Malware has been discovered preinstalled on 36 Android phones belonging to two companies, security software maker Check Point reported on Friday.