Note10+ move from Samsung Cloud to Onedrive -> server fault - Samsung Galaxy Note 10+ Questions & Answers

All,
Today I received the firmware update for my Note10+ that contains the OneDrive integration. As I already have an Office365 subscription with 1Tb storage in OneDrive, I wanted to move there for backup. However, when I go through the Microsoft account linking part (enter Microsoft account, password, security code, password again), the app returns to the initial welcome screen with a message: server fault, please try again later.
Anyone else who has this error, or were you able to link the Samsung Cloud to Onedrive yet?

I have the exact same problem

i got the beta UI today and i was able to log in on first try. unlocked 10+ . already had onedrive. i use the microsoft authenticator and i had no issues .

Anyone with this problem fixed it yet? @Kruxarn, @marctronixx, any of you use 2 step verification on your Microsoft account?

gschot said:
Anyone with this problem fixed it yet? @Kruxarn, @marctronixx, any of you use 2 step verification on your Microsoft account?
Click to expand...
Click to collapse
Problem not solved.
Yes, i use two-step verification with my Microsoft Account.
I can try without two-step verification and report back.
Update:
it works without two-step verification.

Kruxarn said:
Update:
it works without two-step verification.
Click to expand...
Click to collapse
Cool, thanks for testing. Does it still work when you turn it back on after the connection is made?

gschot said:
Cool, thanks for testing. Does it still work when you turn it back on after the connection is made?
Click to expand...
Click to collapse
Yes!

Kruxarn said:
Yes!
Click to expand...
Click to collapse
Thanks for your feedback! I will try soon, as I have reported the issue with Samsung as well. I'll wait for their response before disabling/re-enabling the 2 factor auth.
Gerco

Seriously, what a disaster... Here my journey with the Samsung Support team...
- I initially made a call explaining the problem. The support agent told me that the integration is not active yet. I explained that a specific extra firmware was released in the Netherlands, explicitly reporting this feature in the release notes, so it would really surprise me if it was not available. The support agent then told me that the tech person was unavailable, but that they would call me back, the same day.
- I never received the call back, so I logged a question via Samsung Members. I got a response on that, telling me I had to send a screenshot and a log file (after enabling high level debug logging) on help.content.samsung.com
- I made a screenshot, but the log that was mentioned in a standard log enable procedure was not present on my phone, so I sent them again a clear description of the error, with a screenshot of the error, and a screenshot of the logs that were present, together with the question which of the logs shown they would need.
- This request was immediately answered that the samsung tech dept was going to look into it.
- Then I received an answer on the support site, telling me I had sent an invalid log file, and attached was the same procedure which was incorrect. I then looked for the 'reply' button. But wait.... THAT IS NOT PRESENT! You can only pose one question on which you receive an answer, but a customer is not able to reply to the thread again. No case numbers, whatever, to reference the question.
- So I called the support desk again, referring to the question on the support site. The response of the agent: "Unfortunately we can't see that, can you explain your problem please?" I then told her that Samsung first promised to call me back, which they didn't, and I told them that my problem description with the question about which logs to be sent, was not read at all (trust me, I am a tech guy, I know all about problem descriptions and logs) and I received a default reply instead. The support agent responded, "but we are not allowed to call back". After a few more words, she told me, "please hold on", and I thought I was put on hold.
- BUT NO! The agent actually put me back in the queue, as she probably did not want to talk to me anymore! So I ended up with another support agent, who I had to explain the problem again from start. I was again told that the tech person was not available. I asked if he could call me back when he was, but again it was confirmed that Samsung support is not allowed to call customers... Like WTF... They can't call back people who bought their most expensive flagship phones?? The support agent then advised me to call the Account department. I asked if she could transfer me, but of course, she could not.
- So I called the Account department. I AGAIN eplained the problem, and the Account guy told me that that made sense, as the Onedrive service is not available in Europe yet. I again explained that Samsung explicitly released a separate additional firmware update with this feature in the release notes. He told me that he would email me some information and when I have received the information, I could call back and I would directly speak to the person who knew all about it.
- At this point I was so pissed by how this went, I disabled the two-step authentication on my Microsoft account, and I could indeed connect to Onedrive!!! The only problem now is that the Settings give an error when backed up.
- But I decided to give them one more call to see how they would respond. And I indeed got the person on the line who her colleague referred to earlier. She told me she had sent me an email telling me what log to send. When I asked her the time and date of that email, she mentioned a time which was half an hour before I even created the request. As I own the email server on which the email should be delivered, I could check the logs there, and no email was received at that moment. She did mention the name of the log file though. However, a log file I have, that mostly resembles what was requested, was in a Gear folder and contains mainly logging about the Gear services. At this moment I told her that the problem was fixed by temporarily disabling the two step verification on the Microsoft account, and I asked her if the service was indeed unavailable in Europe, as her colleague told me. She told me that the service should be available.
Conclusion:
On all ways of contacting Samsung, there is no way in responding on a reply, whether it is in Samsung Members, on the support site, or via email. One answer from Samsung should apparently be enough, and Samsung actually does not want to talk to customers (as one of the agents just transferred me away). The support staff tells me there is no way to get in direct touch with the tech staff. There are no procedures for complaints, they are not allowed to call back customers...
When you look at how Samsung exposes their support (via Samsung Members, Facebook Chat, phone, etc.) it looks as they go the extra mile for their customers, but when you actually talk to them, you end up in a non-flexible inefficient non-motivated support maze....Way to go, for flagship fans....
Ok... I'm a little more calm now...
My apologies for my rant....

