Database Develop

root existence yes/no

Hi guys
I have both F-duos and F single sim models, I just downloaded an app called phone info *Samsung* on both, under the Android tab the duos say NO under root existence and the other say YES, however, that is the one I purchased through my mobile provider and I have for sure not rooted it, knox do show 0x0 and I'm getting OTA updates on it.
any idea why it would show root as YES

j_hansen said:
Hi guys
I have both F-duos and F single sim models, I just downloaded an app called phone info *Samsung* on both, under the Android tab the duos say NO under root existence and the other say YES, however, that is the one I purchased through my mobile provider and I have for sure not rooted it, knox do show 0x0 and I'm getting OTA updates on it.
any idea why it would show root as YES
Click to expand...
Click to collapse
untrusted application that displays the deception. as a guide, and it is essential that as a show download mod. peace friend

bassgenerator said:
untrusted application that displays the deception. as a guide, and it is essential that as a show download mod. peace friend
Click to expand...
Click to collapse
Cheers man, I'll just uninstall it again and forget about it

!HELP! cannot unroot Note 8 via flash with odin and reinstall stock android firmware

Greetings from germany,
a buddy of mine got a Note 8 from a shady seller and it turned out that it had a custom rom:
Basisbandversion: N950FXXU1AQHB
Kernel-Version: 4.4.13-theGreatDream-v1.0.0
[email protected] #1
But he couldn't do any updates with it and quite a few apps didn't work because they said: "device is rooted and because of security policy etc..." (crudely translated from german)
such as the samsung and banking apps.
So we tried to go with the guide on how to flash and restore the device to stock firmware with odin.
For that i downloaded the N950FXXU1AQH9 version which is for the region germany and that seemed to be the most reasonable choice in the vast variety of approx. 200 available versions.
We did everything exactly as described in the guide and everything seemed to work perfectly. Updates were working again and also the banking app worked.
But the day after he wanted to try the Samsung Health app and it reported to not work because "security policy, can't open on a rooted device" (crudely translated from german again)
and others like the banking app also stopped working and reported the same.
Although we installed the N950FXXU1AQH9 version it now says in the softwareinformation that N950FXXU2BQKG is installed Oo
Strangely he also tried some apps to root/unroot like superSU etc. and they all told him "your device isn't rooted"
So regular apps tell "can't work because device is rooted" and root apps tell "can't unroot because device isn't rooted"
So i ask humbly: where is the error in this mess? What shall we do to make this device into a perfectly funtioning unrooted freshly fabricated note 8 again?
Thanks in advance

puzzlednerd said:
Greetings from germany,
a buddy of mine got a Note 8 from a shady seller and it turned out that it had a custom rom:
Basisbandversion: N950FXXU1AQHB
Kernel-Version: 4.4.13-theGreatDream-v1.0.0
[email protected] #1
But he couldn't do any updates with it and quite a few apps didn't work because they said: "device is rooted and because of security policy etc..." (crudely translated from german)
such as the samsung and banking apps.
So we tried to go with the guide on how to flash and restore the device to stock firmware with odin.
For that i downloaded the N950FXXU1AQH9 version which is for the region germany and that seemed to be the most reasonable choice in the vast variety of approx. 200 available versions.
We did everything exactly as described in the guide and everything seemed to work perfectly. Updates were working again and also the banking app worked.
But the day after he wanted to try the Samsung Health app and it reported to not work because "security policy, can't open on a rooted device" (crudely translated from german again)
and others like the banking app also stopped working and reported the same.
Although we installed the N950FXXU1AQH9 version it now says in the softwareinformation that N950FXXU2BQKG is installed Oo
Strangely he also tried some apps to root/unroot like superSU etc. and they all told him "your device isn't rooted"
So regular apps tell "can't work because device is rooted" and root apps tell "can't unroot because device isn't rooted"
So i ask humbly: where is the error in this mess? What shall we do to make this device into a perfectly funtioning unrooted freshly fabricated note 8 again?
Thanks in advance
Click to expand...
Click to collapse
I think that once rooted and Knox has been triggered the banking apps and certainly Samsung Pay will never work! I'm not thinking of rooting my SM-N9500 (I don't think I can anyway as it's Snapdragon), I used to root to get rid of adverts but Samsung have an app for that!
Sent from my SM-N9500 using Tapatalk

