Detection name explained

What does Android.Virus.Gray.Crackgame.A.EYXW.BundInst mean?

Android.Virus.Gray.Crackgame.A.EYXW.BundInst is a “Risk” detection that the SRE_OP (OPPO in-house) engine gives Android apps (APKs).

Vendor warning

该应用可能造成您的权益受损：可能存在风险，谨慎安装！

Re-scan an APK Get help with an appeal

Risk level: Risk
Detection engine: SRE_OP (OPPO in-house)
Apps flagged: 1
Scan reports: 1
First seen: 10/02/2026
Last seen: 10/02/2026

Part by part

Split at the dots, the parts go from general to specific. This reading follows common naming conventions and is for reference only; the vendor’s own explanation prevails.

Part	Type	Meaning
`Android`	Platform	Android app, i.e. an APK package.
`Virus`	Category	Virus class: the engine files it under viruses or malware. Followed by Gray it means grayware rather than a destructive virus.
`Gray`	Category	Grayware: between a normal app and malware; typical of gambling, adult content, fraud, deceptive billing and bundled promotion.
`Crackgame`	Family / sample	Cracked game: a modified or cracked game package.
`A`	Variant	Variant letter: versions of the same family are lettered in sequence.
`EYXW`	Category code	Probably the pinyin initials of 恶意行为 (malicious behavior).
`BundInst`	Tag	Bundle install: silently or deceptively installs other apps.

Apps recently flagged as Android.Virus.Gray.Crackgame.A.EYXW.BundInst

From public VendorGuard scan reports; only the latest report per package is listed.

App	Package	Version	Scanned	Report
手机定位手机号天查	`top.pinewindthink.locate`	26.04.15	10/02/2026	View report

Flagged as Android.Virus.Gray.Crackgame.A.EYXW.BundInst? What to do

If you are a user

This is a risk warning about the package. First check whether the app comes from the official website or a reputable app store.
If the warning mentions fraud, gambling, adult content or charges, do not install it, and never enter accounts, verification codes or card details in it.
If you already installed it and paid or entered details, uninstall it, check your accounts and charges, and contact your bank or the police if needed.

If you are the developer

Re-scan the APK on VendorGuard to confirm whether the current version is still flagged and under which name.
Compare the vendor’s warning and the tags in the name against your third-party SDKs, packer, sensitive permissions, promotion behavior and content.
After fixing the issue, or if it is a false positive, submit an appeal on that vendor’s developer platform.
Once the appeal is accepted, re-scan from the VendorGuard report page to confirm the detection is gone.

FAQ

What does Android.Virus.Gray.Crackgame.A.EYXW.BundInst mean?

Android.Virus.Gray.Crackgame.A.EYXW.BundInst is a “Risk” detection from the SRE_OP (OPPO in-house) engine. The vendor’s warning reads: 该应用可能造成您的权益受损：可能存在风险，谨慎安装！

Is Android.Virus.Gray.Crackgame.A.EYXW.BundInst a virus?

Android.Virus.Gray.Crackgame.A.EYXW.BundInst is at the “Risk” level: a risk or policy call rather than a classic virus, but phone security apps still warn about or block the install.

My app is flagged as Android.Virus.Gray.Crackgame.A.EYXW.BundInst. What now?

Users should check where the app came from and not install it when fraud, gambling or charges are involved. Developers can re-scan on VendorGuard, review SDKs, permissions, promotion and content, appeal to the vendor, and re-scan once the appeal is accepted.

All detection names