[Q] - Droid Incredible Q&A, Help & Troubleshooting

I just read the news about all the hacking being done on the android market with trojans and data mining. I always knew this was an issue but now it is really bad.
Anyone have a suggestion for a good antivirus?
BTW- I just installed AVG because I have used them on my PC.

Could you share some links? Haven't heard much about this.

Are you talking about the vulnerability using the RageAgainstTheCage exploit? I don't have any links but it only affects Froyo (2.2) and earlier. I know Android 2.3 (Gingerbread) is immune to that root exploit. If you're using the MIUI 1.3.25 version or later it should be fine. I just noticed MIUI on your sig.
As far as antivirus I use lookout mobile security but AVG I'm sure is fine as I use AVG on my PC as well. The safest way to prevent infection is be careful what you download.

k_nivesout said:
Could you share some links? Haven't heard much about this.
Click to expand...
Click to collapse
http://news.yahoo.com/s/afp/20110405/ts_afp/usitinternetcomputersecuritysymantecpandalabs

I think the best course of action is just to be careful with what you download. Only DL from trusted sources and if something looks suspicious, stay away from it or google it before installing.

k_nivesout said:
I think the best course of action is just to be careful with what you download. Only DL from trusted sources and if something looks suspicious, stay away from it or google it before installing.
Click to expand...
Click to collapse
That was my previous strategy. I don't think I feel safe enough with that policy any longer.

As long as you're downloading from trusted developers you really don't have anything to worry about. As I understand it, to be vulnerable to any exploit, you have to download and install the corrupt application.

Yeah, just keep an eye on the reviews of apps, and check the permissions it says it needs.

I use Lookout as a great antivirus if you want an app to feel secure.

Related

Anti-Virus

Do you use Anti-Virus software?
http://dailymobile.se/2011/03/03/google-removed-21-malware-apps-from-the-android-market/
This has me thinking on using one now, do they slow down the phone in anyway?
shankly1985 said:
Do you use Anti-Virus software?
http://dailymobile.se/2011/03/03/google-removed-21-malware-apps-from-the-android-market/
This has me thinking on using one now, do they slow down the phone in anyway?
Click to expand...
Click to collapse
antivirus will make your phone lag and freeze a second while they scan the installing file, other than that not much fuss
I've been using lookout since last year and it has been great - doesn't slow the phone down at all.
Sent from my HTC Desire using Tapatalk
wildcardspv said:
I've been using lookout since last year and it has been great - doesn't slow the phone down at all.
Sent from my HTC Desire using Tapatalk
Click to expand...
Click to collapse
Has it ever detected anything?
shankly1985 said:
Do you use Anti-Virus software?
http://dailymobile.se/2011/03/03/google-removed-21-malware-apps-from-the-android-market/
This has me thinking on using one now, do they slow down the phone in anyway?
Click to expand...
Click to collapse
I use common sense + check out comments first + permissions when installing :]
I'm using AVG (free) Antivirus, and I'm very happy with it so far.
I use Antivirus Free
http://www.appbrain.com/app/antivirus-free/com.zrgiu.antivirus
I dont have it running as a service, just use it to scan the phone occasionally.
Crustyloaf said:
Has it ever detected anything?
Click to expand...
Click to collapse
It hasn't, but then I also haven't had any probs or infections that I know of, so I have to presume its doing its job.....
Sent from my HTC Desire using Tapatalk
noobandroid said:
antivirus will make your phone lag and freeze a second while they scan the installing file, other than that not much fuss
Click to expand...
Click to collapse
I use an anti virus app on my Android, I have no problems with the app.
I was worried about the recent dodgy apps and wasn't going to install anything. my mate suggestied lookout and I thought I would give it a go. it hasn't slowed my phone down at all so I installed it on my Vega as well.
oursoul said:
I use Antivirus Free
http://www.appbrain.com/app/antivirus-free/com.zrgiu.antivirus
I dont have it running as a service, just use it to scan the phone occasionally.
Click to expand...
Click to collapse
Hmm I've been looking in to this a bit. Am I right in thinking this AV simply uses a list of known malware rather than actually scanning inside a file? Any light on this appreciated.
oursoul said:
Hmm I've been looking in to this a bit. Am I right in thinking this AV simply uses a list of known malware rather than actually scanning inside a file? Any light on this appreciated.
Click to expand...
Click to collapse
Highly likely, that's how the devs themselves describe the app. Lookout AV seems to be immensely popular as well, but no description by the dev on how it catches any bad code, which makes it difficult to compare to Antivirus Free.
Which brings up a question on how does AV software for Android actually detect malware. Just like in a PC? Where a list of definitions are installed and everything inside the PC cross-checked against that?
I think the term we're looking for is heuristics.
Eh, definition, heuristics - pardon my French.
Greek apparently, it means to find, cross reference and generally spot patterns and figure stuff out.
Hi guys, since posting this I have download and installed a anti-virus software from the market, its called antivirus LOL its by creative apps. So far its very good doen't use much battery and my phone hasn't slowed down, give it a try its free also
Not convinced there is an actual threat .
Yes you can get some apps that are " iffy" and will send txts etc... but you just have to read about them first .
Remember we are using Linux...how many Linux viruses have there been?? as many as windows???
Read the reviews , and if you are you are unsure.. look on the web ..
most of mine are word of mouth ... so I know they work

