Green bubble with face has appeared phone and won't go away--NEED HELP PLEASE

[Fritomisto]

A strange green bubble with a face appeared on my phone today after I opened Facebook, and I'm concerned it's a hack. I was warned that a friend's Facebook Messenger had been hacked, so that's why I am suspicious. What this does is hang on the side of the phone, but I can move it around, but it goes right back, and when I press it, it brings up a box about selecting keyboards. I have not done anything to change or try pressing any other buttons but the default Samsung Button. I can escape from the box, and it has not interfered with phone operation so far. I tried ES file explorer using the floating logger removal setting, but that didn't work.

I have Lookout and scanned my phone, a Samsung Note 3 (yes I am a hold out, although I did but the S7 Explode version, and plan to m upgrade). But it didn't find anything amiss.

I have removed my SD card for safekeeping, but I don't know what else to do, or if it is a hack if the card files would be safe now either.

Help would be REALLY APPRECIATED.

Thank You.

[mo123]

Remove ES File Explorer.

[bluesmanuk]

It does indeed look like an es file explorer issue.

It has come under a lot of fire recently with attempts to add bloatware to the app in order to get you to pay for the full version.

You might want to explore this option to see if the issue goes away.

The circle in the video looks a little different but in the 8 months since the video was produced there will have been new updates to the app, which may also include interface updates.

Nothing to lose by checking though.

https://www.youtube.com/watch?v=8cZnOg0KjBs

[Fritomisto]

The bubble was there BEFORE I downloaded ES file explorer. I only downloaded that to try a solution based upon other floating bubble solutiona I'be seen. I will delete it anyway however as it didn't do anything.

[bluesmanuk]

I think that I know what it may be.

You mentioned that it happened when you opened the Facebook app, so could it be that you have Chat Heads turned on?

https://www.youtube.com/watch?v=EQl0Her2le0

[Fritomisto]

Chat heads are off. They were on, but are now off. However this thing does not offer an X for me to drag it to either.

Any other thoughts? Should I call Verizon? I'm afraid to open any sensitive files that require a password.

[tattman65]

what keyboard do you have on the phone ? alot of keyboard apps use icons like that. do you use whatsapp ? or anything like that ? I saw swype maybe thats it

[Fritomisto]

I had What's app on the phone, but never used it and justuninstalled it. I have had Swype forever but actually never used it on it Note S3. It is set up to be used, but I actually can't find a trace of the program itself in the list of apps.

I think i migrated it over from a previous phone I had before this one. But I doubt it's that. Why would that suddenly act up?

[Fritomisto]

The only other keyboard app I have is the generic Samsung keyboard

[bluesmanuk]

Can you list all the apps that you have on the phone?

Another option is to kill each app process one by one until the bubble dissapears and then that should tell you if it is associated with an app.

[Fritomisto]

