Database Info

Securing my phone, so many choices

I recently bought Android phone HTC ONE V and i am suprised how business work around Anroid OS + apps. I see some major problems :
1) Is there any trusted authority which inform users that application is 'safe' ? (see article : android-malware-spreads-via-website-injection-campaigns) Malware apps are even on Google Play market. I suppose that solution for this problem is to download just from e.g. TOP 10 apps from each category and just *hope* and *believe* that there is no malware contained just because these apps are soo much popular.
2) How to control permissions/app starts/firewall is there any good app for that ? I have unrooted phone. (I cant have Cyanogenmod 7/9 installed on my HTC One V because it was not ported yet) What would you recommend to me ? I see a lot of recommendations for "LBE Privacy Guard" app but then i found thread here on xda forum that this application is maybe suspicious/dangerous etc... I just want to have full control over my phone, why is that choice so difficult ?
List of apps, often recommened by 'The Internet', are these ok or not ? :
Wifi Protector
Droidwall
WhisperCore
WhisperMonitor
SSH Tunnel
Titanium Backup
ROM Manager
Tasker
Perfect App Protector Pro
This exactly describes my situation, many choices -> i expect to get the best from the Android :
The opportunity costs associated with a decision and the time and effort that go into making it are "fixed costs" that we "pay" up front, and those costs then get "amortized" over the life of the decision. The more we invest in a decision, the more satisfaction we expect to realize from our investment. If the decision provides substantial satisfaction for a long time after it is made, the costs of making it recede into insignificance. But if the decision provides pleasure for only a short time, those costs loom large. Spending four months deciding what stereo to buy is not so bad if you really enjoy that stereo for 15 years. But if you are excited by it for six months and then adapt, you may feel like a fool for having put in all that effort.
Dont you feel the same about these Android 'choices' sometimes ?

Tell Me What Kind Of Apps You Are Looking For And I'll Give you Some Recommendations

From the list of apps you have provided I can see that all of them are trusted and reliable.. so go ahead..

1. Well google aded some security in market so before they upload app they check if it is malware-free. But for more security you can download antivirus
(I RECOMMEND AVAST!)
2. For managing apps permisions im using LBE Privacy Guard is the top app for permisions and firewall managment.
Titanium Backup, Tasker-- awesome apps 100% excelent!
Have a nice day

+1 for avast! excellent at keeping viruses out, keeping data secure, doesn't slow the phone down and has an awesome anti-theft feature which if you're rooted is even better!

Did anyones avast actually find anything that is not a false positive?
Just wondering if this is really necessary...

My avast detected the one click root and androot files on my sd card as malware, which I mean they could be lol but the process of identifying them as false positives was a pain. Other than that... Avast is amazing.
Sent from my myTouch_4G_Slide using XDA

onebornoflight said:
My avast detected the one click root and androot files on my sd card as malware, which I mean they could be lol but the process of identifying them as false positives was a pain. Other than that... Avast is amazing.
Sent from my myTouch_4G_Slide using XDA
Click to expand...
Click to collapse
Yes, sometimes it does its an antivirus so... he thinks that third-party apps are suspicious, but there is nothing to worry about when it comes to root.

antivirus is no good for performance

Antivirus overrated
Antivirus is and will never be any good for performance. You have to decide what risk you are willing to take. With good common sense, you can filter out the obvious threats. Review apps permissions and (try to) install only apps you and the community trust. If you don't trust it, ask around in this forum
Also - obviously - don't visit suspicious sites, click on links in emails and never download programs you don't know.
Personally, i do not use virus protection. I do use DroidWall and LBE Privacy guard for a few apps, but more for data and performance issues.
But i also regularly whipe my phone to install new ROM's and let my (trusted) apps freshly reinstall and restore only game user data.