Once KNOX hasa been tripped its a can't be restored... You might b able to trick some of the apps into working by using a custom kernel but secure folder and KNOX are gone like the dinosaurs...
You should be able to find out about the custom kernels & how to flash by doing some reading.

robmeik said:
I think that once rooted and Knox has been triggered the banking apps and certainly Samsung Pay will never work! I'm not thinking of rooting my SM-N9500 (I don't think I can anyway as it's Snapdragon), I used to root to get rid of adverts but Samsung have an app for that!
Sent from my SM-N9500 using Tapatalk
Click to expand...
Click to collapse
I agree with this, I know that once rooted, some apps will not work anymore on that particular device, regardless of what you will plan on doing with that device.

knox is tripped.
the phone has most likely been successfully unrooted, but rooting it permanently makes alterations to a chip on the motherboard.
some apps will never trust this phone again, unless you can hide the knox fuse status.
so to get full use of the phone again you'll have to root it again and look into some root hiding apps/mods.
unfortunately I can't help you any further with that, I haven't rooted a knox-enabled device since the note 2.

Firstly thanks for all the enlightening answers. Now we are getting a bit closer.
I have just started with those topics on modding (rooting) of smartphones a few days ago and none of the guides i read mentioned anything about knox.
But yeah everything is gonna be more complex than anticipated. I will have to start digging deeper into this matter and try out a lot more of modded kernels and root hiding tools etc. to restore funtionality.
I will keep you updated on my progress... or lack of it :]

puzzlednerd said:
On another matter: The guy that "sold" my buddy this Note 8 seemed to be very eager to give it to him. At first he made an offer on local ebay and said that he didn't want his note 8 because it is rooted and modded etc.
My buddy made an agreement with him to exchange his older less worth samsung, which was all original and unrooted, for the sellers note 8. The seller complied although the difference in worth was approx. 250 Euro.
My buddy was happy that he made great deal... at first...
Later we found out that the same seller is selling my buddies old phone on local ebay again and surprise surprise it's rooted and modded again and offered for a much smaller price than what it's worth.
Now... is it possible to root and hack those phones with lets say... keyloggers and give them to unsuspected customers that enter all their account data and banking information?
Otherwise i have no idea why this seller is practically almost giving them away for nothing and is rooting formerly unrooted devices and sells them with the point that he doesn't want rooted devices and losing money with every trade.
Scam detected? What do you think?
Click to expand...
Click to collapse
we think it does not belong here. create your own thread on another forum and the topic of speculation-conspiracy

Then please pardon me dear sir. above part moved to offtopic:
https://forum.xda-developers.com/general/off-topic/scam-detected-topic-speculation-t3740922

oreo n950n kt branded ims settings locked with otp key code

Upgraded to oreo on note 8 n950n
Volte and video phone deleted from dialer as they have on any past update. No biggie. Get into ims settings. Either through hidden kt menu or shortcut lite
But now ims settings requires a one time passcode
And supplies a key code that correlates to a password
No idea where to get key from.. please help!
T Mobile sucks without volte

In my country, the carrier requires you to take the device to activate VOLTE, maybe you need to go in person with your device to your carrier service center

When I was on Oreo I couldn't even access IMS settings on my F. Phone INFO/Shortcut Master wouldn't find the IMS settings menu for me. But I'm rooted & T-Mobile CSC still activated VoLTE & Wifi calling fine for me. But whatever, I'm back to Nougat & won't be running Oreo until things get worked out.

shouren04 said:
When I was on Oreo I couldn't even access IMS settings on my F. Phone INFO/Shortcut Master wouldn't find the IMS settings menu for me. But I'm rooted & T-Mobile CSC still activated VoLTE & Wifi calling fine for me. But whatever, I'm back to Nougat & won't be running Oreo until things get worked out.
Click to expand...
Click to collapse
How did you go back to Nougat from Oreo? Wouldn't that trip the Knox flag?
I know you are rooted, however just asking if I downgrade will I hit the Knog flag. I am extremely concerned as I am registered to my Org email and other apps which requires no trip of Knox flag along with no root.
Please suggest.
Thanks.

deepakrsarangi said:
How did you go back to Nougat from Oreo? Wouldn't that trip the Knox flag?
I know you are rooted, however just asking if I downgrade will I hit the Knog flag. I am extremely concerned as I am registered to my Org email and other apps which requires no trip of Knox flag along with no root.
Please suggest.
Thanks.
Click to expand...
Click to collapse
You can flash back to Nougat & flashing official FW in Odin should not trip Knox but I'm not taking any responsibility if somethig happens.
I have Exynos with TWRP installed so my Knox is already tripped. I switch back & forth from Oreo & Nougat with nandroids in TWRP.

