[Q] Aindroid Pre-configured Anti Theft Software In Cooked Rom ? - Upgrading, Modifying and Unlocking

Hi everyone. I have recently been the victim of theft for my nexus 7. I had the device locked with the pattern so there is no way that the thief could get into it unless they do a software reset from the recovery mode. The thing is, either way there is no way i would be able to recover it because if in fact they do a factory reset my lookout security would be uninstalled and my nexus would be lost forever, also if they can't get through the pattern and find a way to connect to Wi-Fi, it will still be lost forever. I have read about installing lookout in the system/app folder of a rooted device so its not easily uninstalled by normal means or factory reset. But do you think it is possible to have android lost and lookout pre-configured and installed in the system/app folder so that even if the device is factory reset, the credentials will remain?

revolva said:
Hi everyone. I have recently been the victim of theft for my nexus 7. I had the device locked with the pattern so there is no way that the thief could get into it unless they do a software reset from the recovery mode. The thing is, either way there is no way i would be able to recover it because if in fact they do a factory reset my lookout security would be uninstalled and my nexus would be lost forever, also if they can't get through the pattern and find a way to connect to Wi-Fi, it will still be lost forever. I have read about installing lookout in the system/app folder of a rooted device so its not easily uninstalled by normal means or factory reset. But do you think it is possible to have android lost and lookout pre-configured and installed in the system/app folder so that even if the device is factory reset, the credentials will remain?
Click to expand...
Click to collapse
bump
I am thinking about this same issue... how do I make Androidlost app factory-reset-proof? I'm pretty amazed that this serious issue hasn't been answered yet in all those threads I searched regarding Androidlost.
As I understood it's possible for any rooted device to put an app in system/app and it would survive a factory reset, but the question is about the setting of this particular app, and I would be very grateful if someone who managed to do this successfully will share this step-by-step
Thanks