rilorolo said:
Antivirus is and will never be any good for performance. You have to decide what risk you are willing to take. With good common sense, you can filter out the obvious threats. Review apps permissions and (try to) install only apps you and the community trust. If you don't trust it, ask around in this forum
Also - obviously - don't visit suspicious sites, click on links in emails and never download programs you don't know.
Personally, i do not use virus protection. I do use DroidWall and LBE Privacy guard for a few apps, but more for data and performance issues.
But i also regularly whipe my phone to install new ROM's and let my (trusted) apps freshly reinstall and restore only game user data.
Click to expand...
Click to collapse
+1 here. I think that there is no need to use an Antivirus. Just have a look on the permissions when installing an app and you will be OK.

Information about AVs and Firewalls.

Greetings to everyone!
I have been searching a lot lately about malware and virus protection on Android and answers differ a lot from post to post and from forum to forum.
So my question here remains:
Is really an AV and/or Firewall needed for Android?
I don't know if its relevant to mention somethings, but I will post them anyway:
I only install apps from Google Store, and all of them are over 4*.
I have some private data on my phone (pictures, musics, etc).
Am I in peace of mind in what concerns malware protection?
Or in my case its better to have one?
Thanks in advance

--Johnny-- said:
Greetings to everyone!
I have been searching a lot lately about malware and virus protection on Android and answers differ a lot from post to post and from forum to forum.
So my question here remains:
Is really an AV and/or Firewall needed for Android?
I don't know if its relevant to mention somethings, but I will post them anyway:
I only install apps from Google Store, and all of them are over 4*.
I have some private data on my phone (pictures, musics, etc).
Am I in peace of mind in what concerns malware protection?
Or in my case its better to have one?
Thanks in advance
Click to expand...
Click to collapse
Its not really necessary to install an Antivirus on an Android device... especially when you only install apps from Google Play because Google Play automatically scans (and removes) any malicious apps after the developer uploads it....
Plus most Antivirus apps tend to consume a lot of Battery, RAM and app Storage capacity too..

Sami Kabir said:
Its not really necessary to install an Antivirus on an Android device... especially when you only install apps from Google Play because Google Play automatically scans (and removes) any malicious apps after the developer uploads it....
Plus most Antivirus apps tend to consume a lot of Battery, RAM and app Storage capacity too..
Click to expand...
Click to collapse
Thank you for the reply
So there is no malware?
I also read in some websites that PlayStore was not safe, that had been found malware in apps... I don't have any confirmation on if its true or not, some say yes, when others say no.

--Johnny-- said:
Thank you for the reply
So there is no malware?
I also read in some websites that PlayStore was not safe, that had been found malware in apps... I don't have any confirmation on if its true or not, some say yes, when others say no.
Click to expand...
Click to collapse
Yes you are right... Recently a couple of apps with very good ratings were "compromised" but they were immediately taken down by Google... And don't worry mate.. if there are any apps containing harmful malware then Google will automatically remove them from Play Store asap and will also "remotely" uninstall that app from a user's phone if he/she installed it....
Just be sure of what you are downloading and installing on your phone and you will be alright...
Two more things:
1. Most antivirus apps detects some apps as "adware" but this is most likely a false alarm... app developers need money; so they put ads in their free version of their apps... and most antivirus apps sees these apps as adware....
2. Some antivirus apps offers features like anti-theft, "find my phone", firewall, ad removing, etc. now these are useful features BUT often not needed.. if you need any of them then you can go ahead and use an app that offers these services...
Hope all these info helps you mate... :fingers-crossed:

dateShot ever
its enough to change some app Attributesvto Bypass the av program
So at this time it doea not make really sence to use it ...
Greetz fireskyer

Thank you very much for your help
I ended up uninstalling my AV solution. Saved up the CPU and the 20mb of RAM it was using, plus the battery lasts a bit longer!
Just for precaution, I installed DroidWall (its a firewall). It doesn't consume any resources when you are not using it, and gives me the peace of mind regarding security.
It blocks anything you dont want to have access to the Internet.
I even noticed, when gaming while using Internet access, it even blocked adds D), I din't even expect that.
Thank you all once again
Thread can be closed now,
Best regards,
Johnny.

