Original topic:

Remite or pre installed MDMapp and accessibility based malware or enterprise management.

(Topic created on: 05-11-2025 05:37 PM)
60 Views
Jamiexo
Beginner Level 2
Options
Galaxy S

3rd factory reset in just over a year. Super cool. I've never had anything but flagship S series phones and this will be my last. Unreal. 

Screenshot_20250511_173218_Samsung Notes.jpg

0 Likes
5 Comments
RedDogRabbit
Expert Level 5
Galaxy S

Is it your device, or employer provided? 

It's NOT "malware". 

0 Likes
Jamiexo
Beginner Level 2
Galaxy S
It's my device, not a work phone. And no it's not mallard it's someone accessing and restricting my device. I brought this to Samsung less than a month ago. "Factory reset immediately". I did, got contacted by my bank, lost a ton of data and time trying to meticulously bring apps or ac mounts back. Even got a new modem and router.
0 Likes
RedDogRabbit
Expert Level 5
Galaxy S

SELinux Enforcing, means (in part), that the device has a Locked Bootloader, and the user has limited access to the internal data.

Think of it like a Windows computer, where you don't have Administrator Access. 

It's not "someone" restricting your access, that's how it is with all devices where you don't have Root Access. 

 

0 Likes
Helenna
Moderator
Moderator
Options
Galaxy S

Hi Jamiexo,

Thank you for bringing this to our attention, and we are sorry to hear about your experience. We understand how concerning it can be to encounter recurring system-level apps or management tools after performing multiple factory resets.

SELinux enforcing and a locked bootloader are standard on all Samsung devices to protect system integrity and user data. If you're seeing MDM or accessibility-based apps reappear after resets, the device may be enrolled in an enterprise program or provisioned by a carrier.

We recommend checking Device Admin Apps in Settings and contact our Live chat support team with your device details so we can investigate further.

https://www.samsung.com/ca/support/contact/

0 Likes
Jamiexo
Beginner Level 2
Galaxy S

Ya there's nothing in te admin section, even tho at times I couldn't remove accounts or similar thing done to 'my admin policy". Was just on with support using Tudor and got froze out and they left with no follow up. I have a ton of files, logs, screen records that prove enforcement policies from remote adb and fastboot commands have been controlling and monitoring my device and we're installed a year before I bought it. The bootloader loads from a cache file because it can't find the proper boot file and mdm is in irs place. Eventually after every factory reset my phone gets more and more unstable and starts taking over and deleting or installing things, using my camera, monitoring my network traffic, keystrokes. Everything. I bought it "new' like this. Recently I was even able to 7z the whole ROOT file system as it suddenly became viewable when I was trying to remove the processes involved with the enforcement policies and device control/monitoring. My bank even locked my account at one point over this.

0 Likes