Database Info

Need Help, We Believe We are Being Remote Accessed.

My friend had a nerd friend of hers root her phone for her. She reports it took the person 7 hours to finish the job, which we find suspicious. Here is the phone info after root job, please let us now if there's any other info you need in order to help us:
T-Mobile::
Samsung SGH-T769
Android Version 4.1.2
kernel version 3.0.49-cyanogenod-ga56844d
[email protected]#1
CyanogenMod Verson
10-20121125-NIGHTLY-1769
CM Updater has been stuck downloading for two days now.. I've only ever done one successful root myself, to my Galaxy S3, so the only thing I can think of is to unroot. The main concern we have is that the person who did the rooting now has remote access to her device functions and cameras, seeing as he also did work to her laptop and once it connected to her home network after she got it back from him, it was remote accessing her other devices and shared files on her network, as well as her webcam and microphone.

What you posted is what anyone running cyanogenmod has in /about phone, same as mine.lol
Just look through your file explorer and see what you find and than Google search it. Install avast from play store and it can detect malware or conflicting apps, it also has firewall settings if you install as rooted when prompted. If you find a suspicious app please do post. For curiosities sake..
Its not cyanogenmod its good no worries, ask the other 3 million+ users

Hah, if you are worried about remote access, cyanogenmod doesn't have anything to do with it.
Having said that, there *are* things that a malicious person could install on your phone, especially with access to it for 7 hours, to make you frightened.
Many of these kinds of apps are geared towards peace of mind for the owner, so they can retrieve it if the phone gets lost or stolen.
However, the tools are very powerful. Being able to remotely take audio/photos/video, show your location, turn off the phone, upload photos/video taken with the phone, etc...
Some of these services will survive a "return to stock" when done in the phone. Heh, you're probably really freaked out right now.
The first thing I'd look for is to check the device administrators via settings/security/device administrators
I have one checked myself, because I like the peace of mind that I have a way of getting the phone back, or at least wiping data, should I lose it. (assuming the person doesn't pull the battery and doesn't go through the effort of removing it)
Odds are, this person hasn't done anything seedy...that's not what I'm saying, what I am saying is:
Don't trust people with your phone.

Hey there fellow blazer,,
Recommend you go back to stock and wipe everything there is on the phone, only backup things you absolutely need. It's simple but be careful and follow the steps carefully.

OK
well i went into factory hard reset it, but it is still rooted with cyanogen mod, ur saying that that level of restore will be fine? Ook, im putting AVG & Kaspersky on it, ill let you know how it goes. ok AVG did find one infected program, but it was another AV, either way got rid of it, also used Titanium backup to wipe pretty much everything, including caches and system data. Also went through sdcard0 and sdcard1, removing anything that did not look standard issue.
Cirkustanz said:
The first thing I'd look for is to check the device administrators via settings/security/device administrators
Click to expand...
Click to collapse
that is the one thing i forgot to do, but i wil text her and let her know to check. I checked the one for my GS3, and it has a "com.sec.sprextension.phoneinfo.D.." checked, and none else listed. since that seems to be a system file, and cant be unchecked, it must be okay. Should i tell her that as long as what's listed in her device administrators is either nothing or only a system file then it is fine?

if you're still shady, you could try another rom after wiping :/

Ok so here is how you fix it....
Go to http://10.cmxlog.com/?device=t769#cm-10-20130128-NIGHTLY-t769.zip and download the latest CM10 Rom
Go to http://goo.im/gapps/gapps-jb-20121011-signed.zip and download your Google Apps (google play and frameworks needed for all google stuff)
Boot into recovery mode (long press the power button, choose recovery)
Go into mounts, then format system
Go back to the main screen and format data/factory reset
Go to install zip from sd card and choose internal or external depending on where you put the files.
Install the CM10 zip first.
After CM10 install is complete, install Gaaps zip
Reboot.
This will fresh wipe everything. You will start from scratch and setup when it turns on. You will have to install your apps again, so use Titanium if you want to keep data. Best to start fresh if you are really worried about that sort of thing though. Hope this helps.