please, who migrated samsung cloud to onedrive could confirm if the files appear on windows 10 PC in the default system folders or backups appear in another specific folder? I have Xbox shared with a friend and I don't want him seeing my cellphone stuff on his Xbox ... Can the vault be set up to save things on it?

Big Boss said:
please, who migrated samsung cloud to onedrive could confirm if the files appear on windows 10 PC in the default system folders or backups appear in another specific folder? I have Xbox shared with a friend and I don't want him seeing my cellphone stuff on his Xbox ... Can the vault be set up to save things on it?
Click to expand...
Click to collapse
I got OneDrive connected (I did not want to say 'working'), but I can't find any backup related items in the standard OneDrive folders, except that the Gallery sync can go there (but only from internal memory, not from SD card). The only thing I notice is that when going to the Samsung Cloud settings page, various links go to the OneDrive app instead of Samsung folders.

gschot said:
I got OneDrive connected (I did not want to say 'working'), but I can't find any backup related items in the standard OneDrive folders, except that the Gallery sync can go there (but only from internal memory, not from SD card). The only thing I notice is that when going to the Samsung Cloud settings page, various links go to the OneDrive app instead of Samsung folders.
Click to expand...
Click to collapse
Exactly, my sync was not working, I removed everything and redo the sync and returned to normal, really only appears in windows the gallery photo folder, the other things that backs up (files) does not appear, anyway I stopped sharing My Microsoft account with a friend on Xbox, I didn't want him seeing my photos and videos on his console.

I disabled this option and just went back to old fashioned Onedrive with camera upload.
Since 2011 I have had all my photos automatically backed up to the Camera Roll folder but with Samsung integration it puts photos in Samsung Gallery folder and no option to change that I can see.
I want to continue with my photos in the same Camera Roll folder and not have them go somewhere else and have to manually move them.
Sent from my SM-N975F using Tapatalk

Does it use an app folder or need full access to the entire OneDrive account?

