Database Users

Rooted rom security

Sup world was wondering how secure a custom rom is as far as managing different bank accounts? Would be safer to keep the motoblur stick on my d2? Thanks
Sent from my FroShedYo.V6 using XDA App

Technically, it would be possible for a third-party ROM to contain malware that sends your bank account information to an arbitrary location. Any software could have features that cause unintended things to happen, whether it is commercial or free (occasionally, viruses have accidentally shipped on shrink wrapped software from major companies).
However, the probability of this happening is pretty low. I wouldn't worry about it too much.

Thanks
Sent from my FroShedYo.V6 using XDA App

New Android Virus from China?

At the company I work for, an email came out from our care group that I thought everyone might find interesting. When I first read it, I immediately thought of the MIUI ROM that I installed....
"A new virus infecting the android based phones has been detected in china.It is being said that this is by far the most complicated and sophisticated Android virus that the security firm has come across.This virus is being dubbed as ‘Gemini’ and it has the capability of being remotely operated by the hacker once it is in the phone.Though many viruses have been detected earlier in Android apps. but this the is most sophisticated among all of them.
The Botnet feature of the virus is the major concern.Once the malware is completely installed on the user’s phone, it has the potential to receive commands from a remote server that allows the hacker to access the user’s data and all personal stuff.Once the privacy of the user is compromised,the hacker can do anything he wish to do.
Lookout mobile security,who basically detected this virus said that Gemini uses advanced and sophisticated techniques to hide it’s track.They also said that that the virus is capable of sending location coordinates and device identifiers to the remote server, helping it to generate a list of all installed apps on the infected phone and to install more infected ones.
All the infected applications that have yet come up have been downloaded from a third party Chinese application market. “Geinimi is effectively being ‘grafted’ onto repackaged versions of legitimate applications, primarily games, and distributed in third-party Chinese Android app markets,” the company wrote in a blog post.On the other hand,the same applications that are downloaded from official Android application market are safe.
Although it is not very clear that what actually is the intent of the authors of Gemini.The chief technology officer for Lookout,Kevin mahaffy said that “It could be anything from a malicious advertising network to an attempt to create a botnet”.Botnet basically is a group of infected computers or phones that the attacker controls to compromise for data and identity theft and also it can be used to launch attack on other machines.
The application which are grafted with virus are mostly games and a few applications.Some among them are:
• Monkey Jump 2
• Sex Positions
• President vs. Aliens
• City Defense
• Baseball Superstars 2010.
Here’s how it works:
When a host application containing Geinimi is installed on a client’s phone, the Trojan gets activated in the background and collects information that can compromise a user’s privacy.Geinimi attempts to connect to a remote server using one of 10 embedded domain names. If it connects, Geinimi transmits collected information to the remote server."

here you go http://www.msnbc.msn.com/id/40857219/ns/technology_and_science-wireless/

Interesting read. I wonder: If the infected app is removed, does the virus get removed with it?

rugedraw said:
Interesting read. I wonder: If the infected app is removed, does the virus get removed with it?
Click to expand...
Click to collapse
that would make for a pretty ineffective trojan. I highly doubt it.

also, as per the msnbc article, the virus is named "Geinimi," not "Gemini." Although I guarantee everyone will call it gemini because it's so much easier, at least to an english speaker.

Old news.
cjh6386 said:
that would make for a pretty ineffective trojan. I highly doubt it.
Click to expand...
Click to collapse
It does get removed if you remove it from applications. The only way it wouldn't get removed is if the app were to root the device first, and then push the apk to the apps folder. but this one doesnt do that.

I'm honestly surprised there aren't more of them out there, it would be way to easy to do.
Sent from my PC36100 using XDA App

cjh6386 said:
that would make for a pretty ineffective trojan. I highly doubt it.
Click to expand...
Click to collapse
Good point......I'm just not sure how viruses affect our phones compared to how they affect Windows based PC's.
Last-Chance said:
Old news.
It does get removed if you remove it from applications. The only way it wouldn't get removed is if the app were to root the device first, and then push the apk to the apps folder. but this one doesnt do that.
Click to expand...
Click to collapse
Even then, you would still be able to remove it manually from the apps folder, no? Providing the user has root access, of course.

