Android OS is open source,but still how does a virus or a malicious program affects these OS files?

Elankumaran as you said Android is Open source project (AOSP), anyone can modify the source file. In case anyone can write some malicious code to send http request for senstive datas to  server. its very easily possible to attacks virus and malwares.