Malware Detected in APK

We have been Unity Cloud Builds for generating store builds ever since it was released. Our app has been on Google play store for several years now. Recently the app got suspended. The Google support reported there is malware in the APK.
When we ran the APK on VirusTotal it detected Trojan-Dropper.AndroidOS.Agent. Can anyone suggest how this can be fixed so our app can be approved by Google.

Make update to app.

Which and how many of the virus scanners detected it?

@Antypodish , do you mean make a new release? We have been doing that somewhat frequently. But not with Unity 2018.x which we are about to do.

@Ryiah , Only VirusTotal detects it; neither Metadefender nor MalwareBytes flags it.

1 Like

Yep.

Could be, that you have introduced some new features / assets / packages in recent updates?
Chances are, it is false positive.

That’s not what I meant. VirusTotal is not a single scanner. It’s a collection of more than 70 virus scanners (one of them is even MalwareBytes). If only a few of the virus scanners detect a problem or if it’s from one of the scanners known to be a low quality scanner (eg Symantec) then it’s most likely a false positive.

1 Like

@Antypodish Thanks! I will check again all the differences.

@Riyah Oh sorry; it is flagged only by Ikarus. All others don’t detect anything

If only one of them is detecting anything then it’s just a false positive.

@Ryiah maybe; but Google has suspended our app :frowning: I need to go thru every plug-in and see if any of them is being flagged.