This is bull****. Why can't they leave viruses for windows computers?
Sent From My HTC Evo 4G On The Now Network From Sprint Using Tapatalk Pro!

I guess it's becoming an issue with the carriers too since our Care department is now getting swamped with calls from people who either "think" they're phones are infected or read that MSNBC article.....
In any event, I have to admit that I didn't even give it a thought that I might get a virus on my phone. I actually even saw quite a few virus programs on the Market and just ignored them. I'll now have to revisit that option, especially since I'm installing ROMS from every source that posts them....

rugedraw said:
Good point......I'm just not sure how viruses affect our phones compared to how they affect Windows based PC's.
Even then, you would still be able to remove it manually from the apps folder, no? Providing the user has root access, of course.
Click to expand...
Click to collapse
probably, but if the app is smart enough to root android devices, chances are its smart enough to hide itself. With root access it can pretty much do anything it wants, including hiding itself, as well as accessing other programs, and what not.

Would a nand restore get rid of it?
Sent from my HTC Supersonic

If it needs root access to do it's thing, wouldn't that trigger the superuser app? And if a game triggers the superuser app, and a person clicks on "Allow"...then...maybe they deserve to be infected.

From what I remember of reading about this virus, it only affected users in China who downloaded it from a third-party market application and not Google's Android Market.

Viruses in android doesn't make any sense to me at all. Since android is so different. As another poster stated, doing a nand is in essence like wiping the total system, correct?
Sent from the Evo 4G

dglowe343 said:
Would a nand restore get rid of it?
Sent from my HTC Supersonic
Click to expand...
Click to collapse
in essence yes. But a person smart enough to code a virus that roots devices is probably smart enough to backdoor nand restore points as well.
Holyrolla said:
If it needs root access to do it's thing, wouldn't that trigger the superuser app? And if a game triggers the superuser app, and a person clicks on "Allow"...then...maybe they deserve to be infected.
Click to expand...
Click to collapse
The chinese one doesn't need root. I was just saying that if it had root it would be a lot harder to remove. And the app is binded to other programs, so the person will probably not even know that the legit one doesnt require superuser.
mbaseball3 said:
Viruses in android doesn't make any sense to me at all. Since android is so different. As another poster stated, doing a nand is in essence like wiping the total system, correct?
Sent from the Evo 4G
Click to expand...
Click to collapse
Why doesn't it? Millions of dollars are stolen each year by criminals that infect phones in order to dial out premium numbers.

Last-Chance said:
in essence yes. But a person smart enough to code a virus that roots devices is probably smart enough to backdoor nand restore points as well.
Click to expand...
Click to collapse
fear monger much?
EDIT: for those curious he's just drumming up nonsense to see if he can get you in a frenzy ... that or has has NO CLUE what he's talking about.
Even if someone was stupid enough to "Accept default permissions" and not question why your video game that you downloaded from a third party marketplace with "allow unknown sources to be installed" flag set needs to look at your phone calls and personal contacts ... there would still be a popup by superuser the moment it tried to do something that required root.
It's a perfect storm trojan: no more a risk to your phone than a phishing site is to your identity: that is a huge problem if you're an idiot.

Justin.G11 said:
fear monger much?
EDIT: for those curious he's just drumming up nonsense to see if he can get you in a frenzy ... that or has has NO CLUE what he's talking about.
Even if someone was stupid enough to "Accept default permissions" and not question why your video game that you downloaded from a third party marketplace with "allow unknown sources to be installed" flag set needs to look at your phone calls and personal contacts ... there would still be a popup by superuser the moment it tried to do something that required root.
It's a perfect storm trojan: no more a risk to your phone than a phishing site is to your identity: that is a huge problem if you're an idiot.
Click to expand...
Click to collapse
yea bro, cause you know what you are talking about. How about you actually look up **** before talking.
1. A 3rd party app can simply ask for 1 permission, then root the phone and gain wide variety of permissions. When i say root, i dont mean the same way as you see here. It will gain permissions beyond what normal apps do. It wont ask for superuser permissions. It will only ask for 1 permission on install
2. Did you know that there is a Buffer overflow available on all phones that are running 2.1 of android? Did you also know that there is a buffer overflow for all androids that are running the latest webkit on 2.2? apparently not. fyi, a buffer overflow in a browser can represent a huge risk, meaning visiting a website that is infected will in return infect you. A buffer overflow will also not ask for any permissions and load a malicious application straight to your phone.
Next time when you talk to someone as if they were a kid, make sure that person doesn't happen to have a CS degree, and 8+ years of experience in computer security. Now gtfo.

