Lollipop Rooted knox OxO but the root is kinda useless topic

Hi guys so I have recently taken the ota for lollipop after being unable to use mobile odin pro to update to lollipop and keep root. since mobile odin does not flash bootloaders and hidden files the phone simply would not boot and was not going into recovery mode either.

Today I was able to solve this by

first step I odin flashed the ne6 firmware I had to factory reset the phone to get It to boot after downgrading from
then I towelrooted and installed mobile odin pro
next I used mobile odin pro to flash the lollipop firmware but instead of letting the phone reboot after the flash, I set mobile odin pro to reboot into download mode instead.
from there I pc odin flashed the modem/bootloader file or "firmware only file that Artizan made here http://forum.xda-developers.com/tmob...-file-t3036102
the t mobile screen was taking a long time so I factory reset and then it booted fine
now the strange thing is supersu was able to update the binary and grant permission to both root checker and busybox but neither app is acting properly . they both say that they were granted permission but busybox is not installing and root checker just hangs. oh well at least phone info and cpuz recognize that the phone is rooted but so far root apps are not working properly

Help! Have I been hacked? Kinda urgent :( topic

Ok guys, could really do with your help here.

I have an unrooted n9005, which recently had an earpiece fault.

I took it to my local repair store, who took it and said come back in an hour.

After I went back, I found that someone had installed mobomarket on it.

The owner of the shop said it wasn't him, but I can see from the unlock log that it happened for sure whilst with him.

Ok, so I figured what harm could that really do, but then thought to check further.

On rebooting to the odin download screen (vol home and power), the Knox status is now 0x1.

This means they rooted it right? Or is it possible to trip another way?

However, it now isn't rooted (testing using su in terminal) and the firmware status on the odin download screen shows as "official".

My question therefore is, is it possible to root the phone, install malware then unroot it, leaving the malware still active?

Or does the fact the download status show "official" instead of "custom" mean this isn't possible?

This is kinda important as if there is a possibility the phone is compromised, I need to call the police but obviously don't want to do this if the guy is innocent.

(I could for example accept that he used the phone without permission to play something or whatever, and whilst not ethical, I don't need to worry about having to wipe this phone)

Thanks guys, your input would be much appreciated as I intend to go back to him tomorrow.

Sent from my SM-N9005 using Tapatalk

Help, have I been hacked? Kinda urgent :( topic

Ok guys, could really do with your help here.

I have an unrooted n9005, which recently had an earpiece fault.

I took it to my local repair store, who took it and said come back in an hour.

After I went back, I found that someone had installed mobomarket on it.

The owner of the shop said it wasn't him, but I can see from the unlock log that it happened for sure whilst with him.

Ok, so I figured what harm could that really do, but then thought to check further.

On rebooting to the odin download screen (vol home and power), the Knox status is now 0x1.

This means they rooted it right? Or is it possible to trip another way?

However, it now isn't rooted (testing using su in terminal) and the firmware status on the odin download screen shows as "official".

My question therefore is, is it possible to root the phone, install malware then unroot it, leaving the malware still active?

Or does the fact the download status show "official" instead of "custom" mean this isn't possible?

This is kinda important as if there is a possibility the phone is compromised, I need to call the police but obviously don't want to do this if the guy is innocent.

(I could for example accept that he used the phone without permission to play something or whatever, and whilst not ethical, I don't need to worry about having to wipe this phone)

Thanks guys, your input would be much appreciated as I intend to go back to him tomorrow.

Sent from my SM-N9005 using Tapatalk