Detection name explained

What does Android.Virus.Gray.RacketeerIM.A.YPQZCW.CommForgScam mean?

Android.Virus.Gray.RacketeerIM.A.YPQZCW.CommForgScam is a “Risk” detection that the SRE_OP (OPPO in-house) engine gives Android apps (APKs).

Vendor warning
This software may cause financial loss and easily leak privacy: it has been the subject of numerous user complaints regarding the risk of being defrauded, so please install with caution!
Risk level
Risk
Detection engine
SRE_OP (OPPO in-house)
Apps flagged
1
Scan reports
1
First seen
10/15/2026
Last seen
10/15/2026

Part by part

Split at the dots, the parts go from general to specific. This reading follows common naming conventions and is for reference only; the vendor’s own explanation prevails.

PartTypeMeaning
AndroidPlatformAndroid app, i.e. an APK package.
VirusCategoryVirus class: the engine files it under viruses or malware. Followed by Gray it means grayware rather than a destructive virus.
GrayCategoryGrayware: between a normal app and malware; typical of gambling, adult content, fraud, deceptive billing and bundled promotion.
RacketeerIMFamily / sampleFamily or sample name that tells apart different apps or code traits within the same category.
AVariantVariant letter: versions of the same family are lettered in sequence.
YPQZCWCategory codeAn internal category code, usually Chinese pinyin initials; its exact meaning is up to the vendor.
CommForgScamFamily / sampleFamily or sample name that tells apart different apps or code traits within the same category.

Apps recently flagged as Android.Virus.Gray.RacketeerIM.A.YPQZCW.CommForgScam

From public VendorGuard scan reports; only the latest report per package is listed.

AppPackageVersionScanned
君子书com.jzs.book1.0.1710/15/2026

Flagged as Android.Virus.Gray.RacketeerIM.A.YPQZCW.CommForgScam? What to do

If you are a user

  1. This is a risk warning about the package. First check whether the app comes from the official website or a reputable app store.
  2. If the warning mentions fraud, gambling, adult content or charges, do not install it, and never enter accounts, verification codes or card details in it.
  3. If you already installed it and paid or entered details, uninstall it, check your accounts and charges, and contact your bank or the police if needed.

If you are the developer

  1. Re-scan the APK on VendorGuard to confirm whether the current version is still flagged and under which name.
  2. Compare the vendor’s warning and the tags in the name against your third-party SDKs, packer, sensitive permissions, promotion behavior and content.
  3. After fixing the issue, or if it is a false positive, submit an appeal on that vendor’s developer platform.
  4. Once the appeal is accepted, re-scan from the VendorGuard report page to confirm the detection is gone.

FAQ

What does Android.Virus.Gray.RacketeerIM.A.YPQZCW.CommForgScam mean?

Android.Virus.Gray.RacketeerIM.A.YPQZCW.CommForgScam is a “Risk” detection from the SRE_OP (OPPO in-house) engine. The vendor’s warning reads: This software may cause financial loss and easily leak privacy: it has been the subject of numerous user complaints regarding the risk of being defrauded, so please install with caution!

Is Android.Virus.Gray.RacketeerIM.A.YPQZCW.CommForgScam a virus?

Android.Virus.Gray.RacketeerIM.A.YPQZCW.CommForgScam is at the “Risk” level: a risk or policy call rather than a classic virus, but phone security apps still warn about or block the install.

My app is flagged as Android.Virus.Gray.RacketeerIM.A.YPQZCW.CommForgScam. What now?

Users should check where the app came from and not install it when fraud, gambling or charges are involved. Developers can re-scan on VendorGuard, review SDKs, permissions, promotion and content, appeal to the vendor, and re-scan once the appeal is accepted.

All detection names
Android.Virus.Gray.RacketeerIM.A.YPQZCW.CommForgScam: what this detection means and how to fix it | VendorGuard