Develop Bugs

[Q] Virus for Android phones, what do you think ?

I read on the web that virus for android exist. Is it really dangerous ? What do they do on the phone ? What can I do to protect my phone ?
Thanks
Sent from my HTC Desire using XDA Premium App

well, they do exist...i remember some article at androidpolice.com which said google had to remove like 50 apps from the market because they had malware in them...
i use lookout mobile security on my phone to avoid any damage...its free on the market and has some usefull features beside the malware scanner

AFAIK and remember, they are like keyloggers, and sending security sensitve data, like passwords, settings etc. to not wanted people. (read it in the same article about those malware programs removed).
I say, as long as you download trusted programs, there should be no problem.

i think it is not right

If they're gonna make viruses, they might as well make them for Apple's overpriced iPhones. Not that HTC's or Droids are cheap, but at least the source code is free, collaborative and transparent. Best of all, Android takes to heart the concept of consumer choice.
For me, I make sure that Lookout is updated, and apps I download have at least 5,000 downloads and 500 or preferably more ratings, that way I can at least be assured to a certain degree that the app's legit.

Its a pain but very unlikely that you will get them anyway. You have to be stupid to get them. I personally don't run security apps because there is no point.
Sent from RCMixS

Meaple said:
Its a pain but very unlikely that you will get them anyway. You have to be stupid to get them. I personally don't run security apps because there is no point.
Sent from RCMixS
Click to expand...
Click to collapse
+1 to this. Read comments from apps before install and you'll be fine.

[Q] RuFraud - How do you identify if an app is malicious?

Hey Guys,
A lot of the mobilephone blogs today are buzzing with the RuFraud Malware that was detected by Lookout Mobile and later taken down by Google from Android Market. About 22 odd apps which included apps & games too. According to Google, the end-user can see the services the apps will use before installing it in Permissions, but I usually don't go through them while installing as do most other end-users.
Now my concern is, if I've installed one of these "malicious" apps without knowledge and I want to detect that and delete them off the phone, is there any way to do so? I've performed a full-scan (SD card also) with avast! Mobile Security BETA (which btw, is kickass) but it hasn't detected anything.
I could also go through the Privacy Advisor feature on it, but that would mean me checking one-app-at-a-time which may take a while seeing as I have over 400 apps.
Anyway to detect the malware that apparently sends bulk premium SMS and racks up a huge bill? I don't have premium TXT enabled on my service since I am on Prepay & usually don't send any premium TXT but it would be nice knowing that my phone is malware free.
Any inputs would be appreciated.

well, i don't do any banking on my phone, i'm on pay as you go with the BEST mobile network...Three.co.uk...so i just whack on 15 quid a month and get unlimited everything......so i personally couldn't give a to** if any malware get's on my phone....
....nothing to get off my phone, unless they like sexy birds dressed in santa outfits, then i'm screwed, coz i'll cry if i lose them
I'd say, chill, don't be too paranoid.....b4 you download and install, look at reviews of apps......if it's only recently been uploaded to market and has no/not many reviews....google it first.
I allegedly have warez markets on my phone....allegedly.....and have never had a problem.
All I use my phone for is 99.999999% of the time browsing bulls**t on the web, messing about with fun apps, very rarely use texting or calls......so not worried.
But if your one of those that uses your phone for business/work/banking/etc...and have credit/debit cards stuff stored on there, then google the f**k out of any new app with no or few reviews....get 4,000 different virus and malware scanners on there.
Oh god, i'm dronning on and don't even know what i'm talking about now....arrghhhhh.
matt