--Johnny-- said:
Greetings to everyone!
I have been searching a lot lately about malware and virus protection on Android and answers differ a lot from post to post and from forum to forum.
So my question here remains:
Is really an AV and/or Firewall needed for Android?
I don't know if its relevant to mention somethings, but I will post them anyway:
I only install apps from Google Store, and all of them are over 4*.
I have some private data on my phone (pictures, musics, etc).
Am I in peace of mind in what concerns malware protection?
Or in my case its better to have one?
Thanks in advance
Click to expand...
Click to collapse
I would say at least get a anti virus. With all the malmare getting bundled into these programs its worth its weight in gold

--Johnny-- said:
Greetings to everyone!
I have been searching a lot lately about malware and virus protection on Android and answers differ a lot from post to post and from forum to forum.
So my question here remains:
Is really an AV and/or Firewall needed for Android?
I don't know if its relevant to mention somethings, but I will post them anyway:
I only install apps from Google Store, and all of them are over 4*.
I have some private data on my phone (pictures, musics, etc).
Am I in peace of mind in what concerns malware protection?
Or in my case its better to have one?
Thanks in advance
Click to expand...
Click to collapse
Hi Johnny,
Though you install apps from the Google Store you are not safe unfortunately, because for instance an app with 4* can contains a bug that can be used by another bug, what I mean is that single app is not a malware but combined with others could be... My advice is to take a look to apps like the following:
PDROID: http://forum.xda-developers.com/showthread.php?t=1357056
Xposed: http://forum.xda-developers.com/showthread.php?t=1574401
these apps allow to have much more control over apps, for instance if an app wants to access contacts through Xposed you can say, the set of contacts that can be retrieved are:
empty
the real set of contacts
a set random elements
best,
Simone

Good antivirus for rooted phones?

Hey does anyone know of a good antivirus app for a rooted zenfone 2e? I want one that is free but has as many features as possible as well. Thanks.

I used to use Avast but the best anti virus is you, the user. Know your system, know the internet. If youre rooting, you will/should eventually get very familiar with android, how it behaves, the file system, permissions, built-in apps, etc. Avoid indiscriminate app downloads, especially from places other than the play store, and never follow links that youre unsure of. My opinion is that Windows is the only OS that AV is pretty much necessary.

I second avast. An interesting feature is that it will survive a factory reset if stolen.

zshep99 said:
Hey does anyone know of a good antivirus app for a rooted zenfone 2e? I want one that is free but has as many features as possible as well. Thanks.
Click to expand...
Click to collapse
Unlike the PC, it is extremely unlikely you will "get" a virus on your android. It is you who has to install the malware to make it happen. And it is extremely easy to remove the malware. A factory reset would do it and as root user you could simply restore your nandroid backup.
tetakpatalked from Nexus 7 flo

Most antivirus apps come with a huge amount of crap no one needs. They often drain your battery and slow your smartphone down. I have also seen antivirus apps which behave more like spyware by replacing advertisements in other apps or direct you to untrustworthy websites when opening the webbrowser.
My opinion: You do not need an antivirus app on your smartphone. Make sure you install most apps via appstore. Take care with apps from 3rd party websites. (Especially if the website says you have an virus on your smartphone => scareware!)

I would never install Antivir-Apps, since they will drop your phone-performance. And what do you get for this? Nothing. Just be carefully of what you are downloading.

i thinks for android no needs one antivirus..

