What is a detection name?
A detection name (virus name) is the label a security engine gives a flagged package, naming the platform, the risk category and the family. When a phone’s security app or app store warns about a “risky app” or a “virus”, such a name is usually behind it.
What does a detection starting with Android.Virus.Gray mean?
Gray means grayware: not necessarily destructive code, but considered harmful to users’ interests, e.g. gambling, adult content, fraud, deceptive billing or bundled promotion. The family name and tags after it give the specific reason.
Is every detection a virus?
No. Detections at the “Risk” level are mostly grayware or policy calls; “Virus” means malicious code or high-risk behavior. False positives happen too, so you can re-scan or appeal to the vendor.
What should a developer do about a false positive?
Check the detection name and the vendor’s warning, review third-party SDKs, packers, permissions and content for what triggers it, appeal through that vendor’s developer platform, and re-scan on VendorGuard once the appeal is accepted.