I think I got a virus on my galaxy S3...but I suck at analysing APKs and mobile phone security generally...
-
So I was browsing a page and something seemed to go wrong ! after some time I saw there were two APKs files downloaded -from that page-. their names are Xzone-1409140423366-.apk and Xzone-1409227281662-.apk whether or not they are malicious is obvious :if they weren't why were they downloaded 'secretly'. I found a report here[^] and it says something about key logging.well that's scary...and there are not keyscramblers available for android ! after opening the APK with winrar I found -except of the bunch of HTMLs and a few XMLs- some pictures like playbuttons etc- that were not noticed by me while using the phone. no other strange activity was noticed either ! so in my view the file was not 'executed'. but I wan't to know for sure ! Is it possible for someone to run an APK file ,bypassing the phone's security measures ? also,if this thing enabled a stealth program how can I find it ? (I mean something hidden from taskmanager etc ) any advanced tips ? oh...I scanned the phone with AVG free and it found no threat ! thanks a lot !!!
-
So I was browsing a page and something seemed to go wrong ! after some time I saw there were two APKs files downloaded -from that page-. their names are Xzone-1409140423366-.apk and Xzone-1409227281662-.apk whether or not they are malicious is obvious :if they weren't why were they downloaded 'secretly'. I found a report here[^] and it says something about key logging.well that's scary...and there are not keyscramblers available for android ! after opening the APK with winrar I found -except of the bunch of HTMLs and a few XMLs- some pictures like playbuttons etc- that were not noticed by me while using the phone. no other strange activity was noticed either ! so in my view the file was not 'executed'. but I wan't to know for sure ! Is it possible for someone to run an APK file ,bypassing the phone's security measures ? also,if this thing enabled a stealth program how can I find it ? (I mean something hidden from taskmanager etc ) any advanced tips ? oh...I scanned the phone with AVG free and it found no threat ! thanks a lot !!!
I believe Android (just like most newer Linux distros) only works in "user" mode, which wouldn't be allowed to install anything without prompting the user for permission. That's generally one of the things that makes Linux more secure than Windows (Windows sort of implemented/copied this behavior in Vista). You should be safe if you never gave permission to install these packages. If for whatever reason you did give permission though, you'd have to see a list of all running processes to make sure it's not running. In standard linux that would be a quick
**ps aux**call but you would likely need a terminal program in Android since it doesn't have one by default (does have one, just not accessible).