shouren04 said:
You can flash back to Nougat & flashing official FW in Odin should not trip Knox but I'm not taking any responsibility if somethig happens.
I have Exynos with TWRP installed so my Knox is already tripped. I switch back & forth from Oreo & Nougat with nandroids in TWRP.
Click to expand...
Click to collapse
Thanks. Unfortunately I read from somewhere that even downgrading ROM trips knox. Not sure though. In case someone who has already tried please confirm.
Additionally if I flash G950U1 official ROM on a G950U phone would that still trip knox?

deepakrsarangi said:
Thanks. Unfortunately I read from somewhere that even downgrading ROM trips knox. Not sure though. In case someone who has already tried please confirm.
Additionally if I flash G950U1 official ROM on a G950U phone would that still trip knox?
Click to expand...
Click to collapse
I've never heard that either. Generally if you are are flashing official FWs in Odin Knox will not be tripped. And as you probably know you can't flash anything in Odin that is not for your specific device so Knox shouldn't be tripped.
I didn't realize you have a S8 since you are posting in the Note 8 forum but it should be the same. You can flash the unlocked FW on a carrier device but you have to use the PrinceComsy modified Odin to do so. Still it should not trip Knox. What's mainly important is you have to flash FWs with the same version bootloader you are on now. You can not downgrade BL, even if you tried Odin will not let you.

shouren04 said:
I've never heard that either. Generally if you are are flashing official FWs in Odin Knox will not be tripped. And as you probably know you can't flash anything in Odin that is not for your specific device so Knox shouldn't be tripped.
I didn't realize you have a S8 since you are posting in the Note 8 forum but it should be the same. You can flash the unlocked FW on a carrier device but you have to use the PrinceComsy modified Odin to do so. Still it should not trip Knox. What's mainly important is you have to flash FWs with the same version bootloader you are on now. You can not downgrade BL, even if you tried Odin will not let you.
Click to expand...
Click to collapse
Thanks a lot. Since Note 8 and S8 has almost similar in everything apart from few hardware enhancements in Note 8, from firmware prospect both should be considered as same..
But I read in one of the thread in XDA forum that after Oreo upgrade the bootloader has been changed and you can't downgrade.
As you confirmed if the Odin doesn't even allow FWs which would not be officially compatible then that is an awesome idea. My fear is and always be with KNOX trip since a lot is dependent on that including my work profile email and stuff.
If you/someone knows a way to turn on IMS service switch in Oreo then I won't require downgrade. Essentially I need the VoLTE to turn ON.
Tuff luck it is.

deepakrsarangi said:
Thanks a lot. Since Note 8 and S8 has almost similar in everything apart from few hardware enhancements in Note 8, from firmware prospect both should be considered as same..
But I read in one of the thread in XDA forum that after Oreo upgrade the bootloader has been changed and you can't downgrade.
As you confirmed if the Odin doesn't even allow FWs which would not be officially compatible then that is an awesome idea. My fear is and always be with KNOX trip since a lot is dependent on that including my work profile email and stuff.
If you/someone knows a way to turn on IMS service switch in Oreo then I won't require downgrade. Essentially I need the VoLTE to turn ON.
Tuff luck it is.
Click to expand...
Click to collapse
Yes Oreo has a new bootloader but you can still go back to Nougat, but latest Nougat. When they say you can't downgrade BL, you can't downgrade versions.
I don't know what variant you have but for example, I have F. Latest Nougat is 3BRB5 or 3BRA8. Oreo is 3CRC1. The 5 digit from the end is the BL version. If the number is the same, you can flash. If the number you have now is higher than a FW you wish to flash tbat has a lower number, you can't, that's what is meant by can't downgrade BL.
Oreo, IMS setting, yes I do know how to launch it. I'm assuming you are Using Phone INFO or Shortcut Master & can't launch. But with Shortcut Master you still can. Instead of launching 467 as you normally would, click on Explore instead to open App Explorer. From there click the second option, IMS Settings will launch.
If you have a N & have the passcode issue as mentioned in this thread, that I don't know anything about. Although I believe I remember a post somewhere that someone posted the codes.

