Program.CloudInject in virus library:

Program.CloudInject virus records are used to detect Android applications that have been modified using the CloudInject cloud service. The apps are modified on a remote server. Using the eponymous utility (detected as Tool.CloudInject by Dr.Web), which has been installed on an Android device, modders (users) upload pre-prepared APK files of the target software or copies of previously installed apps. Then, on the server side, obfuscated code is injected into the target software. Meanwhile the modder cannot control what exactly will be built into the app.

When programs are being modified, a number of dangerous system permissions, the list of which is constantly changing, are added to them. Once the process is complete, users are able to remotely manage modified apps. For instance, they can block them, display custom dialogs (notifications and dialog boxes), use them to track the installation and removal of other software, etc.