I recommend the above suggestion and do a full wipe just to be safe, with formatting the /system partition. When you do a factory reset it do not wipe the system apps, some app like Cerberes can hide in the system partition. Additionally with root, you can install the app LBE (link in my sig) that can prevent permission and internet connection for apps, among other things.
I don't think it's anything to worry about, but it depends on the person who did the rooting, you might be blaming an innocent person. But then there are creeps out there as well.
Sent from XDA app

[Q] NEED HELP : My phone behaves itself in installing applications

Hi all,
I am using lava xolo Q2000 model mobile with android jelly bean in it.
I m used to games a lot, So I have gone for apps which are not from google play. There my mistake strsrts, at that time my mobile performance and all were good.
But later the following problems started,
1. The display just turned off and I can able to sense and hear the application is still running but only the screen turned off, when I am rebooting my mobile it gets OK and working fine - Is this problem on hardware or its OS or because of any third party app installed ?
2. Whenever I switching ON my network connection the mobile itself installs random apps by itself the frequent one getting installed is flappy bird. I keep on unistalling it several times it is getting installed everytime I m getting internet connection - If it was an issue with the virus from third party apps please help me in how to remove them ?
I know there were many android geeks around in this forum, So I am here to meet them by answering and helping me....
Thanks in advance

gurudevj said:
Hi all,
I am using lava xolo Q2000 model mobile with android jelly bean in it.
I m used to games a lot, So I have gone for apps which are not from google play. There my mistake strsrts, at that time my mobile performance and all were good.
But later the following problems started,
1. The display just turned off and I can able to sense and hear the application is still running but only the screen turned off, when I am rebooting my mobile it gets OK and working fine - Is this problem on hardware or its OS or because of any third party app installed ?
2. Whenever I switching ON my network connection the mobile itself installs random apps by itself the frequent one getting installed is flappy bird. I keep on unistalling it several times it is getting installed everytime I m getting internet connection - If it was an issue with the virus from third party apps please help me in how to remove them ?
I know there were many android geeks around in this forum, So I am here to meet them by answering and helping me....
Thanks in advance
Click to expand...
Click to collapse
First question: What apps did you install?
And next one: Did you uninstall all of them after facing this issues?
Are you rooted yet?

LS.xD said:
First question: What apps did you install?
And next one: Did you uninstall all of them after facing this issues?
Are you rooted yet?
Click to expand...
Click to collapse
No I haven't rooted.
I cant differentiate which are from android market and what are from outside of it .
I have un-installed most of the apps that I suspect, but few might be still in phone
Could you please tell me how to find the difference from the sources.
Are you sure uninstalling them will avoid the behavior completely. please help me . Do I need to Factory reset ?

gurudevj said:
No I haven't rooted.
I cant differentiate which are from android market and what are from outside of it .
I have un-installed most of the apps that I suspect, but few might be still in phone
Could you please tell me how to find the difference from the sources.
Are you sure uninstalling them will avoid the behavior completely. please help me . Do I need to Factory reset ?
Click to expand...
Click to collapse
best way to control is phone is the root acces.
First you should install some avast antivirus. Normally google play checks every application for unwished content.
I do many installs manually without google checking my apps and also i dont use some antivirus, because i feel very familiar with my setup.
Here you can find AVAST apk Wasn't that easy to find without googgle Play... see if it reports you some malware

LS.xD said:
best way to control is phone is the root acces.
First you should install some avast antivirus. Normally google play checks every application for unwished content.
I do many installs manually without google checking my apps and also i dont use some antivirus, because i feel very familiar with my setup.
Here you can find AVAST apk Wasn't that easy to find without googgle Play... see if it reports you some malware
Click to expand...
Click to collapse
Nice
I forgot to specify one thing,
I was using lookout(free version) for a long time and it hasn't detected anything. But one strange thing is lookout's logo on top left of mobile was green but it turned black and white for few days where this problem persists.
Should I need to uninstall it and then install avast or both in the mobile wont be harm to the mobile right? because two antivirus in same device I don't now what will happen.

gurudevj said:
Nice
I forgot to specify one thing,
I was using lookout(free version) for a long time and it hasn't detected anything. But one strange thing is lookout's logo on top left of mobile was green but it turned black and white for few days where this problem persists.
Should I need to uninstall it and then install avast or both in the mobile wont be harm to the mobile right? because two antivirus in same device I don't now what will happen.
Click to expand...
Click to collapse
just once a time. avast is best i suppose. And generally you should uninstall every app thta missbehaves noticeable to you.

