Help Trojan virus app 7me keeps installing itself

[CyrusUser]

I use a Cyrus C22 running on Android 7.0
I noticed some weird behavior of my phone, particularly increasing difficulty to use wifi when connected and random virtual "tapping" on the touchscreen. When browsing the apps installed, I noticed an App called 7me , which I have never installed, so I uninstalled it. This temporarily resolved the problem. However, each time I do that it takes between a couple hours or days until it reappears without me instigating its installment. At some point, I let the app "Malwarebyte" run an anti-virus scan when I knew "7me" was currently installed and it identified it as trojan malware.
I have attempted to restrict the clearance for my other apps as far as possible. Can I somehow set my phone up so that installment of this app is ruled out? I have no clue where it gets permission to be installed each time (I don't agree to it to my knowledge). Any other ideas are also welcome.

Thanks for your help.

 

[Hadron]

By definition a trojan doesn't install itself: it requires something (usually the owner) to install it. So there are two obvious ways this can return after being removed, and one less obvious one.

The two obvious ones are:

(1) one of your other apps is installing it (i.e. is itself a trojan malware installer). Do any of your apps have the privilege to install other apps? Any that do are potential suspects (of course some apps need this legitimately).

(2) your Google account has been hacked and is used to push the app to your phone. Check your account activity for any usage from devices you don't recognise, and if you've not already done so enable two-factor authentication. Also de-authorise any devices that have access that you don't recognise or use yourself.

The less obvious one is that it's actually got into your ROM and so without root you cannot remove it. Normally this would just tell you that you can't remove it, but I've met circumstances where you appear able to but it hasn't really gone and so reappears again. These concerned unusual combinations of factors (including additional system security measures on some manufacturers), so it's unlikely this is the case, but I mention it for completeness.

For the record, a web search for 7me reveals that there is an app of that name from the 7th Day Adventist church. Of course I'm not suggesting that they might be proselytising through malware, just mentioning it in case that would mean anything to you.