Need Advice Have you guys Androlyzer'd your mobile devices?

[Slyguy]

First, it's interesting Google Play suppresses searching for the app on their store. When I searched for Androlyzer nothing came up, no variations of that yielded results. I know this deep diagnostic tool exists, where was it?

So I did a search for 'DAI LABOR' and it came up and I could install it on my phone.

https://play.google.com/store/apps/details?id=de.dailab.androlyzer.client

This runs a deep forensics on your phone, and you'll suddenly realize that while a lot of apps test clean, a lot of apps show malware-like activity.

For example why does spotify need the power to turn on my microphone anytime it would like? Why does spotify have 13 serious privacy leaks from my phone including taking photos and sending them over HTTP or sending realtime keypresses over HTTP? Why is spotify sifting through my private photos and sending them out? Why is it sending MAC addresses of local devices out HTTP? Why does it give itself permission to obfuscate it's own activities?

Oh Spotify... You nasty little boy!

Spotify aside, you should see what other apps are up to! You'll probably discover Avast/AVG are very very bad boys.. But you might find Sophos is actually a quiet, nice, well mannered little guy..

This changes everything, doesn't it? I know I am uninstalling a great many applications with great haste.

I DARE you to test the Facebook app... DOUBLE DARE!

 

[upnorth]

Thanks for the great share @Slyguy .

 

[HarborFront]

I have 92 apps and it tells me I need 16 hours to scan. Forget it

 

[Slyguy]

I have 92 apps and it tells me I need 16 hours to scan. Forget it

The time estimate isn't accurate for the most part. Mine said 11 hours but took less than 2 hours.

But realize - you are running what amounts to deep forensics and analysis on ALL of your apps. There is a price to pay to do that, which is horsepower and phones have limited horsepower for that level of crunching. So either you plug your phone in, set it aside and go play some Witcher 3, or you don't have a clue what your apps are doing. Simple choice.

 

[upnorth]

First, it's interesting Google Play suppresses searching for the app on their store. When I searched for Androlyzer nothing came up, no variations of that yielded results.

Took my a few seconds to find and install it as the search was never suppressed what I noted. Androl, was all that I had to type before I saw the full result.

I have 92 apps and it tells me I need 16 hours to scan. Forget it

92 apps! I thought 21 apps was alot.

The scan did over 50% of the apps within 30 seconds so I left it on and the Time left slowly decreased from 17 hours to 6 hours after a minute. The full scan was completed after 5 minutes.

Non was considered " Malicious " but 2 was " Dangerous " and 3 " Suspicious " including Androlyzer itself.

 

[Slyguy]

Took my a few seconds to find and install it as the search was never suppressed what I noted. Androl, was all that I had to type before I saw the full result.

Wait.. What? Either Google is suppressing searches for specific user accounts/users, or something odd is happening.

Androl = Nothing.
Androlyzer = Nothing
Lyzer = Nothing
And = Nothing

I literally had (and still have) awareness of that app totally suppressed on my play account. Which makes them feel like running a handy experiment, such as logging into my phone with a fake account and trying again.

This isn't the first time I have seen this. I bought a camera-blocking app last year, the app disappeared from my phone AND the store. The developer stated it is still there. But MY ACCOUNT was unable to access and install the app, but my friends could. Seems fishy.

Can anyone else verify they can or cannot search for this??

 

[In2an3_PpG]

Can anyone else verify they can or cannot search for this??

I can confirm searching "Androlyzer" brought up the app.

 

[Slyguy]

I setup a test tablet running this on all of the popular antivirus software.

This is going to be an interesting test.. So far, after 5 AV's are done, only one is 'mindful' of itself and it's privacy leaks and obnoxious activity. The rest are abysmal, so far.

 

[mekelek]

the app shows up if i search for Androlyzer for me
scanning right now, doing a SAP scan meanwhile too, it's on charger anyways

 

[Deleted member 65228]

I can find it on Google Play as well without a problem.

 

[Slyguy]

So far, from best to worst for all of the categories (Malicious Code, Privacy Leaks, Confidential Sources, Suspicious Features)

Avast/AVG
Sophos
AhnLab
Bit Defender/Emsisoft
Dr. Web

The winner by far is Dr. Web, with about 8 issues, compared to Avast/AVG which has about 60 issues. Current scans running are Bullguard, Kaspersky, Eset, Norton, Trend.

