Viruses can be of two types:
1. Fake - the name and icon of some well-known application is used, but only malicious code inside. Most viruses are of this type.
2. Trojan horse - malicious code is added to a normal application that works together with the application.
What viruses can
1. To steal money from a SIM card: call or send SMS to premium rates until the SIM card runs out of money.
2. Steal information: send passwords from online banks, bank card details or personal files to scammers, send messages with viral links to numbers from your address book on your behalf.
3. Block device from normal operation: Display a ransomware banner that prevents the device from being used.
4. Use the power of your device: show hidden ads or mine cryptocurrencies.
How viruses get on a smartphone or tablet
Scammers disguise viruses as harmless applications and files: browsers, players, games, navigators, books, antiviruses. Then they distribute them:
1. On sites for adults, sites with hacked applications and pirated films, torrent trackers, etc.
For example, you search the Internet for some game or program, and you find yourself on the forum. Someone left the necessary link, and everyone thanks him.
In fact, the forum and commentators are not real.
Or go to the site with pirated movies and TV series, a message appears. It says that the smartphone / tablet is infected with viruses or some program is very outdated. It even happens that the device begins to vibrate or make strange sounds.
In fact, this is not the case, and everything is fine with the device.
2. By SMS, MMS and Email
As a rule, these are SMS from "girls from dating sites", from free classifieds sites, letters from "notaries from Germany", messages about winning the lottery.
Be careful, there are no miracles. In most cases, these are scammers.
All such messages have a common goal - to get you to click on a link so that the virus is downloaded to your device.
How viruses infect a smartphone or tablet
For the virus to start working, it is not enough to download it - you also need to install it. Typically, viruses are downloaded to the Download folder and look like application installation files with an “apk” extension.
If you click on the virus, a list of permissions will appear. Permissions are actions that an application can take after installation.
If you click Install, the virus will be installed and will start working.
How to tell a virus from a normal application
Most viruses are written by non-professionals who want to get money quickly and without any problems with the law. Therefore, the standard signs of such viruses are permissions for sending messages or calls. When such a virus is installed, it will quietly send SMS or call toll numbers.
Let's compare real apps and viruses. Dr.Web anti-virus:
Permissions of the original antivirus from the Play Store
Permissions of a virus that impersonates an antivirus
Yandex Navigator:
Permissions of the original navigator from the Play Store
Permissions of a virus that impersonates a navigator
Talking Tom Game 2:
Resolutions of the original game Volume 2 from the Play Store
Permissions of the virus that impersonates the game Volume 2
Of course, not all applications that request access to calls and messages are viruses. And not all viruses request access to paid features.
If scammers want to shoot with your camera, you will need access to the camera and the Internet.
If your files are required, they will ask for access to memory and the Internet.
If they want to block the screen with a banner, they will ask for administrator rights.
And some viruses even know how to hide permissions during installation.
It is difficult to identify a well-made virus - either you need to look at the source code of the application, or install the virus on the device, remove the logs (incident log) from it and understand them. Fortunately, such viruses are rare. More often than not, you will need two landmarks:
If an application is downloaded from an unknown site and requests access to paid functions, this is a virus in 99% of cases.
How to protect your smartphone or tablet from viruses
1. Install applications only from the Play Store and take their choice seriously
It is very difficult for an untrained person to distinguish a virus from a normal application. To keep users safe, Google has created a special directory with applications - Play Store.
Before adding an app to the Play Store, Google checks to see if it contains malicious code. Users who download apps from the Play Store are more secure than those who download apps from various sites and forums. But remember that nothing is completely secure, so take your app selection seriously: read the permissions carefully and look at the ratings.
2. Do not follow unknown links in SMS, MMS or mail
Scammers have even learned to spoof numbers and email addresses, so messages with viral links can come from people you know.
3. Do not root the device or install unofficial firmware
If there is a root on the device, the virus will be able to register in system applications and then only a complete flashing of the device can remove it.
4. Disable automatic receipt of MMS on your device
Fraudsters can automatically download viruses to the device via MMS. This is due to vulnerabilities in the Stagefright library.
To disable MMS auto-download, select: Messages → Options → Settings → (Advanced) → MMS → Auto-retrieve (Auto-download) → Disable.
5. Do not connect the banking service "Autopayment" (automatic replenishment of the phone number balance when it drops to a certain amount)
If a virus suddenly gets on the device and sends SMS to premium numbers, the SIM card balance will be replenished until the money on the card runs out. In this case, messages from the bank are usually blocked.
Tip: To receive messages from banks and other important senders, buy a separate number that no one will know, and a simple phone.