Try to install an antivirus . Virus can make this problem .
If you have root access just temporary unroot it .
Or please restore your backup if you had .
Hope I helped .
Sent from my GT-S7562 using XDA Premium 4 mobile app

AlfasPeralassery said:
Try to install an antivirus . Virus can make this problem .
If you have root access just temporary unroot it .
Or please restore your backup if you had .
Hope I helped .
Sent from my GT-S7562 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
DID YOU EVEN READ the post?
He just installed Antivirus as i adviced
AND he just wrote hes not rooted @ all

LS.xD said:
DID YOU EVEN READ the post?
He just installed Antivirus as i adviced
AND he just wrote hes not rooted @ all
Click to expand...
Click to collapse
Oh sorry I was in little busy at that time . Tell him just install a custom rom or use ota update to solve this problem .

AlfasPeralassery said:
Oh sorry I was in little busy at that time . Tell him just install a custom rom or use ota update to solve this problem .
Click to expand...
Click to collapse
What is OTA update and custom ROM ?
I have installed AVAST as suggested by LS.xD .
I have scanned and found a result of no malwares. Ok lets hang on for some times with avast and see if the problem persists.
Thanks a lot LS.xD .

gurudevj said:
What is OTA update and custom ROM ?
I have installed AVAST as suggested by LS.xD .
I have scanned and found a result of no malwares. Ok lets hang on for some times with avast and see if the problem persists.
Thanks a lot LS.xD .
Click to expand...
Click to collapse
All files to get here-->Xolo Q2000 ROOT + UNROOT + STOCK
BUT i explain it to your a little shorter just hold on a minute
OTA(on the air) update:
OTA is a stock rom (also used as an update) released by the manufacturer of your phone. E.g. update Android 4.12 -> 4.22.
OTAs are very unsecure to use as you can update from running system which great chace of getting issues or a fully crashed rom ar in worst case a brick. Cause the update can be affected by installed apps, running processes, wrong executed scripts and so on. If you look on XDA you will find a lot posts of people with phones got different kinds of problems and issues while using ota on a system tahts already in use.
RUU/FIRMWARE --> is a full system image that will be installed via usb cable an a updtae tool running on your computer or a special "Flashtool"
This will work pretty good and safe AS IT RESETS YOUR SETTINGS back to stock so you will not have any errors in most cases and also can restore a phone that crashed before.
No matter if OTA or FIRMWARE (provided files can be identically by the way) its NECESSARRY to install only version fitting your phone type and may be region an carrier/provider. Wrong files will definitely BRICK your phone.
ROOT ist the lowest storage area you can acces. E.g. if you put i file direct on your sd-card its on the root of it. The internal storage is splitted due to different needs of android. On a stock rom many folders or partitions can't be accessed by the user or grant just permissions to "read" files BUT NOT edit or delete them.
ROOT ACCES (or called offen just ROOT/ED) means that you have forced to changes the devives settings to grant user FULL ACCES and WRITE/DELETE ability on every part of the storage in your phone. Thats really powerfull, bacause the most "GOOD" features you can only use if this acces is granted to you e.g.
- DELETE preinstalled but NOT NEEDED apps
- Control network by using a REAL firewall
- Controll all processes on your phone
- using a adblocker
- backup / restore every part of your system/data
- use different file systems
-overclock / undervolt CPU
- MUCH MUCH MORE
BUT its RISKY if you dont know about how to act right and you can easily CRASH your installation or even FULLY DESTROY your phone if you set things that simply will kill teh hardware or delete files needed to get android working
UNROOT (disabling root acces)
and the best of all:
CUSTOM ROM:
Android is open source so every one eho can develope it by pgrogramming may modify/improve it and also add new features. Stock roms are always SLOW/FULL WITH CRAP allow just a few settings ti interface performance and how the device should behave or even NOT BEHAVE. Stocks have in most cases lots of apps preinstalled which are locked by default. So ycant delete/stop them. Means that may be some apps you NEVER USE alsways RUN IN BACKGROUND. That handled like that for systems are force to beeing much slower/laggier/customizable as android technology and the used hardware would provide it. + the user installed preferred apps additionally During long use rom will also slow down more an more. That in best case after a year or may be two you just think OMG i need a new phone for sure. Then your manufacturer tells you LOOK at this all new features... (May be they were just holded back and not related so hardware in many cases) For example my old Galaxy W (from 2011) runs a highly modded, slimmed and customized to my personal needs Android 4.4.2 KitKat rom, as you get with the latest generation phones. Of course the device is old ad has outdatted hardware, but newest android itself runs really good
So to get the best experience from your phone you need to remove all restriction possible. Unlock/root/security flag off so that u can really use what you want and DELETE anything you don't need/like/slow down phone/track and sniff your personal data. every Stock phone knows A LOT abour who you are and what you're going... Of course also a custom rom will need data to work. But at least you can control every single app. Set every permission of all apps or even trick sensor datas to give apps faked data if they should not track you.
As you can read: i really love to modify phones xD

