Jump to content

Malwarebytes can't remove PUP.Rooter.kingroot.YY

Recommended Posts


I just got a new Samsung Galaxy J7 (2016).

From the beginning my Android phone introduced some advertising (pop-ups) in home. I thought it was because of any application that I downloaded and erased almost everything and left only the minimum required (the ones that were preloaded, facebook, gmail and whatsapp). But advertising did not disappear. All the applications I downloaded came directly from Google Play.
I decided to reset to factory conditions, but advertising still appears.
I downloaded several antivirus before and found nothing strange. Malwarebytes only found Android / PUP.Rooter.Kingroot.YY after returning to reset to factory conditions (the second time). But when I ask you delete, Malwarebytes can not do.
My questions are:
1- Is Android/PUP.Rooter.Kingroot.YY secure?

2- You should get rid of it? And if so, how do I do it?

3 - Is Android / PUP.Rooter.Kingroot.YY responsible for those popups?

Please help, I am not an expert in Android

Link to post
Share on other sites

Hi Loritz, Ho79,

This particular app has the Kingroot SDK as an add-on which gives the host app the capability to root (escalate privileges) and install apps without the users knowledge or permission. The app looks to have come preinstalled with the device and is listed as a system app that is why it cannot be removed by MBAMM.

The apps I've looked at do appear to have hidden adware compenents as well, likely why they need to escalate privileges to get around user interaction. This has become a big problem with cheaper priced device, they come preinstalled with malicious apps and the apps cannot be removed using Android's uninstaller.

These apps on your device should not be trusted, there are a few things you can do.

- Disable the app – Can be done via Android Settings -> Apps -> bad app -> Force stop/disable

        This will prevent the app and any associated services from running.

- Root your device and uninstall the malicious apps. Usually reserved for advanced users, please do at your own risk.

- Install different, trusted, ROM to replace infected one. Usually reserved for advanced users, please do at your won risk.

- Return device where purchased.

I wish there were more options but where Android's openness and built in security collide; openness, anyone can flash a device with a custom ROM, security, you can't uninatll system apps.



Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.