• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Compromised Galaxy S10 and Knox.

svc agent is a samsung system app no need to worry about it. it is different than Trojan.Agent.SVC.Generic
https://forums.androidcentral.com/a...agent-android-malware-spyware-ransomware.html

llk agent is also a system app by samsung:
https://fixyourandroid.com/about/llkagent/

however Troj/Agent-LLK is a windows trojan virus:
https://www.sophos.com/en-us/threat...-and-spyware/Troj~Agent-LLK/detailed-analysis

just do a hard reset which will delete any malware installed. it is a much deeper wipe than a factory reset. keep in mind that it will trip FRP (factory reset protection) so make sure that you know your google account info.

but before you do, i would setup 2 step verification on all of your accounts that you use on the phone.
 
Yeh, it sounds like you got a few problems there.

But if the phone has been rooted and compromised by undesirable third-parties. Definitely replace it with a new phone that isn't rooted, and do NOT let it out of your sight. and do NOT let any other person plug your phone into their "Kali Linux laptop" or whatever.

Also suggest you make new accounts for it as well, e.g. Google etc. Use good strong passwords, and enable two-factor authentications.
 
Last edited:
Back
Top Bottom