I tried:
1- scan with more than 10 antiviruses nothing found
2 -reflash original rom and after first boot just seen the desktop it appears again before I even do anything
3- after this message aper again I unpack system.img from the C9 firmware using MTK extractor tool and then compare
system/app
system/vendor/app
system/priv-app
to the files on my phone and found no change at all or any different app
4- I tried I used NetGuard app to try to identify any suspicious connection to the internet everything is normal.
I even extract apks of all app that connect to the internet and scan them on virus total and .....etc nothing found
5- last thing i
1- I clear emmc and format data partition and then phone hard rest. when it's restart to boot I forced it to shut down
2- reinstall the whole rom
3- in the first boot the phone, as usual, take some time and then activating cellular service then choose the country ........etc
4- just I see the desktop the message appear again
that's the all app inclouding sys app:
package:/data/app/com.google.android.youtube-1/base.apk=com.google.android.youtube
package:/system/app/sysStasl/sysStasl.apk=com.transsion.statisticalsales
package:/system/framework/theme-res-moonbeam/theme-res-moonbeam.apk=com.tecno.theme.moonbeam
package:/system/priv-app/BeautySnap/BeautySnap.apk=com.gangyun.chuanyin
package:/system/app/SystemUpdateSdcard/SystemUpdateSdcard.apk=com.mediatek.systemupdate.server
package:/system/priv-app/TelephonyProvider/TelephonyProvider.apk=com.android.providers.telephony
package:/data/app/com.google.android.googlequicksearchbox-2/base.apk=com.google.android.googlequicksearchbox
package:/system/app/Camera/Camera.apk=com.mediatek.camera
package:/system/priv-app/CalendarProvider/CalendarProvider.apk=com.android.providers.calendar
package:/system/priv-app/MediaProvider/MediaProvider.apk=com.android.providers.media
package:/system/app/RawDataTest/RawDataTest.apk=com.goodix.rawdata
package:/data/app/com.orange.mobinilandme-1/base.apk=com.orange.mobinilandme
package:/system/priv-app/GoogleOneTimeInitializer/GoogleOneTimeInitializer.apk=com.google.android.onetimeinitializer
package:/system/plugin/FwkPlugin/FwkPlugin.apk=com.mediatek.fwk.plugin
package:/system/priv-app/WallpaperCropper/WallpaperCropper.apk=com.android.wallpapercropper
package:/system/app/SchedulePowerOnOff/SchedulePowerOnOff.apk=com.mediatek.schpwronoff
package:/system/app/Videos_Hios/Videos_Hios.apk=com.mediatek.videoplayer
package:/system/app/AgingTest/AgingTest.apk=com.example.jintest
package:/data/app/com.kunekt.abroad-1/base.apk=com.kunekt.abroad
package:/system/app/DocumentsUI/DocumentsUI.apk=com.android.documentsui
package:/system/app/Galaxy4/Galaxy4.apk=com.android.galaxy4
package:/system/priv-app/ExternalStorageProvider/ExternalStorageProvider.apk=com.android.externalstorage
package:/system/app/PowerSaveManagement/PowerSaveManagement.apk=com.rlk.powersavemanagement
package:/system/app/OOBE/OOBE.apk=com.mediatek.oobe
package:/system/app/YGPS/YGPS.apk=com.mediatek.ygps
package:/system/app/HTMLViewer/HTMLViewer.apk=com.android.htmlviewer
package:/data/app/com.whatsapp-2/base.apk=com.whatsapp
package:/system/framework/theme-res-food/theme-res-food.apk=com.tecno.theme.food
package:/system/priv-app/MmsService/MmsService.apk=com.android.mms.service
package:/system/priv-app/DownloadProvider/DownloadProvider.apk=com.android.providers.downloads