those chinese have a strange sense of humor, I bet it started as a prank by some drunk college students to see if they could do something small that would make americans even more paranoid

NewZJ said:
those chinese have a strange sense of humor, I bet it started as a prank by some drunk college students to see if they could do something small that would make americans even more paranoid
Click to expand...
Click to collapse
if you call being charged 100s of dollars on your bill because some virus made phone calls to premium rate numbers a joke, then yes they are very funny.

With all the talk about viruses on Android,is there an Anti-virus that actually works

Just wondering if there is one that will actually work etc? Seems like troll food for now, at least to me. Id like to get one that works, but is it necessary?

Lookout mobile security is good I have it and it works great, Lookout was the company that detected the Trojan Horse in the China market.

I use lookout also on 2 phones. Dont know how good it really is but it better than nothing.

+1 for lookout

Lookout has, in some people's experience, drained the battery.
Best anti-virus? COMMON. SENSE. If an app is asking for the permission to call numbers, send text messages, and access your Google account, OR, asks for root permissions, when it's supposed to be a wallpaper bundle, DON'T INSTALL IT.
Furthermore, DO NOT USE PIRATED CRAP. If you read the articles Lookout's posted about the malware going around, it's all from secondary or untrustworthy alternatives to the Android Market, or from pirate sites.
Really, for everything on the Market that costs money, there's some kind of free alternative. Or you could always, y'know, spend $2 to buy that app. After all you did buy a $450 phone with a monthly bill of no less than $70...

I think Lookout is shady. A lot of these companies create viruses so they could increase their user base.
Aforementioned, don't install an app that demands access to personal and sensitive stuff. That's the main giveaway.

Lookout is one of the only companies that has something to gain from the existence of viruses and since they are pretty much the only company who ever finds and reports about these viruses, gotta take that info with a grain of salt. Like previously stated, common sense will keep your phone safe
Sent from my PC36100 using XDA App

drmacinyasha said:
Really, for everything on the Market that costs money, there's some kind of free alternative. Or you could always, y'know, spend $2 to buy that app. After all you did buy a $450 phone with a monthly bill of no less than $70...
Click to expand...
Click to collapse
That's no fun
Sent on the go from my HTC EVO

I have lookout, works fine. I'm confident in it.
Using my HTC Evo phone which I'm using Xda app to post

i wish people would stop making virus' for our phones. =/

Rydah805 said:
i wish people would stop making virus' for our phones. =/
Click to expand...
Click to collapse
it's that or they get a real job, they can make more with viruses

Android is a linux based system and for Android currently only has one virus. If that says anything. Stop wasting your time on these bloatware apps, Linux does not get viruses. If you do, well I feel sorry for ya.

splmonster said:
Android is a linux based system and for Android currently only has one virus. If that says anything. Stop wasting your time on these bloatware apps, Linux does not get viruses. If you do, well I feel sorry for ya.
Click to expand...
Click to collapse
Wrong on your virus count and that Linux doesn't get viruses
http://www.kaspersky.com/viruswatchlite?search_virus=android&x=19&y=6&hour_offset=-9

There are no such thing as viruses for android. None - not a one - never has been, probably never will be barring some crazy zero day exploit is found (but a lot more platforms would be affected than just android.)
The only malware that exists for android are a few trojans, but you'll never run into the known ones since they are no longer on the market.
As for the unknown ones? Google removes them from the market once they are known, which means any kind of "anti-virus" software can only react about as fast as google can react, which makes any kind of "anti-virus" software superfluous. In other words, you don't need one, and if you buy one you're just wasting your money.
The only exception to this rule is if you download apk's from shady sources outside of the android market and install them, and if you do that indiscriminately, you're a moron.

