How mobile antivirus works without root access? - General Questions and Answers

In windows we require administrative rights. I see no elevation request raised by Antivirus software even paid ones.
How it decompile or check for virus signatures of apps without root access?
Is AV for mobile a joke?
Sent from my XT1033 using XDA Free mobile app

vikraminside said:
Is AV for mobile a joke?
Click to expand...
Click to collapse
Pretty much. At least with Android. Malware exists, but it's extremely rare from legitimate sources (Play Store, Amazon). Just use your brain. If you're rooted, be extra careful with what you install. Especially stay away from anything to hack a game for extra coins/gold/gems/whatever. And don't put your credit card/bank account info through any app that has no business asking for it.
AV apps are pretty much useless for detecting any actual malware, and in fact are detrimental to your devices' performance because they're always running and when they have to do their scans. Many aren't completely useless, because the creators realize that basic AV is, indeed useless, so they offer stuff like remote device monitoring, kill switches, data recovery, etc.

Related

Does android devices need an antivirus?

As topic =)
omnia1994 said:
As topic =)
Click to expand...
Click to collapse
I will not say no, but I haven't seen or had a real life demonstration where an Android AV software stopped or prevented anything on any device (Xoom included).
I personally don't have one loaded on any of my Android devices but I would say this. For phones / tables I prefer firewall software than AV.
Sent from my PG86100 using Tapatalk 2
I would have to say yes. I recently attended a corporate day at Symantec and one of the things they demonstrated to us was how an Android phone becomes infected. The using a laptop they were able to extract personal info and sent txt messages and make calls.
So for me having seen that I would say yes especially if you side load apps using alternative markets.
Funny thing about that...
The sandboxing of the Java processes means that there's no escalation of privilege possible.
There are no viruses on Android in the sense that arbitrary code can be run, or infect the bytecode of other apps.
However, there are malicious apps which can be spotted by their permissions.
Don't use alternative markets. Pay attention to what you install, read permissions, read about the developers. Turn off unknown sources when not installing something from a trusted source. Those are the best security practices.
The "antivirus" apps for Android add very little real security on top of this, but they do slow down your device to make you feel safer.
stiflingcobra said:
I would have to say yes. I recently attended a corporate day at Symantec and one of the things they demonstrated to us was how an Android phone becomes infected. The using a laptop they were able to extract personal info and sent txt messages and make calls.
So for me having seen that I would say yes especially if you side load apps using alternative markets.
Click to expand...
Click to collapse
Your correct about the permissions. The demo we had was an app that had had extra code added and was uploaded onto the market. The demo then showed both apps with the same icons etc but the permissions on the rogue app were nearly 3 times what the legit app required.
The game still ran when you installed it but in the background it was running other daemons giving the hacker the control. One of the big give aways was the ability to send txt messages. No game should need this.
So yes you do have to be vigilant but extra protection is always better if you don't mind having Antivirus software installed...
In my experience all that is really needed is a well configured firewall, pay attention to permission list before the app installation and to obviously avoid unofficial app markets.
The next thing to consider is what web browser you use. There are tons of options out there to choose and not all of them, actually most, don't offer modern features like anti-fishing and popup denial protection.
The best practice will always be prevention, and some android av programs do better than most.
If you are so inclined to have one, my recommendation would be for eset mobile security. I use their av on all my windows machines and haven't had a major issue at all.
Sent from my XT910-Rogers using XDA Premium.
As long as your brain works when reading the permissions (i.e. "why does a wallpaper need to send SMSs?"), then no, an AV isn't necessary.
Unfortunately, a lot of android users don't see to do this, hence hte mass media panic about android viruses.
stiflingcobra said:
Your correct about the permissions. The demo we had was an app that had had extra code added and was uploaded onto the market. The demo then showed both apps with the same icons etc but the permissions on the rogue app were nearly 3 times what the legit app required.
The game still ran when you installed it but in the background it was running other daemons giving the hacker the control. One of the big give aways was the ability to send txt messages. No game should need this.
So yes you do have to be vigilant but extra protection is always better if you don't mind having Antivirus software installed...
Click to expand...
Click to collapse
That's why I recommended a firewall over an AV software, when I comes to Android at least it makes more sense to me to protect the flow of information then to waist CPU cycles on scanning for viruses.
Sent from my PG86100 using Tapatalk 2
megabiteg said:
That's why I recommended a firewall over an AV software, when I comes to Android at least it makes more sense to me to protect the flow of information then to waist CPU cycles on scanning for viruses.
Sent from my PG86100 using Tapatalk 2
Click to expand...
Click to collapse
Good point. I recently un-installed my anti-virus (was using Avast) because it was really slowing down app installation and updating.
omnia1994 said:
As topic =)
Click to expand...
Click to collapse
Yes android devices need antivirus because when you download apps or games from unknown parties aka third parties they mostly have virus or spyware so we need a antivirus which can scan files while downloading and if they have virus or spyware it would stop them if u ask me which av i m using i would recommend Appriva could antivirus reasons its available on play store and its free doesn't use much memory fast and reliable
popularmechanics.com/technology/how-to/computer-security/you-should-put-antivirus-software-on-your-phone-14886208
Wysyłane z mojego Xoom za pomocą Tapatalk 2