OneDrive for Business
I have an Office 365 account which includes 1 TB of storage in OneDrive. When I try to enble "link Samsung Account with Microsoft account" within the Samsung cloud app, and enter my Microsoft username/email its says no such account exists. I had this problem using the OneDrive app on my Windows 10 desktop computer as well, but I solved that by deleting the OneDrive app that comes pre-installed on Windows 10 and installing the OneDrive for Business app. I could then sign in and backup to OneDrive on my desktop computer. Now on the phone, I have no problem signing into my account with the actual OneDrive app that came pre-installed on the Note 10+. That app lets me enter my Office 365 account username/email and on the OneDrive app, but not on this linking page for Samsung cloud. Any ideas on a workaround would be appreciated.
gschot said:
All,
Today I received the firmware update for my Note10+ that contains the OneDrive integration. As I already have an Office365 subscription with 1Tb storage in OneDrive, I wanted to move there for backup. However, when I go through the Microsoft account linking part (enter Microsoft account, password, security code, password again), the app returns to the initial welcome screen with a message: server fault, please try again later.
Anyone else who has this error, or were you able to link the Samsung Cloud to Onedrive yet?
Click to expand...
Click to collapse

I finally managed to get the connection working. It turned out that you can only connect using Microsoft's own Authenticator app. Using auth codes from third party apps give problems.
However, I ran into another issue. It turns out that the gallery sync to OneDrive does not support files > 1Gb. I had some video's I recorded, and they did not get synced. Samsung's response was: upload them manually to the OneDrive folder and they show up in the Gallery. But come on...

Hi to all. I am trying to connect Samsung cloud with one drive on my Samsung Galaxy S10e. The problem is that I have enabled two factor authentication on my Microsoft account and when I am doing all the steps the app keeps asking me for my password after the verification and it cannot pass that page and i cannot connect . If i disable the two factor authentication on my Microsoft account the app works well, but when I re-enable the two factor authentication after the login the app keeps saying that there is a problem and it cannot sync. Any ideas?

GiannisPrentzas said:
Hi to all. I am trying to connect Samsung cloud with one drive on my Samsung Galaxy S10e. The problem is that I have enabled two factor authentication on my Microsoft account and when I am doing all the steps the app keeps asking me for my password after the verification and it cannot pass that page and i cannot connect . If i disable the two factor authentication on my Microsoft account the app works well, but when I re-enable the two factor authentication after the login the app keeps saying that there is a problem and it cannot sync. Any ideas?
Click to expand...
Click to collapse
I have the exact same issue.
I am using Note 10+
Sent from my SM-N975F using Tapatalk

maskr said:
I have the exact same issue.
I am using Note 10+
Sent from my SM-N975F using Tapatalk
Click to expand...
Click to collapse
Hi I found a solution that works!!!!
Download the Microsoft authentication app. Remove other 2FA app from your Microsoft account and keep only the Microsoft authentication app.
Do a reset on one drive app on your phone (delete data from this app) and the re connect one drive using Microsoft authentication app.
Then connect you phone to your computer and copy all of your photos from your computer to the dcim folder on your phone.
Then move or delete the photos and videos from the Samsung gallery folder on your computer. Don't let any other files inside there. Let the phone make the sync.
There is a problem though. Samsung cloud cannot sync files like *.mov. Then check which files aren't sync. You can convert the files with your phone later by editing them within the gallery app.
Sorry for my bad English.
Hope it helps