Kenfary72 said:
i thinks for android no needs one antivirus..
Click to expand...
Click to collapse
+ one
Envoyé de mon E5333 en utilisant Tapatalk

Kenfary72 said:
i thinks for android no needs one antivirus..
Click to expand...
Click to collapse
+ two

My opinion is that android doesn't need antivirus software when the user is careful about what he downloads.

no disregard to anyone, but are you sure you are in developers forum ?!?! this is not a google store !
do you still live in Symbian world ? even the google play itself has malwares ! or you just want to ignore it ? beside those, hangroid can be easily hacked. the only system that dose not a antivirus is winphone, and it has not need it yet ! but they will come for it very soon.
personally i will never trust ios o even open my email, and in android i have an original payed antivirus that really can respond to a virus. i have original nod32 (i do NOT like it, but i didn't get a better one in hangroid.)
visited by lenovo tab2 a8.
best regards, josef.

josef2600 said:
no disregard to anyone, but are you sure you are in developers forum ?!?! this is not a google store !
do you still live in Symbian world ? even the google play itself has malwares ! or you just want to ignore it ? beside those, hangroid can be easily hacked. the only system that dose not a antivirus is winphone, and it has not need it yet ! but they will come for it very soon.
personally i will never trust ios o even open my email, and in android i have an original payed antivirus that really can respond to a virus. i have original nod32 (i do NOT like it, but i didn't get a better one in hangroid.)
visited by lenovo tab2 a8.
best regards, josef.
Click to expand...
Click to collapse
Best antivirus is still brain.apk
Just do not instal every bulls* and you are good to go.
Most antivirus apps are snakeoil/bloatware which will not protect you from anything!

It is good to think about an anti-virus. Android malwares exist, so everyone who's telling here that AVs for Android are a no-go are jumping the gun. However, the Android system already has some security measures into place. So is it still worth it? Yes. The Play Store can't guarantee a 100% clean virus free app collection. History has shown that. "use your brain" is also not a really constructive argument, it is easy to install a sample or virus infected application. Is it that dumb to use an AV on Android? No.
My suggestion, *buy* an AV. For example I have a yearly subscription to Freedome from F-Secure (VPN service). Primarly for my laptop but you can install it on three devices (I have it on 2 laptops and my smartphone). For the smartphone, besides a VPN the app will also scan the device for malicious apps so I got all my important security features in one app. I know that Avast has something similar. I paid 50 euros for one year, which is next to nothing considering the features and piece of mind. And for all those that go on ranting on my post here, I am a security professional in Android and see malware samples from the inside (reverse engineer) all the time
I encourage you to look in those options: VPN and App scan.

tetakpatak said:
Unlike the PC, it is extremely unlikely you will "get" a virus on your android. It is you who has to install the malware to make it happen. And it is extremely easy to remove the malware. A factory reset would do it and as root user you could simply restore your nandroid backup.
tetakpatalked from Nexus 7 flo
Click to expand...
Click to collapse
Remember stagefight thingy ? One could have abused it to gain root privileges and install a binary that run at start, a raw binary, not a package.
Tell me how it is easy to uninstall it, you would first have to track it, if it's purpose wasn't to patch other binaries, and then, you're good to reflash system partition.
No system is invulnerable
Of course, it's tough to get a virus on android, but there's still common malware, adware, scareware, and raw security flaws. There is still need for security solutions, mostly for the raw flaws.

Best choice for you from my point of view
CM Security & Malwarebytes Anti-Malware

I agree with Magissia if you think over that what you are going to do.

Virustotal AND vulnerability patches

Antivirus Software, is it needed

You see all these Anti-Virus apps on the market:
Are they needed
Do you use one?
Have you ever had a virus?
I'm not sure, if I stick to getting apps just off the google play store surely i'll be fine? I've never had a virus on android, on my previous HTC M7, M8 and M9 I used Kaspersky just because I got it free with my banking, but I removed it from the M9 after a few months.