Related

[Q] McAfee kill switch and PIN problems

After I upgraded my LG G3 to 5.0 I decided to downgrade it back down to 4.4.2 because 5.0 was crashing randomly. After I got 4.4.2 installed back onto the phone, McAfee shows up automatically and wants a PIN. I never made one.
I can't factory reset the device, it tells me the kill switch is disabled. Also, USB download mode is also disabled by McAfee. I'm at a loss, what do I do?
I've tried 123456 and 000000 as some other members have tried, but they don't work.
Jaradice said:
After I upgraded my LG G3 to 5.0 I decided to downgrade it back down to 4.4.2 because 5.0 was crashing randomly. After I got 4.4.2 installed back onto the phone, McAfee shows up automatically and wants a PIN. I never made one.
I can't factory reset the device, it tells me the kill switch is disabled. Also, USB download mode is also disabled by McAfee. I'm at a loss, what do I do?
I've tried 123456 and 000000 as some other members have tried, but they don't work.
Click to expand...
Click to collapse
I have the same problem, did you find the solution? please help me:crying:
Try flashing tot file for your model
montresor60 said:
Try flashing tot file for your model
Click to expand...
Click to collapse
when i put the phone in dowload mode, this say that has been desible by killer switch
Try this:
- Go to: https://www.mcafeemobilesecurity.com.
- Click Forgot your PIN at the top of the page.
- A link with PIN reset instructions is the sent to your registered email.
- Follow the instructions to reset the PIN.
Jaradice said:
After I upgraded my LG G3 to 5.0 I decided to downgrade it back down to 4.4.2 because 5.0 was crashing randomly. After I got 4.4.2 installed back onto the phone, McAfee shows up automatically and wants a PIN. I never made one.
I can't factory reset the device, it tells me the kill switch is disabled. Also, USB download mode is also disabled by McAfee. I'm at a loss, what do I do?
I've tried 123456 and 000000 as some other members have tried, but they don't work.
Click to expand...
Click to collapse
Hi. I think I can help you. Because I have the same problem ago and I solved it.
The way is :
1、reboot your phone again and again until mcafee not auto-start (trust me you can )
2、if you into the system without mcafee successful,Congratulations on your!You have achieved half of success!
3、download towelroot and installed to root your phone
4、after that. Your phone will restart ,then you have the same work likes step 1
5、download TitaniumBackup and installed,then find mcafee on TitaniumBackupal and unInstalled
6、then your phone will work normal,good luck for you.
(I am sorry my English is poor because I am come from China)
xbustama said:
when i put the phone in dowload mode, this say that has been desible by killer switch
Click to expand...
Click to collapse
Of course. I did read your post but must have had a brain fart when responding.
Eenie_胜胜 said:
Hi. I think I can help you. Because I have the same problem ago and I solved it.
The way is :
1、reboot your phone again and again until mcafee not auto-start (trust me you can )
2、if you into the system without mcafee successful,Congratulations on your!You have achieved half of success!
3、download towelroot and installed to root your phone
4、after that. Your phone will restart ,then you have the same work likes step 1
5、download TitaniumBackup and installed,then find mcafee on TitaniumBackupal and unInstalled
6、then your phone will work normal,good luck for you.
(I am sorry my English is poor because I am come from China)
Click to expand...
Click to collapse
I will try it, thanks a lot
xbustama said:
I will try it, thanks a lot
Click to expand...
Click to collapse
I had to login and reset the PIN and it finally let me in. Now it's rooted and I got custom firmware on it. Great phone, but that McAfee crap shouldn't be a thing....
Thank you to everyone who tried to help
Kill Switch Disabled / Black Screen After Factory Data Reset
I just had this problem too; after Factory Data Reset ("FDR") from the "Settings" menu, I went thru setup, opened my Google Backup, watched my Apps reinstalling, then ended up with a black screen showing only the status indicators at the top, and the "Back" arrow at the bottom.
After trying hardware FDS a couple of times, I got a message saying "....Kill Switch Disabled" and then the black screen again.
It turned out that I had installed McAfee antivirus on my phone, including a feature (Kill Switch) which would prevent anyone who got hold of my phone from wiping it and re-selling it for someone else to use.
