Malware Android:FakeInst-OZ[Trj] in mobile app CHomikuj.pl

Avast Mobile Security Avast Mobile Security for Android
1

Hi,
our application Chomikuj.pl https://play.google.com/store/apps/details?id=pl.chomikuj.mobile&hl=en

is reported as Malware (Android:FakeInst-OZ[Trj]). We found that this is caused by READ_PHONE_STATE permission. In code we are using getDeviceId(), but sometimes this method returns null. In that case we are using getSimSerialNumber().
We use this number to identify device. Our application is not sending any sms or premium sms, which is showing during scan).

Propblem exists only on Avast, every other antivirus from google play does not report app as Malware.

Kind regards
Pawel Burdzy

2

You can report a possible FP here: http://www.avast.com/contact-us.php?subject=VIRUS-FILE

3

Thx. I have already did it.

4

You’re welcome.