From what I see, I think it's now rooted. I can't tell for sure because apps are looking in one spot but my phone's files were moved to another.
For example, I have three system folders which contain similar folders or files. They are all incomplete in some way. Some folders are locked and some aren't. I've tried rooting, flashing the stock firmware, and a few other things. Nothing works. I get the same processes back and I know the phone is compromised. I've found logs and packets showing my personal info being sent out. It also shows two mounts in a file explorer with multiple sd and usb mounts. A log from the Unified Toolkit says the root is a virtual sd card. It lists several folders and files it couldn't find. Rightnow Superuser is installed at System but system is where the apps are listed. I'm going to try to install there.
Is there a list somewhere of the file structure? Any ideas how I can remove these mounts? Any ideas at all? This is driving me over edge.
I'm also finding things that say Factory Mode or Knox Mode.