Yea there is. Common sense.
Sent from my PC36100 using XDA App

Rakeesh_j said:
There are no such thing as viruses for android. None - not a one - never has been, probably never will be barring some crazy zero day exploit is found (but a lot more platforms would be affected than just android.)
Click to expand...
Click to collapse
Technically you are correct, a trojan is not a virus. As far as most smartphone users, the media and AV marketing is concerned they are the same. They screw up your phone. Barring pirated software it is still possible to infect a *nix based system. "Probably not" is not something you want to hear from admin on a network when it comes to infection.
I can give you and example but don't want to make my post a TL|DR (or get banned). The short version is:what phone to infect, what kernel, rooted, apps with SU, what should the virus do, injection point, carrier. The only things that makes *nix safer is, user permissions and that most of the coders are on a *nix OS and respect it.
To the OP, what you want is a security suite (AV,malware,locate,lock,erase) so look at Lookout. Also, are you running a stock rom or custom and if custom then which one? There's a fairly rom specific flaw in Lookout.

If anything I use lookout just for a sense of security. It doesn't take up that much space to me and regardless if how many viruses are out there, it makes me feel safer.
Sent from my PC36100 using Tapatalk

Anything anti-android is gay. Period!!!!
**Non-helpful post**

Lokifish said:
Technically you are correct, a trojan is not a virus. As far as most smartphone users, the media and AV marketing is concerned they are the same. They screw up your phone.
Click to expand...
Click to collapse
Ok name one that does, and how it does it.
As far as I'm aware, the only possible things they can do to harm you is:
- Steal your information
- Spy on you
- Send text messages that cost you money
None of the ones that exist in the wild are capable of causing any sort of damage to your phone.

Rakeesh_j said:
Ok name one that does, and how it does it.
As far as I'm aware, the only possible things they can do to harm you is:
- Steal your information
- Spy on you
- Send text messages that cost you money
None of the ones that exist in the wild are capable of causing any sort of damage to your phone.
Click to expand...
Click to collapse
Geinimi. Think of it as malicious bot-net attack for Android. It inits a backdoor and connects to a remote server. The remote server can then issues commands to download and prompt the user to install an app, prompt the user to uninstall an app, and to send a list of installed apps to the server, place phone calls, as well as the things you listed.
BTW remote deletion is built into Android. Look here:
http://www.h-online.com/open/news/i...oid-apps-from-smartphones-Update-1029188.html

Best Antivirus for ICS

Can someone suggest best antivirus for ICS?
Sent from my GT-N7000 using xda premium

None. Antivirus software for Android = a scam to make the antivirus vendors money.
Just read reviews for apps before installing them from the Market. Malware is usually pretty obvious.

Norton,avast,dr.web they were tested by some big world company wich test antiviruses so type at google best android's antivirus
Sent from my GT-I9100 using XDA

Entropy512 said:
None. Antivirus software for Android = a scam to make the antivirus vendors money.
Just read reviews for apps before installing them from the Market. Malware is usually pretty obvious.
Click to expand...
Click to collapse
Not really true. If you are tech savvy enough to be sure you don't have anything with malware then best of luck to you. You are well respected on this forum so I'm sure you'll be fine.
I'm technically minded and a software programmer by trade but I couldn't be sure that any app on the market is safe without fully reverse engineering it (which I'm not eating my time attempting) and even then some sneaky developer could push something dodgy out in an update so I'd have to check them too.
Also checking apps doesn't protect you from dodgy messages, emails, etc.
So, I have AVG on all my Android devices just in case. It uses very little resources and has caught a couple of suspect things over the last 6 months since I moved to 'Droid!

