Detection name explained

What does Android.Virus.Gray.Sexpay.S.CBWFXX.PornViol mean?

Android.Virus.Gray.Sexpay.S.CBWFXX.PornViol is a “Risk” detection that the SRE_OP (OPPO in-house) engine gives Android apps (APKs).

Vendor warning
This software may cause financial loss and easily leak privacy: it is suspected to be pornographic software and may use pornographic content to induce deductions and the installation of promotional software. Install with caution!
Risk level
Risk
Detection engine
SRE_OP (OPPO in-house)
Apps flagged
1
Scan reports
3
First seen
07/11/2026
Last seen
07/11/2026

Part by part

Split at the dots, the parts go from general to specific. This reading follows common naming conventions and is for reference only; the vendor’s own explanation prevails.

PartTypeMeaning
AndroidPlatformAndroid app, i.e. an APK package.
VirusCategoryVirus class: the engine files it under viruses or malware. Followed by Gray it means grayware rather than a destructive virus.
GrayCategoryGrayware: between a normal app and malware; typical of gambling, adult content, fraud, deceptive billing and bundled promotion.
SexpayFamily / sampleAdult billing: uses adult content to push payments or charges.
SVariantVariant letter: versions of the same family are lettered in sequence.
CBWFXXCategory codeProbably the pinyin initials of 传播违法信息 (spreading illegal content).
PornViolTagPorn violation: contains pornographic or otherwise illegal content.

Apps recently flagged as Android.Virus.Gray.Sexpay.S.CBWFXX.PornViol

From public VendorGuard scan reports; only the latest report per package is listed.

AppPackageVersionScannedReport
PicACGcom.picacomic.fregata2.2.1.3.3.407/11/2026View report

Flagged as Android.Virus.Gray.Sexpay.S.CBWFXX.PornViol? What to do

If you are a user

  1. This is a risk warning about the package. First check whether the app comes from the official website or a reputable app store.
  2. If the warning mentions fraud, gambling, adult content or charges, do not install it, and never enter accounts, verification codes or card details in it.
  3. If you already installed it and paid or entered details, uninstall it, check your accounts and charges, and contact your bank or the police if needed.

If you are the developer

  1. Re-scan the APK on VendorGuard to confirm whether the current version is still flagged and under which name.
  2. Compare the vendor’s warning and the tags in the name against your third-party SDKs, packer, sensitive permissions, promotion behavior and content.
  3. After fixing the issue, or if it is a false positive, submit an appeal on that vendor’s developer platform.
  4. Once the appeal is accepted, re-scan from the VendorGuard report page to confirm the detection is gone.

FAQ

What does Android.Virus.Gray.Sexpay.S.CBWFXX.PornViol mean?

Android.Virus.Gray.Sexpay.S.CBWFXX.PornViol is a “Risk” detection from the SRE_OP (OPPO in-house) engine. The vendor’s warning reads: This software may cause financial loss and easily leak privacy: it is suspected to be pornographic software and may use pornographic content to induce deductions and the installation of promotional software. Install with caution!

Is Android.Virus.Gray.Sexpay.S.CBWFXX.PornViol a virus?

Android.Virus.Gray.Sexpay.S.CBWFXX.PornViol is at the “Risk” level: a risk or policy call rather than a classic virus, but phone security apps still warn about or block the install.

My app is flagged as Android.Virus.Gray.Sexpay.S.CBWFXX.PornViol. What now?

Users should check where the app came from and not install it when fraud, gambling or charges are involved. Developers can re-scan on VendorGuard, review SDKs, permissions, promotion and content, appeal to the vendor, and re-scan once the appeal is accepted.

All detection names