w3bhax said:
Hey Guys,
A lot of the mobilephone blogs today are buzzing with the RuFraud Malware that was detected by Lookout Mobile and later taken down by Google from Android Market. About 22 odd apps which included apps & games too. According to Google, the end-user can see the services the apps will use before installing it in Permissions, but I usually don't go through them while installing as do most other end-users.
Now my concern is, if I've installed one of these "malicious" apps without knowledge and I want to detect that and delete them off the phone, is there any way to do so? I've performed a full-scan (SD card also) with avast! Mobile Security BETA (which btw, is kickass) but it hasn't detected anything.
I could also go through the Privacy Advisor feature on it, but that would mean me checking one-app-at-a-time which may take a while seeing as I have over 400 apps.
Anyway to detect the malware that apparently sends bulk premium SMS and racks up a huge bill? I don't have premium TXT enabled on my service since I am on Prepay & usually don't send any premium TXT but it would be nice knowing that my phone is malware free.
Any inputs would be appreciated.
Click to expand...
Click to collapse
Best advice is to look at the permissions the app wants. You say mist end users don't, well then they get what they deserve really. Not being mean its just that if you keep important info in your phone then you should be more careful about what you install as a simple uninstall may not remove any malware that was installed by the app. This reason is a huge deal for Android users. Too many people wanting simple and easy and well we all know Linux based OS are neither

zelendel said:
Best advice is to look at the permissions the app wants. You say mist end users don't, well then they get what they deserve really. Not being mean its just that if you keep important info in your phone then you should be more careful about what you install as a simple uninstall may not remove any malware that was installed by the app. This reason is a huge deal for Android users. Too many people wanting simple and easy and well we all know Linux based OS are neither
Click to expand...
Click to collapse
Yeah, I hear you. I usually don't check permissions cuz I install apps & uninstall them after I'm done with them. For eg: a game, etc. So yeah. I did find my Need For Speed: Hot Pursuit app that I paid for on Market, infact has SMS permissions. It says "malicious apps may send SMS to premium numbers" lol when I downloaded this app, it said the dev was Electronic Arts too.

[Q] Mobile Security...?

I've read an article recently (forgot the link and where, my memory is horrible) stating that creators of viruses (Malware specifically if i remember correctly.) are starting to focus in on the Android OS more and more ...
Windows gets major viruses because its easy to write viruses for, and the amount of people possible to infect is outrageous.
People don't usually write for OS's like Linux/Unix because its more difficult and they don't affect as many users...
I know most responses to these types of questions are "It's a matter of opinion", so I'm looking for responses from people that know a little something about malware, how it works, and what will work best to protect my Samsung Galaxy S2 Epic 4G Touch.
I want to know what experienced programmers and developers think the best Mobile Security would be for our android devices.
I don't care about how much system resources it uses.
I've been using ESET Mobile Security as the 30 day trial and i likes its options. Plus, it has advanced heuristics, which helps catch viruses that are not in the virus definitions received when updating.
I'm looking for an antivirus that has a high detection rate, but low false-positives. I did some research and it was found that Avast! is one of the most trusted, plus its free. But i also go by the motto "You get what you pay for"...
Another thing I want is an antivirus that will protect Operah Mobile, and not just the stock browser. Avast seems to only protect the default browser.
Any information on this would be greatly appreciated.

In my opinion it's not worth it to run antivirus on our phone unless you are going to be doing alot of piracy of apps .... If you only get apps from market Google catches must stuff t really fast .... Read descriptions on apps you download and don't pirate games and such you should never need avast out such to slow down your phone ...
Sent from my SPH-D710 using xda premium

Epix4G said:
In my opinion it's not worth it to run antivirus on our phone unless you are going to be doing alot of piracy of apps .... If you only get apps from market Google catches must stuff t really fast .... Read descriptions on apps you download and don't pirate games and such you should never need avast out such to slow down your phone ...
Sent from my SPH-D710 using xda premium
Click to expand...
Click to collapse
I use my phone for both business and recreational use. If i get a movie file sent to me from a friend and i don't know where he got it from, i want some kind of protection.
I understand that an antivirus on Android phones is usually an overkill... But i will be kicking myself in the ass if a password to my email ends up being compromised.
I understand that Android phones hardly ever have apps that contain viruses, but based upon that article i ready (I really wish i'd have kept it) its becoming a problem, although not a big problem.
I just want to be protected. For all i know, i could open an excel spreadsheet that i received from a spoofed email address that contains a virus.
You see my dilemma.... So lets start talking about which anti viruses are the most effective.
Regardless,
Thanks for you response.