Hi LS,
Thanks for the long explanation given for my question. :good:
I have tried out something about my problem and faced the issue again.
I wanted to know whether the virus is in mobile or SD card so I removed SD card and made internet connection and again the same problem persisted.
The following are the apps getting automatically installed are,
Playapp
UC browser mini
Flappy bird
I planned to take backups and factory reset my phone .
Could you please guide me..

gurudevj said:
Hi LS,
Thanks for the long explanation given for my question. :good:
I have tried out something about my problem and faced the issue again.
I wanted to know whether the virus is in mobile or SD card so I removed SD card and made internet connection and again the same problem persisted.
The following are the apps getting automatically installed are,
Playapp
UC browser mini
Flappy bird
I planned to take backups and factory reset my phone .
Could you please guide me..
Click to expand...
Click to collapse
Did you read the Guide already?

Yes I have read and I have some other confusions ,
Whether my phone is in affected state now if I root it then virus could get feel into and turned my phone to brick?
Also whenever I heard of rooting it always makes me afraid of bricking by myself..
That's why I have decided for an factory reset ..
Please give me your suggestion on this ..

gurudevj said:
Yes I have read and I have some other confusions ,
Whether my phone is in affected state now if I root it then virus could get feel into and turned my phone to brick?
Also whenever I heard of rooting it always makes me afraid of bricking by myself..
That's why I have decided for an factory reset ..
Please give me your suggestion on this ..
Click to expand...
Click to collapse
I cant tell you what is affected or not. FULL wipe and installing Stockrom Q2000 provides best chance to get rid of "IT".
I just google how to.
You should backup Pictures, Contacts
You should NOT try to restore any APP data as long you don't know why your phone begaves like that...
EDIT:
If afraid of possible brick, then try factory reset.
If that doesn't help you can contact me and i'll help you flashing stockrom.

Issue solved
Hi LS,
I have taken all my contents a back up and made a factory reset. Now my phone behaves genuine.
And one more important thing is I have avoided installing third party apk's.
But I am fond of heavy games much ... could you please let me know how I can avoid data usage for getting heavy games.
Thanks,
LS

gurudevj said:
Hi LS,
I have taken all my contents a back up and made a factory reset. Now my phone behaves genuine.
And one more important thing is I have avoided installing third party apk's.
But I am fond of heavy games much ... could you please let me know how I can avoid data usage for getting heavy games.
Thanks,
LS
Click to expand...
Click to collapse
Ich don't understand the question about heavy games
Sent from my beloved HTC One S using (most time buggy) Tapatalk

Hi
heavy games means which required large cache files to be downloaded like real racing 3
LS.xD said:
Ich don't understand the question about heavy games
Sent from my beloved HTC One S using (most time buggy) Tapatalk
Click to expand...
Click to collapse

gurudevj said:
heavy games means which required large cache files to be downloaded like real racing 3
Click to expand...
Click to collapse
If the data is needed to run the game you probably can't avoid to download it...