Question about android security

So i am just wondering, there are so much different apps for android on the market, and most of them has a lot of access to phone's functions. Now for example i am always logged in to Gmail, and theoretically can a random app scan and copy my gmail's data and send it trough internet? Really curious..
Kblavkalash said:
Now for example i am always logged in to Gmail, and theoretically can a random app scan and copy my gmail's data and send it trough internet? Really curious..
Click to expand...
Click to collapse
This question is not really an issue of Android security this is a question about general security. Can an app look at your gmail app directly and copy data and send it out...not exactly no, an app can't forcibly connect itself to another app to scan data.
However...
That question is actually not relevant because such a task is unnecessary for malicious apps. Lets say you install a malicious app that wants to copy your gmail data. What it will do is not watch the app itself but it will watch the network packets being sent to and from the app, logging and tracking those.
This is not the only way to get the data though because any data saved on your sdcard is accessible from an app if you give it permission to do so.
The MOST important thing to look at when installing an app is the permissions the app is requesting when it installs. This can be confusing as well because some apps will request full internet access because they need it but this can also be used by a malicious app to steal your data.
The important thing to do is research. The more you learn about the app the better off you are.
-------
Just to clarify, this applies to all apps of any kind on any platform including but not limited to Android, iPhones, Blackberry, Windows Phone, WebOS, Windows PC, Mac OSX, Linux or etc. - ALWAYS learn as much as you can and are comfortable with before installing anything...if you are not comfortable with a particular app or learning more about it then don't install it. That is not to say it may be malicous, it is just to say it could be a bad idea for other reasons. (for example, if it is a developer tool or a configuration tool that you don't understand or haven't researched enough to understand...then you could potentially damage your device with something that is a legitimate tool)
Kblavkalash said:
So i am just wondering, there are so much different apps for android on the market, and most of them has a lot of access to phone's functions. Now for example i am always logged in to Gmail, and theoretically can a random app scan and copy my gmail's data and send it trough internet? Really curious..
Click to expand...
Click to collapse
edit
MichaelTunnell said:
This question is not really an issue of Android security this is a question about general security. Can an app look at your gmail app directly and copy data and send it out...not exactly no, an app can't forcibly connect itself to another app to scan data.
However...
That question is actually not relevant because such a task is unnecessary for malicious apps. Lets say you install a malicious app that wants to copy your gmail data. What it will do is not watch the app itself but it will watch the network packets being sent to and from the app, logging and tracking those.
This is not the only way to get the data though because any data saved on your sdcard is accessible from an app if you give it permission to do so.
The MOST important thing to look at when installing an app is the permissions the app is requesting when it installs. This can be confusing as well because some apps will request full internet access because they need it but this can also be used by a malicious app to steal your data.
The important thing to do is research. The more you learn about the app the better off you are.
-------
Just to clarify, this applies to all apps of any kind on any platform including but not limited to Android, iPhones, Blackberry, Windows Phone, WebOS, Windows PC, Mac OSX, Linux or etc. - ALWAYS learn as much as you can and are comfortable with before installing anything...if you are not comfortable with a particular app or learning more about it then don't install it. That is not to say it may be malicous, it is just to say it could be a bad idea for other reasons. (for example, if it is a developer tool or a configuration tool that you don't understand or haven't researched enough to understand...then you could potentially damage your device with something that is a legitimate tool)
Click to expand...
Click to collapse
Good answer, you are right!, but you say do a research before installing, but it's not really possible unless you are a programmer and checking whole code The best rated apps still have many different permission requirement and i have no idea what they are doing.
For example app can request a new password change for example on paypal and steal packets which come to my gmail about new password.^^
Security Apps
Hi,
in my eyes the best way is to use programs like PDroid. You cann adjist the rights of every App regarding send SMS for example.
LBE Privacy Guard may be also an Option. (runs not on my Device - SGS+)
(i use Pdroid 2.0)
you should also read the comments in the store, and the needed rights from the app before install. The best Apps to trust are open source apps.
Kblavkalash said:
Good answer, you are right!, but you say do a research before installing, but it's not really possible unless you are a programmer and checking whole code The best rated apps still have many different permission requirement and i have no idea what they are doing.
For example app can request a new password change for example on paypal and steal packets which come to my gmail about new password.^^
Click to expand...
Click to collapse
Research generally involves a Google search...
Editor's Choice in the market are safe bets, you know, the blue icon.
But then there are the millions of other apps, and frankly, I tend to toe the app name plus xda for instance, Google will show you xda threads about the app, if the posts are normal, you can be sure it's not malicious.
Stuff like that...
Also, fake market comments are really easy to spot and are a dead giveaway
Sent from my GT-I9000 using xda premium

