Do you think you might have a virus or malicious app on your smartphone? This guide shows you how to recognise a smartphone virus. We’ll also discuss the ways to clean up your smartphone.
The Problem of Smartphone Viruses & Malware
Nowadays, globally, six times as many smartphones are sold as PCs and laptops. Many people spend more time using a smartphone than they do a computer. We also use our smartphones to bank online and we enter personal data such as our contact and payment information. Furthermore, smartphones are intensely personal: they collect all kinds of data such as our GPS location. With all this data available on a smartphone, it’s no wonder that criminals have been trying to get in.
In the past few years, malicious applications have surfaced as a problem for smartphone users. There are now apps designed to covertly steal your personal data. There are also smartphone viruses which use your phone to send premium-rate calls and text messages.
In general, you can keep your smartphone safe by following some basic security guidelines. Stick to the official application store, avoid jailbreaking your phone, stay clear of pirated software and double-check the permissions before installing an application. But what should you do if you think you might have a virus on your phone?
Android Users Beware
As malware is predominantly a problem on Android, some of the tips provided in this article are specific to Android devices. However, users of iOS and Windows Phone can follow most of the same instructions to diagnose a malicious application.
Be Aware Of Scareware & Fake Anti-Virus Messages
First of all, if you’ve come to this page after seeing a pop-up message about a virus on your phone, don’t panic. If you’re browsing the internet, it’s quite possible you ran into fake anti-virus pop-ups (see image below for one example of what a fake pop-up might look like).
If you see a virus warning when browsing the internet, the chances are that your phone is actually fine. You’ve just encountered scareware: a web-based scam which tries to convince you your phone is infected. Don’t install any of the software linked from the pop-up: the so-called anti-virus app is likely to be malicious. Simply close the web page and restart your smartphone’s web browser. You should also be careful not to provide any payment details: they could be used to run up fraudulent charges on your account.
After closing the web page, follow the tips in the rest of this article. You’ll want to double-check for viruses on your phone. For extra piece of mind, you can also use a trusted anti-virus application to scan your phone for viruses (never use the app advertised in the pop-up).
If you’re browsing the internet, you might encounter a scareware scam. You’ll see a pop-up message saying your phone is infected. Don’t panic: the chances are your phone is actually fine. Close the web page and follow the tips in the rest of this article. For extra reassurance, you can also scan your phone with respected anti-virus software. Image credit: Symantec.
The Symptoms of a Smartphone Virus
There are a few tell-tale signs that your device might have a virus:
- Are there strange charges on your phone bill?
Malicious applications have been known to make money by sending premium rate text messages or making premium rate phone calls. It’s always a good idea to check your itemised phone bill: are there strange charges you aren’t expecting to see? If so, it’s possible that you have a virus on your smartphone. On the other hand, you might have inadvertently signed up for a premium rate text service.
For UK-based premium rate numbers, check out the PhonePayPlus website. PhonePayPlus is the UK’s regulator for premium rate telephone services. You can use their NumberChecker service to look up the company behind a premium rate number. Either unsubscribe to the service or file a complaint if you believe the charges are linked to a virus. Are you seeing invasive adverts (e.g. pop-up ads and push notifications)?
If you’ve noticed invasive adverts on your smartphone (e.g. regular pop-up messages or push advertisements appearing in the notification bar), it’s possible you’ve got adware on your phone. This doesn’t mean you necessarily have a virus - at best, adware is simply an annoyance but in some cases it can also contain malicious code.
Android users suffering from ads in the notification bar can use AirPush Detector to find the offending app.
N.B. If you see an anti-virus pop-up whilst browsing the internet, the chances are you’ve encountered scareware. Scareware isn’t directly harmful to your device - simply close the webpage immediately. You should avoid clicking links in the pop-up (see the scareware section earlier in this article).- Have friends received weird texts or e-mails coming from your address?