playApp
Hi
I am also having the same problem with my xolo q2000
But i know the cause for this is due to the bloatware "playApp" that comes with the phone
Its an imitation of play store
When connected to network its shows notification adds of apps like
Flappy bird
Funweather
Uc browser etc
After some time those apps gets downloded automatically and launch themself
I found apk files for those apps in my sd card/playApp/downloads folder
And there are other folder in sd card like
PlayPay
Playpush
PPlay
Othet folders are
Data/data/me.powerplay.playapp
Mnt/asec-/me.powerplay.playapp-1 inside this folder there is file pkg.apk with app icon
I rooted my phone using eroot pc software and installed Root toolbox app
and uninstalled the playApp.It was fine for some time and then
after one or two days the playApp application automatically installs itself
and the whole problem starts again i tried uninstalling and deleteing all folders
i thought was related to playApp,deleted files in folders including data folder in restricted folders
But the same thing happend again playApp auto installed and installed other applications
One more thing even though it came with the phone its listed as a userapp
and is not found in the phones app manager
Is there a way to solve this plroblem?
This is my first post and i know only few basic technical things that i read from the net and experimented
Thanks in advance

Apps randomly deleted (both system and user apps!)

On my (rooted) S7 I suddenly notices that the Google services and play store were GONE. After installing these from GAPPS, I notice that several apps are disappearing.
I don't know why, don't know how, but I do know it concerns both system apps as well as user apps.
eg: I lost Waze (user app) this morning and, after a reboot, es explorer (user app), Google pictures (system app) and the gallery (also system app).
What can I do to prevent this from happening again?
I did make a titanium backup and a TWRP backup, but of cause it's unacceptable to work with my phone: clicking on an icon has about 2% change that the app is gone!
I noticed others that have this problem too, but I have nothing installed to the external SD card (which, btw. is a pain in the @SS with marshmallow)

No one can help me?
Still on every reboot I lose apps, both user and system apps.
Annoyingly is also that titanium backup cannot restore system apps!
I had link 2nd and foldermount, but removed both before. They are not installed, but still this is happening.
Please, please help!
BTW: a factory reset won't get me my system apps back, right?

I'm also having the exact same problem. Tried to search for a solution but to no avail... This is so frustrating...

what apps are missing ?
i have not seen anything like that

Randomly any apps it feels like removing. System apps, user installed apps. Once my google play store got uninstalled.
Sent from my SM-G930F using Tapatalk

u say u installed GAPPS , maybe thats the problem

Bright.light did, I didn't.
Sent from my SM-G930F using Tapatalk

I think this might be because I flashed ExtSD_Fix_rw-signed-v1.9b.zip
This is used to change the permissions for the external card.
It messes with /system/etc/permissions/platform.xml and /data/system/packages.xml
maybe that got wrong, so I made a factory reset and started all over. Now it works, even with xposed and root.
btw: It's only after I lost the play store/google services that I installed GAPPS, so GAPPS is not the problem.

Same here. I tried to revert to the packages.xml before the flash but it didn't work. Apps still getting uninstalled. So a factory reset did the trick for you? Did u flash ExtSD again after the reset?
Sent from my SM-G930F using Tapatalk

madhero said:
Same here. I tried to revert to the packages.xml before the flash but it didn't work. Apps still getting uninstalled. So a factory reset did the trick for you? Did u flash ExtSD again after the reset?
Sent from my SM-G930F using Tapatalk
Click to expand...
Click to collapse
No, I removed this ExtSD immediately, just to be sure that I won't flash it again.
For the moment I learn to live with this problem. It's possible because most sophisticated apps are already requesting the correct rights. Including the root capabilities it works as I like it to work.
When there is a better solution, I will TWRP backup and try that one, but this ExtSD is not the correct way.
I haven't found the thread, or else I would have put a warning in there too...