[Q] Avast! Lookout, Cerberus, or something else?

I had Lookout since I got my phone, then won a free premium upgrade for a year that just ended.
Avast! just came out (out of Beta) with free Antivirus which I'm using at the moment.
I've seen great reviews about Cerberus, but it costs a few bucks.
So, I'm not worried about viruses (I've read enough articles about it) but I like to have something to track, lock, and wipe the phone in case it is lost or stolen.
I'd like to see what programs you guys use or don't use and why?
I use lookout on my wife's phone, since she misplaces it at least once a week. I was using it on my phone but have stopped since I was only using it for tracking and I can wipe my phone remotely through my work exchange server if I lose it.
Try Seekdroid, it can remotely enable GPS and may be what you're looking for. Antivirus programs are pointless though.
Supersonic Evo 4G | MIUI | Tapatalk
Nothing new or old impressed(es) me if it cant find and remove the CarrierIQ rootkit. They missed it..what else will they miss
Signature and definition based av solutions are dying a slow death anyway, one last hu rahhh.. smartphone users.
AVG
You forgot to specify AVG's free antivirus solution. It doesn't require any signup, unlike Lookout, and doesn't waste space in your notification area because it only appears there when it scans, fixes, etc.
Lacedaemon said:
You forgot to specify AVG's free antivirus solution. It doesn't require any signup, unlike Lookout, and doesn't waste space in your notification area because it only appears there when it scans, fixes, etc.
Click to expand...
Click to collapse
I might give that one a shot. I run AVG on my PC and it's been pretty good. I like that it doesn't take up room in the taskbar and it looks like it has the remote locate/wipe/lock that I want to have. I don't know why I didn't think to look it up before.
Update: Tried AVG, but it can't locate my phone when I tested it. (I went through all the proper steps of setting it up in the "remote" menu) So it doesn't look like it's gonna be a keeper.
Avoid Mcafee Unless You're Willing to Pay
alxrock said:
I might give that one a shot. I run AVG on my PC and it's been pretty good. I like that it doesn't take up room in the taskbar and it looks like it has the remote locate/wipe/lock that I want to have. I don't know why I didn't think to look it up before.
Update: Tried AVG, but it can't locate my phone when I tested it. (I went through all the proper steps of setting it up in the "remote" menu) So it doesn't look like it's gonna be a keeper.
Click to expand...
Click to collapse
Aw, that sucks. Well just a word of notice: Don't go for the Mcafee Antivirus, it's just a 7-day trial unless you pay for the subscription. It was really disappointing because I signed up and configured everything, like the Buddy List feature, which is when the app automatically sends a text to your "buddies" phone numbers when it's lost/found.
I've been using Lookout since it came out, but now I have the same doubt. For sure if you only want it for remote wipe and so, I would choose Cerberus, but I usually download apps from other stores, testing apps I can't be sure if they are completely safe, etc, so I don't know if I should keep my Lookout for malware detection or just forget the paranoia and move to Cerberus.
In my situation, what would you guys do?
I never use AntiVirus never had a problem,
Sent from my PC36100 using Xparent Green Tapatalk
Try Android lost its on the market i havent yet lost my phone or anything but dude!!!! The features on this app are amazing! Ive tried most of the features n its great (exept for wiping my phone) Its a BETA version but free its really cool.
Sent from my PC36100 using XDA App
Oh yeah i forgot u need to be rooted.
Sent from my PC36100 using XDA App
Can I get Cerberus for free ?
dnesh.sharma said:
Can I get Cerberus for free ?
Click to expand...
Click to collapse
lmao you actually bumped a three year old thread, for that...
Hahahaha.
Sent from my SGH-I727 using Tapatalk

