Virus need help

[gioss]

Hi,as topic says i need help removing virus from my android phone.
I were stupid to give it to one guy at work who ''wanted to see something in internet'' and i gave it to him.The phone was in his hands about 10 mins and after this some strange things start to happen with my phone :
-battery started to drain much more than usual and is slower
-some of my accounts have been compromissed
-i think that with the virus he can control my phone etc.
I tryed to run antivirus scan,but with no success.
Also tryed to do factory reset,but it seems everything is just the same.
Can the virus just remain after i done the reset?
The problem is that im not familiar with the viruses and don't know what to do.
What you can suggest me?

 

[Kizzy Catwoman]

Hi there. Unless you gave him your account passwords he couldn't have compromised them easily. He could have downloaded something but it would not have remained after a full factory reset. So if you are having issues after a reset then it is likely an unfortunate coincidence. You must change your account passwords immediately anyway and never give your phone to anyone.

 

[B. Diddy]

Welcome to Android Central! After the factory reset, did the phone automatically restore your account and reinstall apps? If so, it's possible that whatever he installed was then reinstalled. Do the problems still happen in Safe Mode?

Which phone do you have?

Read these for future reference:

“I’ve been hacked” - Android Forums at AndroidCentral.com
[GUIDE] How To Avoid Malware - Android Forums at AndroidCentral.com

 

[gioss]

Welcome to Android Central! After the factory reset, did the phone automatically restore your account and reinstall apps? If so, it's possible that whatever he installed was then reinstalled. Do the problems still happen in Safe Mode?

Which phone do you have?

Read these for future reference:

“I’ve been hacked” - Android Forums at AndroidCentral.com
[GUIDE] How To Avoid Malware - Android Forums at AndroidCentral.com

Nope,after the factory reset my phone does not restore my account and apps.
Now i will try the Safe Mode and will post the results.
And my phone is Huawei P10 lite.

EDIT: Everything seems to be the same in Safe Mode,except that i feel the phone little faster.

 

[gioss]

Guys,what to do?

 

[B. Diddy]

What accounts do you think are compromised? Have you already changed your passwords for those accounts and made sure 2-factor authentication is turned on if available?

What behavior are you seeing that makes you think something is controlling your phone?

Malware that installs itself to the system root can be hard to get rid of, because that doesn't go away after a factory reset -- you'd have to reflash the firmware to get rid of that. But this kind of malware is very rare. How well do you know this person at work? Were you right next to him while he used your phone for those 10 minutes, or did he disappear with your phone?

Our phones have become a very sensitive extension of our lives, and therefore need to be treated as such. I would never recommend allowing someone besides a family member or trusted friend to handle your phone for any extended period of time. If that did become necessary, then it's advisable to log out of your account and use a guest account (if available), or use the Pin Screen feature to prevent the person from accessing any other part of your phone.

 

[gioss]

What accounts do you think are compromised? Have you already changed your passwords for those accounts and made sure 2-factor authentication is turned on if available?

What behavior are you seeing that makes you think something is controlling your phone?

Malware that installs itself to the system root can be hard to get rid of, because that doesn't go away after a factory reset -- you'd have to reflash the firmware to get rid of that. But this kind of malware is very rare. How well do you know this person at work? Were you right next to him while he used your phone for those 10 minutes, or did he disappear with your phone?

Our phones have become a very sensitive extension of our lives, and therefore need to be treated as such. I would never recommend allowing someone besides a family member or trusted friend to handle your phone for any extended period of time. If that did become necessary, then it's advisable to log out of your account and use a guest account (if available), or use the Pin Screen feature to prevent the person from accessing any other part of your phone.

The compromissed accounts are my facebook and whatsapp,but i changed the passwords from my pc .
He or someone opens ''scary'' pages of browser,some of my important pictures has disappeared,sometimes my games or apps has closing without any error.

This guy is new at the work,so i don't know him very well.
He went to the other room and gave it back to me after 10 mins,which made me doubt it.
I'm happy that i didn't had sensitive information on the phone.

How do i re-flash that firmware?

 

[B. Diddy]

Make sure 2-factor authentication is turned on for Facebook and WhatsApp:

https://www.facebook.com/help/148233965247823/
https://faq.whatsapp.com/general/verification/how-to-manage-two-step-verification-settings/?lang=en

Which browser are you using? Clear the browser history (including cookes) "from the beginning of time", and do the same on your Chrome desktop browser (if you're using Chrome on the phone).

I'm not experienced with flashing firmware, but the forums at XDA-Developers.com is typically a good place to learn: https://forum.xda-developers.com/t/...-huawei-p10-lite-emui-5-1-all-models.3736754/