Related

Skydrive Warning

Hi Guys,
Heres a little warning for you all, I've just been caught out by this. Hopefully you can all avoid this trouble.
Basically my Skydrive account was suspended, which made my Omnia 7 (running Mango) almost useless.
Emails still worked, but contacts wouldn't update, Twitter wouldn't sync, I couldn't access ANYTHING stored on Skydrive. From the Phone or my PC's.
Even now that I've got my Skydrive account unlocked, something is still wrong, as new Skydrive files sometimes don't show up on the phone and contacts added/changed on the phone will show on the web, but not the other way round.
Why did this happen.....
I was at a party, had a few drinks and used my phone to take some 'stupid' photos of my mates doing some 'silly' things.
These photos were then automatically uploaded to Skydrive.
Where Skydrives automatic management system decided they were in contravention with the T&C's and insantly suspended my Skydrive account.
According the the T&C's link on the 'Blocking Page' you'll get a warning first, but I and a few others on the Live/Hotmail forums didn't.
The 'Blocking Page' also has a link to request assistants, but all you get is an automated response. Telling you you've broken the T&C's.
To make matters worse, the Mod's on the Windows Live Solution Centre do not have enough authority to help, so they send you to the same link thats on the 'Blocking Page'
Which gets you the very same automated response, telling you you've broken the T&C's.
It's taken me almost two weeks to get sorted out, but my account (the Primary account on my phone) still isn't working right. As noted above.
So Its a reset and start again with a new Live ID, which means changing the default ID's on both Zune and Xbox.
Hopefully you guys can learn from my mishap and avoid all this trouble.
was your skydrive settings set to private or me only?
havox22 said:
was your skydrive settings set to private or me only?
Click to expand...
Click to collapse
I don't think it matters what your privacy settings are. You can't upload stuff that is against their terms of service.
I took quite a lot of nude photos of myself but my skydrive auto uploads is set to private. Havent gotten in trouble yet.
Don't sync your camera roll with SkyDrive.
Problem Solved.
Create a New Windows Live ID and factory Reset your phone.
Yea, it sucks, but if you want everything to work seamlessly that's what you're going to have to do.
If you have similar issues and want to get them resolved pretty quickly, try and contact @microsofthelps on twitter. Takes around 2 or 3 days at max until your account is unlocked again.
I guess calling them, would be faster, though.
Localhorst86 said:
I guess calling them, would be faster, though.
Click to expand...
Click to collapse
When I faced the issue that my account was blocked, calling the hotline was no solution as they were not able to help me. At least not the german hotline. The guys on twitter DID resolve the problem though.

Virus or what?

Hello,
I received that my 2 email google and hotmail have unusual activity and will be block. My laptop is clean, scanning with Malwarebytes, Kapsersky and Microsoft Secuirity Essential. Is this possible to send spams from my phone LG optimus7 , because I use this emails on my phone?
gdavidkov said:
Hello,
I received that my 2 email google and hotmail have unusual activity and will be block. My laptop is clean, scanning with Malwarebytes, Kapsersky and Microsoft Secuirity Essential. Is this possible to send spams from my phone LG optimus7 , because I use this emails on my phone?
Click to expand...
Click to collapse
...
...
No.
Your email accounts could have been hacked, or spoofed.
As far as viruses on your phone go, there are none and there is no way it was compromised on that device, so it would be your computer or in the webmail itself.
I would change the passwords to both email accounts, and go look in your sent folders to see if you've been infected with a spam bot. If a bunch of things have been getting sent from your accounts there's your issue.
I had have gotten the same message. I have neve checked my email on a computer since getting the Samsung Focus and now the HTC Titan. I also notice IE gets hijacked when I went to certain websites. The page would load then the phone would start playing a video. Video I've never selected. Now when I go to some sites it starts to download a file. Luckily it says file type isn't support. I have done two factory resets and Ihave gotten the email warning four times.
Sent from my PI39100 using XDA Windows Phone 7 App
One thing too many people don't realize is that you should never use public wifi. Anyone sharing it with you on a laptop or android device can compromise your gmail, facebook, twitter, etc. easily. Regardless of what platform you're using.
Your best bet is to scan your PC thoroughly (again) with an AV and malwarebytes just to make sure there's nothing on there, and then reset all of your passwords. You're already using the AV tools I would recommend though so I doubt it's your PC. A WM virus is possible since there's not a piece of electronics that exists which is 100% secure, but, extremely unlikely.
Firesheep, what it is and how to protect yourself
DroidSheep - What it is and how it works
Will I've never used a public Wifi or Android hotpot.
Sent from my PI39100 using XDA Windows Phone 7 App
gdavidkov said:
Hello,
I received that my 2 email google and hotmail have unusual activity and will be block. My laptop is clean, scanning with Malwarebytes, Kapsersky and Microsoft Secuirity Essential. Is this possible to send spams from my phone LG optimus7 , because I use this emails on my phone?
Click to expand...
Click to collapse
You're being phished. Numbskulls send out similar "warnings" about bank, credit card, and anything you may care about to try and glean all the info they can from you.
Some suggest you reset passwords, and provide a malicious website link to do so.
Or, you have one of the first of many wp7 virus.
false alarm maybe
Mine wasn't phished. I've had to reset my Gmail three times, never had to before I got a WP. If can get a hold of video camera I'll record what happens to my phone
Sent from my PI39100 using XDA Windows Phone 7 App

