How do Antivirus for Android detects a Malware application? While researching about malware analysis for Android, I found that there are few applications that were removed from the Google Play Store because they were found to be malware.

I guess Android Antivirus applications running on a smartphone detects that these applications are malware.

Two cases:

Case: My guess is right:

I am wondering how these antivirus applications can suspect an application whether that is a malware or not. 


What are the parameters they use to justify that the suspected application is a malware?
How does a real-time antivirus like Avast or Avg (for Android) works on this?
(Any link regarding this would be helpful).


Case: My guess is wrong:

Now, if these antivirus applications don't detect any application as malware, then how come these applications are removed from the Play Store?

P.S. I was able to search only about the malware applications and I could not get the answer for my question as how they are detected. Any references would be much helpful.
Your guess is wrong. Anti-virus applications on Android are completely unrelated. There are two ways that Google finds and removes dodgy apps and malware from Google Play.

Reports by users

Every Play Store page has a "report" button. Google investigates apps that are reported, whether that's for copyright or trademark issues, violating their policy about content (e.g. pornography), for breaking their other policies (e.g. invasive ads, interfering with other apps), or for being malware or scams.

Automatic scans

Google Play now automatically scans apps that are added by developers, hoping to detect dodgy apps like these before they can hurt users or cause problems. For obvious reasons, Google doesn't disclose details of what kind of scans they perform or how the technology works.

If a user has a malware app and it's detected by an anti-virus program, the user might choose to report it to Google Play themselves (if the malware came from there), but that's the only part that anti-virus apps on smartphones play in the process.