Once I realized this, all I had to do was log in to my McAfee for Android account from my computer and disable that setting. I don't remember the details of doing so, but it was fairly self-evident once I realized what was happening.
Good Luck
Eenie_胜胜 said:
Hi. I think I can help you. Because I have the same problem ago and I solved it.
The way is :
1、reboot your phone again and again until mcafee not auto-start (trust me you can )
2、if you into the system without mcafee successful,Congratulations on your!You have achieved half of success!
3、download towelroot and installed to root your phone
4、after that. Your phone will restart ,then you have the same work likes step 1
5、download TitaniumBackup and installed,then find mcafee on TitaniumBackupal and unInstalled
6、then your phone will work normal,good luck for you.
(I am sorry my English is poor because I am come from China)
Click to expand...
Click to collapse
i can reboot phone without mcafee auto-start but it can't install everythink. and it doesn't matter install from google play or other sources.
https://forum.xda-developers.com/lg...are-method-t3534946/post70470494#post70470494
While old, this is probably still relevant - I came here via a search, and found this to be the only way to resolve the McAfee lock. I was trying to downgrade an LG G3 D855 phone so that I could root it, and flashed a file that was supposed to be a stock ROM, D85510A_00.kdz, the oldest KitKat file for this phone. Big mistake, it had NcAfee installed and locked the phone. My McAfee was registered to an email address, and the only way to unlock it was to log on to "my" McAfee account, or have an email sent to this address. McAfee tech support had a very supportive attitude, but couldn't do anything as they didn't have the email address registered. They didn't know their own product too well, suggesting that if I managed to start in Safe Mode I could remove the McAfee app. Not so. Recovery and download modes reported that they had been disabled by the "kill switch". There was nothing I, or McAfee could do.
I came to this thread; the fundamental fact I learnt is that repeated rebooting eventually got the phone started without locking. It didn't work very well, presumably with McAfee using system resources as it tried to lock; it wasn't possible to install anything from the play store ("downloading" for 5 minutes or so until I gave up), and programs worked slowly and not very well with McAfee active and trying to do its thing.
The exact procedure listed here didn't work for me, but once I knew I could get into the phone by repeated restarting I could try anything; anyone reasonably familiar with Android should be able to cope with whatever the system throws up. I first installed Towelroot 3.0, which rooted the phone without needing a reboot I installed files by writing the .apks to the SD card on a computer. I installed the System 2 task manager, Titanium Backup application, and SuperSU at various times. I also installed Total Commander, my preferred file manager, though the built-in one might have been enough. The first thing to do to stop McAfee from undoing everything, once rooted to provide access to its file /system/priv-app/LGMcAfee.MobileSecurity.apk, was to stop the process with System2. (Until then I had done various things, but later found that McAfee had managed to undo them and resuscitate itself on next reboot.) After stopping the process, I deleted McAfee with Titanium Backup. That's the essential unlocking bit. I also installed the TWRP app and used it to flash the TWRP recovery. So I had a phone working well, rooted, with the earliest release of KitKat. Booting in factory reset mode and ignoring the warnings that everything will be deleted starts TWRP in the way I've been used to, and allowed me to restore a backup of the phone (or install a custom ROM).
[When repeatedly rebooting until McAfee doesn't kill, find something not very taxing to do, e.g. watch a video., so the time is not entirely wasted.]
[Added later]: instead of repeated rebooting, it's been suggested that if you manage to go to Settings > General after the boot process has finished but before McAfee has loaded (about 5"), McAfee will not fully start and you can do the root, terminate, remove process. As before the phone will be sluggish and not work properly, and the Play Store will not work, until McAfee is terminated. Put .apks on an SD card, or use a browser to download them from the phone.
[emoji106][emoji106]?[emoji106]?
Great example of perseverance and not giving up. I probably would've. [emoji37][emoji36]
Kudos.
LG G3 D851, crDroidAndroid v4.6 ROM, microG (NoGapps), MultiROM, XDA Legacy

