[Android Q&A, Help & Troubleshooting] XDArLEGENDS:
Hello all!

Having had an HTC Wildfire, HTC Desire HD, Samsung Galaxy S3, Samsung Galaxy S4, Samsung Galaxy S5 and now a Samsung Galaxy S6 I can say Android rules without a shadow of a doubt!

However, I fear I have fallen victim to a new trojan that nobody online seems to really know about or care about.

I never allow installation of apps from unknown sources (settings in the handset) and only ever download/install apps from Google Play store.

I am receiving a warning that I have the below trojan:

android.troj.riskroot.z

Which seems to be connected too/ or is "Application installer 2.0"

CM Security found it during a scan.

I have a computer background so I am no stranger to AV and would like to think I know the main players (PC/laptop wise anyway).

I have always used Lookout and Avast AV and Security on my android devices without any cause for concern. I installed CM Security as a friend of a friend uses it and told me it was great at blocking unwanted sales calls (which to be fair it has been as I've just upgraded and have been called several times a day by the network, all of which have been successfully blocked without me lifting a finger).

CM Security is the only AV picking up this Trojan virus. Is this a false positive?

I have installed and scanned with the following after a hard reset:

- Avast

- CM Security

- Kaspersky

- Lookout

- Norton

None of these except CM Security has detected the Trojan.

I am not really worried about this and urgently need assistance with this matter.

I installed CM Security after the hardware reset (holding power + volume up + home keys etc you know the drill). The same Trojan appeared.

I have uninstalled CM Security and "application installer" (the installer has cleared data etc but application remains listed under Settings> Application Manager> All.

Application installer version 5.1.1-G920FXXU3COI9

Phone shows no absolutely nothing under the storage and cache headings however the permissions list is very extensive and seems to list all of the handsets features - it can access anything.

I then manually updated the OS Software and Play Store Apps and the installer still shows as empty.

Ran scans with Avast, Kaspersky, Lookout and Norton again. Once more none of them detected any issues at all (except Norton which picked out Zedge and Lookout as potential risks).

Googling this issue has turned up only two occurences (links minus the http - as a new member links seem to be banned) below:

forums.oneplus.net/threads/what-is-android-troj-riskroot-z.429655/

forums.androidcentral.com/ask-question/644412-how-can-i-get-rid-tojan-virus-android-troj-riskroot-z.html

The first seems to be an issue with CM Security as well but they tested different phones and only had the issue on one handset.

The second doesn't mention which AV although they do mention the "installer 2.0". To resolve the issue CM Security disables the installer.

I hope this is a false positive by CM Security but I am concerned the application installer still appears even it it is showing as empty.

Please can you provide a resolution as swiftly as possible! I am really worried I have screwed my S6 big time!

Thank you in advance for your assistance all!

You've no idea just how much I appreciate the help!

XDA fan!