Suspicious Files and Folders coming back after repeated deletion.

[Suvadeep1982]

Hello, I can see these 2 suspicious folders in the internal storage of my device. Galaxy Note 9 Running One UI 2.1 Not Rooted. They are mentioned below.

1. .vdevdir folder which is a hidden folder. Inside this .vdevdir there is a file .vdevid.LOCK

2. Tencent folder which is not a hidden folder. Inside this folder there are multiple folders. They are as follows. Tencent>msflogs>com>tencent>mobileqq>log

I have deleted these folders 3 times and this is the 4th time they have come back again. They don't come back immediately after deletion but after couple of days or a reboot they come back and both the folders come back at the same time which means they are connected somehow.

I have scanned my phone with Kaspersky Internet Security (Paid Version), Dr. Web free edition and also Samsung's built in Security by McAfee and none of them has detected any malware in my device. I have also specifically scanned those suspicious folders but no detection.

Google Play Protect didn't find any problem in my device.

I have never installed any Tencent apps. I generally don't install apps from outside Playstore. And also I don't remeber clicking on any suspicious links which I never do.

The only app which I have ever side loaded is GCam. But it is from a trusted source. Also before installing the apk I have uploaded that apk to virus total website for security check and it came clean.

Then why are these folders coming back again and again after repeated deletion?

I have attached all the screenshots.

Can anyone put some light on this situation?

Thanks. 🙂

[Suvadeep1982]

yes. factory reset is the only option i have left with.

[smilysahul]

don't do reset andall. this is not at all a issue. these are folders which are used by the installed and preloaded apps in your mobile. don't worry

[TimonN]

This issue is already posted by few users on reddit , some forums.
It seems like tencent provides their SDK to many games.
So you need to identify such app or game after removing that app, I think you can permanently delete these tencent folders , files.
Check reddit thread on this.
Games like CODM, Ludo World, Chess Rush

[Suvadeep1982]

okay will check.

[TimonN]

Let us know your findings so we can be aware of such apps.

[Suvadeep1982]

will do

[Dilli]

These are hidden apps system folder and you can not just delete them. They will again appear when the apps related with that file is used. First of all why are you digging into those system files and folder. Please ignore them and don't fiddle around the operating system files or folders.🤔🤔
Thats the reason they have not been detected as malware.

now mark this as solution as all your doubts have been answered. Cheers

[Suvadeep1982]

Finally got why Tencent folder coming back after repeated deletion. I have Mi Band 4 and Mi fit app installed to link with it. Check the link below for more details.
https://medium.com/@cirku17/more-mifit-2-app-analysis-e2bbb4674093
I don't think that app is safe to use. Privacy concern. Uninstalling now.