Anything malicious can only be in the form of an app, because of the Linux structure. Permissions have to be enabled for any R/W access. So the prior recommendation of staying away from pirated apps will suffice.
Also, news articles prey on sensationalism to encourage reading the article. Don't believe everything you read.
Sent from my SPH-D710 using Tapatalk

What the last person said!!! If you get a movie file that has a virus most likely its written for windows anyway and will not do anything to you're phone. Also no movie file, pic file, or file in general can gain permissions that the app using it does not have. So the biggest thing is making sure the apps you download are legit.
There are a few bugs and flaws like with htc sense where a malicious app can gain access to things because HTC sense logs things it should not. TW does not have those problems now that CIQ is gone.
Sent from my SPH-D710 using XDA

I don't run any kind of anti-virus. Even on my PC. If you stay away from anything shady, keep a throwaway gmail account for anything online you're not 100% sure about and pay attention to where things are coming from, you'll be all set. Unless there is some reason that somebody would want to hack into your phone specifically, then it's just random crap that will hurt you. If you don't know where the movie file your friend send you came from, don't open it.

Ok. So everything that you guys said I about apps being the main way to get infected, I completely agree on.
But what about websites? I'm sure sites, especially mobile websites, have some kind of way to get in through some type of Malware/spyware.
The best way to never get a virus is to watch where you download from and be wary of any sites you go to. I know this. But i use my phone frequently, browse the internet frequently, and I know that all kinds of sites have crap on them. All of them can't JUST be for windows OS. What about websites that specialize in stuff for Android phones?
Also... Can't QR Codes from websites contain malicious things?
Call me paranoid. Call me OCD. But i like things a certain way and i'm just trying to find out what I can do to ensure nothing happens on my phone that i don't approve of.

exitprogram said:
Also... Can't QR Codes from websites contain malicious things?
Click to expand...
Click to collapse
I don't really think so, since it's basically pointing you to a webpage. If it points to an app you have to choose to install it from there.
It's very hard (if the end user pays attention) to actually give someone a virus.
If your downloading all your apps legit from the 'Play store' you're going to be fine 99% of the time.
I think the worst we have seen so far is status bar spam anyhow.

The only thing that an antivirus is gonna do is use up more memory on your phone.

So what you guys are telling me is...
#1 Antiviruses of any kind for an Android Phone are completely useless.
#2 These companies wrote Antivirus/Security Apps.... FREE, for no reason.
#3 Their is no possibility of anything getting infected when connecting your device to a PC or Mac.
Well. I guess I was being either way too paranoid, or you guys are wrong and don't even consider the fact that you could already be infected. I mean, how would you even know your phone hasn't been compromised and people are waiting for you to make a credit card purchase? If they want it, do you think they'd advertise it and TELL you or let it be KNOWN they've written something for it? No. They will keep it quiet so they can steal your information without you knowing it. I mean, We can't even get updates on unreleased ROMS! How do you think the hacker community deals with the viruses that they create? Make a forum about it and let Norton add it to its virus definitions? As I've said, i read an article about it, and where there is smoke, there is usually fire.
There are exploits on every device out there. I don't care what it is. People just don't take the time to write them all if the user base isn't big enough to justify the effort. But it doesn't mean they aren't out there.
Did you know gas pumps have been tampered with to save debit card transactions, along with PIN numbers, and then downloaded wirelessly by the criminal via laptop? This was not a small amount of numbers, either.
Sh*t, i didn't even know my gmail got hacked until i checked my sent box and saw spam messages being sent from my account.
I guess this is why people say it is a matter of opinion.
Didn't mean to start a "Politics" type of debate.
I will just keep using ESET Mobile Security since that is what I deem fit.
Thanks for all of your guys's input.

Most virus for Android will request su permissions to actually do any real. Damage considering only a small portion of. The Android users ever. Root their devices the time it takes to write a virus is almost wasted by the cracker, not hacker as hackers are actually coders crackers are the malicious form of hackers, coming from cracking the securities/passwords to steal info, and most ppl who root know what to look for and what to do if they get infected.. Mobile security companies don't write their apps for free, they get ad revenue from the ads in the free apps or you pay 1-10$ to get rid of ads so nothing is. Done for free, the worst virus ever created for Android was CiQ as it logged and sent almost everything you did on your device to who knows what 3rd party companies. So more or less your best antivirus for Android is you
________________________________
{We are legion, for we are many}
>Sent from my Anonymous DeathStar in the depths of GalaXy S2<
-Coming soon to an Evo4G near you?: [AoSP]EViL-MoD_FReEvO v0.1[Free your phone]-