shouren04 said:
Yes Oreo has a new bootloader but you can still go back to Nougat, but latest Nougat. When they say you can't downgrade BL, you can't downgrade versions.
I don't know what variant you have but for example, I have F. Latest Nougat is 3BRB5 or 3BRA8. Oreo is 3CRC1. The 5 digit from the end is the BL version. If the number is the same, you can flash. If the number you have now is higher than a FW you wish to flash tbat has a lower number, you can't, that's what is meant by can't downgrade BL.
Oreo, IMS setting, yes I do know how to launch it. I'm assuming you are Using Phone INFO or Shortcut Master & can't launch. But with Shortcut Master you still can. Instead of launching 467 as you normally would, click on Explore instead to open App Explorer. From there click the second option, IMS Settings will launch.
If you have a N & have the passcode issue as mentioned in this thread, that I don't know anything about. Although I believe I remember a post somewhere that someone posted the codes.
Click to expand...
Click to collapse
Thanks for this detailed info.
Apologies for being so naive. Mine is 2CRC5 Oreo. Unfortunately I don't know which variant you referred when you say F or N.
But going by your instructions I tried and got an error while invoking the 2nd option i. e. imsserviceswitchactivity. I assume this is related to rooting as it says " su not found. "
If yes, then please suggest me something without rooting to enable the ims switch.
Attached here the screenshot of the error message. Please help.

deepakrsarangi said:
Thanks for this detailed info.
Apologies for being so naive. Mine is 2CRC5 Oreo. Unfortunately I don't know which variant you referred when you say F or N.
But going by your instructions I tried and got an error while invoking the 2nd option i. e. imsserviceswitchactivity. I assume this is related to rooting as it says " su not found. "
If yes, then please suggest me something without rooting to enable the ims switch.
Attached here the screenshot of the error message. Please help.
Click to expand...
Click to collapse
Ah I forgot you have S8, that's why I'm not familiar with 2CRC5. F & N are international models. You have a U which is US.
Says su not found which means you need root access to open it. I don't know of any other way. Be sure to verify with the S8 guys before trying to go back to Nougat. Guys on Note 8 have done it but I wouldn't want you to brick your phone in case something is different with the S8.
Since you have a U, that's got me thinking. Are you using your carrier's firmware? If yes VoLTE should already be enabled if they support VoLTE.
---------- Post added 04-07-2018 at 12:00 AM ---------- Previous post was 04-06-2018 at 11:51 PM ----------
In Settings/About Phone under Service Provider SW Ver, what is you CSC (XXX/XXX/XXX)?

shouren04 said:
Ah I forgot you have S8, that's why I'm not familiar with 2CRC5. F & N are international models. You have a U which is US.
Says su not found which means you need root access to open it. I don't know of any other way. Be sure to verify with the S8 guys before trying to go back to Nougat. Guys on Note 8 have done it but I wouldn't want you to brick your phone in case something is different with the S8.
Since you have a U, that's got me thinking. Are you using your carrier's firmware? If yes VoLTE should already be enabled if they support VoLTE.
---------- Post added 04-07-2018 at 12:00 AM ---------- Previous post was 04-06-2018 at 11:51 PM ----------
In Settings/About Phone under Service Provider SW Ver, what is you CSC (XXX/XXX/XXX)?
Click to expand...
Click to collapse
Yeah mine is US model G950U S8 Sprint branded, officially network unlocked by Sprint.
The CSC in my case is SPR/XAA/SPR. I haven't changed the carrier firmware yet in fear of Knox trip. SPRINT does have VoLTE but through their CallingPlus app in beta, not native VoLTE calls.
Moreover after network unlock I moved to India and through IMS settings I did enable VoLTE and enjoyed native calls with Indian operators. After upgrade to Oreo on March 16th, the IMS switch was auto disabled and the ims application didn't get invoked. So now stuck in a no man's land.
Is there any other method (adb or something else) to enable VoLTE?

