dontpanic,

You are showing ignorance of the fact, the second one is not a virus. Its proof of concept that exploits a vulnerability. I linked you to the source code in hopes it would help you.
The first one is indeed in MOST android devices, does not mean you cant patch it. You are not in GPL complaince. Why are staff allowed to use anonymous names on the forums,
but my request using my full name, and offering contact information (email) was denied due to be "anonymous"?

Justin