Is using an app like Lookout even necessary?

How many people use apps like Lookout that scan your phone and supposedly offer ant-virus protection? Are they even necessary?
Don't think you'll find many that do. Other than corporate security reasons. All of is crackflashers don't stay on the same system long enough to warrant such a measure
Sent from my phone using xda premium.
I like lookout for the scream feature....my wife loses her phone all the time and if I send the code through lookouts website the phone makes a loud siren sound even when on silent or vibrate. As far as the antivirus I really dont use it
I use lookout not for the scanning feature, but for the lost phone/lock/wipe features.You never know when you might need it.
Not absolutely, i use Eset Mobile on the N4, used it for many years allready om my pc`s. Better safe than sorry. And always look at the permissions you are about to give to an app when installing.
I used Lookout for 2 years on my HTC Desire then decided to uninstall it about 6 months ago. Can't say I've missed it.
I've not put it on my N4.
Common sense, and checking permissions is much more important than an anti virus imo. Google play store already has the bouncer that scans all the apps. Most of these malware apps that users install come from people not willing to cough up a few dollars for apps and getting said apps from third party sites, and torrents often repackaged with malware, and imo it looks good on them. Support the devs, don't be so cheap, and pay for apps (not directing this at anyone here, just saying). Use the Playstore, or somewhere reputable like XDA and check permissions, there's no reason a wallpaper would need access to your contact list and private info ect. Never used an antivirus on a phone and i likely never will.
i use lookout because i need to install apks from other sources..
i need to install apks from other sources because google play does not allow apks like adaway..
i buy apps from google play.. but ads? no way..
A little off topic here but Rom toolbox by JRummy has an adblocker, i wonder if Google will make him pull the app
I use avast... Dont know if it works, but being a windows user, i think im mentally ill, and insecure.
Sent from my Nexus 4 using Tapatalk 2
carnage017 said:
I use avast... Dont know if it works, but being a windows user, i think im mentally ill, and insecure.
Sent from my Nexus 4 using Tapatalk 2
Click to expand...
Click to collapse
hahahhaha, Awesome man, made my morning. :good:
ScumDroid said:
A little off topic here but Rom toolbox by JRummy has an adblocker, i wonder if Google will make him pull the app
Click to expand...
Click to collapse
No, he's taking care of that before they pull it: https://twitter.com/jrummy16/status/312368614059692033
overhauling said:
No, he's taking care of that before they pull it: https://twitter.com/jrummy16/status/312368614059692033
Click to expand...
Click to collapse
i guess i wont be updating rom toolbox anymore
ROM toolbox adblocker was never as good as AdAway anyway.
As far as apps like Lookout go, I'd never use an anti-bvirus scanenr etc. I use Cerberus in case I lose my phone so I can track/find or wipe it.
waste of RAM and space for antivirus apps... dont pirate apps and just download apps/games from the play store and you'll be fine.

[Q] Should I protect my phone ?