[Discussion] Do we really need an antivirus app on android? Attention required.

Hey guys it's quite confusing for me. That do we really need an antivirus on android?
Please submit ur reviews.
If yes,why and which app you suggest.
If no..plese let us know why?
Devs and seniors are mostly welcome and requested.
XDguru said:
Hey guys it's quite confusing for me. That do we really need an antivirus on android?
Please submit ur reviews.
If yes,why and which app you suggest.
If no..plese let us know why?
Devs and seniors are mostly welcome and requested..as ur the ones we trust on XDA.
Click to expand...
Click to collapse
I have never used or needed one. As long as your careful then your fine.
Re: Do we really need an antivirus app on android? Attention required.
XDguru said:
Hey guys it's quite confusing for me. That do we really need an antivirus on android?
Please submit ur reviews.
If yes,why and which app you suggest.
If no..plese let us know why?
Devs and seniors are mostly welcome and requested..as ur the ones we trust on XDA.
Click to expand...
Click to collapse
Just don't download garbage blindly and u should be fine
Sent from my SGH-I777 running AOKP
XDguru said:
Hey guys it's quite confusing for me. That do we really need an antivirus on android?
Please submit ur reviews.
If yes,why and which app you suggest.
If no..plese let us know why?
Devs and seniors are mostly welcome and requested..as ur the ones we trust on XDA.
Click to expand...
Click to collapse
I don't see it as necessary, but I do use avast! Free Mobile Security for it's anti-theft part. There are other apps that offer the same.
A german security company ran a test of some anti-virus apps, There were 172 possible hits and 10 real time hits and the results were depressing:
Antivirus Free fra Creative Apps – 0/172, 0/10
GuardX Antivirus fra QStar – 0/172, 0/10
LabMSF Antivirus beta fra LabMSF – 0/172, 0/10
Privateer Lite fra Privateer Labs – 0/172, 1/10
Bluepoint antivirus Free fra BluePoint Security – 2/172, 1/10
Kinetoo Malware Scan av CPU Media SARL – 11/172, 1/10
Zoner AntiVirus Free av ZONER – 55/172, 8/10
Mind you this was a while back and Avast, AVG and other of the larger ones was not included.
never need it , beside it drains battery
In my experience antivirus apps are just here to scare windows users into giving a company more money.
Sure some of them to have nice anti theft features however there are also plenty of very good (free) apps that do this like prey.
Just do not download random apk's from the internet and blindly install them and you will be fine
Re: Do we really need an antivirus app on android? Attention required.
Waste of money.... When i got my first device i spent 5€ for antivarious... After some days i found out that the only thing it was doing, was to blockmy carrier`s messagges.. Nothing else
Sent from my GT-I9001 using xda app-developers app
Antdroid antivirus programs are mostly used for
1)Anti-Theft uses
2)To know any issues with settings in the phone (Faulty or unchecked settings)
3)To know which apps are using network, wifi, GPS etc through privacy advisers
4)Will block malicious websites that are suspicious.
5)Provides call/sms blockers.
6)I have seen some virus attacks for few of my friends on their android mobiles even though they had an antivirus app on them. So I don't know why it happened.
So instead of backing off from single drawback use it for several other uses it provides! (My choice Avast! For Rooted phones, it will work best)
i think it just drain battery faster and use a lot of ram..
Re: Do we really need an antivirus app on android? Attention required.
Used to stick with avast before. ( but it makes the device hell lotta Laggy when any app is installed trying to scan the crap out of it for no good ).
But it's useful with the firewall feature.
As long as its from playstore, you won't need any anti viruses .
In 4.2 i see that Google has included something that they call "verify apps" and that's supposed to check if the app is harmful or not.
And again, download stuff from trusted websites only.
- - - - - - - - - - - - - - - - - - - - - - - - - -
LIFE!
IT'S WHAT YOU MAKE OUT OF IT!
I agree with the other posts,
You really don't need an antivirus as long as you are careful about what you download.
I was using Aavast, but it made my Tab 2 laggy and slow so I uninstalled it.
Security Suites like LBE Security would be usefull for control permissions, start up, block ads and firewall; but the best antivirus is intelligence and caution
To be honest with you, you just need to be carefull and don't install things from sources you don't trust. Having that said, I still use Avast! Mobile Security because it has an anti-theft feature which I highly appreciate.
Not necessary, just don't go around installing sketchy apps.
Re: Do we really need an antivirus app on android? Attention required.
The worst thing I have experienced in many years is airpush which is essentially no worse than spam ads and is remedied by simply uninstalling the culprit app.. Be aware and you should not need antivirus apps.
Sent from my Sourcerized GNex Toroplus via Tapatalk
Re: Do we really need an antivirus app on android? Attention required.
Using avast for anti thefts..n got a solution,instead of uninstalling it I just froze it via greenify..n it solved the issue.only the anti theft is working in background and its using quite little memory which is ok for me as per my phones physical security is concern,but the antivirus app that was using a huge memory is frozen..
Hope this idea helps any one who is in confusion to hav or not an antivirus.
Thanx all for your valuable advice and suggests.
Sent from my MT11i using xda app
Re: Do we really need an antivirus app on android? Attention required.
I use lookout security.. according to this Washington post article over 80% of all mobile malware is written for android. Something everyone here should keep in mind
http://m.washingtonpost.com/busines...226316-874b-11e2-98a3-b3db6b9ac586_story.html
Sent from my SPH-L710 using xda premium
As long as you know what you're installing, checking the permissions, not installing non-Market apps too often, and no installing unknown apps over the internet, you should be fine without antivirus.
Re: Do we really need an antivirus app on android? Attention required.
Don't auto download attachments from your email either.
Sent from my SPH-L710 using xda premium
Re: Do we really need an antivirus app on android? Attention required.
I never need it.
Sent from my LG-SU640 using xda premium