They are "tampering" with credit cards at gas pumps and ATMs, by creating a separate magnetic reader and putting it over top of the reader already present. Not by any software hacking.
No one has said that PC's and Macs are immune from malicious apps.
GNu/Linux is a completely separate security suite vs a PC.
On a PC, any app that is "clicked" will immediately have access to the registry. By which you can change user permissions and application permissions. And the filesystem is immediately available to do whatever the code wants to do. And by proxy, any file accessed by the application also has no limitation to the damage it can wreak. That's how mp3's carry viruses. They are attached to files that would normally have access to the more secure registry keys. Firewalls are made to limit access to the registry. That is a necessity and why people trust security programs. Their software requires it.
Whereas, in Linux, the kernel is seperated from the OS and applications are kept in a sandbox completely seperate from the OS's filesystem. You have to physically allow "permissions" which dictate how far that application can reach. Files do not have any R/W access to the filesystem. The OS just reads and views them. It is not impossible to get in this way, but it is highly unlikely and no known exploits have been found in the wild.
So for anything malicious, you are allowing the corruption, and the only way to know is to only deal with trusted sources.
And to answer your question, Security companies make the software because they can. They are making ad revenue just for you loading the app. And it helps with piece of mind having a repository of known malicious apps. No one has said they aren't what they are advertised, they are. But they are also resource hogs, and unneeded if you understand what is going to be bad content.
Sent from my SPH-D710 using Tapatalk

I hear what you guys are saying. As far as security for an Android phone goes, just be careful and don't install anything from anywhere that you don't trust.
But like i said.... What about when connecting your phone to your PC? Couldn't something be laying dormant on a windows machine and infect an android device? I'll just be paying more attention to what i allow super user permissions to. (Not that i don't already)
Since the vital portion of the OS are kept separate or are "sandboxed" in a way... I will have to ALLOW these things, before they cause damage, right? Or did i already "allow" them when i installed the app and agreed to all of the things they have access to? Like when it sais "This app can read call history, access contacts, etc" ... I know that some apps i install seem to have access to things that have nothing to do with its functionality. Like why would a game need access to Contacts?
I think i ran across some kind of security app that has a firewall that will restrict outgoing and incoming connections for any app. I will probably just use something a long those lines to ensure none of my sensitive information is leaving the phone.
Thanks again! These are the responses that i was looking for.

exitprogram said:
I think i ran across some kind of security app that has a firewall that will restrict outgoing and incoming connections for any app. I will probably just use something a long those lines to ensure none of my sensitive information is leaving the phone.
Thanks again! These are the responses that i was looking for.
Click to expand...
Click to collapse
This APP is actually an antivirus w/firewall. Its Avast. Its free.
I think the "Freeze" option in Titanium Backup would have a similar effect, but you have to pay for that feature.
Even if your not concerned with getting a virus... At least you can control the data that apps send to and from your phone.
It also could be helpful if you download an app a buddy said his friend created and your a little paranoid about it. Or if the app isn't available from your carriers market and you need to download it by other means.
Anyway. This should suffice as far as the security i (was) looking for.
Now i know viruses can't just run rampant on Linux/Unix based system like Android. But JUST IN CASE, i will restrict all apps from communicating to the outside world using that firewall =)
You guys have been very helpful and very informative and even refrained from being d*cks .... Amazing! =)
Thanks guys.

security
what about security from another person hacking into the phone. I have a disgruntled ex-wife that constantly hacks into my phone, fowards my texts and email to people and displays pictures of her for me to see when I turn my phone on. How do I stop this? to me this is much more important than a virus. A phone can always be wiped clean, but a hacker can still get in.
Jerry

jjdellorusso said:
what about security from another person hacking into the phone. I have a disgruntled ex-wife that constantly hacks into my phone, fowards my texts and email to people and displays pictures of her for me to see when I turn my phone on. How do I stop this? to me this is much more important than a virus. A phone can always be wiped clean, but a hacker can still get in.
Jerry
Click to expand...
Click to collapse
Did you try calling the cops? That's more than one law she's breaking.