1Password
com.agilebits.onepassword
360 Battery Plus
com.qihoo.batterysaverplus
@Voice Aloud Reader
com.hyperionics.avar
Adobe Flash Player 11.1
com.adobe.flashplayer
AirDroid
com.sand.airdroid
AlReader
com.neverland.alreader
Amazon Kindle
com.amazon.kindlefs
Amazon Shopping
com.amazon.mShop.android.shopping
AMC Theatres
com.amc
American Airlines
com.aa.android
Amex Mobile
com.americanexpress.android.acctsvcs.us
Android Auto
com.google.android.projection.gearhead
Android Data Recovery
com.iskysoft.dr.service
Apk Installer
com.graphilos.apkinst
AZ Screen Recorder
com.hecorat.screenrecorder.free
Barcode Scanner
com.google.zxing.client.android
BlueMail
me.bluemail.mail
Boomerang
com.instagram.boomerang
Business Calendar
com.appgenix.bizcal
Calendar
com.google.android.calendar
CamScanner
com.intsig.camscanner
CastBox
com.podcast.podcasts
CEC Connect
com.clintonelectronics.android
Chicago Tribune
com.apptivateme.next.ct
Chord!
com.rabugentom.chordfree
Cinemark Theatres
com.cinemark.mobile
Citi Mobile
com.citi.citimobile
CM Browser
com.ksmobile.cb
CNN
com.cnn.mobile.android.phone
Color Flashlight
com.socialnmobile.flashlight
Connect
net.comcast.ottclient
ConvertPad - Unit Converter
com.mathpad.mobile.android.wt.unit
Countable
com.countable.countableapp
DataSize Explorer
com.nexradsoftware.datasizeexplorer
Dictionary
com.dictionary
Digital Member Card
edu.artic.digitalmembercard
Docs
com.google.android.apps.docs.editors.docs
Docs To Go
com.dataviz.docstogo
Doodle
com.doodle.android
DoorDash
com.dd.doordash
Dr.Fone for Android
com.wondershare.dr.service
Drippler
com.drippler.android.updates
Duplicate Contacts
com.accaci
Earth
com.google.earth
Excel
com.microsoft.office.excel
Expedia
com.expedia.bookings
Facebook
com.facebook.katana
Fifth Third
com.clairmail.fth
Firefox
org.mozilla.firefox
Flashlight
com.devuni.flashlight
Flixster
net.flixster.android
Flixster Video
com.flixster.video
Fly Delta
com.delta.mobile.android
FonePaw
com.fonepaw.app
Gauge Battery Widget 2015
net.hubalek.android.gaugebattwidget
Gesture Search
com.google.android.apps.gesturesearch
GIF Talk
com.cmcm.gifkeyboard
GolfNow
com.golfnow.android.teetimes
Google My Business
com.google.android.apps.vega
Google Now Launcher
com.google.android.launcher
Google Play services for Instant Apps
com.google.android.instantapps.supervisor
Google Text-to-speech Engine
com.google.android.tts
Google Trips
com.google.android.apps.travel.onthego
Groupon
com.groupon
Grubhub
com.grubhub.android
gStrings
org.cohortor.gstrings
Guitar chords and tabs
org.xssembler.chordsplus
Hangouts Dialer
com.google.android.apps.hangoutsdialer
HBO GO
com.HBO
HBO NOW
com.hbo.hbonow
Hilton Honors
com.hilton.android.hhonors
Home
com.google.android.apps.chromecast.app
Horizon
com.hvt.horizon
Hulu
com.hulu.plus
Inkpad NotePad
com.workpail.inkpad.notepad.notes
Instagram
com.instagram.android
Karl's Mortgage Calculator
com.drcalculator.android.mortgage
KAYAK
com.kayak.android
Key Ring
com.froogloid.kring.google.zxing.client.android
Kinsa
com.kinsa
Kohls
com.kohls.mcommerce.opal
Layout
com.instagram.layout
Lettuce Eats
com.cellit.flexilist.leye
Light Meter
com.keuwl.lightmeter
LightMeter
com.dq.fotometro
LinkedIn
com.linkedin.android
List My Apps
de.onyxbits.listmyapps
Lookout
com.lookout
M-DOCK
com.cccsoft.CCCMobile
Marriott
com.marriott.mrt
Messenger
com.facebook.orca
Microsoft Remote Desktop
com.microsoft.rdc.android
MobileKnox
de.javawi.mobileknox
MobileKnox Premium Key
de.javawi.mobileknox.premiumkey
Mobizen for SAMSUNG
com.rsupport.mobizen.sec
MS Mobile
com.morganstanley.clientmobile.prod
Museums-Boston
com.androidsfuture.museumsboston
Museums-Chicago
com.androidsfuture.museumschicago
Museums-NYC
com.androidsfuture.museumsnyc
My Account
com.comcast.cvs.android
My CDGA
com.adminescape.mycdga
MyBackup
com.rerware.android.MyBackup
MyBackup Pro
com.rerware.android.MyBackupPro
MyHyundai
com.stationdm.bluelink
MyNetDiary
com.fourtechnologies.mynetdiary.ad
Netflix
com.netflix.mediaclient
Nixplay
com.creedon.Nixplay
North Suburban YMCA
com.daxko.mobile.northsuburban
NorthShore
org.northshore.northshoreconnect
NYTimes
com.nytimes.android
Office Calculator Free
net.taobits.officecalculator.android
OfficeSuite
com.mobisystems.office
