Hi, thanks for the reply.
I used ROM'S from here but think it would be wrong to name them at this point till I get more info. The Mrs has had one or two from other places she now tells me
, but there was no inappropriate behaviour before or after these. And any steps I have taken to install for her, I have obtained from XDA. All were Jelly Bean based and either 4.2.2 or 4.3.
Yes it's I9100 although it's I9100P. The variant hasn't had any effect in my opinion and have always flashed to stock then went through the usual steps of erase, wipe, format, mount etc.
There was once some nonsense from another superuser app, well not so much the app but one of the components which started zipping up stuff etc. That was eradicated immediately, and was several weeks prior to this carry on starting. For the life of me I can't remember the name of it but know I had used it before with no trouble whatsoever so did find that odd to say the least..
She had mentioned it before but I thought yeah okay, had I not seen it with my own eyes I wouldn't have believed her to be honest.
The content that was being shown from here was like watching someone scanning over a sheet of paper with a handheld scanner, only watching it on the phone. Sorry - can't think of any other way to describe it and the phone was just going to various sections on XDA - all to do with Jelly Bean. The Mrs assumed it was the dev from this other super user app pointing her in the right direction for Jelly Bean etc.
I recognised some of the content as I had in fact read them myself and went to the same pages on comp to show her but was expecting this message will self destruct in 5 seconds to come on screen and Mission Impossible music to start.
The behaviour in the latter stages was outrageous and somewhat audacious, but that's another story.
Just wanna trace it and sort it out and in one sense it's a lesson learned for her lol cos my phone is running just sweet lol.