Possible Virus- Help needed

[c1im8er]

Hi,

My friend (really) activated his screen on his Motorola Droid to send a text message and saw a picture of a woman in a bikini on his screen (nothing he downloaded). He then noticed that his phone was in the process of downloading a program. When the download finished he was notified that the unknown program that was downloaded could not be installed because his phone was set to not install non-market apps.

I walked him through finding out what file was downloaded and we found two files that he did not recognize in his "downloads" folder:

hot_babe_32063_fe1.apk

aria_prod_v0.38.apk

I have never heard of this happening before but it sounds like some market approved app that had been previously installed tried to download and install a non-market app but was thwarted by the non-market app security setting. My friend does not normally download non-mainstream apps so I'm not sure what could be doing this.

Has anyone heard of this problem or the programs listed above? I googled both programs with no results.

Thanks!

 

[dezymond]

that's a first....

i do know the market has some controversial apps in the wallpaper section (after looking for live wallpaper) so maybe he accidentally downloaded one of those?

his credit card or anything hasn't been compromised has it?

i would imagine a factory reset would do the trick to rid of this possible virus.

 

[hookbill]

I strongly doubt it's a virus.

 

[dmacleo]

tictactoe 3d might be it if he d/l that.
TicTacToe 3D: Hot Babe Edition | Android Apps

 

[huskur]

There are no known viruses for the android OS to date.

Not saying its not a virus.....just not very likely

 

[Backnblack]

I'm going with User Error....
Downloaded something in err or Doesn't want to admit it.

 

[c1im8er]

I agree that this is very strange since android phones seem to have no known viruses. But as I said, those .apk files don't even show up on a google search. What's going on here?

Correction: File name contains "se1" not "fe1"

 

[aminaked]

he granted permission to internet access and sd card to some app I guess. Careful what privileges you allow when installing. I'm guessing this is a spyware trojan, not a virus.

 

[c1im8er]

That makes sense. I guess I kind of lump "spyware" and "virus" into the same category when I'm thinking about it. I just figured anything that downloaded a program and tried to install it without his permission would be considered a "virus". Is it accurate to say that while android does not suffer from "viruses" it does have "spyware" like this in the market other than the apps Google remotely removed from phones a while back?

 

[iPirate]

Next thing you know he is going to have all these porn sites coincidently popup on his browser's history...

 

[aminaked]

Yes, android is open to spyware trojans. It goes something like this:

Eww, shiny wallpaper app from china! Install now, ignore privileges granted, have all data uploaded for crooks to enjoy.

Why would wallpaper need access to your contacts and to the internet? You have to be careful what privileges you grant. Any app that you enter a personal password into should be highly scrutinized. Browsers are the main app for this. Hopefully we can trust dolphin and xscope. If I were to bank on the phone, I'd probably choose the stock browser.

A few months back there was an app that got people's bank passwords because it looked like a legit app.

In the end, UNLESS you care about your contact list getting out or the contents of your sd card getting out, you can install any app on the market and feel safe...just don't enter your passwords into it unless you trust it.

 

[Lars1]

Dude, It was the HOT BABE edition, what do you expect?

 

[Lars1]

Duplicate post.