I am using Kaspersky Mobile Security. Very System friendly.
Sent from my Samsung Galaxy Note using XDA Premium App

I am taking the small risk of a data leak over a performance loss, so I am currently not running one, having said that I do run it on my pc :-/

emuX said:
.
I'm technically minded and a software programmer by trade but I couldn't be sure that any app on the market is safe without fully reverse engineering it (which I'm not eating my time attempting) and even then some sneaky developer could push something dodgy out in an update so I'd have to check them too.
Click to expand...
Click to collapse
It's not about needing to reverse engineer code!
It's more about paying attention to the permissions that the app requests when you go to install it and deciding if they are appropriate.
For example, an app that just makes farting noises almost certainly doesn't need access to your contacts, and services that cost you money.
Some people think that an Android antivirus program will protect them against such threats, and they will if the application has been "blacklisted". However, most of these programs rely on blacklists, so until a particular application is flagged as malware, you are still at risk!
The moral of the story is, nothing beats eternal vigilance!
Regards,
Dave
Sent from my GT-N7000 using Tapatalk 2

emuX said:
Not really true. If you are tech savvy enough to be sure you don't have anything with malware then best of luck to you. You are well respected on this forum so I'm sure you'll be fine.
I'm technically minded and a software programmer by trade but I couldn't be sure that any app on the market is safe without fully reverse engineering it (which I'm not eating my time attempting) and even then some sneaky developer could push something dodgy out in an update so I'd have to check them too.
Also checking apps doesn't protect you from dodgy messages, emails, etc.
So, I have AVG on all my Android devices just in case. It uses very little resources and has caught a couple of suspect things over the last 6 months since I moved to 'Droid!
Click to expand...
Click to collapse
And neither will these 'antivirus' software help if a developer slips something in, the truth is the best thing you can do it check comments malware is far less a problem on android then Windows, these companys simply try to sell you this software as so many people are used to needing it on windows they think android is the same.
All the apps do is detect known 'black listed' apps which are either not going to be on the market or have bad comments already.
While the main reason for these apps is pointless I will say some of the extra features are quite useful including device tracking etc.
However I would never buy one of these apps for sure

Avast Free s the best, enough said.
John

Tinderbox (UK) said:
Avast Free s the best, enough said.
John
Click to expand...
Click to collapse
Yep
The additional 'Theft Aware' software, is free as well

emuX said:
Not really true. If you are tech savvy enough to be sure you don't have anything with malware then best of luck to you. You are well respected on this forum so I'm sure you'll be fine.
I'm technically minded and a software programmer by trade but I couldn't be sure that any app on the market is safe without fully reverse engineering it (which I'm not eating my time attempting) and even then some sneaky developer could push something dodgy out in an update so I'd have to check them too.
Also checking apps doesn't protect you from dodgy messages, emails, etc.
So, I have AVG on all my Android devices just in case. It uses very little resources and has caught a couple of suspect things over the last 6 months since I moved to 'Droid!
Click to expand...
Click to collapse
You my friend, are to paranoid.
Sent from my GT-N7000 using xda premium

lamou1nr said:
You my friend, are to paranoid.
Sent from my GT-N7000 using xda premium
Click to expand...
Click to collapse
Better that than having all my account details hacked because some dodgy app is snooping.
Responding to the others who replied to me...
If you choose a reputable AV company like AVG or Norton you should be safe.
And, you can't tell much from the permissions. Yes, if the app asks for access to your contacts and phone identity then you could just not install it, but what if it was an alternative dialer that was ad supported? - then it would need internet access and permissions to read your phone details (like Go Dialer) and then you are stuffed.
I've got a door at the front of my house. Even though I live in a good area and have neighbours around most of the day, I still lock it!

foxmeister said:
It's not about needing to reverse engineer code!
It's more about paying attention to the permissions that the app requests when you go to install it and deciding if they are appropriate.
For example, an app that just makes farting noises almost certainly doesn't need access to your contacts, and services that cost you money.
Some people think that an Android antivirus program will protect them against such threats, and they will if the application has been "blacklisted". However, most of these programs rely on blacklists, so until a particular application is flagged as malware, you are still at risk!
The moral of the story is, nothing beats eternal vigilance!
Regards,
Dave
Sent from my GT-N7000 using Tapatalk 2
Click to expand...
Click to collapse
+1
Sent from my GT-I9100 using Tapatalk 2

emuX said:
I've got a door at the front of my house. Even though I live in a good area and have neighbours around most of the day, I still lock it!
Click to expand...
Click to collapse
To use your analogy, your "antivirus" app is like a bouncer on your front door. If a known threat pitches up and wants to come in, the bouncer will stop them, but for new and unknown threats, he'll happily wave them through.
Given that reputable app stores like Google Play or Amazon are quick to remove known threats, all you've done is bought yourself a false sense of security! Good luck with that!
Regards,
Dave
Sent from my GT-N7000 using Tapatalk 2

