I am analyzing a mobile application, and I am not sure if it is just an adware/greyware or does it enter the category of malwares.

This app does not really do any harmful activity. But it forces user to install at least 1 advertised app, app does not get activated unless user installs advertised app. Developer did not mention this requirement on market. It also pushes ads in notification bar. These behaviors seem quite aggressive.

Application does not download any advertised app without user consent/interaction.

Can anyone please tell me if an app with such behavior should be considered greyware/adware or malware?

On virustotal, almost half vendors detect it as adware and other half as malware.

  • 3
    This could be just a (nasty) way for the developer to get money, you could ask him if there's a paid version of his app so that you can buy it and not install the potentially malicious advertised app.
    – user42178
    Jan 20, 2015 at 10:48
  • I would say "misleading in its description," as it apparently fails to mention this requirement. Jan 21, 2015 at 10:03
  • Does the second app function primarily as a service provider, a library for the main app to use, much like Google Play Services? Dec 29, 2015 at 21:20

1 Answer 1


App makers can use ad networks as a valid way to monetize their coding efforts. That, in and of itself, is not an indication of malware. The lack of disclosure of the 2nd install, at best, indicates a lack of integrity on the publisher's part, but again, is not necessarily an indication of malicious intent.

It is unfortunate that they require a secondary install to make that happen, but the original install is not automatically malware.

On the other hand, this type of "bait and switch" scenario is a great set up for delivering malware. If your scans indicate that the secondary install is malware, then you have your answer, and you should be wary.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .