McAfee researchers have noticed a Facebook advertising campaign which promises to optimise the mobile endpoint and rid it of spyware, adware, and other malware. However, the apps pushed ads, while changing their names and icons frequently in order to stay on the victim's device for as long as possible. Sometimes the App pretended to be the Play Store.
According to Bleeping Computer, The apps serve the ads by abusing the Contact Provider Android component, meaning every time the user installs a new app, the adware uses this subsystem, and begins the ad-serving process.
The adware apps also create a permanent service for displaying the advertisements, and if user terminates the service, it just restarts.
These are the apps advertised on Facebook that McAfee found as malicious. They have since been removed from the Play Store:
Full Clean -Clean Cache