I was just asking about this kind of thing just the other day.
Here is what I found (http://www.av-test.org/en/tests/android/)
The Best stuff at the moment seems to be
avast! Free Mobile Security
F-Secure Mobile Security
Kaspersky Mobile Security (Lite)
. . . .McAfee Mobile Security >_> (Apparently...)
and
Zoner AntiVirus Free

I'm using COMODO on Android (good antivirus, real time scaner and great anti theft options) and on PC i'm using COMODO Internet Security (antivirus+firewall+sandbox). It's free both on Android and PC.

Avast
Avast...without doubt.Run it on my PC too.

I'm using LBE to adjust/monitor permissions for apps. I don't think antivirus programs will do you any good.

Avast is the best in my opinion. Even though its a really good AV and its also free I still dont use one. Don't need one on my mobile.
Even on Windows I never get viruses.
Most malware and viruses come in with dodgy emails and dodgy websites. Avoid those and you'll be fine.

I just use Avast even though I like it more for the Anti-theft feature than the actual anti-virus feature.

Do you have installed Avast in your Nexus?

How many of you have Avast installed? Does it use too much battery?

are you trying to have anti virus or anti theft ?
if its anti theft your looking for id suggest Cerebus. Im not to sure about the battery drain on Avast though
https://play.google.com/store/apps/...51bGwsMSwxLDEsImNvbS5sc2Ryb2lkLmNlcmJlcnVzIl0.

waste of memory and battery to have any antivirus apps installed. just dont install third-party apps from suspicious places

I've had avast installed on another phone of mine. Doesn't use a lot of resources, but it's useless most of the time.
Just install it if you're going to install an app from a shady 3rd party website to scan said app and deactivate or uninstall it of you don't need it.

Seriously all that marketing crap you hear about android and malware is loads of bollocks.... Chances of you getting a virus are like winning a lottery...
Sent from my Nexus 4 using xda premium

MattSkeet said:
Seriously all that marketing crap you hear about android and malware is loads of bollocks.... Chances of you getting a virus are like winning a lottery...
Sent from my Nexus 4 using xda premium
Click to expand...
Click to collapse
Agreed. And if someone does get a virus from a app that someone downloaded from a third-party website or third-party market (not Amazon or SlideIT though), chances are... they deserve it for pirating apps
Besides.. android has a built in malware scanner before you install a app. Not sure how good it is but yeah.
Aside from that, basic rules.
1. dont install apks from random places
2. dont install apps from play store that are just now recently published with 0 ratings [i mean you could... but be wary of it, look at the dev's other apps he made and its ratings]
if you're looking for anti theft, then get a app with only antitheft (or disable its antivirus component if bundled). cerberus is a good app, one time fee of 2.99 euros. there are free alternatives available as well.
lookout's plan b is pretty good as well (remotely install it via play store website to obtain location)

Does anyone use seekdroid for antitheft. Is it any good?

none of these anti theft sofware/app will get your phone back if it gets into the 'wrong' hands, so its the luck of the draw if you ever 'lost' your phone, good luck

cobyman7035 said:
none of these anti theft sofware/app will get your phone back if it gets into the 'wrong' hands, so its the luck of the draw if you ever 'lost' your phone, good luck
Click to expand...
Click to collapse
Even if they can't get their phone back I think users are looking for a remote wipe as a phone does contain a lot of personal information in regards to user accounts.
And some people have actually gotten their phones back with the help of police
Sent from my Nexus 4 using xda premium

zephiK said:
Even if they can't get their phone back I think users are looking for a remote wipe as a phone does contain a lot of personal information in regards to user accounts.
And some people have actually gotten their phones back with the help of police
Sent from my Nexus 4 using xda premium
Click to expand...
Click to collapse
Yes agree wipe feature is nice to have as a last resort or first if your paranoid
°°°Nexus™ 4 via XDA Premium App°°°

if people are looking for theft security. get a app that only does that, not a antivirus included.
or just go live on the high road and use Plan B