How to understand that a virus has appeared on a smartphone or tablet
There are no definite signs, it all depends on the virus. Some are noticeable immediately after installation (a banner appears and access to the device is blocked), others may not give themselves out for a long time. In most cases, the symptoms are:
- Big SMS or call bills appear;
- A banner appears with a demand to pay scammers, which does not allow using the device;
- Unfamiliar programs appear;
- The battery starts to run out very quickly;
- Internet traffic is quickly consumed by incomprehensible applications;
- The device starts to slow down strongly.
How to remove a virus if the menu opens
How to remove a virus if the menu does not open (ransomware banner)
If a ransomware banner appears on the screen and prevents you from using the device:
Do not transfer money to scammers - they will not unlock the device anyway.
Pull out the SIM card so that the money is not debited from the account.
Boot your device into Safe Mode.
If the banner disappears in safe mode, disable administrator rights for all applications.
If the banner is still there, go to step 11.
Review all installed applications and uninstall unknown ones.
Reboot your device. The device will boot in normal mode, there should be no banner.
If the banner appears after the restart, go to step 11.
Download a trusted antivirus over Wi-Fi from the Play Store.
The device of viruses and the mechanisms of antivirus work change daily, so it is impossible to advise any particular antivirus. Focus on ratings from other users and reviews. According to the author, good antiviruses: Eset, Kaspersky and Dr. Web.
Check your device with antivirus and remove any viruses found.
Remove the antivirus that you installed.
Download another antivirus and check your device again.
If the previous options don't work, reset your device.
If you cannot recover from the virus yourself, contact a Samsung service center.
Do I need an antivirus on Android
If you are a novice user and are not confident in your abilities, you need one. But only one.
If you use the device carefully and follow the safety rules, you do not need to install an antivirus.
Smartphone Apps
Smartphones currently come exclusively with the pre-installed Android operating system, so choosing an antivirus comes down to the same suite of apps as any other brand.
AMC Security
https://play.google.com/store/apps/details?id\u003dcom.iobit.mobilecare
A comprehensive security package that currently supports 38 languages, including Russian. It is not very popular yet, but it already has more than 10 million installations.
Security is a priority, but there are many other useful features. In addition to protecting against viruses, it allows you not to miss phishing sites and ensures secure payments.
If the gadget falls into the wrong hands, the owner can use the anti-theft function to prevent personal data leakage and leave the attacker with a nose.
Like many analogues, AMC Security is able to clean all trash from the operating system, monitor the temperature of the chipset and the state of the battery charge, speed up the operation of applications, including games.
AVG Antivirus
https://play.google.com/store/apps/details?id\u003dcom.antivirus
AVG Mobile is a fairly serious company dealing with the security of mobile devices. The 2019 version has already been installed by more than 100 million people - this is a very good indicator.
The package's capabilities are quite extensive. In addition to scanning the operating system and applications in real time, it is able to create a private VPN network, ensure the security of a Wi-Fi connection, show the location of the lost device on Google Maps, and, if necessary, erase data from memory or SIM card.
Moreover, it is able to quietly photograph a person trying to unlock the device and send a picture to the owner.
If the user browses the Internet through the browser built into the operating system or Google Chrome, the visited websites may be scanned for threats.
The program requires administrator rights to work.
Avira Antivirus Security
https://play.google.com/store/apps/details?id\u003dcom.avira.android
"Migrant" from desktop systems - PC users are quite familiar with the programs of this developer, although he is far from the market leaders. Like AVG Antivirus, the app is free.
The set of capabilities for comprehensive protection of a smartphone is not too rich: scanning and removing viruses, anti-theft function, blocking unwanted calls.
There is a basic, free, and paid pro version. The latter provides protection for the microphone and device cameras from unauthorized access.
DU Security
https://play.google.com/store/apps/details?id\u003dcom.duapps.antivirus
This program is primarily focused on protecting a variety of confidential information. With its help, you can hide the photo and video gallery, address book and other important data in a special file storage.
The "black list" will give a turn to spammers and inadequate people from the gate, and it is not necessary to enter every single number into it - you can filter out unwanted calls using mask filters.
GO Security
https://play.google.com/store/apps/details?id\u003dcom.jb.security
Antivirus developed by GOMO Apps, the audience of users to date has exceeded 10 million.
In addition to protecting against viruses in real time, it allows you to block the launch of applications selected by the owner of the smartphone and can be used as an ad blocker.
Able to hide photo gallery and clear browsing history.
LINE Antivirus
https://play.google.com/store/apps/details?id\u003djp.naver.lineantivirus.android
An antivirus application from LINE Corporation, unfortunately, without a Russian-language interface. More than 5 million installations - not so many, but not too few.
