PUP.Riskware.SMSreg.DROI

[AdvocateTYD]

Hi Malwarebytes,

Our app is marked by malwarebytes as containing the malware PUP.Riskware.SMSreg.DROI. However, our app was verified by VirusTotal in our every release (also containing malwarebytes) and showed malwarefree. Thus, we'd like to know the exact definition of "PUP.Riskware.SMSreg.DROI". Does it mean the short message registration or verification behavior? Thus, we could fix it ASAP. And, please remove us from the database if it is false alarm. That does hurt our reputation. Thank you! 

[mbam_mtbr]

Hi @AdvocateTYD,

Riskware SMSReg is Potentially Unwanted Program (PUP) that uses SMS to register.  If you can provide a link to VirusTotal of your app, that would be very helpful to further evaluate.

Thanks!

Nathan

[AdvocateTYD]

Hi @mbam_mtbr,

Here is the link to Virus Total report. https://www.virustotal.com/en/file/792d9c76d1ac0d4c70524c734b73f7e528452c33d7c33b602e7fe951eb5a9dae/analysis/1550114319/

Please let us know what's the next to improve this.

Thank you!

[mbam_mtbr]

Hi @AdvocateTYD,

There is definitely some SMS activity going on in the com.droi.sdk. classes.  My guess is other SMSReg apps are using these classes to do malicious things.  However, it doesn't look like your app in particular is doing anything SMSReg related, so it will no longer be detected in future database versions.

Nathan

[AdvocateTYD]

Hi @mbam_mtbr,

Appreciate it. 

 

Thank you!