I've a Samsung Galaxy S3 GT-I9300 rootet and since 2 weeks with CM11 M7. I use the Tool Reverse Thetering from this thread Link while at work to have some kind of internet on my phone.
The tool shows all kinds of up and downloads. After flashing my Phone with CM11 M7 i used the tool again and noticed that after 2 minutes in standby my Phone starts to do a lot of http connections. (See 2nd image). I know that the phone updates all the messaging and mail apps but with stock rom ist wasn't that often. In normal conditions the requests look like this in standby:
But after around 2 Minutes the Phone starts to request some http adresses all the time and it doesn't stop. This looks like this for example:
(Sorry for the big image)
Unfortunately i don't know if the phone does this only when using Reverse Thetering or also when i'm online with wifi or gsm. I can only see and chek it with reverse thetering.
I've bought Kaspersky Internetsecurity and tryed other apps from avg or avira to check my phone for a virus or similar bot non of them found something (i used each app on its on with only on app installed at the time)
I'm not an expert but it looks like my phone could be infested by some kind of botnet or similar but i'm not sure. Has anyone a idea what this could be and how i could stop it or get rid of the whatever i have?
Thanks a lot for your help.