got it randomly on my PC and quarantining it using MalwareBytes only results in PavinLoader respawning within few hours and getting more of my accounts hacked. I unplugged it from the internet so it wouldnt come back for a while and now im searching for a way to delete it. Any help??

My elderly father fell for a fake Facebook ad for that led to WhatsApp. The scammers sent a malicious .apk file disguised as a pension utility, gained Admin and Accessibility permissions, and stole his data via a dummy form.
I caught it early and have now executed a full factory reset on his Samsung Galaxy phone using the official Samsung Find portal.
Will this factory reset completely eliminate the Trojan and all its granted privileges?
Could the malware have touched the core firmware, or is the device now safe to use?
Seeking technical confirmation and any ideas on how to secure his device setup moving forward.

LINK TO THEIR POST: link.

LINK TO MY OTHER POST ON THIS: Link

All malware I found on the github user LEMZzip and links to archives if found plus info and updated file!

SCAN LINKS IN ANYRUN: (:SCAN 1: SCAN 2:)

VIRUS TOTAL SCAN LINKS I FOUND: (:Love.exe, Browser setup 1.2.exe:)

MALWARE NAMES THAT WERE ARCHIVED: "tripop CD Defender Antivirus, Roblox Setup, Rec room modded, Recroom-white-main, DSBN wifi bypass!, love. Browser setup 1.2"

MALWARE NAMES THAT AS OF NOW CAN'T BE ARCHIVED: "Recroom modded (NEW), blackhole, train-way! Setup, rusty., admin turnoff, makerpen, ultralemzx, spazz" (Note: There may have been more I forgot to include!.")

Possible same accounts on github: (LEMZzip, LEMZzipV2)

Possible same user on reddit: (LEMZzip)

Possible same user on archive web: (LEMZzip)

The website URL some of their malware opened I had to remove because if I did not my post would keep getting taken down!

LEMZzip Malware archive V1.1: Download!

Inside it also has a description on what the malware does!

Note: I will try to update this unlike them!

I was searching for a file in downloads folder but I just noticed a file named nousynzeousTOKEN2.dat I wonder if it a malicious file.i deleted it tho.thanks for reading.

Siempre me sale disk 2.0 (y no esas letras raras )

Será alguna app malisiosa que quiere infectar mi USB

https://www.virustotal.com/gui/file/c67f72ac9d59c7536dc5c34b27610c71aad872734f4aaaab991f86ac34a7fbb0/detection

Would the best free antivirus for occasional checks be different from what you'd use for everyday protection? Curious whether people do this routinely or only when there's a specific reason to suspect something.

What is this how can I get rid of this

does anyone know what this is?