deepakrsarangi said:
Yeah mine is US model G950U S8 Sprint branded, officially network unlocked by Sprint.
The CSC in my case is SPR/XAA/SPR. I haven't changed the carrier firmware yet in fear of Knox trip. SPRINT does have VoLTE but through their CallingPlus app in beta, not native VoLTE calls.
Moreover after network unlock I moved to India and through IMS settings I did enable VoLTE and enjoyed native calls with Indian operators. After upgrade to Oreo on March 16th, the IMS switch was auto disabled and the ims application didn't get invoked. So now stuck in a no man's land.
Is there any other method (adb or something else) to enable VoLTE?
Click to expand...
Click to collapse
Oh man, totally didn't expect that one. Unfortuantely in your case the only way I know is to root which is out of the question. I could be wrong but I don't think there is anything that can be done through adb, generally it's enabled by CSC. Hopefully the dev for Phone INFO/Shortcut Master will figure out how to get the secret codes working with Oreo.

shouren04 said:
Oh man, totally didn't expect that one. Unfortuantely in your case the only way I know is to root which is out of the question. I could be wrong but I don't think there is anything that can be done through adb, generally it's enabled by CSC. Hopefully the dev for Phone INFO/Shortcut Master will figure out how to get the secret codes working with Oreo.
Click to expand...
Click to collapse
The other way could be downgrading to 7.0, where the IMS setting was accessible. My fear is knox trip, if not I can downgrade. What would you suggest?

deepakrsarangi said:
The other way could be downgrading to 7.0, where the IMS setting was accessible. My fear is knox trip, if not I can downgrade. What would you suggest?
Click to expand...
Click to collapse
Yeah, the knox part is the questionable part as obviously it can't be reversed if tripped. I don't want to say something & mistakenly have it trip. But as we talked about flashing in Odin back to Nougat should not trip knox however you stated you read otherwise?

shouren04 said:
Yeah, the knox part is the questionable part as obviously it can't be reversed if tripped. I don't want to say something & mistakenly have it trip. But as we talked about flashing in Odin back to Nougat should not trip knox however you stated you read otherwise?
Click to expand...
Click to collapse
Thanks. I tried the app earlier too. The VoLTE option is not there. I don't want to downgrade unless I find a way to enable it.
I have searched over internet a lot and found mixed responses about KNOX tripping during downgrade or any unofficial try related to firmware.
I will wait for next few days for any help regarding the VoLTE enabler app or procedure. If not, I have the Nougat latest firmware ready with me(as you suggested earlier - same bootloader version). Eventually I have to go back. VoLTE is a must for me use this device in India with 4G connections.
Hope you may show some new light towards this fix.

shouren04 said:
Yeah, the knox part is the questionable part as obviously it can't be reversed if tripped. I don't want to say something & mistakenly have it trip. But as we talked about flashing in Odin back to Nougat should not trip knox however you stated you read otherwise?
Click to expand...
Click to collapse
Finally I downgraded to the latest Nougat ROM available for this device. Everything was smooth. I was able to enable VoLTE as we discussed. Thanks to you for providing me confidence.
I'll still wait for anyone confirming IMS app invoke on Oreo (without Root) before upgrade. Till then Happy with Nougat ROM.
Thanks again.

deepakrsarangi said:
Finally I downgraded to the latest Nougat ROM available for this device. Everything was smooth. I was able to enable VoLTE as we discussed. Thanks to you for providing me confidence.
I'll still wait for anyone confirming IMS app invoke on Oreo (without Root) before upgrade. Till then Happy with Nougat ROM.
Thanks again.
Click to expand...
Click to collapse
Nice, good to hear! :good:
I did ask the dev for Phone INFO/Shorcut Master about Oreo support for the secret codes. He's aware of the issue & said he'll try to find a way to fix it. Hopefully he figures it out.

shouren04 said:
Nice, good to hear! :good:
I did ask the dev for Phone INFO/Shorcut Master about Oreo support for the secret codes. He's aware of the issue & said he'll try to find a way to fix it. Hopefully he figures it out.
Click to expand...
Click to collapse
Thanks. Many of us are waiting for this fix btw. There are several threads on this on XDA.
I too hope for an efficient fix soon.

