Anti-Virus for Android

I was using antivirus free from droidSecurity Inc.. The latest update almost made my Droid unusable. It significantly chewed up battery life and made the phone so sluggish that I finally uninstalled it.
 
Really? A Linux administrator? Would you mind sharing with us all for what company? So we can never use them, of course.

The thing is, throwing out blanket credentials doesn't actually give you any credibility. Throwing out true, verifiable statements--now that would give you credibility! I also find that punctuation and grammar help, but that's just me.

Mobile phones will likely be the target of new malicious content in the near future, but at the moment these applications are unnecessary and bloatware.
 
To clarify, Unix/Linux does indeed have executable files.

But they are not like MS Windows or DOS .exe/.com files, they require a corresponding application or collection of applications to make it fully executable, as well as proper permission.
 
First of all, linux does run executables - duh... (whoever wrote, it doesn't AND claims to be linux admin should go back to filling plastic bags at wal-mart).

Secondly, with the emergence of android + it's popularity there WILL be people exploiting that system, just like it happens on Windows.

Thirdly, there is a proof-of-concept rootkit for Android, recently published a the BlackHat conference in Las Vegas, and yes, that one IS a threat.

So if there is Anti Virus software available, using it is recommended, since that malware can be easily contained in any app (aka executable) you get, even the ones from the Market.

And a word to all those "linux experts" in the previous posts: If you dont have any clue what the heck you're talking about, then shut the hell up and stop spreading false information!
 
But that assumes that people are talking about backgrounds (i.e. JPGs and PNGs) or similar non-executable files - they're not. I can make my apps (i.e. apps I've written) auto-run on installation easily. You just have a package_installed receiver. Any receiver that listens for the package_installed broadcast will be executed by Android whenever any package is installed. You then code the package_installed receiver to run the main app. I use this same method, but with a package_updated receiver, to restart my apps after they've been updated. So the act of simply downloading any app on Android could easily result in that app, and any malicious code it may contain, being executed without any further user intervention. The app could do pretty much anything it liked within the boundaries of its privileges. By privs I'm referring the ones you see when you install an app that warn you about what the app may be capable of doing. But that's no safety net either as all you need is the Full Internet Access priv and the app can download and modify its own code quite easily. Unfortunately this priv is easy to explain as any app that has adverts in it, or needs to upload highscores, etc would need it.

So - you now have a situation where any app that requires Full Internet Access can essentially do absolutely anything it likes on your phone that any app is capable of doing, just by downloading it. You don't even need to run it yourself.

The Background app referred to previously was an application, not a background, that allows you to browse and download backgrounds with specific themes. It was the first known app to exploit the Full Internet Access security hole which is why it got some notoriety.
 
access to contact info is a different permission. most malware collects info for spam companies so phone numbers and email addresses are what they want. To this date I have yet to install an app that needed access to contact info. It was an excellent security design idea to include that as a permission. And the stuff about not getting it from mp3s and ring tones was more of a fun fact than a reason you don' need AV.
 
The point is though that there's a security hole in Android that allows any app with Full Internet Access to download new and different code to itself and run that code without ever needing any new permissions, even if the new code would normally need such permissions. The permissions are only EVER checked when you download the app through the Market (either originally or through an update). They are not checked if the app decides to modify itself.

Therefore, any app with Full Internet Access can potentially have all over permissions with you ever knowing about it.
 
...and not only that... it's not just about contacts. Any app can read your SD card contents - you know where many apps store stuff like their twitter caches, email caches, people store pics of their girlfriends, etc. Full Internet Access could send the lot somewhere.
 
anti virus is very much essential for android also.. now dr web is giving theie beta version of mobile security suite for free..
download it..
http://mobilerobo.blogspot.com/2011/02/drweb-antivirus-for-your-android-for.html
 
installing droidwall from market goes a long way to stop apps from calling home. just define which apps are allowed to access internet via wireless / 3g
 
^ wow is this guy for real?

I'm not admin anymore but Sun, Solaris, AIX, BSD and Linux admin back in the 90's.

PS- I'm interested in what good antivirus apps to install on Android, I already know about Norton's. Considering how scary it can be after reports of a wallpaper app maliciously sending personal users' information to the developer.
 
Back
Top