Researchers disabled the update checker on over a million machines, but they still advise removing the app entirely.
Eye Security has disabled the flawed updater for most affected machines, but Android users must act themselves and the app should be removed.
The remote fix stops the flaw for now, but the rest of the abandoned app remains insecure and users are advised to uninstall it.