Telegram tested out badly. Signal tested good. Bit Warden came out nicely. Most of the apps (except a file manager) from F-Droid are EXTREMELY GOOD, all of them except 2 were in full green, safe mode.

 

[Slyguy]

I am sending everything up to their website. For example this is Firefox Klar from F-Droid.. (amazing)

Androlyzer

This is the Samsung Default Browser.

Androlyzer

 

[Slyguy]

Update; (WORST to best)

Avast/AVG
Sophos
AhnLab
Bit Defender/Emsisoft, Bullguard, Kaspersky (tied, all of these about the same flaws, still red zoned, but around 20 or less issues)
Dr. Web (still the champ, about 8-9 issues)

Next up, ESET then Antiy AVL and G Data

 

[In2an3_PpG]

G Data is pretty bad.

2 - Malicious
53 - Privacy

 

[Elpibe]

Update; (WORST to best)

Avast/AVG
Sophos
AhnLab
Bit Defender/Emsisoft, Bullguard, Kaspersky (tied, all of these about the same flaws, still red zoned, but around 20 or less issues)
Dr. Web (still the champ, about 8-9 issues)

Next up, ESET then Antiy AVL and G Data

Maybe im wrong, but Dr Web free doesnt have all the protections that other free AVs have. Maybe im wrong but the paid Dr Web, can have a lot more issues than the free.

 

[Slyguy]

G Data is pretty bad.

2 - Malicious
53 - Privacy

This explains why G Data is taking so long for me to finish scanning. The longer something takes, the worst the outcome from what I can tell. Also, I should clarify, I tested Dr. Web Security Space (PAID), not the free one. We have a new winner; (from WORST to best)

Avast/AVG
G Data
Sophos
AhnLab
Bit Defender/Emsisoft, Bullguard, Kaspersky , ESET
Dr. Web Security Space
AVL

Dr. Web Security Space comes in with 8 issues. AVL comes in with TWO issues. It's by far - to this point, the most tidy one I have seen from the testing. Bit and the others at that placing have between 20-30ish issues. Downhill from there, with Gdata having 55 issues and Avast/AVG about 57-62 issues.

 

[In2an3_PpG]

Dropbox = 12 for privacy

Sync = Clean for privacy

 

[Slyguy]

Dropbox = 12 for privacy

Sync = Clean

Here's my list so far; (other than the AV's)

Signal - 35 Privacy, 9 Confidential, 2 Suspicious
Telegram - 1 Malicious, 12 Privacy, 8 Confidential, 3 Suspicious
Bit Warden - 1 Malicious, 3 Confidential, 1 Suspicious
Zoho Email - 3 Privacy, 5 COnfidential, 1 Suspicious
Protonmail - 3 Privacy, 2 Conf, 1 Susp.
Weather Underground - 1 Malicious, 6 Privacy, 8 Confidential, 2 Susp

CLEAN APPS (no issues at all)
Norton Clean
Google Play Movies/TV
SecScanQR
Sync
Microphone Blocker
andOTP
Flashlight
Ol File Manager
Google Play Services
Google Text to Speech
Calculator
Firefox Klar/Firefox Focus
Good Weather
Lens Cap
Libre Office
OpenVPN
Cache Cleaner
CarGurus
Tip Me
Amazon AppStore
CuprumPDF
FAST

On deck right now.. Norton Security, Standard Notes. I'm proud of Norton Clean, it's testing out as one of the best cleanup tools around, with zero programming issues. Anyone want to hit one of the non-tested security products to speed it up?

Oops, one more to add.. 360 Security - it's UGLY.. 3 Malicious, 51 Privacy, 15 Confidential, 2 Suspicious

 

[In2an3_PpG]

Vipre = 2 malicious, 10 confidential, 1 suspicious = 13 Total

Working on Webroot.

Webroot finished. 2 Malicious, 17 Privacy, 13 Confidential, 3 Suspicious = 35 Total

Avira = 29 Total

Mcafee = 72 Total

Malwarebytes = 7 Total

 

[Slyguy]

Norton Security Done.. 1 Malicious, 37 Privacy, 13 Confidential, 1 Suspicious for 52 total.

Lookout Security 15 Privacy, 12 Confidential, 1 Suspicious for 28 total.