Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

We have multiple users that use mobile phones that run of varying versions of Android and often plug the phones into PCs running Windows and Linux that are attached to a wider network. Can an infected mobile phone affect PCs and laptops running Windows and/or Linux and what is the best way to avert further infection?

share|improve this question

4 Answers 4

up vote 3 down vote accepted

An app that runs on Android cannot run on any other OS - other than via an emulator. So if we are talking about a malicious android application, then there is no risk.

If on the other hand we are talking about a Windows virus that has copied itself onto a phone from an infected PC (because a phone attached to a PC can present itself as a storage device), then you have the possibility for that virus to be copied to another Windows PC, perhaps via an auto-sync process (lots of phones come with Windows software that comes with the ability to automatically sync various content types. If this happened, then the virus would have made it to another PC. At this stage it is just a file. It would then take someone to execute the file in order to run the virus program and infect the PC.

They could do this without it being copied of course, they could plug the phone in and browse to it with explorer and run the virus executable.

This vector for infection is really no different from a usb flash drive. That it is a phone doesn't really make much difference, it is that it is a storage device. So you would use the same process to prevent it - remove user permissions to add usb devices.

share|improve this answer
    
What if the phone is simply attached to recharge? Is it still accessible via either operating systems especially Windows? I suspect with Linux not so much. –  PeanutsMonkey Apr 18 '12 at 7:22
    
Different phones behave differently, and a subset of them will present themselves as a removable usb storage device without any configuration. Most linux desktop environments and Windows will automatically mount a removable storage device, and present the contents to the user (usually with a pop up with a bunch of options as to what to do, one of which is to browse to the device withe explorer). –  Paul Apr 18 '12 at 9:05
1  
My Android phone defaults to "charge only" when connected. I believe this is the factory configuration. If I want to use it in "Disk Drive" mode I have to select it separately - but it charges as well as acting as a disk drive. In "charge-only" state it cannot infect the PC. In "disk drive" mode it can. –  RedGrittyBrick Apr 18 '12 at 9:23

Your questions are unclear and you asked two unrelated questions.

First, you asked, "Can an infected mobile phone affect PCs and laptops running Windows and/or Linux?".

What do you mean by "affect"? Any device on a network can influence in some way all other devices on that network.

Second, you asked, "and what is the best way to avert further infection?"

The answer would largely depend on what you mean by infection. But to avoid any further infection of any type would be simply to not allow (sic) "infected" devices to communicate on your vulnerable network.

share|improve this answer
    
What I mean by affect is just that when connecting a mobile phone ridden with malware, viruses, etc. For example would it affect the host by also infecting it, would it affect it by possibly spread to other computers on the same network, etc –  PeanutsMonkey Apr 18 '12 at 21:47
    
Not sure what other definitions of infect exist but what I mean is if a mobile phone had been infected with a virus, can the same virus infect a PC running Windows or Linux? –  PeanutsMonkey Apr 18 '12 at 21:48

Yes, this is what happened to me.

I just plugged in my old android micro SD into my card reader in my PC. Within four min I had a log file copied into my windows folder. Six files and a folder created. PC now requires restart to update windows message came up. PC will not allow to remove change or erase text and save in those folders and files. log file contains list of executables. Six lines are 'log' and 'transmit' of different c drive folders and files. It seems the sites I've been too on my phone want to know what and where my PC is. I cannot remove these files. My computer was not connected to network. Only files on card were android files. I was trying to format the card. never opened or clicked on anything.

All i did was plug card in.

share|improve this answer

drweb on android trivially renames autorun.inf on SD card... and actually it is windows which should not be configured to pull non-trusted code and execte at high privileges, and take care about its own security... (i think it is the fact since Vista that RW media is not auto-run....) Namely there is no cross-platform infection that could spread between android and windows.

share|improve this answer
    
What do you mean by actually it is windoes which should not be configured to pull non-trusted code and drweb on android trivially renames autorun.inf? –  PeanutsMonkey Apr 18 '12 at 7:21
    
namely android will not get infexted from things windows puts on SD card, or passively accept connections from the internet, thus windows is unprotected and needs some help... –  ZaB Apr 18 '12 at 11:45
1  
drWeb is a piece of anti-virus software, they have a version for Android. The other part is about disabling Windows AutoRun so it doesn't automatically run a (possibly infected) file specified in a file possibly present on your attached device called 'autorun.inf'. These files are used by CDROM's to automatically run installations when inserted into your drive, it's just a simple file (open one in Notepad) which points to an .exe file. –  HaydnWVN Apr 18 '12 at 11:47
    
Namely Vista and Windows 7 and servers 2003 2008 2008R2 are completely immune to autorun files on writable removable media unless your 10 years or older group policy overrides the setting. –  ZaB Apr 18 '12 at 14:04

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.