Avast WEBforum

Consumer Products => Avast Mobile Security => Avast Mobile Security for Android => Topic started by: patrice58 on December 20, 2012, 11:43:12 PM

Title: Virus!
Post by: patrice58 on December 20, 2012, 11:43:12 PM
I just scanned my phone and it found a virus! It was PornoXXX.apk now why did the web shield not pick it up and what kind of virus was it?
Title: Re: Virus!
Post by: Lisandro on December 21, 2012, 12:33:56 AM
Can you copy this file to the computer and send it to www.virustotal.com for analysis?
Which was the name of the virus reported by the scanner?
Title: Re: Virus!
Post by: patrice58 on December 21, 2012, 01:50:34 AM
I got rid so I can't anymore sorry.
Title: Re: Virus!
Post by: cooby on December 21, 2012, 01:53:51 AM
Can you copy this file to the computer and send it to www.virustotal.com for analysis?
Which was the name of the virus reported by the scanner?
Tech, you can also use the VT application, I did once, it worked nicely
https://play.google.com/store/apps/details?id=com.virustotal&hl=en
Title: Re: Virus!
Post by: patrice58 on December 21, 2012, 02:03:00 AM
I have the android app. Google bought virus total anyhow.
Title: Re: Virus!
Post by: patrice58 on December 21, 2012, 02:52:39 AM
Android:FakeInst-CE [Trj]
 file:///mnt/sdcard/download/
PornoXXX.apk
 20.12.2012 23:19 Virus Scanner
Title: Re: Virus!
Post by: Filip Havlicek on December 21, 2012, 07:33:00 AM
Hi,

as it says in the Web Shield description, it protects you from malicious/phishing websites, it does not scan files you download.

Filip
Title: Re: Virus!
Post by: patrice58 on December 21, 2012, 12:11:57 PM
So in a nutshell if I did not do a full scan of my phone it would of never been discovered for maximum another week. (Remember that as default AMS is set to only do a full scan once a week.) Not very proactive is it. Anyhow semi rant over is there plans for the web shield in AMS to scan files? I believe AIS does that with it's web shield. 

As a footnote I am not sure that the  automatic scan is enabled as default as I can't remember but seen there is a box to tick I would think not.
Title: Re: Virus!
Post by: Filip Havlicek on December 21, 2012, 02:10:48 PM
Hi,

remember that Windows is a completely different OS than Android. While almost everything is possible on Windows if you put enough effort in it, Android is very, VERY limited. I don't know about plans since I don't do those, but I can tell you I know how to do it, I'm willing to do it and just need time to do it. If someone else decides to put it into the plans, I will be happy to implement it.

Filip

As a footnot, I don't think automatic scan is enabled by default.
Title: Re: Virus!
Post by: svehlak on December 21, 2012, 02:31:52 PM
I think there is always shield on - so in case you will try to run the application, virus scanner will react immediately.
Title: Re: Virus!
Post by: patrice58 on December 21, 2012, 02:32:15 PM
Filip I'll do it! Ahhh if only! Who do I speak to for them to give you the time to do it?
Title: Re: Virus!
Post by: patrice58 on December 21, 2012, 02:33:38 PM
That's great but what if you don't run it............? It will stay there indefinitely which it all a trojan needs.
Title: Re: Virus!
Post by: Filip Havlicek on December 21, 2012, 03:37:14 PM
The thing is that malware on Android needs to be installed first in order to do it's bad job. If it's only downloaded on SD card, it won't do anything at all unless installed.

I think I shouldn't give you any names, might be a bad time for me after you wrote them ;)

Filip
Title: Re: Virus!
Post by: patrice58 on December 21, 2012, 05:17:00 PM
Lol I won't be mean honest! :-) Well can I at least then have someone to pitch some suggestions to? Do you have a AMS wishlist? If not you should have as it's a way of getting people like me in touch or at least looked on by the developers. Maybe not in touch with on a one to one level but it might show as a whole what the users want. Which could be used to steer the development team.
Title: Re: Virus!
Post by: patrice58 on December 21, 2012, 05:23:57 PM
The thing is that malware on Android needs to be installed first in order to do it's bad job. If it's only downloaded on SD card, it won't do anything at all unless installed.

It was installed tho on the SD card it I believe went on as a download (not prompted by me I might add! I saw it, saw the filename thought oh no pressed cancel and thought that was that.) Or do you mean downloaded as an non SD card app?

I think I shouldn't give you any names, might be a bad time for me after you wrote them ;)

I totally understand Filip as I in NO WAY would want to get you into any sort of trouble.
Filip
Title: Re: Virus!
Post by: Filip Havlicek on December 21, 2012, 05:26:56 PM
It was only downloaded on the SD card as a file in my opinion. To actually install an app from .apk file on SD card, you have to manually enable "Unknown sources" in device settings (like you did in case of our Anti-Theft), then you have to tap on the .apk file using some file manager and confirm the installation of the app after reviewing its permissions. You didn't do all that, did you? :) Until you confirm the installation, the app can do you no harm.

Filip
Title: Re: Virus!
Post by: patrice58 on December 21, 2012, 05:39:42 PM
Yes I did...........Just kidding! I have redownloaded the virus. Where should I send it? If you want the link to the virus I can give that to you as well. It's a tumblr link of all things! Weird.

Got rid of it again but still have the link and have sent it to avast as a FP.
Title: Re: Virus!
Post by: patrice58 on December 21, 2012, 05:51:35 PM
There needs to be a send to virus lab option  as all there is at the moment is a report as a fp option.