Malware in Fotaclient.apk

[Chernevog]

After normal updates of applications installed on my Android phone, 

Malwarebytes ran and I got a message of one infection... Android.PUP.Risktool.Agent.Ay. and it reports the fotaclient.apk file as being infected.

 

My other anti virus program McAfee doesn't detect it as a virus, and I also had the website VirusTotal scan the file and none of the 32 antivirus programs (Including Malwarebytes) detected it as a virus or malware. The fotaclient.apk file that Malwarebytes reports as infected resides in the system/priv-app folder..When Malwarebytes tells me to uninstall this files, I get a message saying that the file was not uninstalled...Nor can I delete it.

Any idea if this is actually a malware infection or a false positive.

Another thing that happens is that when I reboot the phone and Malwarebytes runs as it does on reboot, it does not detect the file, but when it runs while the phone is turned on at the preset time to run a scan it then detects the infection in fotaclient.apk.

 

Any ideas?

[a_Mbam]

Hi Chernevog,

Thanks for reporting this issue, could you upload the APK in question or provide us the MD5 and/or the VT link so we can have a look? You can private message me to provide this info.

Regards,

-Armando