How does security and encryption defeat someone just booting into recovery?

Regardless of device encryption and fingerprint scanners and the like, couldn't someone just get your phone, boot into recovery, and factory reset it? Wouldn't that undo any security you had on device?
Yes but the actual files have been encrypted. So while they can start the device fresh and use file recovery tools to "get" the old files, they are useless.
And they would be useless to everyone after that, even you? I guess that would be pretty good. So you encrypt to protect your user data, and you fingerprint lock to make sure nobody can ever decrypt, even if they factory reset thru recovery, which will get past your fingerprint scanner but not previous encryption. That right?
Actually since lollipop you must log out of your Google account before a reset. If you just factory reset you well still have access to the device to track it out wipe your account from it.
I could be wrong here, but if you have stock recovery, a factory wipe can only be started in the phone's settings menu. If you have twrp installed, a wipe can be started with out being in the phone, but you need a password to start it.
If you do wipe the phone, it is still useless as you need the persons gmail username and password to complete the setup, so the phone is useless to all other users bar the user of the phone.
I think you can factory reset from stock recovery.
So I don't get it. I thought user data was encrypted from phone, i.e., the internal storage. If I factory reset, I don't need a Google account to start the phone up. So then couldn't I access the internal storage data with a file explorer?
You have to authorize the phone to sync with your computer so you can not get on that way either. If you do not authorize you can not push adb or anything else.
As km8j said, yes, you can factory reset the phone, but you won't be able to recover any of the encrypted data. That's why before you get rid of an old phone you should encrypt (if it wasn't) and wipe it.
jackdubl said:
I think you can factory reset from stock recovery.
So I don't get it. I thought user data was encrypted from phone, i.e., the internal storage. If I factory reset, I don't need a Google account to start the phone up. So then couldn't I access the internal storage data with a file explorer?
Click to expand...
Click to collapse
Thats not quite right. If you factory reset your phone, you do need a google account to complete the initial setup wizard. The only exception is if the user releases it from his or her's google account so it can be sold on.
But yes to complete the instillation it will ask for a google account that has been authorised and wont continue until it gets it. This happens automaticly the first time you sign in to play store.
Also factory reset will fully wipe the phone, brand new out of the box. It also wipes the users data, so if you were able to get on the phone, there would be no data to access. I really do like the way google have thought about it. Also I never keep anything on the phone that I would consider critical.
A lot of inaccurate information here. You have been able to skip that Google account setup on all android phones for the past few years. Also in basically any file system, when joy delete a file, even formatting, the content is not deleted. So while the information is not there at face value when you wipe the phone it can easily be recovered without encryption.
Sent from my Nexus 5X using Tapatalk
Yeah, that keeps confusing me. I have activated so many phones without inputting a Google account. It says "skip" right there on the screen!
Didn't Google introduce the security features with the Nexus 6 and 5.0? It locks the phone to your google account even after a factory reset but requires compatible hardware.
I haven't seen it mentioned with this year's devices but when setting up a pin on the 5x I believe it asked if I wanted to enable that feature.
Sent from my Nexus 5X using Tapatalk
jackdubl said:
Regardless of device encryption and fingerprint scanners and the like, couldn't someone just get your phone, boot into recovery, and factory reset it? Wouldn't that undo any security you had on device?
Click to expand...
Click to collapse
No. If your data is encrypted, no one can access it without your decryption key. As for access to the device, if you had set up a Google account on the device, and had a lockscreen password/pin/pattern/etc., then no one else can use the device other than you unless you remove your Google account and lockscreen password before you factory reset. This was a new feature introduced with devices that sold with 5.0+
Panzerapple said:
Actually since lollipop you must log out of your Google account before a reset. If you just factory reset you well still have access to the device to track it out wipe your account from it.
Click to expand...
Click to collapse
Yes!
Stephen said:
I could be wrong here, but if you have stock recovery, a factory wipe can only be started in the phone's settings menu.
Click to expand...
Click to collapse
With the stock recovery, you can reset either from within Android or from within the stock recovery.
jackdubl said:
So I don't get it. I thought user data was encrypted from phone, i.e., the internal storage. If I factory reset, I don't need a Google account to start the phone up. So then couldn't I access the internal storage data with a file explorer?
Click to expand...
Click to collapse
Prior to devices shipped with 5.0+, this was true. No longer.
km8j said:
A lot of inaccurate information here. You have been able to skip that Google account setup on all android phones for the past few years. Also in basically any file system, when joy delete a file, even formatting, the content is not deleted. So while the information is not there at face value when you wipe the phone it can easily be recovered without encryption
Click to expand...
Click to collapse
Yes, you can skip Google account setup. However, IF you do set up a Google account and a lockscreen password, THEN you cannot skip the Google account setup on that device after a factory reset (if you hadn't already removed the account prior to the reset).
bblzd said:
Didn't Google introduce the security features with the Nexus 6 and 5.0? It locks the phone to your google account even after a factory reset but requires compatible hardware.
I haven't seen it mentioned with this year's devices but when setting up a pin on the 5x I believe it asked if I wanted to enable that feature.
Click to expand...
Click to collapse
+1.