Take a look at this
Http://www.itworld.com/security/267484/android-apps-dont-need-permission-see-your-data
Sent from my SPH-D710 using Tapatalk 2

Also for your reviews check this one out
www.droid-life.com/2012/03/07/over-...nly-7-have-malware-detection-rate-of-over-90/
Sent from my SPH-D710 using Tapatalk 2

Avast!™ Mobile Security in the Google® Play™ Store (formerly the Android® Market™)
Avast!™ Mobile Security in the Google® Play™ Store (formerly the Android® Market™)
Avast!™ Mobile Security in the Google® Play™ Store (formerly the Android® Market™)
Avast!™ Mobile Security in the Google® Play™ Store (formerly the Android® Market™)
Avast!™ Mobile Security in the Google® Play™ Store (formerly the Android® Market™)
Umm... did I make my point clear?
Sent from my Samsung® Galaxy™ SII Epic™ Touch 4G running CyanogenMod9™ ICS!

[Opinion] Play Store Screening be done by open handset alliance (HTC, SAMSUNG etc.)

So I have this idea, I hope someone in HTC can do this (Ideally this should be done by all manufacturers)
1. App is submitted in Play Store - Google adds it
2. App is quality checked by HTC for each HTC device before it shows up in say HTC one X play store. Same done by Sammy and others
3. If any problem HTC refuses the app into the Play Store for HTC one X / or for any HTC device, till the developer fixes the problem
4. Plz HTC implement it
Why should they do it ? Because we give them money and they should place quality control over the apps so we get the best experience (smooth, takes advantage of hardware as per each device, end spam)
Edit. I still stick to my point that brand that loose value due to hiccups of apps is the open handset alliance. Google will come out the winner in the end because their handsets are developer handsets thus the apps will always run smoothly on them.
I think the open handset alliance should take an active part in screening for quality of app.

Good idea, but impossible in the long run. There are far too many apps to make this anywhere near workable.

LoL
You serious? Every app has several versions and there are like tons of htc models out there. Even if we don't count custom firmware it is a impossible task..
And this not even a petition.. you are just a lazy bum hoping someone will do the job for you. So if you cant even find the effort for testing out apps... Then just use the standard apps
Grtz
Sent from my HTC One X using Tapatalk 2

My favorite statement in this case: buy an iPhone . Or at least a windows phone.
Google gave so much free space to manufacturers, that it impossible, neither in long, nor in short run.
The only way for HTC, is to create own analogue of store with games best passing for your device (apps compatibility is already very good). Like nvidia did.
Sent from my HTC One X using xda app-developers app

My question is, what does HTC get for doing this?

Why do you even want HTC to do this? Apps in the market are by default supported by all phones that pass Google's CTS tests anyway, and all OHA member companies' phones must pass that test before being given the green light by Google to be released.

Do you want them to bankrupt faster?
It is nowhere near being possible.
and I must say I find your approach very very unhealty!
you can not ask for anything from anyone just because u pay them.
HTC is a phone manufacturer and does not promise you anything about any android application.
even if we try to take this approach seriously, HTC is putting sense on top of android which gives us HTC's own way of using your android device, with their own apps in some way. that is what you pay them for.

It's not HTC's job to check the quality of APPs in the Play Store.
This is like saying HP should be checking software is compatible for thier PCs running Windows.
(The software developer or Microsoft should be checking in that case - not HP)
APPs should be either checked by Google (who run the Play Store and Android) or by the developer of the APP itself.
HTC are a hardware manufacturer, not an APP developer....

the public do this already.
Just be careful what you download, pick apps with many downloads and/or many high ratings.

PLEASE NOT!
This wouldn't be a good idea ... Just think about how long it takes to put Sense 4.5 on top of Jelly Bean release. Quality checking apps by manufactures would definitely be a step in the wrong direction.
It would be better when HTC releases a plain Android (asop) version for the HOX.

complete useless and rubbish imo

no way, small company dont care end user

Maybe if you say
"Pretty please with a cherry on top"
They might just do it xD

What a ridiculous suggestion. Let them concentrate on producing great hardware and software.
Sent from my HTC One X using xda premium

Hell no.