Fixed! Samsung perks issues

OK,I bought my device in mid November for Xmas gift. Since the beginning of the year, I decided to use one of the perks. Low and behold I am charged. I try to contact the company involved and they say that they only provide a limited trial. But Samsung states the trial period is much longer. I contacted Samsung abouot my issue, and wonder what I was not sent during my registration. I own many Samsung devices and have had my account since late 2008. So I know my account registered the device and should have had some details in regards to perks. The only thing I got was a one time webpage with a Google play code for my credits, everything else was just unlinked information for all new subscribers to the perks.
Has anyone dealt with perks and have any ideas to resolve such issues? I don't want to be charged for something I am trying out.
Possible fix
Well, I finally an answer back from the second point of contact... they stated that they normally don't support tablet but offer support through phone service. Any way now I must call Samsung support to run through the issue one more time, so they can figure out what to do.
Some head way
OK, got done with my call to Samsung.
I learned not to register the device through your Samsung account devices page. I have many Samsung items through the years, as I had learned it is easy to go and register that way.
The proper link is http://www.samsung.com/us/register-for-your-galaxy-perks/#note-8 for the Note 8.0
Also for some odd reason they want a google email account, which I never had until after registering. Take note that if you have an existing Samsung account, the email address needed for registration completion is your gmail email address.
I wish web developers had a brain, this is not the first time I have seen such a broken way cross linking account information, just annoys the krappa out of me.
Now to fix the issue with Samung Link unable to fetch account authentication information with my Samsung account. Yes, I deleted and recreated the Samsung account many many times. Just another annoying issue. (
While waiting...
OK, while I had some time, I fixed my Samsung link issue... had to make it a system app. Samsung loaded PS Touch, and Samsung Link need to be kept as system apps. Though most of all the system apps can be removed and side loaded for Google Play to manage install/removal processes. I prefer it that way for reloads and memory management outside of using Titanium Backup. The less utilities to perform tasks the better. Somebody should do a right up on using built in function to perform most all needs, instead of finding more apps to do what you can do on your own and without rooting.
I doubt I'll ever fix the Video Hub issue... seems that it is getting info from Samsung servers about the device. If the device does not match the white list at the authentication server, your a no go at getting content. At one time the Note 8.0 was in the white list, now it looks like it is region select and will check firmware along with device.
I have an app to fake the ID and location, but Video Hub is not a concern just an odd app that has some interesting features that go beyond google play hardware requirements.
Woopie! )
Samsung got me my perks rewards resent to my email address. The Google account that I had to make since I did not use goodle before owning the Note 8.0.
Now I am going to redo my account on which I paid a months subscription, so I can apply my perks.