I have changed the permissions and ownership of the files in newer versions. Tonight I will release v2.8 with additional logging to help me finish this thing.
The ExtSD Fix thread is here.

rufus.wilson said:
I have changed the permissions and ownership of the files in newer versions. Tonight I will release v2.8 with additional logging to help me finish this thing.
The ExtSD Fix thread is here.
Click to expand...
Click to collapse
Thank rufus! Still appreciate your work on this. Don't take it the wrong way that I'm blaming this app. Users install at their own risk, so it's all in the user. [emoji4]
Sent from my SM-G930F using Tapatalk

madhero said:
Thank rufus! Still appreciate your work on this. Don't take it the wrong way that I'm blaming this app. Users install at their own risk, so it's all in the user. [emoji4]
Sent from my SM-G930F using Tapatalk
Click to expand...
Click to collapse
No bad feelings ?
My stuff does not work as well as I want it to yet and that frustrates me quite a bit...
Please join the testing team to help. If you don't want to mess your system, nandroid backup before flash and then restore. I hope the apps disappear quickly though... I know it is a pain to loose data/settings/texts/call logs...

rufus.wilson said:
No bad feelings
My stuff does not work as well as I want it to yet and that frustrates me quite a bit...
Please join the testing team to help. If you don't want to mess your system, nandroid backup before flash and then restore. I hope the apps disappear quickly though... I know it is a pain to loose data/settings/texts/call logs...
Click to expand...
Click to collapse
I didn't loose those things, however, since my backup was 'old', I just started all over, only retrieving some items from backup selectively.
No hard feelings for the ExtSD, I know it's my own risk
I do hope that the development of ExtSD will continue and that there will be a time that we beat this monster problem! :good: Or that Google finally understands that this is NOT wat we want!
btw: I have several apps which I cannot use anymore because of these ridiculous rights.:crying:

I have the same trouble with missing apps on my rooted 5.0 Lollipop phone.
I find that the missing apps usually have two copies of themselves in the data\app directory.
What I describe will apply to all updated system apps and user apps:
For example playstore is a system app but, after it is updated it is stored as data\app\com.android.vending-1 for the first update. Then data\app\com.android.vending-2 for the 2nd update.
Further updates will alternate between these two storage locations.
If something goes wrong and data\app\com.android.vending-1 does not get deleted you will have two copies of Playstore which I think will lead to a randomly disappearing Playstore.
I delete the oldest dated of the two storage locations and reboot phone. If still missing I reinstall the app and make sure there is only one copy in data\app directory, I will delete the oldest again.
I have auto update apps turned off to reduce the problem. I have a TWRP backup so I do not worry about messing up the phone.
Good Luck!

Do phone carriers have access to system files?

Good day to you all. i'm the owner of a virgin mobile venture phone. (version 2.3.5) i recently upgraded to a new device, but on the venture i have very important memos that are saved in the system folder called: "com.m7.juke.memo"
i tried to root on my own to gain access to that folder using "baiduroot" but supersu fails to install on all versions. im new to rooting so have no idea why it doesnt work.
i tried the fixes that i found online, like downloading the 2.79 version etc. but nothing works. i'm also confused on weather im actually rooted or not, because while an app in the play store called "fast root checker" says i am, many more apps including "root checker basic" says im not.
i'm a writer and my full manuscript is in that memo folder, and at this time an agent wants to see the full manuscript. so im really in a depressed/panic state right now.
i'm not tech savvy at all, and at this point i really dont have time to try to figure out how to get in that folder.
so what i want to know is: if this rooting thing doesnt work which it looks like it's not. then does the phone carrier have access to those system files incase of emergency?
at this time i dont have access to pc to try to root from there.
any help you can provide me will really be appreciated, thanks.

I don't really understand the problem. If you still have your old phone there should be no problems getting the data by just using that memo app, or what did I miss?
Sent from my Moto G5 using Tapatalk

tys0n said:
I don't really understand the problem. If you still have your old phone there should be no problems getting the data by just using that memo app, or what did I miss?
Sent from my Moto G5 using Tapatalk
Click to expand...
Click to collapse
Thanks for your reply. Well actually the data is in a system file folder. It's a stock memo app that came preinstalled on the phone. And it has no backup or sync option. The phone doesn't either, its very old. Basically I actually had to do a factory reset last month because of a boot loop problem, and I was gonna try to use recovering software to try to recover the data, but after further investigation I found the memo app in the system folder and the date it shows on the app is the same date I made edits to my manuscript, so I figured it might be a chance it was never deleted. So I want to get in there and see if it was still there before using recovery software.