Hi, I have cracked the password for the otp key, you can get the java program from below
https://1drv.ms/u/s!AnEZ2ptLoUQKgfV6fNSZIyQlf-cC5Q
Your pc must have Java installed.
1. run the java program by:
java OTP_Cracker yyit4(replace this key with your otp key)
the program output should be：
key:yyit4 pwd:1406604358
key:yyit4 pwd:1405418437
key:yyit4 pwd:1404232516
key:yyit4 pwd:1403046595
key:yyit4 pwd:1401860674
key:yyit4 pwd:1400674753
One of the pwd should be ok for the key. Entering the pwd in your phone then you can get in the volte settings.

help me

hi guy plz help
yesterday my note 8 sm-n950f root after note working samsung pay and health secure folder after unroot my phone
odin flash original firmware agen coming this err plz help

Once you root your phone 1 time, you never get that features back because Knox is triggert to 0x1 now. You can't revert that
Gesendet von meinem SM-N950F mit Tapatalk

Samsung Pay will never work again after root since Knox is tripped but you can probably get AndroidþGoogle Pay to work. You can get Samsung Health to work though. With root, edit build.prop, change ro.config.tima from 1 to 0 then reboot.

shouren04 said:
Samsung Pay will never work again after root since Knox is tripped but you can probably get AndroidþGoogle Pay to work. You can get Samsung Health to work though. With root, edit build.prop, change ro.config.tima from 1 to 0 then reboot.
Click to expand...
Click to collapse
samsung care go this err fix thay tell me

ashiljmp said:
samsung care go this err fix thay tell me
Click to expand...
Click to collapse
Uh ok, I highly doubt that though. To get Samsung Pay working again they'll have to replace the MB or some other hardware. Regardless your phone will need to be serviced if they even agree to do that for free which I doubt as well.

shouren04 said:
Uh ok, I highly doubt that though. To get Samsung Pay working again they'll have to replace the MB or some other hardware. Regardless your phone will need to be serviced if they even agree to do that for free which I doubt as well.
Click to expand...
Click to collapse
thanx bro i try ....

Reflash your stock firmware in normal Odin and you'll have everything working correctly once again.
Edit- sorry just saw you are on the F variant.. I know on SD models you just need to refresh stock firmware and Knox will be 0x0. I think the same applies for the F variant ONLY if you haven't flashed TWRP (also likely Magisk since it modifies the stock boot image)

yes_have_some said:
Reflash your stock firmware in normal Odin and you'll have everything working correctly once again.
Edit- sorry just saw you are on the F variant.. I know on SD models you just need to refresh stock firmware and Knox will be 0x0. I think the same applies for the F variant ONLY if you haven't flashed TWRP (also likely Magisk since it modifies the stock boot image)
Click to expand...
Click to collapse
For F models/Exynos, the only way to root is to install TWRP. Installing TWRP is what trips Knox.

Yeah I thought there was another root method, but it was the sampwnd method for the s8 lol. Well, looks like he may just be SOL.

Can I flash another region ROM using Odin without break the Knox?

I got a N960F/DS (CSC: OXM_MYM). It is Thailand version without Samsung Pay enabled.
Can I flash another country's ROM, certainly under same hardware architecture (N960FXXS2ARK2), without breaking the Knox?
I want to use Samsung Pay at US ...... ......

You can but still you will not get Samsung pay
Sent from my SM-N960F using Tapatalk

Hi
I flashed my old S6 with German firmware as I couldn’t wait any longer for O2 U.K. and that was ok but I never used payments on my phone back then... I wonder if it’s the same!?
Sent from my iPhone using Tapatalk Pro

Did you ever manage to get this to work? I'm in a similar situation.
silenceleaf said:
I got a N960F/DS (CSC: OXM_MYM). It is Thailand version without Samsung Pay enabled.
Can I flash another country's ROM, certainly under same hardware architecture (N960FXXS2ARK2), without breaking the Knox?
I want to use Samsung Pay at US ...... ......
Click to expand...
Click to collapse

on the about section in settings, then under status , does the phone still show as "official" ? after you guys successfully flashed other region firmware ? this is a straightforward way to see if the phone is still "knoxed" or not, as i am wondering if the Samsung pay not working is due to georestriction or knox related? Because as i remember with my pre-previous phone the s7e that i rooted, tripped knox resulted in many Samsung apps locked with an original firmware as Samsung health, pass, pay secure folder etc but otherwise still usable.
Just remember that since the S7, once the phone is rooted or knox is triggered there is no way back even if you flash the original firmware and completely unroot it, knox is like an electric fuse and once it is broken there is no way to "unroot" or restore knox to official status except replace the motherboard (until s6 root and knox was software and fixable by flashing original firmware but since s7 knox counter is hardware)

Manage to change region by following this thread.
But I'm not using spay so can't confirm if it will make spay work or not. Knox won't be tripped so nothing to lose if you try it
https://forum.xda-developers.com/ga...de-how-to-change-s9-s9-csc-model-csc-t3870836