Hi,
I saw Avast for android available on the market, this raised questions in my mind :
- is there a real menace for android phones ?
- if so, what is the best app to protect my phone ?
- what is the cost regarding battery consumption ?
Thanks XDAers
McGuigew said:
Hi,
I saw Avast for android available on the market, this raised questions in my mind :
- is there a real menace for android phones ?
- if so, what is the best app to protect my phone ?
- what is the cost regarding battery consumption ?
Thanks XDAers
Click to expand...
Click to collapse
I don't think there is a need for AV software on Android (yet). If you install all your apps from Google Play, there's no chance to get a virus... maybe some software that pops up ads but you should always read reviews before installing....
dalanik said:
I don't think there is a need for AV software on Android (yet). If you install all your apps from Google Play, there's no chance to get a virus... maybe some software that pops up ads but you should always read reviews before installing....
Click to expand...
Click to collapse
Absolute drivel.
There is a big need and yes you can get malware from Google play where on earth have you been??
@ OP
I would recommend ESET Mobile Security and also Xprivacy.
TheATHEiST said:
Absolute drivel.
There is a big need and yes you can get malware from Google play where on earth have you been??
@ OP
I would recommend ESET Mobile Security and also Xprivacy.
Click to expand...
Click to collapse
Well I have never met anyone who got a virus on Android nor have I had one on multiple devices for several years... but if you want to slow your phone by installing AV, you're welcome....
I also use Xprivacy, but that is not AV....
dalanik said:
Well I have never met anyone who got a virus on Android nor have I had one on multiple devices for several years... but if you want to slow your phone by installing AV, you're welcome....
I also use Xprivacy, but that is not AV....
Click to expand...
Click to collapse
Well firstly I'm not talking about virus, I'm talking about malware and there is plenty of it in various different forms.
Secondly, At what point did I say XPrivacy is a AV?
Slowing down note 2 is not so easy.
I'm using avast from day one and I didn't notice any slowdown. I have about 1gb ram used all the time. The phone is running smoth. I have stock rom.
Sent from my GT-N7100
Interesting debate, I think I will use Xprivacy as advised but no AV... Thanks everyone

has there ever been a security breech on a custom Rom?