Using the program, you can find out which applications have access to confidential information. There is a function to combat SMS phishing and clear history.
It makes sense to be able to permanently delete files from the drive's memory without the possibility of subsequent recovery.
Some functions require administrator rights.
Finally
Those who decide to install a free antivirus on their Samsung smartphone have a wide choice. At the same time, one should understand a simple truth: none of the existing programs is fundamentally capable of detecting absolutely all threats.If only because new viruses appear almost every hour. Therefore, preference should be given to those developers who regularly update the databases and have qualified support.
Viruses can be of two types:
1. Fake - the name and icon of some well-known application is used, but only malicious code inside. Most viruses are of this type.
2. Trojan horse - malicious code is added to a normal application that works together with the application.
What viruses can
1. To steal money from a SIM card: call or send SMS to premium rates until the SIM card runs out of money.
2. Steal information: send passwords from online banks, bank card details or personal files to scammers, send messages with viral links to numbers from your address book on your behalf.
3. Block device from normal operation: Display a ransomware banner that prevents the device from being used.
4. Use the power of your device: show hidden ads or mine cryptocurrencies.
How viruses get on a smartphone or tablet
Scammers disguise viruses as harmless applications and files: browsers, players, games, navigators, books, antiviruses. Then they distribute them:
1. On sites for adults, sites with hacked applications and pirated films, torrent trackers, etc.
For example, you search the Internet for some game or program, and you find yourself on the forum. Someone left the necessary link, and everyone thanks him.
In fact, the forum and commentators are not real.
Or go to the site with pirated movies and TV series, a message appears. It says that the smartphone / tablet is infected with viruses or some program is very outdated. It even happens that the device begins to vibrate or make strange sounds.
In fact, this is not the case, and everything is fine with the device.
2. By SMS, MMS and Email
As a rule, these are SMS from "girls from dating sites", from free classifieds sites, letters from "notaries from Germany", messages about winning the lottery.
Be careful, there are no miracles. In most cases, these are scammers.
All such messages have a common goal - to get you to click on a link so that the virus is downloaded to your device.
How viruses infect a smartphone or tablet
For the virus to start working, it is not enough to download it - you also need to install it. Typically, viruses are downloaded to the Download folder and look like application installation files with an “apk” extension.
If you click on the virus, a list of permissions will appear. Permissions are actions that an application can take after installation.
If you click Install, the virus will be installed and will start working.
How to tell a virus from a normal application
Most viruses are written by non-professionals who want to get money quickly and without any problems with the law. Therefore, the standard signs of such viruses are permissions for sending messages or calls. When such a virus is installed, it will quietly send SMS or call toll numbers.
Let's compare real apps and viruses. Dr.Web anti-virus:
Permissions of the original antivirus from the Play Store
Permissions of a virus that impersonates an antivirus
Yandex Navigator:
Permissions of the original navigator from the Play Store
Permissions of a virus that impersonates a navigator
Talking Tom Game 2:
Resolutions of the original game Volume 2 from the Play Store
Permissions of the virus that impersonates the game Volume 2
Of course, not all applications that request access to calls and messages are viruses. And not all viruses request access to paid features.
If scammers want to shoot with your camera, you will need access to the camera and the Internet.
If your files are required, they will ask for access to memory and the Internet.
If they want to block the screen with a banner, they will ask for administrator rights.
And some viruses even know how to hide permissions during installation.
It is difficult to identify a well-made virus - either you need to look at the source code of the application, or install the virus on the device, remove the logs (incident log) from it and understand them. Fortunately, such viruses are rare. More often than not, you will need two landmarks:
If an application is downloaded from an unknown site and requests access to paid functions, this is a virus in 99% of cases.
How to protect your smartphone or tablet from viruses
1. Install applications only from the Play Store and take their choice seriously
It is very difficult for an untrained person to distinguish a virus from a normal application. To keep users safe, Google has created a special directory with applications - Play Store.
Before adding an app to the Play Store, Google checks to see if it contains malicious code. Users who download apps from the Play Store are more secure than those who download apps from various sites and forums. But remember that nothing is completely secure, so take your app selection seriously: read the permissions carefully and look at the ratings.
2. Do not follow unknown links in SMS, MMS or mail
Scammers have even learned to spoof numbers and email addresses, so messages with viral links can come from people you know.
3. Do not root the device or install unofficial firmware
If there is a root on the device, the virus will be able to register in system applications and then only a complete flashing of the device can remove it.
4. Disable automatic receipt of MMS on your device
Fraudsters can automatically download viruses to the device via MMS. This is due to vulnerabilities in the Stagefright library.