OpenTable
com.opentable
Orbitz
com.orbitz
Pandora
com.pandora.android
Passport
com.passportparking.mobile
Paycom
com.paycom.mobile.ess
PayPal
com.paypal.android.p2pmobile
Photos
com.google.android.apps.photos
Photoshop Express
com.adobe.psmobile
PicSay Pro
com.shinycore.picsaypro
Pinterest
com.pinterest
Prezi
com.prezi.android
Priceline
com.priceline.android.negotiator
Prime Video
com.amazon.avod.thirdpartyclient
PrinterShare
com.dynamixsoftware.printershare
PrinterShare Premium Key
com.dynamixsoftware.printershare.premium
Pro Guitar Tuner
com.jrinnovation.proguitartuner
QuickPic
com.alensw.PicFolder
Rain Alarm
de.mdiener.rain.usa
Rain Alarm Pro
de.mdiener.rain.usa.plus
Rainout Line
com.statushare.rainoutline
Rally
com.rally.wellness
Ringdroid
com.ringdroid
Samsung Smart Camera App.
com.samsungimaging.connectionmanager
SamsungTTS HD US English
com.samsung.SMT.lang_en_us_l01
SeatGeek
com.seatgeek.android
SelfiShop Camera
com.selfishop.camera
Share
net.comcast.xfinityshare
Sharpdesk Mobile
jp.co.sharp.printsystem.sharpdeskmobile_int
Shutterfly
com.shutterfly
Sirius XM Companion
com.icon.siriusxmcompanion
SiriusXM
com.sirius
Skype
com.skype.raider
SkyView Free
com.t11.skyviewfree
Slider Widget
de.hinterhofapps.sliderwidget
Slingplayer
com.slingmedia.slingPlayerFreeApp
SlingPlayer
com.slingmedia.slingPlayer
Smart Tutor
com.rsupport.rs.activity.rsupport.aas2
Snapchat
com.snapchat.android
Softcard
com.isis.mclient.verizon.activity
Solo 2
com.codingcaveman.SoloTrial
Songkick
com.songkick
Sound Recorder
com.needom.recorder
Sound Search for Google Play
com.google.android.ears
SoundCloud
com.soundcloud.android
Speedtest
org.zwanoo.android.speedtest
SPG
com.starwood.spg
SpotHero
com.spothero.spothero
Stagefright Detector
com.lookout.stagefrightdetector
Stream TV
com.xfinity.cloudtvr
Tab Pro
com.ultimateguitar.tabprofree
Tabs
com.ultimateguitar.tabs
TeamViewer
com.teamviewer.teamviewer.market.mobile
The Weather Channel
com.weather.Weather
TheDrum
br.com.rodrigokolb.thedrumfree
Tone & Talk
com.lge.tone_n_talk_us
Translate
com.google.android.apps.translate
Transparent weather clock
com.droid27.transparentclockweather
Travelocity
com.travelocity.android
Tune Your Guitar
com.headcorp.tuneyourguitar
TV Go
com.xfinity.playnow
TV Remote
com.xfinity.tv
Twilight
com.urbandroid.lux
Twitter
com.twitter.android
Uber
com.ubercab
United Airlines
com.united.mobile.android
UPS Mobile
com.ups.mobile.android
Urbanspoon
com.urbanspoon
Verizon Tones
com.vzw.hs.android.modlite
Video Dieter2
com.outplaylab.VideoDiet2
Video Editor
com.sec.android.app.ve
VLC
org.videolan.vlc
Voice Reading
com.noinnion.android.voicereading
VZ Wi-Fi Connect
com.verizon.wi_fi
Walgreens
com.usablenet.mobile.walgreen
Waves
org.cohortor.gstringsng
Waze
com.waze
WebMD
com.webmd.android
WiFi
com.comcast.hsf
WiFi Analytics
com.netgear.WiFiAnalytics
Wifi Analyzer
com.farproc.wifi.analyzer
Wifi Connecter Library
com.farproc.wifi.connecter
Word
com.microsoft.office.word
Yelp
com.yelp.android
Yelp Biz
com.yelp.android.biz
Flashlight
com.surpax.ledflashlight.panel

[bluesmanuk]

That's quite a list.

Try installing this.

https://play.google.com/store/apps/details?id=com.rechild.advancedtaskkiller&hl=en_GB

It will show you all running tasks and you can go through them one by one, hitting the Kill selected apps button each time until the bubble dissapears.

Then you will know which app/process is responsible.

Leave anything that looks like it is related to the running of Android until last.

[Fritomisto]

Before I install another program, isnt it possible that this is some sort of hack? Other

[bluesmanuk]

I guess that anything is possible but I have a feeling that it will be an app.

But of course you have to make the decision based upon how you feel about it.

You can kill the processes one by one from within Android without having to install another app but it will just be a slightly longer process.

Looking at this, Samsung may have provided a task manager in their firmware.

https://www.gottabemobile.com/how-to-close-apps-galaxy-note-3/

[Fritomisto]

I found it! It was GIF Talk. I didn't even know I had this program. THANK YOU ALL for being so responsive and helpful! Much appreciated