I do all my online shopping on it, paypal, ebay and credit card info is stored on it and i don't think I've received any security updates lately, i have the paid version of AVG on my phone from the play store
This is not a virus but a vulnerability, which can be abused by a malware if you download and install shady apps.
I think I've downloaded a couple of bad apps a while ago but they aren't still there so should i be on then since i have the paid version of avg installed? It doesn't have the firewall turned on though since apparently it needs to be rooted for it to work