package:/system/app/EngineerMode/EngineerMode.apk=com.mediatek.engineermode
package:/system/app/Omacp/Omacp.apk=com.mediatek.omacp
package:/system/app/ApplicationsProvider/ApplicationsProvider.apk=com.android.providers.applications
package:/system/priv-app/ConfigUpdater/ConfigUpdater.apk=com.google.android.configupdater
package:/system/app/SoundRecorder/SoundRecorder.apk=com.android.soundrecorder
package:/system/priv-app/DefaultContainerService/DefaultContainerService.apk=com.android.defcontainer
package:/system/app/DownloadProviderUi/DownloadProviderUi.apk=com.android.providers.downloads.ui
package:/data/app/com.android.vending-2/base.apk=com.android.vending
package:/system/app/PacProcessor/PacProcessor.apk=com.android.pacprocessor
package:/system/priv-app/LovelyFontContainerService/LovelyFontContainerService.apk=com.lovelyfont.defcontainer
package:/system/app/CertInstaller/CertInstaller.apk=com.android.certinstaller
package:/system/priv-app/CarrierConfig/CarrierConfig.apk=com.android.carrierconfig
package:/system/framework/framework-res.apk=android
package:/system/priv-app/Contacts/Contacts.apk=com.android.contacts
package:/system/app/TecnoSpot/TecnoSpot.apk=com.rlk.tecnospot
package:/system/priv-app/Mms/Mms.apk=com.android.mms
package:/system/priv-app/Stk1/Stk1.apk=com.android.stk
package:/system/priv-app/BackupRestoreConfirmation/BackupRestoreConfirmation.apk=com.android.backupconfirm
package:/data/app/com.catalinagroup.callrecorder-1/base.apk=com.catalinagroup.callrecorder
package:/system/priv-app/StatementService/StatementService.apk=com.android.statementservice
package:/data/app/com.google.android.gm-1/base.apk=com.google.android.gm
package:/system/app/MtkFloatMenu/MtkFloatMenu.apk=com.mediatek.floatmenu
package:/system/priv-app/FmRadio/FmRadio.apk=com.mediatek.FMRadio
package:/system/app/HoloSpiralWallpaper/HoloSpiralWallpaper.apk=com.android.wallpaper.holospiral
package:/system/app/EVService/EVService.apk=com.eyeverify.evservice
package:/system/app/Calendar/Calendar.apk=com.android.calendar
package:/system/app/PhaseBeam/PhaseBeam.apk=com.android.phasebeam
package:/system/app/DrmProvider/DrmProvider.apk=com.mediatek.providers.drm
package:/data/app/com.google.android.instantapps.supervisor-1/base.apk=com.google.android.instantapps.supervisor
package:/system/priv-app/SetupWizard/SetupWizard.apk=com.google.android.setupwizard
package:/system/app/Microintelligence/Microintelligence.apk=com.tecno.microintelligence
package:/system/priv-app/SettingsProvider/SettingsProvider.apk=com.android.providers.settings
package:/system/app/MiraVision/MiraVision.apk=com.mediatek.miravision.ui
package:/system/priv-app/SharedStorageBackup/SharedStorageBackup.apk=com.android.sharedstoragebackup
package:/system/app/BatteryWarning/BatteryWarning.apk=com.mediatek.batterywarning
package:/data/app/com.google.android.music-1/base.apk=com.google.android.music
package:/system/app/PrintSpooler/PrintSpooler.apk=com.android.printspooler
package:/system/app/DataTransfer/DataTransfer.apk=com.mediatek.datatransfer
package:/system/app/BasicDreams/BasicDreams.apk=com.android.dreams.basic
package:/system/priv-app/InCallUI/InCallUI.apk=com.android.incallui
package:/system/priv-app/InputDevices/InputDevices.apk=com.android.inputdevices
package:/system/framework/theme-res-music/theme-res-music.apk=com.tecno.theme.music
