What does Android.Virus.Gray.Sexpay.S.CBWFXX.PornViol mean?
Android.Virus.Gray.Sexpay.S.CBWFXX.PornViol is a “Risk” detection that the SRE_OP (OPPO in-house) engine gives Android apps (APKs).
Vendor warning
This software may cause financial loss and easily leak privacy: it is suspected to be pornographic software and may use pornographic content to induce deductions and the installation of promotional software. Install with caution!
Split at the dots, the parts go from general to specific. This reading follows common naming conventions and is for reference only; the vendor’s own explanation prevails.
Part
Type
Meaning
Android
Platform
Android app, i.e. an APK package.
Virus
Category
Virus class: the engine files it under viruses or malware. Followed by Gray it means grayware rather than a destructive virus.
Gray
Category
Grayware: between a normal app and malware; typical of gambling, adult content, fraud, deceptive billing and bundled promotion.
Sexpay
Family / sample
Adult billing: uses adult content to push payments or charges.
S
Variant
Variant letter: versions of the same family are lettered in sequence.
CBWFXX
Category code
Probably the pinyin initials of 传播违法信息 (spreading illegal content).
PornViol
Tag
Porn violation: contains pornographic or otherwise illegal content.
Apps recently flagged as Android.Virus.Gray.Sexpay.S.CBWFXX.PornViol
From public VendorGuard scan reports; only the latest report per package is listed.
Flagged as Android.Virus.Gray.Sexpay.S.CBWFXX.PornViol? What to do
If you are a user
This is a risk warning about the package. First check whether the app comes from the official website or a reputable app store.
If the warning mentions fraud, gambling, adult content or charges, do not install it, and never enter accounts, verification codes or card details in it.
If you already installed it and paid or entered details, uninstall it, check your accounts and charges, and contact your bank or the police if needed.
If you are the developer
Re-scan the APK on VendorGuard to confirm whether the current version is still flagged and under which name.
Compare the vendor’s warning and the tags in the name against your third-party SDKs, packer, sensitive permissions, promotion behavior and content.
After fixing the issue, or if it is a false positive, submit an appeal on that vendor’s developer platform.
Once the appeal is accepted, re-scan from the VendorGuard report page to confirm the detection is gone.
FAQ
What does Android.Virus.Gray.Sexpay.S.CBWFXX.PornViol mean?
Android.Virus.Gray.Sexpay.S.CBWFXX.PornViol is a “Risk” detection from the SRE_OP (OPPO in-house) engine. The vendor’s warning reads: This software may cause financial loss and easily leak privacy: it is suspected to be pornographic software and may use pornographic content to induce deductions and the installation of promotional software. Install with caution!
Is Android.Virus.Gray.Sexpay.S.CBWFXX.PornViol a virus?
Android.Virus.Gray.Sexpay.S.CBWFXX.PornViol is at the “Risk” level: a risk or policy call rather than a classic virus, but phone security apps still warn about or block the install.
My app is flagged as Android.Virus.Gray.Sexpay.S.CBWFXX.PornViol. What now?
Users should check where the app came from and not install it when fraud, gambling or charges are involved. Developers can re-scan on VendorGuard, review SDKs, permissions, promotion and content, appeal to the vendor, and re-scan once the appeal is accepted.