[Q] Redeeming free apps

Hi I'm new to these forums and I must say I love them! There's so much useful information!
So I thought that when buying this tablet I would get a bunch of free stuff. (50 gigs of dropbox, free linkedin pro for 3 months, etc...) I can't find any information about this anymore, I'm I missing something? Does anyone have any clue how to do this? I have already registered my device with Samsung btw.
Thanks in advance,
- Olivier
You should receive an email detailing the offers, sent to the address from which you registered your Samsung account. BTW, some of the offers, like the NYT access, begin from the time you register the account, NOT from the time you first access the offer. So, the first time I tried to access the Times premium content, it told me something like my premium access trial had expired, and asked whether I'd like to continue with a full-price subscription?
HA! Not likely...
Underwater Mike said:
You should receive an email detailing the offers, sent to the address from which you registered your Samsung account. BTW, some of the offers, like the NYT access, begin from the time you register the account, NOT from the time you first access the offer. So, the first time I tried to access the Times premium content, it told me something like my premium access trial had expired, and asked whether I'd like to continue with a full-price subscription?
HA! Not likely...
Click to expand...
Click to collapse
Yes that's what I thought. I just double checked and I did receive an email after registering, but didn't see any links to get free stuff. In comparison I still had an email from when I registered my S3 with a link to get free stuff. I'm confused about what I else I can/should try... :s
- Olivier
cascius said:
Yes that's what I thought. I just double checked and I did receive an email after registering, but didn't see any links to get free stuff. In comparison I still had an email from when I registered my S3 with a link to get free stuff. I'm confused about what I else I can/should try... :s
- Olivier
Click to expand...
Click to collapse
Have you registered your device via the Galaxy Perks page?
Log in to your Samsung Account via a web browser (you can use the above link). Click on your name in the upper right, and select "My Profile". Verify that your device shows up. Sometimes just logging in to your Samsung Account via a web browser seems to trigger it, so it doesn't hurt to try even if you know you already registered your device.
Have you added the Samsung Account to the Note 2014 yet? If not, launch Samsung Apps and sign in with your Samsung Account when prompted. You might need to press the menu button and then select "Sign In" if it doesn't automatically ask you.
If you have, remove the Samsung Account, launch Samsung Apps and sign in again.
If you've done all that, you SHOULD get the "<NAME>, your gift for registering..." email at the Gmail account you specified when you registered.