Securing adroid devices as much as possible.

Hey guys!
I'm given the task of securing 2 android devices (galaxy tab 7.0 and an S3). The friend of mine who has asked me to do this has been hacked (on an Iphone and on a windows PC) recently (for various sinister reasons) and After I secured her windows environment she bought these devices. A while after using the phone someone started to remotely control the phone and typed 'hell' in our language and she is really afraid. One of the pcs I secured has been stolen since it couldn't be reached remotely anymore, so I guess the threat is pretty serious. Now getting to the point, what would be the BEST way to do this ?
-Flashing custom roms on these (which is the most secure?)
-Seting up an antivirus + firewall on both devices (also I'd like to know which of these are the best NP if its paid)
-Setting up an anti theft app (and same here, I know Cerberus, but I'm wondering if there is a better solution)
The hard part of this is the fact the hackers are very likely experts (they hacked her Iphone back then making it taking photos and logging all keys like a regular keylogger).
What a story!
I strongly recommend avast! AntiVirus which comes with avast! Anti-Theft. Best Part: It's free!
McAfee is supposed to detect more malware but not as many as it would be worth its price.
Sent from my GT-I9100 using xda app-developers app
H3llwar said:
What a story!
I strongly recommend avast! AntiVirus which comes with avast! Anti-Theft. Best Part: It's free!
McAfee is supposed to detect Moore Malware but not as many as it would be worth its price.
Sent from my GT-I9100 using xda app-developers app
Click to expand...
Click to collapse
Thank you Buddy! Any additional professional suggestions? Anyone?
Anti-virus is only a curative solution, and can only detect malware after they have already breached your device. Android's security model makes it difficult for an attacker to remotely breach the device, unless they have a bad app installed on the device. When a user installs an app, they give that app certain permissions, and these permissions need to be checked to ensure they aren't being used as malicious apps (why would a camera app need to make phone calls on your behalf?) . The best suggestion would be to exercise good permission checking habits to ensure you aren't accidentally installing a bad app. Also, attackers may also send bad code through SMS, which may appear as a clickable link. I could keep going on possible ways to get compromised, but these are the most prominent.
syung said:
Anti-virus is only a curative solution, and can only detect malware after they have already breached your device. Android's security model makes it difficult for an attacker to remotely breach the device, unless they have a bad app installed on the device. When a user installs an app, they give that app certain permissions, and these permissions need to be checked to ensure they aren't being used as malicious apps (why would a camera app need to make phone calls on your behalf?) . The best suggestion would be to exercise good permission checking habits to ensure you aren't accidentally installing a bad app. Also, attackers may also send bad code through SMS, which may appear as a clickable link. I could keep going on possible ways to get compromised, but these are the most prominent.
Click to expand...
Click to collapse
Get a PermissionsManager like OpenPDroid or XPrivacy.
Sent from my GT-I9100 using xda app-developers app

