluerogue85 said:
Is there a way to root my phone without wiping it out first? Really trying this as my last option. To at least get some pics and or vids back.
Click to expand...
Click to collapse
Probably not.
Which link can you guys point me to to root? I have s9+ snapdragon. What are all my choices? Thank you.
I think I found one but link is broken. Syndicate. I really need this so I can at least do a deep scan of my phone. I need root!
You're right that it's possible to recover the data as long as it hasn't been overwritten. However, it can be difficult to do so without rooting your phone and doing a deep scan, as you mentioned. Unfortunately, it sounds like you can't root your phone due to its version.
You might want to consider reaching out to managed IT services that specialize in data recovery. They might have more advanced techniques and tools to recover your data. It's worth a shot since the pictures and videos mean a lot to you.
Good luck, and I hope you're able to recover your memories!
I have done the following in attempt to get rid of this spyware:
flashed Havoc os
stock roms from official Miui using xiaomi flash tool and using twrp
erased partitions using adb before flashing (boot, system, recovery, data, cache)
It seems like it doesnt even touches it. I know its still there because he can control my phone (play notifications sounds from messenger i dont even have installed, closing/freezing my browser, freezing my screen, lockscreen goes on i dont even touch the phone).
What else can i do? Is there a way to erase every bit of data from the phone? What remains after flashing a stock rom?
edited//
Is there any way i can find Qualcomm Snapdragon 439 firmware and flash it? Can anyone help me pls?
I saw chimera tool can do firmware update but it costs 120 euro and idk if its gonna work
Can you explain more about the spyware?
Its like a windows bios malware or maybe its in some partition that doesnt flash when installing new OS.
I talked to xiaomi support and they told me to take it to service but there is none in my country. I asked for help on Malwarebytes forum, sent apps report and they scanned it with VIrusTotal... nothing found.
I also did a logcat at boot time, i dont know if anything can be seen there.
https://raw.githubusercontent.com/pulshar18/mylog/main/mylog.txt
The guy that did it hes messing with me like... telling me your wifi its not gonna work anymore, then it doesnt. O you have 5000 mah battery? my phone its charged 99% next day its empty and the phone just sits on the table... stuff like that so im pretty sure its hacked there is no doubt about that.
pulshar18 said:
Its like a windows bios malware or maybe its in some partition that doesnt flash when installing new OS.
I talked to xiaomi support and they told me to take it to service but there is none in my country. I asked for help on Malwarebytes forum, sent apps report and they scanned it with VIrusTotal... nothing found.
I also did a logcat at boot time, i dont know if anything can be seen there.
https://raw.githubusercontent.com/pulshar18/mylog/main/mylog.txt
The guy that did it hes messing with me like... telling me your wifi its not gonna work anymore, then it doesnt. O you have 5000 mah battery? my phone its charged 99% next day its empty and the phone just sits on the table... stuff like that so im pretty sure its hacked there is no doubt about that.
Click to expand...
Click to collapse
How did you get get infected by this ?
He got physical access to my phone.
pulshar18 said:
He got physical access to my phone.
Click to expand...
Click to collapse
That wasn't too clever. Lol, rootkit from hell.
You need to wipe the internal memory 100% as well the SD card if any.
If it has a sim card I'd replace that as well.
Or make the perp fix it... legally.
Any associated Google accounts reset the passwords... now.
Internal memory was wiped, sd card wiped, sim card none (i read some articles about sim card viruses thats just little scripts to call numbers, send texts and stuff maybe in another 50 years they will make malware that can do whats happening to me).
"Or make the perp fix it... legally." What?
"Any associated Google accounts reset the passwords... now." I didnt connect to anything cuz i know he has all my passwords, he clearly doesnt want that i can still use all my accounts.
I am in a similar situation.
I install YouTube vanced and WhatsApp Plus
in the latter case something deleted my entire data without asking me -I suspect it was clean master and my vanced applications were uninstalled all of a sudden.
I seem to know what cause that com.miui. securitycenter if you disable it it will boot loop if you to change and restrict access to various permissions then phone functionality is upset
I took out a separate thread on that here on xda Google com.miui. securitycenter draconian legitimate spyware from redmi
there is a thread on XDA I use havoc ~ two years or so but because it does not support VoLTE and trying to enable that has been in vain I am forced to come back to China ROM.
Did you install any apps after flashing ROMs / gapps?
pulshar18 said:
Internal memory was wiped, sd card wiped, sim card none (i read some articles about sim card viruses thats just little scripts to call numbers, send texts and stuff maybe in another 50 years they will make malware that can do whats happening to me).
"Or make the perp fix it... legally." What?
"Any associated Google accounts reset the passwords... now." I didnt connect to anything cuz i know he has all my passwords, he clearly doesnt want that i can still use all my accounts.
Click to expand...
Click to collapse
The malicious jpegs may be capable of doing that. I've had one the damages files in a folder but not files in folders, in the download folder.
It was confined to that folder unless one was to move it...
The trigger was viewing the jpeg.
They cure; simply delete it and repair or delete the damage files.
There are both Android and Windows variants of these. I've had a Windows variant too. Zero or minimum damage but only because I ID both quickly.
actually step back a little how do you conclude it's your phone that is affected you say he has access to our accounts and password maybe e is connecting on your Wi-Fi network IP address is the same and then trying to tinker with your accounts. what specifically makes you think that your phone is hacked as against something else
blackhawk said:
The malicious jpegs may be capable of doing that. I've had one the damages files in a folder but not files in folders, in the download folder.
It was confined to that folder unless one was to move it...
The trigger was viewing the jpeg.
They cure; simply delete it and repair or delete the damage files.
There are both Android and Windows variants of these. I've had a Windows variant too. Zero or minimum damage but only because I ID both quickly.
Click to expand...
Click to collapse
I have more than 30,000 from photographs and especially WhatsApp
how do I scan for malicious code in JPG is there a specific tool anti malware that has that capacity to go through JPG hexdump and then fish out
sieger007 said:
I have more than 30,000 from photographs and especially WhatsApp
how do I scan for malicious code in JPG is there a specific tool anti malware that has that capacity to go through JPG hexdump and then fish out
Click to expand...
Click to collapse
Jeeeesze, downloads from WhatsApp?
That's a great way to pick up creepy crawlers.
WhatsApp, FB, Instagram don't get on my devices. Ever.
They ruin lives, careers and more... they are spyware and malware by their very nature.
I never have had anything detect these little buggers, I'm not saying there aren't detectable, but don't count on it. The two I found I didn't even consider keeping them for analysis.
They wasted enough of my time as it was. Finding them in an ocean of jpegs could be problematic.
Rule #1, all downloads go to the download folder.
Choose what goes into your database after observation and at least scan it with Malwarebytes. Online Virustotal for any download remotely suspicious. Open jpegs at least once in the download folder and be aware of anything unusual afterwards... that may be the only clue you get.
If you really think one of these images has a malicious script, you need to isolate it. Scan with Malwarebytes and whatever else you want.
Try reloading, confirm the device is still clean then load the suspect database.
Problem being the trigger is opening the jpeg or some other related action to it like deleting the email it was associated with in Windows Outlook. If you get nailed again, reload and break/import your database in groups. You can see where this is going... it may take a while.
I've seen what they can do, I avoid downloading clickbait pics from untrusted sites, people and emails (email is kept in the cloud ie gmail).
My backups are also from different time periods on hdds completely isolated from each other and the PC. I could lose some of my database but not all of my it. With over 1 tb of data I'm not playing around.
The second and last(?) malicious jpeg I ran into was on Android about 1.5 years ago.