Oh ok, now I see your problem.
I'm sorry to say that all your work got wiped in the factory reset unless you can find it with some data rescue app. Unfortunately this will become very hard if the phone have also been used after that, cause there's a chance it's been overwritten.
You won't find any data in system partition. All app data, even for system apps is written to data partition because system is always read only unless you have root and change things in system.
A factory reset wipes data and cache, but does not touch system because it's never supposed to change (read only).
Sent from my Moto G5 using Tapatalk

O ok. Well if that's the case I hope you can help me figure out this root problem so I can try a couple of rescue apps. I rooted with baiduroot the other day, but SuperSU is not installing on my phone after. What could be the problem? I want to root so I can try a couple of Android based recovering apps. Of course I would just connect to PC and download a recovery app from there, but Unfortunately I don't have access to my PC right now, so I'm hoping to root and use an android based recovering app.

How do I remove Trojan horse virus from my android smartphone?

There is a virus in my android phone named com.wgjvp.idck and I tried every possible solution to remove it but couldn't find any solution. What I did:
I hard-reset(factory-reset) my phone twice but this virus suddenly comes out.
Installed Security-Master but that also unable to resolve this problem
This virus creates a pop-up over ads due to which I am unable to perform anything. Even after successfully uninstalling this app when I lock it and open it, this virus is present already.
Two things takes place:
After uninstalling' this app, it automatically gets installed. And
USB-Debugging gets checked every time automatically.
This virus also switches-off the phone at certain interval. In setting inside apps virus name displayed as com.wgjvp.idck though on home screen the name is Nolcans.
I think possible solution could be disabling the developer option permanently or doing something due to which it should not be easily gets checked. and second is to block a particular app from installing in my phone with particular bundle-id or app-id like com.abc.xyz but I don't know how to do that.
So what should I do to completely remove this Trojan horse virus from my phone? Thanks!
Phone-Model: Swipe Elite Pro

Tkbery said:
There is a virus in my android phone named com.wgjvp.idck and I tried every possible solution to remove it but couldn't find any solution. What I did:
I hard-reset(factory-reset) my phone twice but this virus suddenly comes out.
Installed Security-Master but that also unable to resolve this problem
This virus creates a pop-up over ads due to which I am unable to perform anything. Even after successfully uninstalling this app when I lock it and open it, this virus is present already.
Two things takes place:
After uninstalling' this app, it automatically gets installed. And
USB-Debugging gets checked every time automatically.
This virus also switches-off the phone at certain interval. In setting inside apps virus name displayed as com.wgjvp.idck though on home screen the name is Nolcans.
I think possible solution could be disabling the developer option permanently or doing something due to which it should not be easily gets checked. and second is to block a particular app from installing in my phone with particular bundle-id or app-id like com.abc.xyz but I don't know how to do that.
So what should I do to completely remove this Trojan horse virus from my phone? Thanks!
Phone-Model: Swipe Elite Pro
Click to expand...
Click to collapse
You have something else installed that keeps re-installing the adware when you remove it. You need to find the thing that is reinstalling it.
Have you tried the Malwarebytes app?
If you can't get this fixed, try re-flashing your stock firmware, it will overwrite all of your partitions, removing whatever is causing the problem in the process.
Sent from my LGL84VL using Tapatalk

Droidriven said:
You have something else installed that keeps re-installing the adware when you remove it. You need to find the thing that is reinstalling it.
Have you tried the Malwarebytes app?
If you can't get this fixed, try re-flashing your stock firmware, it will overwrite all of your partitions, removing whatever is causing the problem in the process.
Sent from my LGL84VL using Tapatalk
Click to expand...
Click to collapse
Can this be solved without re-flashing? I tried to find my phone model stock firmware but couldn't find it.

Tkbery said:
Can this be solved without re-flashing? I tried to find my phone model stock firmware but couldn't find it.
Click to expand...
Click to collapse
If the device is rooted or if your device can be rooted, you can remove it but you'll have to dig through all your system files and folders until you find it.
Sent from my LGL84VL using Tapatalk

Droidriven said:
If the device is rooted or if your device can be rooted, you can remove it but you'll have to dig through all your system files and folders until you find it.
Sent from my LGL84VL using Tapatalk
Click to expand...
Click to collapse
Hi,
Thanks for the information. It worked for me