KingRoot Malware / Adware root !!

There has been a lot of discussion about this topic and opinions. But lets be clear about a few things that are facts:

KingRoot now installs a ton of Adware on your device
KingRoot takes over your lock screen now and splatters ads on it
KingRoot's Uninstall does NOT remove everything they have modified on your device
SuperSU replace method does NOT remove everything they put on it either
KingRoot intentionally ads multiple binary files to your /system/bin folder that have nothing to do with their rooting method and are even back dating them to try and hide them
AVG has reported this and even warns of possible personal information gathering, that is NOT just a warning of rooting exploits
KingRoot has now included a Wifi option within their latest version under tools, what do you think they are gathering there ?

I have been trying to tell users for a long time that they are up to no good and they have even lied saying they tried to contact me to work with me on what they refer to as my app doing a malicious removal of their tool. That is completely incorrect... They have NEVER tried to contact me about this. They did try and ask my to stop and I told them once they allowed SupeSU to cleanly take over their root and they allowed all traces of their program to be replaced/removed I would then do it, but they never have adhered to any of that.

You the user have been warned and my conscious has been cleared. Install this at your own risk. They even went as far as trying to prevent my program from gaining root, why ? Because it will in fact remove all traces of their program including their custom binaries they have added, etc.. Now, keep in mind, they have many binaries that they add, depending on the device, but I do my best to catch them.

KingRoot, you want all of this to stop ? Then comply with the request of all the users and myself to remove EVERY file modification you have made to their device and allow replacement of your tools with whatever the user desires, cleanly.. You want to make it a paid app for you to get compensation for your time ? Fine, but get rid of all this Adware and malicious take over you have done to their device.

Let all the people speak now. It is your device and your choice of what you want to see, I am just one voice of many...

Respectfully submitted,

Gatesjunior (One of the people in the community)

Reference:

AVG:
http://www.avgthreatlabs.com/us-en/virus-and-malware-information/info/android-kingroot/
http://www.avgthreatlabs.com/us-en/android-app-reports/app/com.kingroot.kinguser/
http://www.avgthreatlabs.com/us-en/android-app-reports/app/com.kingstudio.purify

Finger printing the device:
Has the ability to get the wifi MAC address (may be used to fingerprint device)
Has the ability to read the device ID (e.g. IMEI or ESN)

Location Services (Where have you been ?):
Permission request for "android.permission.ACCESS_COARSE_LOCATION"
Permission request for "android.permission.ACCESS_FINE_LOCATION"

Camera (Can I see what your doing ?):
Permission request for "android.permission.CAMERA

Super-Sume Pro: https://xdaforums.com/general/paid-software/supersu-please-t3110954

(Sony devices, or at least the majority, you are in a bad spot, because you are rooted, but try and mount your /system into (r/w) mode... Probably not going to happen unless you load a kernel module to allow this. Otherwise you are in a write-protected mode and can only factory restore your device to get rid of it.)

craigviar said:

I recently upgraded my old s4 for hangouts only use (no carrier) to 501 and I used an old version of Kingroot and current SuperSUme. No worries. Thanks for a great app.

Real question is. Why can't someone legit make a kingroot type rooter that's not all jacked. It's there really no one else who knows how to do it that is honest?

Click to expand...

Click to collapse

Sure, it can be done. But they protect, for good reasons, their rooting methods. I can't disagree with them there. But someone else would have to come out with the exploits and wrap it into a rooting method for everyone to use. They definitely have the team and resources to be able to root devices. I am very thankful for that, don't get me wrong, but the way they make you accept it all is where I take issue.

KennyG123 said:

LOL...I can move your vote but not your name....done.

Click to expand...

Click to collapse

Thank you for correcting this..

Surge1223 said:

Xda has a rule about having paid apps/donate version in threads. It does not seem unreasonable to ask for a similar policy with the more important and less costly demand of being able to uninstall the app, or at least not least not block the usage of other apps (like SuperSU).

Sent from my Nexus 6P using XDA-Developers Legacy app

Click to expand...

Click to collapse

I agree completely. Again, malicious behavior.

artsnjiw said:

If so, why is the Kingroot thread and apps still here? Why didn't the mods closed it?

Click to expand...

Click to collapse

Because we have not been able to prove that is what is going on, the ability is there, but this is extremely difficult to prove. But, the Adware and Malware are real and has been reported by AVG and others.

billa said:

After a bit of digging through the same versions released, one on their website (https://kingroot.net/), and the other here on xda (https://xdaforums.com/devdb/project/?id=9793#downloads), it appears that the payloads have been customized through some variances contained in the following files:
channel.ini, config.properties, KINGROOT.RSA, MANIFEST.MF, KINGROOT.SF, km, classes.dex
Specifically in the release channel# (channel.ini), the encrypted properties file (propertiesconfig.properties), and the (km) file.
So it's possible to have slightly different version of the payloads depending on where you've downloaded it from.
Any constructive input is welcome.

Click to expand...

Click to collapse

Interesting.. I wonder even though the release is the same, is the build a different number ?