I'm seeing a really unusual threat alert pop up, "read-only.area.change.thread", that began after the most recent Dr. Web for Android update (two days ago). It's accompanied by the location "com.google.android.apps.docs", and Dr.Web flagged it on my Notifications bar when I disabled/factory-reset the Google Drive and YouTube apps.
This doesn't happen when I completely uninstall anything, like Bejeweled or even Yandex Browser and AdGuard, only the root-installed apps (Drive and YouTube being the ones I've tested so far, but I'll be happy to throw others at this to see what happens.)
Phone: Samsung Moto e4 (2017) 8GB
OS: Android 7.1.1
AV: Dr. Web for Android (subscription purchased from Google Play in March 2018)
Apps Disabled (Root-Installed): Amazon, Amazon Kindle, Amazon Music, Audible, Caller ID, Google Chrome, Cloud Print, Google Drive, Duo, Facebook (plus Facebook Apps Installer, Facebook App Manager), FM Radio, Gadget Guardian, Gmail, Google App, Instagram, Facebook Messenger, Google Photos, Prime Photos, Prime Video, YouTube.
I understand that it's a UI/non-UI thread switching issue, and since it only involves root-level apps the issue seems to be on Google's end. My question is: can someone please clarify what the virus threat "read-only.area.change.thread / com.google.android.apps.docs" means? I can work on a solution from there, but I've never seen this one before so I don't want to break my phone trying to fix something that may not be broken in the first place.
Thanks for your help, hope you have a great weekend!