Since my browser and email client are the main way I communicate I use no-script / firefox and plain text email. I do fresh installs often and run clamav. Clamav found an evil shell script once for me. Anybody running any security software on their droid?