Apps for finding spyware someone installed on my phone?

I've looked at a lot of anti-spyware apps, but I can't find one that specifically says it can find stealth apps that someone installed when they got ahold of your phone. So it would look like an app that I personally wanted to have. They mostly talk about apps that were installed by a virus or link, etc.
It would be nice to be able to disable camera/mic functions too, or at least be notified when they are being accessed.
I don't mind paying to purchase the app, but most require a double digit monthly subscription, and I make next to nothing because I'm disabled so chances are even if I subscribed the money wouldn't be there to continue the subscription.
I've lurked here for many years without signing up, I love you guys! There are so many tutorials and apps that would never have known about if not for you guys. The developers here are geniuses. So thank you immensely in advance for your help!
Maybe try play store free app Bitdefender which has 5 million dl's & 4.7 rating. I have not tried it....
"Bitdefender Antivirus is one of the few actually free antivirus apps. It hasn’t changed much over the years. It offers a basic scanning feature, a simple interface, quick performance, and no configuration. This is a great one for super basic needs. All it really does is scan stuff ..." androidauthority
galaxys said:
Maybe try play store free app Bitdefender which has 5 million dl's & 4.7 rating. I have not tried it....
"Bitdefender Antivirus is one of the few actually free antivirus apps. It hasn’t changed much over the years. It offers a basic scanning feature, a simple interface, quick performance, and no configuration. This is a great one for super basic needs. All it really does is scan stuff ..." androidauthority
Click to expand...
Click to collapse
Thanks for the reply. Do anti-virus apps detect spyware though?
They can, just read some of the app playstore reviews and it's Developer app description for details....
Try ‘Malwarebytes for Android’.
If you really think there's spyware do a hard reset.
If you still aren't satisfied go full nuke and have the firmware reflashed.
No virus detection has a 100% detection rate and the worst trojans only a reflash can eradicate them.
A better question is why do you think there's spyware on the phone?
In over 6 years of using outdated OS's I've never had to do a reload because of malware.
Once found a nasty trojan preloader before it could be triggered with Malwarebytes.
I had a infected jpeg that damaged files in the download folder. Deleting the jpeg and some of the files ended it's brief rain of terror.
Be careful what apps you load, what you download*, what you click and never let others have unsupervised access to your device. React quickly to abnormal behavior to find it's cause.
Delete any file you suspect of being malware including jpegs and pngs.
Be prepare to do a hard reset at any time if you believe the device has been infected.
Always keep at least 2 complete isolated data backups for the device. Stagger syncs to them so a virus can't get embedded on both of them... hopefully.
Lol, paranoid yet?
*use only cloud based email apps like gmail
Google apps are spyware, Facebook is spyware, Whatsapp is spyware, Instagram is spyware. In principle all Social Media apps are spyware.
All apps what are designed to track your Internet browsing habits, such as frequented sites and favorite downloads, and then provide advertising companies with marketing data are spyware. All apps what can access your contacts data are spyware ...
Android, the spyware party mix...
You can try Bitdefender Free or Malwarebytes Premium. I have not used the second one before but have read a review at https://antivirusdoctor.net/ and think about using it on my smartphone.

Categories

Resources