Hello,
Many of my devices/accounts were compromised and I need help regaining control starting with my cell phone, but I need help. I've done hard factory resets like 3 times on my device but still feel like there are weird things happening with my phone, but I can't pinpoint where the problem lies.
I am aware that if there is some backdoor issue rooted on one or more of the installation files that this might be hard to detect and delete, and my options may be limited (last resort - getting a new phone).
I've reset all email accounts and their passwords, and don't log in on my phone to any known email, as I use a disposable one newly created (after resetting phone). I was using Kaspersky security but it detected nothing, and will be downloading malwarebytes to conduct further scans. I've compiled a list of system file folders and questionable files below, along with "Supported Web Addresses" that are saved for certain apps to open instead of browser app. I'm sure most are ok, but a few seem odd.
I appreciate any and all help in this matter, and will be available to perform actions suggested upon replies.
Data Folders and some files contained in a few of these
Supported Web Addresses for apps with their installed versions. Please forgive my ignorance if these are standard, and no issues, but I just want to be certain:
Drive 2.20.461.08.45
Link Sharing 11.5.00.31
Please let me know if there's anything else I can provide to dig deeper into this issue.
Thanks again
Many of my devices/accounts were compromised and I need help regaining control starting with my cell phone, but I need help. I've done hard factory resets like 3 times on my device but still feel like there are weird things happening with my phone, but I can't pinpoint where the problem lies.
I am aware that if there is some backdoor issue rooted on one or more of the installation files that this might be hard to detect and delete, and my options may be limited (last resort - getting a new phone).
I've reset all email accounts and their passwords, and don't log in on my phone to any known email, as I use a disposable one newly created (after resetting phone). I was using Kaspersky security but it detected nothing, and will be downloading malwarebytes to conduct further scans. I've compiled a list of system file folders and questionable files below, along with "Supported Web Addresses" that are saved for certain apps to open instead of browser app. I'm sure most are ok, but a few seem odd.
I appreciate any and all help in this matter, and will be available to perform actions suggested upon replies.
Data Folders and some files contained in a few of these
- com.android.chrome
- com.android.systemui
- backupwallpapers
- backup_home.xml
- backup_lock.xml
- backupwallpapers
- com.android.vending
- com.facebook.appmanager
- com.google.android.apps.docs
- com.google.android.apps.maps
- com.google.android.gm
- com.google.android.gms
- com.google.android.googlequicksearchbox
- com.google.android.music
- com.google.android.videos
- com.google.android.youtube
- com.microsoft.office.officehubhl
- cache
- ts configuration jwt file
- cache
- com.microsoft.skydrive
- current log txt
- ts configuration jwt file
- com.samsung.android.app.smartcapture
- com.samsung.android.app.soundpicker
- com.samsung.android.app.spage
- com.samsung.android.aremojieditor
- com.samsung.android.calendar
- com.samsung.android.email.provider
- com.samsung.android.game.gamehome
- com.samsung.android.messaging
- com.samsung.android.mobileservice
- com.samsung.android.rubin.app
- com.samsung.android.samsungpass
- com.sec.android.gallery3d
- com.sec.imsservice
- flipboard.boxer.app
Supported Web Addresses for apps with their installed versions. Please forgive my ignorance if these are standard, and no issues, but I just want to be certain:
Drive 2.20.461.08.45
- * (please explain why just an asterisk)
- icing.drive.google.com
- gmail.app.goo.gl
- enterprise.google.com
- *.youtube.com
- media (that's all it says for this one)
- fir-auth-gms.firebaseapp.com
- gds.google.com
- business.google.com
- enterprise.google.com
- *.app.goo.gl
- pay.google.com
- near.by
Link Sharing 11.5.00.31
- s.amsu.ng
- linksharing.samsungcloud.com
- contentsAppLink
- ditu.google.com
- maps.google.cat
- *.sharepoint-df.com
- 1drv.ms
- *.sharepoint.com
- mdlappstgausenivlk.azurewebsites.net
Please let me know if there's anything else I can provide to dig deeper into this issue.
Thanks again
Last edited: