I replied the below on a different post, putting here so it may help somehow.
Robot believes that Avg is not a good antivirus software but the chances of 2 separate AV and malware apps picking it up, makes me have my doubts. Please read the below as this is something I would prefer for Samsung to look at it properly and confirm if the issue with the keys been leaked has something to do with the AVs picking up malware after the update of a Samsung app.
"I got the same notification and I don't use Avast, I use a paid version of Avg which is highly regarded. Also, I did some digging about this and found out that Samsung, LG and others had keys leaked and people have been using these keys to load malware in people's devices and because this malware is using a genuine key FROM Samsung, LG, etc the malware installed by the manufacturers do not see it as a threat.
I have never had an issue with malware until I used Samsung community for which I had to "update" a samsung app and hold and behold out of the sudden, my antivirus picks it up.
A quick search under Samsung code key leak and you'll find the many sources explaining this and confirmation from Samsung that this took place with reports in December that affected devices by these leaked keys.
I don't believe in coincidences and this is far too close for comfort."
