[General Questions and Answers] ahmedsheme:
I tried:

1- scan with more than 10 antiviruses nothing found

2 -reflash original rom and after first boot just seen the desktop it appears again before I even do anything

3- after this message aper again I unpack system.img from the C9 firmware using MTK extractor tool and then compare

system/app

system/vendor/app

system/priv-app

to the files on my phone and found no change at all or any different app

4- I tried I used NetGuard app to try to identify any suspicious connection to the internet everything is normal.

I even extract apks of all app that connect to the internet and scan them on virus total and .....etc nothing found

5- last thing i

1- I clear emmc and format data partition and then phone hard rest. when it's restart to boot I forced it to shut down

2- reinstall the whole rom

3- in the first boot the phone, as usual, take some time and then activating cellular service then choose the country ........etc

4- just I see the desktop the message appear again :(:(

that's the all app inclouding sys app:

package:/data/app/com.google.android.youtube-1/base.apk=com.google.android.youtube

package:/system/app/sysStasl/sysStasl.apk=com.transsion.statisticalsales

package:/system/framework/theme-res-moonbeam/theme-res-moonbeam.apk=com.tecno.theme.moonbeam

package:/system/priv-app/BeautySnap/BeautySnap.apk=com.gangyun.chuanyin

package:/system/app/SystemUpdateSdcard/SystemUpdateSdcard.apk=com.mediatek.systemupdate.server

package:/system/priv-app/TelephonyProvider/TelephonyProvider.apk=com.android.providers.telephony

package:/data/app/com.google.android.googlequicksearchbox-2/base.apk=com.google.android.googlequicksearchbox

package:/system/app/Camera/Camera.apk=com.mediatek.camera

package:/system/priv-app/CalendarProvider/CalendarProvider.apk=com.android.providers.calendar

package:/system/priv-app/MediaProvider/MediaProvider.apk=com.android.providers.media

package:/system/app/RawDataTest/RawDataTest.apk=com.goodix.rawdata

package:/data/app/com.orange.mobinilandme-1/base.apk=com.orange.mobinilandme

package:/system/priv-app/GoogleOneTimeInitializer/GoogleOneTimeInitializer.apk=com.google.android.onetimeinitializer

package:/system/plugin/FwkPlugin/FwkPlugin.apk=com.mediatek.fwk.plugin

package:/system/priv-app/WallpaperCropper/WallpaperCropper.apk=com.android.wallpapercropper

package:/system/app/SchedulePowerOnOff/SchedulePowerOnOff.apk=com.mediatek.schpwronoff

package:/system/app/Videos_Hios/Videos_Hios.apk=com.mediatek.videoplayer

package:/system/app/AgingTest/AgingTest.apk=com.example.jintest

package:/data/app/com.kunekt.abroad-1/base.apk=com.kunekt.abroad

package:/system/app/DocumentsUI/DocumentsUI.apk=com.android.documentsui

package:/system/app/Galaxy4/Galaxy4.apk=com.android.galaxy4

package:/system/priv-app/ExternalStorageProvider/ExternalStorageProvider.apk=com.android.externalstorage

package:/system/app/PowerSaveManagement/PowerSaveManagement.apk=com.rlk.powersavemanagement

package:/system/app/OOBE/OOBE.apk=com.mediatek.oobe

package:/system/app/YGPS/YGPS.apk=com.mediatek.ygps

package:/system/app/HTMLViewer/HTMLViewer.apk=com.android.htmlviewer

package:/data/app/com.whatsapp-2/base.apk=com.whatsapp

package:/system/framework/theme-res-food/theme-res-food.apk=com.tecno.theme.food

package:/system/priv-app/MmsService/MmsService.apk=com.android.mms.service

package:/system/priv-app/DownloadProvider/DownloadProvider.apk=com.android.providers.downloads

package:/system/app/EngineerMode/EngineerMode.apk=com.mediatek.engineermode

package:/system/app/Omacp/Omacp.apk=com.mediatek.omacp

package:/system/app/ApplicationsProvider/ApplicationsProvider.apk=com.android.providers.applications