[Bounty $500] My note 10+ was hacked with stalkerware

My phone was infected with stalkerware, they had access to my files, could view what was on my screen, listen into my mic, view my cameras remotely, everything! It's incredibly creepy! From what I can tell they somehow loaded q hacked version of Google Chrome and or android web viewer. After getting suspicious I downloaded Kaspersky and ran a scan, I found 2 versions of Google Chrome on my phone one of them had the dual messenger app icon on it. The other one said it wasn't a current version from the apps store. I Uninstallerd and downloaded the current version through the app store. I tried to see if a packet sniffer would lead me to them but I think I was too late by that point. I also pulled the Chrome app qnd decompiler it. There was some weird things in there like ignore playstore version but nothing that I could find that would lead me to who was watching me. Is there anything I can still do that will lead me to who did this? I have a strong idea of who it was but need evidence so I can prosecute them. Any help would be appreciated. Im putting up a 500 dollar bounty if anyone can help me get some solid evidence.
dangerruss said:
My phone was infected with stalkerware, they had access to my files, could view what was on my screen, listen into my mic, view my cameras remotely, everything! It's incredibly creepy! From what I can tell they somehow loaded q hacked version of Google Chrome and or android web viewer. After getting suspicious I downloaded Kaspersky and ran a scan, I found 2 versions of Google Chrome on my phone one of them had the dual messenger app icon on it. The other one said it wasn't a current version from the apps store. I Uninstallerd and downloaded the current version through the app store. I tried to see if a packet sniffer would lead me to them but I think I was too late by that point. I also pulled the Chrome app qnd decompiler it. There was some weird things in there like ignore playstore version but nothing that I could find that would lead me to who was watching me. Is there anything I can still do that will lead me to who did this? I have a strong idea of who it was but need evidence so I can prosecute them. Any help would be appreciated. Im putting up a 500 dollar bounty if anyone can help me get some solid evidence.
Click to expand...
Click to collapse
Try logging into your Google account from a computer. Look at what devices have access to your account. I looked at mine a couple of months ago and saw a phone I never owned on AT&T. Funny thing is I have NEVER had AT&T. I've always and still have Verizon. I immediately removed, blocked and reported the device.
HyperChick said:
Try logging into your Google account from a computer. Look at what devices have access to your account. I looked at mine a couple of months ago and saw a phone I never owned on AT&T. Funny thing is I have NEVER had AT&T. I've always and still have Verizon. I immediately removed, blocked and reported the device.
Click to expand...
Click to collapse
That was the first thing I tried. Didn't find anything unfortunately. These a holes are good.
dangerruss said:
That was the first thing I tried. Didn't find anything unfortunately. These a holes are good.
Click to expand...
Click to collapse
Did you run a log of your IP addresses?
HyperChick said:
Did you run a log of your IP addresses?
Click to expand...
Click to collapse
Not until after the connection was severed. My first thought was to run a virus scan. The only thing I found was an application was installed feb 1st and the clean version of chrome stopped uploading on Feb 1st.
Why are there two of these? And how did they use dual messenger to install doubles? I've disabled all of them.
dangerruss said:
Not until after the connection was severed. My first thought was to run a virus scan. The only thing I found was an application was installed feb 1st and the clean version of chrome stopped uploading on Feb 1st.
Click to expand...
Click to collapse
Did you delete the corrupt Chrome already? The IP history may be in there...
you wish to find your IP address Internet history, you can easily do so directly from your Internet browser.
Step 1
Open your Internet browser, and click on "Tools" located in the horizontal menu bar at the top of the window.
Step 2
Click on "Internet Options"
Step 3
Click on "Settings" located beneath the "Browsing History" subheading.
Step 4
Click on the "View Files" button to find your IP address Internet history.
If you post the chrome apk that you dumped or anything else that you have that was related to the "infected" files, they might be helpful in looking for clues.
These are the apk files that I suspect could have been infected. Unfortunately I didn't pull them until after they were updated. But I believe there is still a change log kind of manifest if you decompile them.
On mobile? Im not seeing those options
HyperChick said:
Did you delete the corrupt Chrome already? The IP history may be in there...
you wish to find your IP address Internet history, you can easily do so directly from your Internet browser.
Step 1
Open your Internet browser, and click on "Tools" located in the horizontal menu bar at the top of the window.
Step 2
Click on "Internet Options"
Step 3
Click on "Settings" located beneath the "Browsing History" subheading.
Step 4
Click on the "View Files" button to find your IP address Internet history.
Click to expand...
Click to collapse
From what I can see, those apks unfortunately appear to be normal un-tampered files. The manifest I believe you are referring to is a component of the apk that dictates things like permissions and interfaces, but it does not perform any sort of logging or historical record sadly, as the entire apk is replaced when an app is updated or installed over an existing installation.
I am not sure how much cleaning you have done of your device since it happened, but aside from clues or records which might be available from various services you use (finding connected accounts that aren't yours, history of any account activities that weren't initiated by you, etc), your next best bet would probably be to dig through the files on the device in search of anything that shouldn't be there. Hopefully there is still some artifact of the infection which could potentially point towards its origin. I will follow this thread, happy to dig through files in my spare time.
Does anyone know if android keeps a log of installs or qnything in the root folder perhaps?
Isn't there a relation between duplicate app instances and secure folder?
OnnoJ said:
Isn't there a relation between duplicate app instances and secure folder?
Click to expand...
Click to collapse
Yes but I've never set up secure folder. Never felt a need to.
First thing I do is a factory reset (and hope that gets it) and reset the Google password.
Keep that bloody device 100% isolated from your PC and data backup copies including the SD card*. Wipe the SD card in the device before the reload and again after the reload. Do NOT connect the card or phone to your PC before the new load is proven clean. Load data directly to SD card from the PC then to the 10+ just in case.
Try to piece together when and what did it but that is a secondary concern. Consider it a drill.
Better get while the gettings good... that level of being compromised means no time to lose ditching the OS. I most likely wipe the SD card too and use one of the clean data backups I keep for just such an event. Torch all data on the device.
If it gets into your backup data copies you're boned.
OSs are 100% expendable, critical data is not.
*you can scan it with everything on the planet and still miss trojans, tainted jpegs/pngs, etc if no definitions exist yet. Expect multiple hidden infections now and go full nuke.
Isolating the infection to that device is only priority. It's possible the infection(s) are already on one or more backups and/or your PC. That's why it's important to keep multiple time staggered backups on multiple electronically isolated hdds.
I keep a 3 tier backup and my PC is never internet connected.
Keep your head and limit the spread...
dangerruss said:
Why are there two of these? And how did they use dual messenger to install doubles? I've disabled all of them.
Click to expand...
Click to collapse
looks normal to me. Those are typical apps that run when dual account messenger service is used .

Categories

Resources