If friends and family complain of receiving strange text messages coming from your phone number (e.g. spam messages), it’s likely you have a virus on your phone. A malicious app could be using your phone number to send out spam texts.
For spam e-mails originating from your address, it’s also possible that your e-mail account has been hacked. Alternatively, there could also be a virus on another of your devices (e.g. a laptop).
- Have new applications suddenly appeared on your phone?
If so, it’s possible that they came as an update to existing applications. If you aren’t expecting the new applications, you might have a malicious app installed. The malicious app could be downloading new applications in the background.
Are certain applications consuming abnormal amounts of data?
A common theme amongst malicious applications is they need to phone home by accessing the internet. On most smartphone operating systems, you can see a break-down of the applications that have accessed the internet. You can also see the amount of data consumed. On Android, go to the Settings menu followed by “Data Usage”. Look out for applications you wouldn’t expect to see on the list. For instance, if your torchlight application is accessing the internet, it’s possible the app is doing more than advertised.
Don’t forget to also check the “Wi-Fi Data Usage” tab. There’s no reason why malicious apps can only use 3G to call home (indeed, a malicious application can stick to wi-fi only in an attempt to evade detection… many people only check the mobile data usage tab).- Has there been a noticeable reduction in battery life since installing a new app?
Viruses can leave a footprint in terms of increased power consumption. If you’ve noticed a significant drop in battery life after installing a new app, do be wary. It doesn’t necessarily mean the app is malicious but it’s likely to either be buggy or badly-written. Consider removing the app if only to improve battery life.
How To Remove Viruses From Your Smartphone
Check Your Recently Installed Apps.
If your phone has been infected by a malicious application, the first port of call should be the recently installed apps list within Google Play (tap on “All” to organise the apps by date). For each application on the list, do a quick audit. Look out for any applications with a small number of downloads, with consistently low ratings or with poor comments from other users. If in doubt, uninstall the app and see whether it fixes the problem.
If you’ve also installed apps from outside Google Play, go to Settings > Application Manager to see a full list.
iOS and Windows Phone users should follow the same instructions but in their respective application stores (iTunes and Windows Phone Marketplace).
- Check for Drive-By Downloads (Android only).
In the past, hacked websites have been used to deliver drive-by downloads to Android devices. An APK file would be dropped in your download folder. If opened, the APK would install a malicious app on your device. You can check for drive-by downloads by looking for .apk files in your smartphone’s download folder. You shouldn’t install any of these apps: delete them immediately and make sure the app is removed from your system.
- Use the ‘Permissions Explorer’ App (Android only).
Android users who have diagnosed the symptoms of a virus can often find the offending application using the Permissions Explorer app (free).
Permissions Explorer shows a complete list of the applications on your phone allowed to do a certain activity. To find the offending app, match the permission against the observed malware symptom. For instance, if you’re seeing premium-rate text message charges, look for applications allowed to send an SMS.
You should also keep an eye out for apps that request too many permissions e.g. a torchlight application that has access to your phone book. This could indicate that the app is doing more than is advertised.
- Install an Anti-Virus Scanner.
Finally, use an anti-virus scanner to check your handset for malicious applications. We’ll cover some of the top anti-virus apps in an article next week.
Smartphone Security Tips: How To Avoid Viruses
For more security tips, see our guide on how to stay safe & avoid viruses on your smartphone.
Your Thoughts…
In this article, we’ve discussed how to find out if you have a virus on your smartphone. Don’t be fooled by scareware pop-ups: they’re often there to trick you to installing fake anti-virus software. Instead, look for clearer symptoms such as an app you don’t recognise or strange pop-up messages. If you think you have a virus, double-check the apps you’ve installed recently. You should also do an audit of permissions and an anti-virus scan.
Do you have any top tips for keeping your smartphone secure? Are there any anti-virus apps you’d recommend to other giffgaff members? We’d love to hear your thoughts: please drop us a comment below and let us know what you think!
Ken Lo writes about mobile technology and the mobile industry at Ken's Tech Tips.