package:/system/priv-app/ConfigUpdater/ConfigUpdater.apk=com.google.android.configupdater

package:/system/app/SoundRecorder/SoundRecorder.apk=com.android.soundrecorder

package:/system/priv-app/DefaultContainerService/DefaultContainerService.apk=com.android.defcontainer

package:/system/app/DownloadProviderUi/DownloadProviderUi.apk=com.android.providers.downloads.ui

package:/data/app/com.android.vending-2/base.apk=com.android.vending

package:/system/app/PacProcessor/PacProcessor.apk=com.android.pacprocessor

package:/system/priv-app/LovelyFontContainerService/LovelyFontContainerService.apk=com.lovelyfont.defcontainer

package:/system/app/CertInstaller/CertInstaller.apk=com.android.certinstaller

package:/system/priv-app/CarrierConfig/CarrierConfig.apk=com.android.carrierconfig

package:/system/framework/framework-res.apk=android

package:/system/priv-app/Contacts/Contacts.apk=com.android.contacts

package:/system/app/TecnoSpot/TecnoSpot.apk=com.rlk.tecnospot

package:/system/priv-app/Mms/Mms.apk=com.android.mms

package:/system/priv-app/Stk1/Stk1.apk=com.android.stk

package:/system/priv-app/BackupRestoreConfirmation/BackupRestoreConfirmation.apk=com.android.backupconfirm

package:/data/app/com.catalinagroup.callrecorder-1/base.apk=com.catalinagroup.callrecorder

package:/system/priv-app/StatementService/StatementService.apk=com.android.statementservice

package:/data/app/com.google.android.gm-1/base.apk=com.google.android.gm

package:/system/app/MtkFloatMenu/MtkFloatMenu.apk=com.mediatek.floatmenu

package:/system/priv-app/FmRadio/FmRadio.apk=com.mediatek.FMRadio

package:/system/app/HoloSpiralWallpaper/HoloSpiralWallpaper.apk=com.android.wallpaper.holospiral

package:/system/app/EVService/EVService.apk=com.eyeverify.evservice

package:/system/app/Calendar/Calendar.apk=com.android.calendar

package:/system/app/PhaseBeam/PhaseBeam.apk=com.android.phasebeam

package:/system/app/DrmProvider/DrmProvider.apk=com.mediatek.providers.drm

package:/data/app/com.google.android.instantapps.supervisor-1/base.apk=com.google.android.instantapps.supervisor

package:/system/priv-app/SetupWizard/SetupWizard.apk=com.google.android.setupwizard

package:/system/app/Microintelligence/Microintelligence.apk=com.tecno.microintelligence

package:/system/priv-app/SettingsProvider/SettingsProvider.apk=com.android.providers.settings

package:/system/app/MiraVision/MiraVision.apk=com.mediatek.miravision.ui

package:/system/priv-app/SharedStorageBackup/SharedStorageBackup.apk=com.android.sharedstoragebackup

package:/system/app/BatteryWarning/BatteryWarning.apk=com.mediatek.batterywarning

package:/data/app/com.google.android.music-1/base.apk=com.google.android.music

package:/system/app/PrintSpooler/PrintSpooler.apk=com.android.printspooler

package:/system/app/DataTransfer/DataTransfer.apk=com.mediatek.datatransfer

package:/system/app/BasicDreams/BasicDreams.apk=com.android.dreams.basic

package:/system/priv-app/InCallUI/InCallUI.apk=com.android.incallui

package:/system/priv-app/InputDevices/InputDevices.apk=com.android.inputdevices

package:/system/framework/theme-res-music/theme-res-music.apk=com.tecno.theme.music

package:/system/framework/theme-res-nokia/theme-res-nokia.apk=com.tecno.theme.nokia

