1. AC Question's Avatar
    I have been suffering a root level attack on my ATT Galaxy S5 (not rooted) running Lollipop 5 and newest 5.1.1 The attack involves setting up alternate background connections to the internet that are then used to reroute DNS to dead ends or alternate locations. I cannot stop the loading of apps that are tagged as "system" so I cannot un-install. Current count is 311 system apps (seems to have topped out) and I have maybe 10 user apps of my own. Seems to be turning on every form of data sharing possible, facebook messenger, messages, emails, NFC, Directshare, Tethering, Audio connections of every kind, two phones (system information says I have two phones on my phone), screen savers, S beam (older versions), Link, video editing, text to speech, spoolers, sim-kits..., well you get the picture. There are many other issues but will stop here for now. I have been trying to get control of the phone for over a year and did not understand the severity of the problem. I know I cannot root (yet). Can I do other things like flash rom or upload new os? The big issue is if it is done through google test ads then whatever I do will be undone again. I did not seem to see any threads on this but maybe someone can steer me.
    thinkinfinity likes this.
    11-06-2015 12:17 PM
  2. B. Diddy's Avatar
    Welcome to Android Central! Do you mean that someone used Google ads to carry a trojan into your phone? Is it anything like this? https://blog.lookout.com/blog/2015/1...anized-adware/
    thinkinfinity likes this.
    11-06-2015 12:29 PM
  3. kayak krazy's Avatar
    yes, it is an attack similar to that but as I understand it the ATT S5 running lollipop CANNOT be rooted yet so it appears that someone at google who can run test ads on my phone is doing it. They would have to gain access through very locked down enterprise access. I will send some pics of log.
    thinkinfinity likes this.
    11-06-2015 12:47 PM
  4. kayak krazy's Avatar
    11-06-2015 12:58 PM
  5. kayak krazy's Avatar
    11-06-2015 01:02 PM
  6. kayak krazy's Avatar
    First time on this forum. Sent up one wrong image. I have hundreds. Tested my phone for root and tried to root it two times but negative. Can this variant be rooted yet?
    11-06-2015 01:04 PM
  7. Javier P's Avatar
    Do you remember downloading any app outside Play Store, Amazon or Samsung?
    11-06-2015 01:07 PM
  8. thinkinfinity's Avatar
    Have you ever installed apps outside of Google Play Store? Do you have an antivirus on your phone?
    11-06-2015 01:07 PM
  9. kayak krazy's Avatar
    most offending apps found in /system/priv-app/ and cannot be deleted, although I have extracted some. One extraction is a pre config routine that seems to run right after a factory reset and then resets the phone again making you think you have a factory reset but is not.
    11-06-2015 01:07 PM
  10. kayak krazy's Avatar
    maybe, over a year ago. have done factory resets since then (5 I think).
    11-06-2015 01:08 PM
  11. kayak krazy's Avatar
    plus phone updated to lollipop 5 and 5.1.1.
    11-06-2015 01:11 PM
  12. Javier P's Avatar
    Unfortunately this trojan seems to hide deep into the ROM and a factory reset or a system update don't touch it at all. I think only reflashing the ROM would work.
    11-06-2015 01:16 PM
  13. kayak krazy's Avatar
    maybe, over a year ago. have done factory resets since then (5 I think).
    11-06-2015 01:18 PM
  14. kayak krazy's Avatar
    Thank you for letting me know. I was new to android when I bought this phone and have been educating myself for a year now and have come to the same conclusion. Do you know if I am able to flash the rom myself? I am told that I can take the phone to best buy and have them do it. They might be gifted by ATT.
    11-06-2015 01:21 PM
  15. Javier P's Avatar
    I don't have any experience with the S5 and even less with AT&T phones I'll ask around and let you know. But if you can get a professional to do this process for you I wouldn't think twice.
    kayak krazy likes this.
    11-06-2015 01:46 PM

Similar Threads

  1. Buying Mate 7 - Questions on 4G LTE in USA! MT7-TL10 vs MT7-L09!
    By juliamarie32 in forum Huawei Ascend Mate 7
    Replies: 3
    Last Post: 11-09-2015, 09:45 AM
  2. Anyone Having These Bugs on Your 5X?
    By SaracenSam in forum Nexus 5X
    Replies: 12
    Last Post: 11-07-2015, 07:15 PM
  3. Replies: 1
    Last Post: 11-06-2015, 12:35 PM
  4. Replies: 1
    Last Post: 11-06-2015, 12:33 PM
  5. Samsung galaxy s3 stuck in boot loop with new battery
    By AC Question in forum Ask a Question
    Replies: 1
    Last Post: 11-06-2015, 12:17 PM