Please help. Am I rooted? Being spyed

[Brandyray30]

I have a NOTE 9 with Sprint. What got me worried was about a year ago I noticed activity in my gmail then some of my social media accounts. So I downloaded my device configuration history for Gmail and my login history for all. Someone other than me had been in my accounts but I think maybe through my phone. My phone sometimes says it's a google pixel. Sometimes it has random pictures saved of my home screen. I went in to developer options and It say my administrator wont let me access Andriod web view. "My admin" also wont let me uninstall App connection. I have a work profile I've never seen.

The device configuration on my IMEI number doesnt look horrible but it says Verizon. And appleweb kits are involved.

I created new emails got rid of clouds did factory hard reset and nothing helped.

My location turns on and off by its self too. I'm starting to get scared. I could go on and on. I dont know what steps to take to find the issue.

Please help me or tell me I'm crazy.

Thanks.

 

[mustang7757]

I have a NOTE 9 with Sprint. What got me worried was about a year ago I noticed activity in my gmail then some of my social media accounts. So I downloaded my device configuration history for Gmail and my login history for all. Someone other than me had been in my accounts but I think maybe through my phone. My phone sometimes says it's a google pixel. Sometimes it has random pictures saved of my home screen. I went in to developer options and It say my administrator wont let me access Andriod web view. "My admin" also wont let me uninstall App connection. I have a work profile I've never seen.

The device configuration on my IMEI number doesnt look horrible but it says Verizon. And appleweb kits are involved.

I created new emails got rid of clouds did factory hard reset and nothing helped.

My location turns on and off by its self too. I'm starting to get scared. I could go on and on. I dont know what steps to take to find the issue.

Please help me or tell me I'm crazy.

Thanks.

If you go into Admin can you deactivate what's there ?

 

[Brandyray30]

I can and theres 4 listed, find my Mobile, app linker, google location services, and one other. But I cant keep control of it. There is an app or service call persistent service that keeps pushing it back and the same with my location. Would a list of what I have help? Sometimes it says i dont have a sim card too.

 

[mustang7757]

I can and theres 4 listed, find my Mobile, app linker, google location services, and one other. But I cant keep control of it. There is an app or service call persistent service that keeps pushing it back and the same with my location. Would a list of what I have help? Sometimes it says i dont have a sim card too.

Is this a work phone that they supplied you?

 

[Brandyray30]

No. It's my personal that I pay for. I asked sprint if they would deny me these rights they said no.

 

[Brandyray30]

I just noticed when I go to accounts on device it only shows two of my emails. (The good new ones) but when I go under settings there is another settings that has account on device and that has about 7 accounts. Some being amazon video accounts and a Samsung cloud account I have removed over and over. Lol i honestly dont know how to stop this. If I'm rooted can I get control? Can you pay people to fix this stuff? If I'm being spyed on...I'd like to find out. Some of the device configuration I looked up pulled up hacking sites...

 

[mustang7757]

No. It's my personal that I pay for. I asked sprint if they would deny me these rights they said no.

Ok...I would deactivate those administrator

 

[B. Diddy]

I can and theres 4 listed, find my Mobile, app linker, google location services, and one other.

This is under Settings>Security>Device Administrators? What's the one other?

What kind of activity on your Gmail or social media are you talking about? It's good to keep in mind that most concerns about being hacked don't really have to do with complex software or hardware hacks on your device. One very easy way to lose control of your accounts is if you log into them while on a public device (like a computer at work or at the library) and forget to log out. At my workplace, I regularly see people's email accounts or Facebook pages left open on a shared work terminal. All it takes is one little punk to decide they're going to have a little fun with you.

 

[Rukbat]

First, reflash the ROM (see [Samsung] How to flash Stock ROM via ODIN). Then get a password app, like Keepass2Android Password Safe or LastPass Password Manager. Then go to each of your accounts, let the password app generate a random 20 or 30 character password and use that for the account. (Generate the password, see if the site or account accepts it - if it does, save it in the password app, if not, change it according to instructions [some only take short passwords, some don't take special characters or punctuation, etc.] then try it again. Once it's accepted, save it.) Make sure you can save the passwords off the phone. (LastPass saves them on the LastPass server, KeePass can be set to save them on your Google Drive account.)

Even if you create a throw-away email address just to sign up for something (and you'll never use it again), have the password app create the password. Once you're finished with the account, you can delete the entry.

I'm guessing (after almost 50 years in the business, so it's a pretty educated guess) that you used an easy-to-guess password on some site that enabled someone to upload some malware to your phone. After that, it didn't matter what you did, they could control the phone. Reflashing the ROM gets rid of that. Changing all your passwords to long random ones means that even if someone gets one of them, that's all it's good for - that app or that site.

Reflashing the ROM won't get rid of your emails. It won't get rid of your contacts. It won't get rid of your backed up pictures. It will get rid of your texts, so if you want to save them, use something like SMS Backup & Restore to back them up them, copy the backup file to a PC or Google Drive, reflash the ROM, then restore them. Then destroy the backup file. It's not protected in any way, it's human readable. (The password files aren't.)