package:/system/framework/mediatek-res/mediatek-res.apk=com.mediatek

package:/system/app/AutoDialer/AutoDialer.apk=com.example

package:/system/app/NoteBookTecno/NoteBookTecno.apk=com.mediatek.notebook

package:/data/app/com.google.android.apps.cloudprint-1/base.apk=com.google.android.apps.cloudprint

package:/system/app/Drive/Drive.apk=com.google.android.apps.docs

package:/data/app/com.google.android.apps.maps-1/base.apk=com.google.android.apps.maps

package:/data/app/com.cyin.himgr-1/base.apk=com.cyin.himgr

package:/system/framework/theme-res-xcrease/theme-res-xcrease.apk=com.tecno.theme.xcrease

package:/system/priv-app/Apps_Orange/Apps_Orange.apk=com.orange.update

package:/data/app/com.google.android.webview-1/base.apk=com.google.android.webview

package:/system/priv-app/Telecom/Telecom.apk=com.android.server.telecom

package:/system/app/GoogleContactsSyncAdapter/GoogleContactsSyncAdapter.apk=com.google.android.syncadapters.contacts

package:/system/app/KeyChain/KeyChain.apk=com.android.keychain

package:/data/app/com.android.chrome-1/base.apk=com.android.chrome

package:/system/app/Gallery2/Gallery2.apk=com.android.gallery3d

package:/system/priv-app/GooglePackageInstaller/GooglePackageInstaller.apk=com.google.android.packageinstaller

package:/data/app/com.google.android.gms-1/base.apk=com.google.android.gms

package:/system/priv-app/GoogleServicesFramework/GoogleServicesFramework.apk=com.google.android.gsf

package:/data/app/com.google.android.tts-1/base.apk=com.google.android.tts

package:/system/priv-app/CallLogBackup/CallLogBackup.apk=com.android.calllogbackup

package:/system/priv-app/GooglePartnerSetup/GooglePartnerSetup.apk=com.google.android.partnersetup

package:/data/app/com.google.android.videos-1/base.apk=com.google.android.videos

package:/system/priv-app/ProxyHandler/ProxyHandler.apk=com.android.proxyhandler

package:/system/app/LatinIME/LatinIME.apk=com.android.inputmethod.latin

package:/system/app/PhoenixBrowser/PhoenixBrowser.apk=com.transsion.phoenix

package:/system/app/Midtest/Midtest.apk=com.reallytek.wg

package:/system/priv-app/GoogleFeedback/GoogleFeedback.apk=com.google.android.feedback

package:/data/app/com.google.android.apps.photos-1/base.apk=com.google.android.apps.photos

package:/data/app/com.google.android.calendar-1/base.apk=com.google.android.calendar

package:/system/app/GoogleCalendarSyncAdapter/GoogleCalendarSyncAdapter.apk=com.google.android.syncadapters.calendar

package:/system/priv-app/ManagedProvisioning/ManagedProvisioning.apk=com.android.managedprovisioning

package:/system/app/WallpaperGallery/WallpaperGallery.apk=com.reallytek.gallery

package:/system/app/CalendarImporter/CalendarImporter.apk=com.mediatek.calendarimporter

package:/system/app/AtciService/AtciService.apk=com.mediatek.atci.service

package:/system/app/PhotoTable/PhotoTable.apk=com.android.dreams.phototable

package:/system/app/MTKThermalManager/MTKThermalManager.apk=com.mediatek.thermalmanager

package:/system/app/NoiseField/NoiseField.apk=com.android.noisefield

package:/system/app/BoomPlayer/BoomPlayer.apk=com.afmobi.boomplayer

package:/system/app/PartnerBookmarksProvider/PartnerBookmarksProvider.apk=com.android.providers.partnerbookmarks

package:/system/priv-app/GoogleLoginService/GoogleLoginService.apk=com.google.android.gsf.login

package:/system/app/BSPTelephonyDevTool/BSPTelephonyDevTool.apk=com.mtk.telephony