To disable MMS auto-download, select: Messages → Options → Settings → (Advanced) → MMS → Auto-retrieve (Auto-download) → Disable.
5. Do not connect the banking service "Autopayment" (automatic replenishment of the phone number balance when it drops to a certain amount)
If a virus suddenly gets on the device and sends SMS to premium numbers, the SIM card balance will be replenished until the money on the card runs out. In this case, messages from the bank are usually blocked.
Tip: To receive messages from banks and other important senders, buy a separate number that no one will know, and a simple phone.
How to understand that a virus has appeared on a smartphone or tablet
There are no definite signs, it all depends on the virus. Some are noticeable immediately after installation (a banner appears and access to the device is blocked), others may not give themselves out for a long time. In most cases, the symptoms are:
- Big SMS or call bills appear;
- A banner appears with a demand to pay scammers, which does not allow using the device;
- Unfamiliar programs appear;
- The battery starts to run out very quickly;
- Internet traffic is quickly consumed by incomprehensible applications;
- The device starts to slow down strongly.
How to remove a virus if the menu opens
How to remove a virus if the menu does not open (ransomware banner)
If a ransomware banner appears on the screen and prevents you from using the device:
Do not transfer money to scammers - they will not unlock the device anyway.
Pull out the SIM card so that the money is not debited from the account.
Boot your device into Safe Mode.
If the banner disappears in safe mode, disable administrator rights for all applications.
If the banner is still there, go to step 11.
Review all installed applications and uninstall unknown ones.
Reboot your device. The device will boot in normal mode, there should be no banner.
If the banner appears after the restart, go to step 11.
Download a trusted antivirus over Wi-Fi from the Play Store.
The device of viruses and the mechanisms of antivirus work change daily, so it is impossible to advise any particular antivirus. Focus on ratings from other users and reviews. According to the author, good antiviruses: Eset, Kaspersky and Dr. Web.
Check your device with antivirus and remove any viruses found.
Remove the antivirus that you installed.
Download another antivirus and check your device again.
If the previous options don't work, reset your device.
If you cannot recover from the virus yourself, contact a Samsung service center.
Do I need an antivirus on Android
If you are a novice user and are not confident in your abilities, you need one. But only one.
If you use the device carefully and follow the safety rules, you do not need to install an antivirus.
There are many rumors on the Internet about the insecurity of the Android operating system. It is not uncommon to find news about a new virus, and horrifying statistics, which say that millions of users a day are infected with malware and Trojans.
Because of this, myths arise that every Android user definitely needs an antivirus. But let's put everything on the shelves.
As you can see, news and scary statistics are usually published by the antivirus companies themselves, referring to themselves. You probably have friends and acquaintances with Android smartphones, how often have you heard complaints about viruses from them?
But really, is an antivirus really necessary for Android?
Open source operating systems like Android are indeed more susceptible to security problems than closed ones like iOS. But this is more of a problem of its enormous popularity. Probably 95% of viruses that users get infected are due to their own fault, and not because of "holes" in the system or some super actions of hackers. 95% of malware is caught by installing applications from unreliable sources.
Disabling unknown sources significantly reduces the risk of catching a virus.
Often people do not want to pay $ 1–5 for their favorite toy, and this is where the “miser pays twice” rule works. The user himself downloads the APK file (usually a paid game on questionable free cutout resources), and installs it. But this turns out to be the so-called FakeInstaller or "dummy", the purpose of which is to first send an SMS to a short number, and then, possibly, give access to the desired content.
A typical example of a FakeInstaller. Access to SMS and calls is requested, name AndroidTuner.
Even though during installation the system warns in red that this application or game will get access to SMS and calls, inexperienced smartphone owners still click on the “Install” button.
As a result, a certain amount of money disappears from the account, usually almost the entire balance.
Android OS, starting from version 4.3, is well protected by standard means. If the application wants to send an SMS to a short number, you will be informed about it. Also, all installed applications are scanned for malicious code. Google Play can monitor them remotely. That is, if any malicious game or program gets into the official store, after its detection it will be immediately automatically removed from your device without your participation.
So do you need an antivirus for Android? - The standard system tools are more than enough, and there is probably no point in additional antivirus. Unless you have an old version of Android.
If you yourself installed a malicious application despite the warnings, then no antivirus will help you. Follow basic information security rules and everything will be fine. Remember that the best antivirus is sanity and attentiveness!
Here are some simple tips to help you keep your Android smartphones and tablets more secure:
If you still feel calmer with an antivirus, you should not buy paid options, something like Kaspersky. This is a waste of money. There are good free options like this