Mcyates said:
You see all these Anti-Virus apps on the market:
Are they needed
Do you use one?
Have you ever had a virus?
I'm not sure, if I stick to getting apps just off the google play store surely i'll be fine? I've never had a virus on android, on my previous HTC M7, M8 and M9 I used Kaspersky just because I got it free with my banking, but I removed it from the M9 after a few months.
Click to expand...
Click to collapse
From what I've gathered, if you're a relatively aware user and install apps either from the play store or other trusted sources then those antivirus and cleaner apps, at best, mitigate an already very low risk or, at worst, drain your system resources, steal personal info, and/or con you into spending money with no benefit whatsoever.

1. Not in my opinion
2. No
2. No
Edit: In the spirit of this post, if you're on the web and you get a pop up stating your phone has a virus... It's a scam.

1. no
2. no
3. no
Never used an antivirus program on a computer or a phone and never had one single issue with it ever in the entire history I have used a computer.

No, they're not needed
No, I don't
No, I've never had one
Sent from my SM-G935T using XDA-Developers mobile app

1. No, unless you're fond of downloading dodgy apps from weird Russian hacker sites (and even then I'm not convinced an AV app would save you)
2. No
3. No

Mcyates said:
You see all these Anti-Virus apps on the market:
Are they needed
Do you use one?
Have you ever had a virus?
I'm not sure, if I stick to getting apps just off the google play store surely i'll be fine? I've never had a virus on android, on my previous HTC M7, M8 and M9 I used Kaspersky just because I got it free with my banking, but I removed it from the M9 after a few months.
Click to expand...
Click to collapse
Answer to all questions: NO.
More detailed answer to the general idea of an antivirus on Android: Simply put, if an antivirus program is *able* to scan your Android device, then it IS A VIRUS. Android prevents all applications running in the "untrusted_app" security context (which means EVERYTHING that you install from ANYWHERE, except those which are an upgrade to a system application with matching signature) from any kind of access to anything which would be required in order to write an antivirus program that actually does ANYTHING.
So to answer your question properly; ANY antivirus on Android is DEFINITELY one of two things;
1) A virus.
2) A placebo that tries to take your money.

1. No
2. Not for several years(used to use AVG)
3. Never had a single issue
To put it bluntly, antivirus is almost useless on smartphones. They pretty much only check installs of apps(not other downloads), and they don't know what viruses look like, in my experience. After years of use, my antivirus never found a virus, but did try to prevent me installing a bunch of root apps because it often thought they were malicious. So it only got in my way. Several years later I didn't even remembered they existed till this post reminded me.

My last 2 phones both came with lookout , S6 & s7 from TMO...it seems like this application does nothing but drain my phone of resources. Once i disable lookout in app manager the phone becomes much smoother and faster.
So yes I think these kinds of apps are useless.

[GENERAL] Get back data privacy on android

Hi there,
I hope this is the right place to post such question, otherwise, please feel free to move to the right place.
I am quite into mobiles, since day 1 (1999 for me). This is also why I bought an HTC G1 ...
Anyway, when installing "Network Connections", I was quite surprised, how many connections, how many apps had, to several servers, even of services I dont use. My weather app calling Facebook, even though I dont have facebook on my mobile et all. "Brave" Browser, no tabs open, however, six connections...
Then the news with the Apps using trackers (PayPal, Outlook etc.). I really like my privacy, but I dont see, that this is respected. I do know, that nothing comes for free in life, and I do know, that it is a trade-off, data against services. And for Google it is okay (Google Maps e.g. couldnt live without it), but I think a few too many, want to have a peace of the cake, in particular, after I have paid for the apps (because, I also know, they need to make a living).
Anway, long story short, what is there I can do to protect myself, learn how it works etc. Pleasese refrain from tellin gme to sell my mobiel, turn off the internet etc
I used xprivacy on my Nexus4 - still a good idea?
I am using Android and iOS.
Thanks a lot in advance