package:/system/app/LiveWallpapersPicker/LiveWallpapersPicker.apk=com.android.wallpaper.livepicker

package:/data/app/com.facebook.orca-2/base.apk=com.facebook.orca

package:/data/app/com.facebook.system-1/base.apk=com.facebook.system

package:/system/app/Launcher3/Launcher3.apk=com.android.hios.launcher3

package:/system/framework/tecno-res/tecno-res.apk=com.tecno

package:/system/vendor/operator/app/Baidu_Location/Baidu_Location.apk=com.baidu.map.location

package:/system/framework/theme-res-animal/theme-res-animal.apk=com.tecno.theme.animal

package:/system/framework/theme-res-autumn/theme-res-autumn.apk=com.tecno.theme.autumn

package:/system/framework/theme-res-bberry/theme-res-bberry.apk=com.tecno.theme.bberry

package:/system/priv-app/GoogleBackupTransport/GoogleBackupTransport.apk=com.google.android.backuptransport

package:/system/app/EyeVerify/EyeVerify.apk=com.rlk.eyeverify.activity

package:/system/app/BookmarkProvider/BookmarkProvider.apk=com.android.bookmarkprovider

package:/system/priv-app/Settings/Settings.apk=com.android.settings

package:/system/app/RlkAccount/RlkAccount.apk=com.rlk.mi

package:/data/app/com.termux-1/base.apk=com.termux

package:/system/app/LocationEM2/LocationEM2.apk=com.mediatek.lbs.em2.ui

package:/system/app/TecnoTheme/TecnoTheme.apk=com.infinix.xui_theme

package:/system/app/LovelyFonts/LovelyFonts.apk=com.ekesoo.font

package:/system/framework/theme-res-business/theme-res-business.apk=com.tecno.theme.business

package:/system/app/LiveWallpapers/LiveWallpapers.apk=com.android.wallpaper

package:/system/priv-app/VpnDialogs/VpnDialogs.apk=com.android.vpndialogs

package:/system/app/SystemUpdateAssistant/SystemUpdateAssistant.apk=com.mediatek.systemupdate.sysoper

package:/system/app/Hangouts/Hangouts.apk=com.google.android.talk

package:/system/app/Email/Email.apk=com.android.email

package:/system/priv-app/TeleService/TeleService.apk=com.android.phone

package:/system/priv-app/Shell/Shell.apk=com.android.shell

package:/system/app/Calculator/Calculator.apk=com.android.calculatortecno

package:/system/app/UserDictionaryProvider/UserDictionaryProvider.apk=com.android.providers.userdictionary

package:/system/priv-app/FusedLocation/FusedLocation.apk=com.android.location.fused

package:/system/app/DeskClock/DeskClock.apk=com.android.deskclock

package:/system/priv-app/SystemUI/SystemUI.apk=com.android.systemui

package:/system/app/Exchange2/Exchange2.apk=com.android.exchange

package:/system/app/BluetoothMidiService/BluetoothMidiService.apk=com.android.bluetoothmidiservice

package:/data/app/com.facebook.appmanager-1/base.apk=com.facebook.appmanager

package:/system/app/SystemUpdate/SystemUpdate.apk=com.mediatek.systemupdate

package:/system/app/FileManager/FileManager.apk=com.mediatek.filemanager

package:/system/app/MTKLogger/MTKLogger.apk=com.mediatek.mtklogger

package:/system/app/Bluetooth/Bluetooth.apk=com.android.bluetooth

package:/system/priv-app/ContactsProvider/ContactsProvider.apk=com.android.providers.contacts

package:/system/app/CaptivePortalLogin/CaptivePortalLogin.apk=com.android.captiveportallogin

package:/system/app/Weather_tecno/Weather_tecno.apk=com.reallytek.weather

package:/system/plugin/DataProtection/DataProtection.apk=com.mediatek.dataprotection

Not: that's after I used my phone and install some app I use

:eek::eek::eek:

do any suspicious app exist in this list ????