Pin Bypass on HTC One M9

Is there way to bypass the pin lock screen without losing my data? I don't have Android Device Manager installed. I can't factory reset because there's baby pictures and the such that hasn't been backed up yet. Any help will be appreciated.
Johnny5iver said:
Is there way to bypass the pin lock screen without losing my data? I don't have Android Device Manager installed. I can't factory reset because there's baby pictures and the such that hasn't been backed up yet. Any help will be appreciated.
Click to expand...
Click to collapse
Sorry but no, if you forget the pin their is nothing that can be done but reset the device. Their are cloud services for backing up pictures and important documents. I recommend you use them. It's for your own good, You would be happy if you lost the phone knowing no one could access you personal stuff because you protected it with a PIN

Unroot after Kingo ROOT... failed attempt to recover after surprising factory reset

My fiancé's Xperia Z1 compact suddenly did a surprising factory reset by itself couple days ago. To my surprise SD card has been deleted in the process as well. The phone that in the trouser's pocket. The reason remains mystery...
I recovered most data from the SD card (pictures and music mainly). However, I made attempts to recover the data from the phone as well and among certain options I tried EaseUS MobiSaver. In the process it asked to root the phone using Kingo ROOT... and to be honest if I know what problems it's going to cause, I wouldn't dare to do it. Kingo ROOT rooted the phone, EaseUS performed the scan, by memory seem to be totally wiped, so nothing from pre-reset incarnation has been found. I entered the Kingo Superuser app and ask for unroot... and that's where my problems started. The root exists and all banking apps refuse to log in (obvious reason why I don't want root anymore).
I tried to figure out what my options are, and tried to use Kingo ROOT PC app to unroot, but that fails after couple minutes without giving the reason. I tried to install SuperSU to use it's mechanism to remove root traces, but it fails to update binaries and attempt to unroot only removes SuperSU... Root checkers still shows phone is rooted. Any clues how to let SuperSU do it's job in such case?
Now, question is if anybody knows a method to wipe out damage done by Kingo ROOT using adb to restore the phone into state without root? I personally didn't touch bootloader, however I don't know what method Kingo applies to perform rooting (any clues?).
Next question to more experienced users is if I reflash the phone using Flash tool (I identified stock firmware already) am I going to face any bad side effects? Any advice, hints, clues here? What to avoid? How to do it right? Are data already collected back on the phone would remain intact? Can I eventually backup all of them (networks setting, sync setting, contacts, etc.) and restore easily?
I've seen some posts mentioning using repair option in PC companion to destructively reflash the phone to get rid of the root. Can anyone share experience?
Manneveru said:
My fiancé's Xperia Z1 compact suddenly did a surprising factory reset by itself couple days ago. To my surprise SD card has been deleted in the process as well. The phone that in the trouser's pocket. The reason remains mystery...
I recovered most data from the SD card (pictures and music mainly). However, I made attempts to recover the data from the phone as well and among certain options I tried EaseUS MobiSaver. In the process it asked to root the phone using Kingo ROOT... and to be honest if I know what problems it's going to cause, I wouldn't dare to do it. Kingo ROOT rooted the phone, EaseUS performed the scan, by memory seem to be totally wiped, so nothing from pre-reset incarnation has been found. I entered the Kingo Superuser app and ask for unroot... and that's where my problems started. The root exists and all banking apps refuse to log in (obvious reason why I don't want root anymore).
I tried to figure out what my options are, and tried to use Kingo ROOT PC app to unroot, but that fails after couple minutes without giving the reason. I tried to install SuperSU to use it's mechanism to remove root traces, but it fails to update binaries and attempt to unroot only removes SuperSU... Root checkers still shows phone is rooted. Any clues how to let SuperSU do it's job in such case?
Now, question is if anybody knows a method to wipe out damage done by Kingo ROOT using adb to restore the phone into state without root? I personally didn't touch bootloader, however I don't know what method Kingo applies to perform rooting (any clues?).
Next question to more experienced users is if I reflash the phone using Flash tool (I identified stock firmware already) am I going to face any bad side effects? Any advice, hints, clues here? What to avoid? How to do it right? Are data already collected back on the phone would remain intact? Can I eventually backup all of them (networks setting, sync setting, contacts, etc.) and restore easily?
I've seen some posts mentioning using repair option in PC companion to destructively reflash the phone to get rid of the root. Can anyone share experience?
Click to expand...
Click to collapse
I don't know exactly what you want to preserve, (if it's in the realm of photos / music or more in the realm of app data, etc), but I think if I were you, and I wanted to use the phone for daily, secure personal use, I would use official Sony and/or Google backup functions, (built into the phone), and then flash using Emma, (official Sony flash tool - https://developer.sonymobile.com/open-devices/flash-tool/how-to-download-and-install-the-flash-tool/), or use Androxyde Flashtool if you want. Then go back to the same Sony / Google app you backed up with, and restore. Anything that's restored from Kingo will be easy to delete, since it will only be /data and not /system.
I used Link2SD to uninstall Kingo ROOT