I don't like any kind of censorship....
Sent from my HTC One X

vua777 said:
no way, small company dont care end user
Click to expand...
Click to collapse
What does this have to do with caring about the end user?
Nothing at all.

Still I would argue that if apple can ensure that all apps use the hardware why can't the open handset alliance do the same in assisting google in screening apps. As to why I made the thread I recently downloaded drag racing and immediately I had a notification full of ads which I don't mind however I uninstalled it and now the ads pop up on the screen whenever I switch on WiFi.
HTC and other manufacturers including Samsung need to step up if they want better quality apps for the end user. I would like to play a gameloft game without having to add a mod , changing kernels etc
Just my opinion and yes someone commented of me being lazy .... Yes its a public holiday here so nothing better to do other than making a thread.

No
Hell no!
Play Store is completely Google's thing, plus I don't want HTC fooling around with the way the Play Store works, AT ALL. Google's trying to make the Play Store a cleaner place I believe.

dexteral said:
Still I would argue that if apple can ensure that all apps use the hardware why can't the open handset alliance do the same in assisting google in screening apps. As to why I made the thread I recently downloaded drag racing and immediately I had a notification full of ads which I don't mind however I uninstalled it and now the ads pop up on the screen whenever I switch on WiFi.
HTC and other manufacturers including Samsung need to step up if they want better quality apps for the end user. I would like to play a gameloft game without having to add a mod , changing kernels etc
Just my opinion and yes someone commented of me being lazy .... Yes its a public holiday here so nothing better to do other than making a thread.
Click to expand...
Click to collapse
Then rate the app with one star and write a comment. That way you'll help all the others that consider downloading it and hint the developer that the app needs improvement. And vice versa - look at the ratings and comments of others before installing an app. Play Store is for people that can decide for themselves if they want the app or not. Anyone wanting to live in a walled garden and put his/her trust in someone else to not allow "bad" apps (basically those that hurt that someone's interests) should go with iOS.
Sent from my HTC One X using xda premium

[Q] Need for Antivirus/malware/spyware??

Since I am new I have spent the last few hours reading posts on the XDA site so that once I make my post hopefully I won't get attacked with "that information is/was listed on" or "I've already posted that" or "you should read previous information before posting". I'm sure you get the idea. Anyway, I can't find any consensus on having virus/malware/spyware/adware installed on the Note 2014 or Galaxy SIII. Even amongst senior moderators. I've ready the links some have attached to their emails and still no consensus. Do mobile devices need them or is it just "scare tactics" as one article referred to them as. Forgive me for saying this and no name calling please, but I come from a long line of BlackBerry devices before switching to android. I haven't switched my contacts and calendars over to my tablet or phone yet because BB was known for its security protections. I didn't have to give apps half as many permissions as I do in the play store and the app would still work!
Also please help me understand how you can tell if an app from the play store is a "safe" app or not? I can't base it on names I know since as most of you probably already know BB didn't have a great app selection and didn't support android unless you rooted your tablet.
Can I get some feedback from a moderator please.

to know if any app is safe or not is reading permission list before install it...
and as far as i know there is no reason to install antivirus in android device... it wil make your device very slow...

What are some of the things to look out for when apps ask for permissions?

Well there are different things. A game does not need to read your contacs, nor your gps. But most android apps are using more permissions as they would need. My advice is : download only the apps you need and not every junk...
Gesendet von meinem GT-I9505 mit Tapatalk

Any app that has been in the playstore for a reasonable amount of time, has a reasonable amount of downloads and you guess it reasonable rating will be perfectly safe.
Obviously people will have different thoughts as to what reasonable is but if you're new to Android. Google best Android apps for doing "This" and you'll get heaps of suggested apps that have been tried and tested and are perfectly safe.
Do that and no you won't need antivirus but follow the same rules you wouldd with a PC..... opening links in dodgy email etc.
You shouldn't have any problems browsing the web either, even with "unknown sources" ticked you still have to give the app permission to install.

Also this tablet has a fair amount of resources available, if it was going to put your mind at ease I don't think getting an antivirus app like AVG (most recommended I think) is going to have a noticeable or at least only minimal effect on performance.