package:/system/framework/theme-res-nokia/theme-res-nokia.apk=com.tecno.theme.nokia
package:/system/framework/mediatek-res/mediatek-res.apk=com.mediatek
package:/system/app/AutoDialer/AutoDialer.apk=com.example
package:/system/app/NoteBookTecno/NoteBookTecno.apk=com.mediatek.notebook
package:/data/app/com.google.android.apps.cloudprint-1/base.apk=com.google.android.apps.cloudprint
package:/system/app/Drive/Drive.apk=com.google.android.apps.docs
package:/data/app/com.google.android.apps.maps-1/base.apk=com.google.android.apps.maps
package:/data/app/com.cyin.himgr-1/base.apk=com.cyin.himgr
package:/system/framework/theme-res-xcrease/theme-res-xcrease.apk=com.tecno.theme.xcrease
package:/system/priv-app/Apps_Orange/Apps_Orange.apk=com.orange.update
package:/data/app/com.google.android.webview-1/base.apk=com.google.android.webview
package:/system/priv-app/Telecom/Telecom.apk=com.android.server.telecom
package:/system/app/GoogleContactsSyncAdapter/GoogleContactsSyncAdapter.apk=com.google.android.syncadapters.contacts
package:/system/app/KeyChain/KeyChain.apk=com.android.keychain
package:/data/app/com.android.chrome-1/base.apk=com.android.chrome
package:/system/app/Gallery2/Gallery2.apk=com.android.gallery3d
package:/system/priv-app/GooglePackageInstaller/GooglePackageInstaller.apk=com.google.android.packageinstaller
package:/data/app/com.google.android.gms-1/base.apk=com.google.android.gms
package:/system/priv-app/GoogleServicesFramework/GoogleServicesFramework.apk=com.google.android.gsf
package:/data/app/com.google.android.tts-1/base.apk=com.google.android.tts
package:/system/priv-app/CallLogBackup/CallLogBackup.apk=com.android.calllogbackup
package:/system/priv-app/GooglePartnerSetup/GooglePartnerSetup.apk=com.google.android.partnersetup
package:/data/app/com.google.android.videos-1/base.apk=com.google.android.videos
package:/system/priv-app/ProxyHandler/ProxyHandler.apk=com.android.proxyhandler
package:/system/app/LatinIME/LatinIME.apk=com.android.inputmethod.latin
package:/system/app/PhoenixBrowser/PhoenixBrowser.apk=com.transsion.phoenix
package:/system/app/Midtest/Midtest.apk=com.reallytek.wg
package:/system/priv-app/GoogleFeedback/GoogleFeedback.apk=com.google.android.feedback
package:/data/app/com.google.android.apps.photos-1/base.apk=com.google.android.apps.photos
package:/data/app/com.google.android.calendar-1/base.apk=com.google.android.calendar
package:/system/app/GoogleCalendarSyncAdapter/GoogleCalendarSyncAdapter.apk=com.google.android.syncadapters.calendar
package:/system/priv-app/ManagedProvisioning/ManagedProvisioning.apk=com.android.managedprovisioning
package:/system/app/WallpaperGallery/WallpaperGallery.apk=com.reallytek.gallery
package:/system/app/CalendarImporter/CalendarImporter.apk=com.mediatek.calendarimporter
package:/system/app/AtciService/AtciService.apk=com.mediatek.atci.service
package:/system/app/PhotoTable/PhotoTable.apk=com.android.dreams.phototable
package:/system/app/MTKThermalManager/MTKThermalManager.apk=com.mediatek.thermalmanager
package:/system/app/NoiseField/NoiseField.apk=com.android.noisefield
package:/system/app/BoomPlayer/BoomPlayer.apk=com.afmobi.boomplayer
package:/system/app/PartnerBookmarksProvider/PartnerBookmarksProvider.apk=com.android.providers.partnerbookmarks
package:/system/priv-app/GoogleLoginService/GoogleLoginService.apk=com.google.android.gsf.login