Simple root that won't trip Knox?

Hi, there!
I heard there is a method for the S8+ where you can root your phone without tripping Knox. It isn't the best root method and it has its limitations, but it would do just fine for my needs.
Is there such method for the S9+?
Thanks!
Anyone?
CapBlackShot said:
Anyone?
Click to expand...
Click to collapse
No
*Detection* said:
No
Click to expand...
Click to collapse
And no developers are planning to create one, that we know of? I only need root to make Cerberus a system app. In case the smartphone is stolen and gets hard reset, the app will still be there, hidden. But without root it seems impossible.
CapBlackShot said:
And no developers are planning to create one, that we know of? I only need root to make Cerberus a system app. In case the smartphone is stolen and gets hard reset, the app will still be there, hidden. But without root it seems impossible.
Click to expand...
Click to collapse
KNOX is an e-fuse, once tripped that's it forever, no reversing, nothing devs can do
FRP lock is your hard reset security, unless they know your Google login they cannot access the device anyway
And if they have the knowledge to flash certain firmwares and bypass the lock, your system root app wouldn't be of any use either anyway, so....
*Detection* said:
KNOX is an e-fuse, once tripped that's it forever, no reversing, nothing devs can do
FRP lock is your hard reset security, unless they know your Google login they cannot access the device anyway
And if they have the knowledge to flash certain firmwares and bypass the lock, your system root app wouldn't be of any use either anyway, so....
Click to expand...
Click to collapse
That's very interesting. Can't believe I never heard of this before.
Will the device actually get wiped and then ask for my Google account or will it ask for my Google account before getting wiped? If the first option I mentioned is true, then Cerberus will be gone and I still won't be able to locate my cellphone in case it gets stolen, I'm assuming.
CapBlackShot said:
That's very interesting. Can't believe I never heard of this before.
Will the device actually get wiped and then ask for my Google account or will it ask for my Google account before getting wiped? If the first option I mentioned is true, then Cerberus will be gone and I still won't be able to locate my cellphone in case it gets stolen, I'm assuming.
Click to expand...
Click to collapse
It will get wiped first, it asks for the Google account because it was wiped from recovery and not from inside of Android, meaning anyone could have done it
It will not allow anyone past the Google account request, similar to when iPhones are locked to iCloud, you can wipe it as many times as you like but it will always request the Google account
For example, I steal your phone with Cerberus installed, I cannot access your phone so the most likely thing I`ll try is factory reset from recovery, this will wipe the phone and request your Google account login to access it again, which I do not have
Next thing I would try (If I knew about it) was flash stock firmware over the top, which will wipe again this time removing your Cerberus app, but again it will not prevent the Google login request
Final thing I would try would be FRP bypass to get past your Google account login, and if they manage that they have access to your phone, but it is wiped and Cerberus is gone
End of the day, no mod/app will survive the phone being flashed as the system partition is replaced with stock again, and the wipe will reset the data partition where user apps and data are
Best thing to do is enable the Google security settings for find my phone, lock and erase, and enable it to send GPS of last location when the battery is getting low, that way you can track it online until it is turned off/wiped

Categories

Resources