Google says Videostrong backdoored 1.3 million Android TV boxes. It cut the botnet's servers, but the malware stays in firmware and reinstalls itself.