package:/system/app/BSPTelephonyDevTool/BSPTelephonyDevTool.apk=com.mtk.telephony
package:/system/app/LiveWallpapersPicker/LiveWallpapersPicker.apk=com.android.wallpaper.livepicker
package:/data/app/com.facebook.orca-2/base.apk=com.facebook.orca
package:/data/app/com.facebook.system-1/base.apk=com.facebook.system
package:/system/app/Launcher3/Launcher3.apk=com.android.hios.launcher3
package:/system/framework/tecno-res/tecno-res.apk=com.tecno
package:/system/vendor/operator/app/Baidu_Location/Baidu_Location.apk=com.baidu.map.location
package:/system/framework/theme-res-animal/theme-res-animal.apk=com.tecno.theme.animal
package:/system/framework/theme-res-autumn/theme-res-autumn.apk=com.tecno.theme.autumn
package:/system/framework/theme-res-bberry/theme-res-bberry.apk=com.tecno.theme.bberry
package:/system/priv-app/GoogleBackupTransport/GoogleBackupTransport.apk=com.google.android.backuptransport
package:/system/app/EyeVerify/EyeVerify.apk=com.rlk.eyeverify.activity
package:/system/app/BookmarkProvider/BookmarkProvider.apk=com.android.bookmarkprovider
package:/system/priv-app/Settings/Settings.apk=com.android.settings
package:/system/app/RlkAccount/RlkAccount.apk=com.rlk.mi
package:/data/app/com.termux-1/base.apk=com.termux
package:/system/app/LocationEM2/LocationEM2.apk=com.mediatek.lbs.em2.ui
package:/system/app/TecnoTheme/TecnoTheme.apk=com.infinix.xui_theme
package:/system/app/LovelyFonts/LovelyFonts.apk=com.ekesoo.font
package:/system/framework/theme-res-business/theme-res-business.apk=com.tecno.theme.business
package:/system/app/LiveWallpapers/LiveWallpapers.apk=com.android.wallpaper
package:/system/priv-app/VpnDialogs/VpnDialogs.apk=com.android.vpndialogs
package:/system/app/SystemUpdateAssistant/SystemUpdateAssistant.apk=com.mediatek.systemupdate.sysoper
package:/system/app/Hangouts/Hangouts.apk=com.google.android.talk
package:/system/app/Email/Email.apk=com.android.email
package:/system/priv-app/TeleService/TeleService.apk=com.android.phone
package:/system/priv-app/Shell/Shell.apk=com.android.shell
package:/system/app/Calculator/Calculator.apk=com.android.calculatortecno
package:/system/app/UserDictionaryProvider/UserDictionaryProvider.apk=com.android.providers.userdictionary
package:/system/priv-app/FusedLocation/FusedLocation.apk=com.android.location.fused
package:/system/app/DeskClock/DeskClock.apk=com.android.deskclock
package:/system/priv-app/SystemUI/SystemUI.apk=com.android.systemui
package:/system/app/Exchange2/Exchange2.apk=com.android.exchange
package:/system/app/BluetoothMidiService/BluetoothMidiService.apk=com.android.bluetoothmidiservice
package:/data/app/com.facebook.appmanager-1/base.apk=com.facebook.appmanager
package:/system/app/SystemUpdate/SystemUpdate.apk=com.mediatek.systemupdate
package:/system/app/FileManager/FileManager.apk=com.mediatek.filemanager
package:/system/app/MTKLogger/MTKLogger.apk=com.mediatek.mtklogger
package:/system/app/Bluetooth/Bluetooth.apk=com.android.bluetooth
package:/system/priv-app/ContactsProvider/ContactsProvider.apk=com.android.providers.contacts
package:/system/app/CaptivePortalLogin/CaptivePortalLogin.apk=com.android.captiveportallogin
package:/system/app/Weather_tecno/Weather_tecno.apk=com.reallytek.weather
package:/system/plugin/DataProtection/DataProtection.apk=com.mediatek.dataprotection
Not: that's after I used my phone and install some app I use
do any suspicious app exist in this list ????