Try MyAndroidTools to disable Google spyware embedded in apps. Components like these:
GcmInstanceIDListenerService GcmMessageListenerService
AppMeasurementService FirebaseInstanceIdService FirebaseMessagingService
AppMeasurementInstallReferrerReceiver AppMeasurementReceiver FirebaseInstanceIdInternalReceiver FirebaseInstanceIdReceiver
FirebaseInitProvider
These are all Google-related tracking/ analytics. Along with any Crashlytics components you see.
Stop using ALL Google apps. Including Chrome. Including bundled spyware. Including Play store. Including Calendar. Including SMS. Remove all of them from your rooted device and install non-Google equivalents. Try Osmand and others for maps and other apps from f-droid to get the functionality you want. Yes, it takes time.
Find app to change hostnames and Mac addresses and clean persistent cookies if you want. Find websites such as https://apps.evozi.com/apk-downloader/ to download some apps you can't get from f-droid.org. Some apps rely on Google Play being installed. In my experience, none of them are worth it. If your app requires them and you can't live without it, probably forget any decent privacy.
If using a Mozilla-based browser, add these to your block list in Adaway:
accounts.firefox.com
blocklist.addons.mozilla.org
blocklist.settings.services.mozilla.com
detectportal.firefox.co
dynamicua.cdn.mozilla.net
fhr.cdn.mozilla.net
firefox.settings.services.mozilla.com
incoming.telemetry.mozilla.org
input.mozilla.org
install.mozilla.org
location.services.mozilla.com
mozorg.cdn.mozilla.net
mz.la
search.services.mozilla.com
shavar.services.mozilla.com
snippets.cdn.mozilla.net
tracking-protection.cdn.mozilla.net
updates.push.services.mozilla.com
versioncheck-bg.addons.mozilla.org
webextensions.settings.services.mozilla.com
...to help stop browser spyware.
Download apps from f-droid. Use a good firewall. Use AdAway. Customise your blocklist in AdAway. Disable all auto update components unless you trust the CIA and NSA to 'take care' of your device.
Etc.
https://www.zerohedge.com/news/2017-08-28/how-cia-made-google
You may wish to consider blocking these Google domains if you are adamant you want no business with Google:
adservice.google.com
adservice.google.com.au
ajax.googleapis.com
apis.google.com
books.google.com
books.google.com.au
clients1.google.com
clients2.google.com
clients3.google.com
chart.googleapis.com
crashlytics.com
cse.google.com
console.firebase.google.com
encrypted-tbn0.gstatic.com
firebase.google.com
fonts.googleapis.com
fonts.gstatic.com
ggpht.com
googleanalytics.com
id.google.com.au
imasdk.googleapis.com
lh3.ggpht.com
lh4.ggpht.com
lh5.ggpht.com
lh6.ggpht.com
mail.google.com
maps.googleapis.com
ota.googlezip.net
payments.google.com
safebrowsing-cache.google.com
safebrowsing.google.comsb-ssl.google.com
ssl.gstatic.com
support.google.com
www.googleapis.com
www.googlecommerce.com
You can add more if you are really enthusiastic.
Many are safe to add to your AdAway block list, but some of these will annoy you on some websites or apps that use Google infrastructure, so be warned. You can always temporarily disable AdAway ad-blocking or identify the domain you want to remove from the blocklist by using the Log DNS Requests feature.

Thank you
Thank you @comfortable - I really appreciate you took the time, to give me such a long and detailed reply.
Persepctively a complete avoidance of Google is the long-term goal. At this stage, I am more interested in avoiding smaller fish (like my alarm clock, which unfortunately offers a unique feature: slowly increasing alaram sound, gibes you a relaxed wake-up).
I am using Adhell already, and already diabled background call via AMB shell, however this made apps stop working compeltely (Runtastic e.g.).
Thanks for pointing out the relevant components! Thats quite helpful... I already condiered installing pihole and surfing via OpenVPN so this would filter out quite a bit of such stuff?
So yes- thanks again, I have a new project and will work off the measures you listed!!! Thank you. :good: