I went through the "running services" under developer option, i closed one by one and i found it.. interestingly its an app i installed long ago. Also, judging by the similar sympton from different users yet the culprit apps are different.. this maybe a new malware that disguise itself or hide...