Security researchers have been following the xHelper malware on Android with great interest, owing to the app’s seemingly incomprehensible ability to reinstall itself on an infected device despite factory resets.