• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Help Virus or spyware

B

Buster

Lurker
Hello
At the weekend it seems my phone got hacked into have no idea how to be honest and its really bugging me. They basically had full use of my phone and could see all my storage accounts etc.Ive got a sony xperia z3 compact. Since finding out this information i have done a full system reset on the phone. Will this remove the spyware or whatever it was as im not confident it has.
Ive been looking at the Apps list and there is so much listed on there im just wondering if it could still be routed.
Any help would be great
Thanks
 
A reset should have wiped out any spyware.

If you have a lot of apps installed and you didn't install them, then you must have 'Backup and restore' enabled in the main Settings. Possible it installed the problem software again.

What happened that made you believe you were hacked?
How do you know they ha access to your accounts?
Have you changed your passwords?
 
If you suspect the device was compromised, change your Google account password immediately, along with any other sensitive log-ins e.g. internet banking, third-party cloud storage providers etc.

Unless the perp(s) gained physical access to the handset it won't have been rooted, so a factory data reset should have removed any undesirable software.
 
On an unrooted device a reset will wipe any apps, including any malware. If the phone was rooted then malware could be installed as a system app, which would survive a reset (all a reset does is remove user apps and data, and won't undo any changes to the system).

However, a couple of things to consider:

* The easiest way to hack the phone is if someone hacked your GMail account. So if you've not already done so, change your GMail password and enable two-factor authentication to make it harder to hack again.

* Malware has to be installed to the phone by someone - either someone with access to the GMail account or the current user. So another possibility is that you installed something that contained malware. In which case, be careful when reinstalling your apps, because it's possible you might reinstall the problem. Be particularly wary of anything installed from random internet download sites (especially any that offer paid apps for free - app crackers often add malware to the apps).
 
Thanks for the replies. It first came to my attention when it said attempts had been made to gain access to my facebook then onto my outlook account. Also pictures were disappearing so i knew something was up but dont understand how they could have gained access. I had my wifi turned off but my mobile data was still switched on. My device is unrooted. I have been able to change my passwords now but it has been very hard to do so as every time i tried to do this on my phone they were one step ahead so presume they had full access to my keyboard, screen etc so could see exactly what i was doing ended up doing it all on the laptop in the end.
As ive said ive wiped the phone twice but still worried that its lurking there somewhere i just dont understand how they got access to begin with ive not heard of anything like this before.
When i look at my apps list it just worries me as there are bits on there that just dont make sense. Ive got Lookout installed and it dosent pick anything up but my mind still isnt at rest really.
Thanks
 
Theres quite a lot im not keen on some are System Ui, Screen Mirroring, MMS Service, IntelligentObserver, GaProxy, Download Agent, Loads of Com.Sony and Com.Sonyericcson
 
Also apps like Ant Hal which has a ridiculous amount of other apps stringed together with it You cant disable or uninstall these either
 
Apps that you can't disable or uninstall, and are not listed as device administrators, will be system apps. That means they are part of the ROM and were installed by the manufacturer. Since this is a Sony then "com.sony" is unsurprising (com.sonyericsson more so, since Sony bought Ericsson out of that partnership a long time ago, but still plausible on a Sony device).

"SystemUI" is what it sounds like. And Screen Mirroring and MMS service sound plausible to me. GaProxy is "Google Analytics". Don't know about IntelligentObserver, but most of this stuff does not sound suspicious to me.
 
You must log in or register to reply here.
Back
Top Bottom