How can I get rid of tojan virus Android.Troj.Riskroot.z?

[AC Question]

I got the virus looking at porn and it attached to my setup wizard. The only way I can get rid of it is by disabling the setup wizard. Is there anything else I can do?

 

[belodion]

If you've tried a Factory Reset, and no go, you may have to reflash the stock ROM.

 

[Vegas Glsob]

I've google searched this virus and there's not a lot on it. Its relatively new I think. All info is within the past 48 hours. I have this virus on my phone as does my wife. We both use cm security which detected it as a virus. I've used 2 other virus scanners and nothing came up as a virus. The install date cm security says about the setup wizard 2.0 is 8-16-2015. We bought our Kyocera s 2 months ago. I am hoping this is just a false positive detected by cm security.

 

[Vegas Glsob]

And you can't disable it. The option is grayed out and not an option. All you can do is stop it. I have been trying to find the file containing the setup wizard on my phone to delete it but still have had no luck.

 

[Prerttypablo95]

Hmmmm

 

[Steveo2391]

I've got the same thing going on on my galaxy s6. Only cm could find it, and all i can do is disabled it. Just happened an hour ago, and sane thing from looking at porn. What can i do?

 

[Farao]

I've got the same , but mine said it was installed in 2014 and that's impossible cause I just got this phone (Note4) 6 months ago

 

[Farao]

Has anyone done a factory reset and did it work?

 

[Vegas Glsob]

Well let me go ahead a dispell a trend that seems to be going on here. My wife and I wasn't watching any porn! Lol

 

[Vegas Glsob]

All clear! What was it?

 

[Vegas Glsob]

Both of our handsets are showing no virus now. Must have been a false positive.

 

[Yilia Weisz]

Hi Dear,

I'm from Cheetah Mobile-the developer of CM Security. We have confirmed that Android.Troj.Riskroot.z is a false positive and have already removed the false alert. We are really sorry about the inconvenience brought to you, please accept our apology. Have a nice day

 

[Crashdamage]

Never install anything by Cheetah Mobile! See this for why:

http://forums.androidcentral.com/showthread.php?p=5003350

 

[bitek]

I am wondering how did you get it in the first place ?

 

[AndroidNewbieUK]

Hi all,

I have had the same issues and it appears based on a response from a thread on XDA to be a false positive.

forum.xda-developers.com/general/help/help-trojan-virus-feb-2016-t3317313

From what I have read all CM products are to be avoided but you can draw your own conclusions.

This thread has a response allegedly from CM Security who have advised the false positive has been removed.

I have personally tried Avast, AVG, Avira, Kaspersky, Lookout and Norton all of which have not detected anything.

Please note link is minus http to enable post to be shown - google brings up a link to the post for those of you who are cautious of clicking on urls here.

forum.xda-developers.com/general/help/help-trojan-virus-feb-2016-t3317313

I hope this is some help.

 

[AndroidNewbieUK]

Is it a false positive or something CM have intentionally done to enable them to do things in the background - CM solution was to disable the application installer. Why?

 

[Crashdamage]

CM is well known to use false positives and other nonexistent problems as an excuse to throw up ads and scary sounding warnings to upgrade this or install that or Bad Things will happen.