weird sound clip plays randomly. how to track/find it. was I hacked?
0
votes
0
answers
152
views
Samsung Note 8 running Android b. 9 here is a screenshot of SW info:
My Android is playing weird 5-10 sec sound clip at random times. It sounds like a combo of a hippo and then a slot machine paying out winnings.
But I can't figure out where the sound is coming from. I've turned off notifications for all apps, and even made the default android notification SILENT.
But, it's still happening several times a day. Is there any way /software I could install to watch the OS and figure out /teach where this is coming from... Or at least where it's stored so I can at least delete it.
I'm worried it might be some malware. But I've scanned using lookout several times.
UPDATE:
---
per Suggestion, I installed/used ADB on my MacOS Catalina & got some info:
1. first took care of brew:
*

brew update
* brew upgrade
* brew cleanup
* brew doctor
1. installed ADB on my Mac:
* brew install android-platform-tools
1. checked to see if ADB could see my phone, ran adb devices
==> actually got a weird error the first time:
> adb server version (36) doesn't match this client (41); killing...
> * daemon started successfully
>
> List of devices attached
> ce071827a99a952b057e device
1. ***somehow*** fixed this, by doing nothing more than running the following commands a few times:
* adb
* adb devices
* which adb
* adb devices
* whereis adb
1. ***After that***, I tried adb devices
again, this time I got:
> List of devices attached
> ce071827a99a952b057e device
1. then ran adb shell dumpsys audio
==> huge dump, so trimmed it - with a few pre-steps in case I was going to have to run this a few times:
1. ran adb shell
and got this (Android OS shell?) prompt: **greatqlte:/ $
** ==> then ran to rim results/narrow the time a bit:
1. **greatqlte:/ $
** dumpsys audio | grep "04-28 18:0."
04-28 18:00:02:105 requestAudioFocus() from uid/pid 10009/6846 clientId=android.media.AudioManager@5492af0 callingPack=com.android.systemui req=3 flags=0x0 sdk=28
04-28 18:00:04:680 abandonAudioFocus() from uid/pid 10009/6846 clientId=android.media.AudioManager@5492af0
04-28 18:00:01:954 new player piid:107767 uid/pid:10009/6846 type:android.media.MediaPlayer attr:AudioAttributes: usage=USAGE_UNKNOWN content=CONTENT_TYPE_UNKNOWN flags=0x0 tags= bundle=null
04-28 18:00:01:955 player piid:107767 new AudioAttributes:AudioAttributes: usage=USAGE_NOTIFICATION_EVENT content=CONTENT_TYPE_UNKNOWN flags=0x0 tags= bundle=null
04-28 18:00:01:959 player piid:107767 has OP_PLAY_AUDIO:true in uid:10009
04-28 18:00:02:611 player piid:107767 state:started uid:10009
04-28 18:00:02:617 releasing player piid:107727
04-28 18:00:04:671 player piid:107767 state:stopped uid:10009
04-28 18:02:31:090 new player piid:107775 uid/pid:1000/3362 type:android.media.MediaPlayer attr:AudioAttributes: usage=USAGE_UNKNOWN content=CONTENT_TYPE_UNKNOWN flags=0x0 tags= bundle=null
04-28 18:02:31:151 player piid:107775 new AudioAttributes:AudioAttributes: usage=USAGE_NOTIFICATION content=CONTENT_TYPE_SONIFICATION flags=0x0 tags= bundle=null
04-28 18:02:31:152 player piid:107775 has OP_PLAY_AUDIO:true in uid:1000
04-28 18:02:31:221 player piid:107775 state:started uid:1000
04-28 18:02:32:923 player piid:107775 state:stopped uid:1000
04-28 18:02:32:926 releasing player piid:107775
04-28 18:05:46:607 new player piid:107783 uid/pid:1000/3362 type:android.media.MediaPlayer attr:AudioAttributes: usage=USAGE_UNKNOWN content=CONTENT_TYPE_UNKNOWN flags=0x0 tags= bundle=null
04-28 18:05:46:685 player piid:107783 new AudioAttributes:AudioAttributes: usage=USAGE_NOTIFICATION content=CONTENT_TYPE_SONIFICATION flags=0x0 tags= bundle=null
04-28 18:05:46:687 player piid:107783 has OP_PLAY_AUDIO:true in uid:1000
04-28 18:05:46:822 player piid:107783 state:started uid:1000
04-28 18:05:48:580 player piid:107783 state:stopped uid:1000
04-28 18:05:48:596 releasing player piid:107783
04-28 18:05:52:569 player piid:106799 state:started uid:1000
1. then I looked for packages that matched?? with:
**greatqlte:/ $
** cmd package list packages -U | grep "10009"
package:com.samsung.android.app.aodservice uid:10009
package:com.sec.android.easyonehand uid:10009
package:com.sec.android.cover.ledcover uid:10009
package:com.samsung.desktopsystemui uid:10009
package:com.android.systemui uid:10009
Asked by Flak DiNenno
(101 rep)
Apr 25, 2021, 04:04 PM
Last activity: Apr 28, 2021, 10:48 PM
Last activity: Apr 28, 2021, 10:48 PM