So yes basically I know things on xda are supposedly safe in terms of security and roms. But have there ever been a case of a Rom having something like a keystroke logger or any type of hack to gather information or gain access to your personal stuff? And if it had never happened on xda maybe from one of the other sites?
I suppose I'm just trying to address how safe custom roms are I have been using various ones recently so I do trust them some what of course and I assume if a roms been on xda for months and has many posts it's been checked but I still wonder if someone was clever they could wait for the right moment to strike if you know what I mean. Thanks.
Yea, in a way, you are trusting that the devs have no added anything sinister to their custom ROMs. But in the time I've been here (a long time!) I haven't seen anything like this added to any ROMs. You could always do a full scan of the ROM before flashing it to be sure.
the_scotsman said:
Yea, in a way, you are trusting that the devs have no added anything sinister to their custom ROMs. But in the time I've been here (a long time!) I haven't seen anything like this added to any ROMs. You could always do a full scan of the ROM before flashing it to be sure.
Click to expand...
Click to collapse
What would you scan it with though? Pc viruses and malware different to mobile no? And anyway surely a clever hacker would make there own hack etc. And maybe they just add it to the update add well . Anyway good to hear no ones reported one yet!
Well I will try a pc scanner...phone scanners seem to just check.apk's so that's useless...done some full scans all the same just for the hell off it. Guess I don't have any money anyway so I'm safe . But like I say if they are clever they will write their own code so the scanners won't find it .
Still no one reported ok that's given me more confidence...a bit :s ...
Only thing I new of was start of the year I had a xperia z ultra and the mostly only way to gain root at the time was to use kingo root. It wasn't a XDA developed root tool is was from a Chinese website and it was suspect as it took your phone details like imei number. Not sure what happened in the end. But if you get a phone and you trust the recognised devs you should be OK.
Golly, I sho hope not!
:good::good::good:
How about as of late and the security involved when you have a rooted phone? I have not been able to locate any substantial info concerning the legitimacy of or about the claim. Do I need to UN root my phone after the new flash or no? Or, am I way of base here and obviously don't fully understand the weekness of having a rooted phone? In other words, a rooted phone is just as safe as a non rooted phone?
Thanks in advance
Edit
Randy L said:
How about as of late and the security involved when you have a rooted phone? I have not been able to locate any substantial info concerning the legitimacy of or about the claim. Do I need to UN root my phone after the new flash or no? Or, am I way of base here and obviously don't fully understand the weekness of having a rooted phone? In other words, a rooted phone is just as safe as a non rooted phone?
Thanks in advance
Click to expand...
Click to collapse
No, a rooted phone is not as secure as an unrooted phone. You've opened up access to the system when you rooted, and therefore made it vulnerable.
Not that an unrooted phone is completely secure either, but with root access, a malicious app could do much damage.
What would you suggest since I plan to flash a newer, stable ROM with a newer radio binary? I need to ensure my phone is locked up right as possibly allowable without over taxing the system.
Thanks again
Randy L said:
What would you suggest since I plan to flash a newer, stable ROM with a newer radio binary? I need to ensure my phone is locked up right as possibly allowable without over taxing the system.
Thanks again
Click to expand...
Click to collapse
It's all a trust and common sense game. If you flash a rom you are putting the trust in others hands. No way around that. As for keeping it locked down. Your best bet would be to stay on stock. Root is a security hole and that's why Google is starting to allow apps to check for root and if found disable the app or features of the app.
Luckily most of our ROMS don't come from people stand to gain anything from that info and are probably like-minded when it comes to how we want our phones to work.
To answer some of these questions, it might help to fully understand what we're talking about.
What kind of security issues face an Android phone?
Well, for one, there are network-level attacks. This are fake cell towers (sometimes called Stingrays) that can collect the sort of data a cell tower might be able to collect, your location, your messages, and your data.
A third-party ROM or a rooted phone is not intrinsically more vulnerable to this. In fact, there are some apps that help detect this kind of attack, and those apps will generally require root access. This kind of attack is less likely to be a random skiddie, and more likely to be the police or a government.
Another kind of attack is a malicious app. Think of it like a trojan horse, something you willingly let into your phone, and it has a secret malicious payload. Maybe it's a browser that actually skims all your activity to sell to marketers. Maybe it's a widget that shows a neat clock on your lock screen, but it actually collects all of your contacts so they can be spammed later.
Since this would be an app that you've willingly downloaded, a third-party ROM doesn't make you much more susceptible, but granting this app Root could make it much more damaging, since it could hide itself from uninstallation or even modify other apps to do bad things.
Note, though, that certain third-party ROMs and apps that require root can help protect against this. If you download an app, and it says it needs permissions that don't make sense (why does a clock app need access to my camera, or my contact list?), that should be a red flag to not install it. But some ROMs actually let you revoke/block individual permissions., so if a baddie app was trying to access stuff it shouldn't, you can stop that from happening.
But there's a slightly more insidious kind of malicious app. Imagine third-party app that accesses Twitter, or Snapchat, or Instagram. Now this app actually saves all of the things you're doing elsewhere before it punts them off to the service you're trying to access. This app could be appearing to function completely honestly, hoarding your Snaps and your snapchat password, until one day they decide to leak all your snaps, or upload all the images you sent to your private Instagram to a public site.
You're not intrinsically more vulnerable to this kind of attack with a third-party ROM or a rooted phone. These apps will likely be come from a non-Play store source, which can happen even stock/unrooted. An app like this with root access can do more bad stuff, but their wheelhouse is in doing bad things with the data you've already willingly given them, so it's moot.
Then there's the issue you seem to be most worried about, which is malware baked into a ROM. This is by far the biggest danger in terms of risk, because it could be doing all sorts of nasty stuff relatively invisibly. What prevents someone from doing this, though? Well, for one, with an open source project, everyone can see the code. If there is something flagrantly wrong, it could be spotted by other people. It's possible to try to hide it, though, and some smaller ROMs don't attract a ton of eyeballs, so not that many people might be looking.
Then again, plenty of major ROMs could have the same thing going on, just in very clever or subtle ways. Look at how pervasive the Heartbleed issue was, and that was in code that tons of very smart people had the chance to look over.
Third-party ROMs do present more danger in this regard. What do we consider third-party, though? Major carriers lay tons of extra code on top of vanilla Android. And plenty of them may be doing unseemly things with your data, either for marketing reasons or at the behest of someone like the NSA. In that case, you're best but would be to stick strictly to AOSP ROMs, but even then, it's not a sure thing.
Truth be told, the best thing you can do for security is just pay attention to what you're letting onto your phone, and what you're letting those apps do. Your choice of ROM and root status is a part of it, but being generally aware is by far the most important thing.

Categories

Resources