ANDROIDOS_EASYROOT.HRX

This is the Trend Micro detection for Android applications that can be used to root Android devices.

Mobile Malware Routine

This is the Trend Micro detection for Android applications that can be used to root Android devices. Rooting enables the user to have elevated rights and permissions to access the Android subsystem.

NOTES:

This malware can be used to help the user getting the root privilege.

After being launched, it checks the root status of device first.

If the device is not rooted, a notification of current root status and a button named “一键获取Root权限”(get the root privilege) appears on the screen.

After the user clicking the button, it performs the rooting program and tries to get the root privilege.

If the device is rooted successful, there is a notification on the screen.

After that, the user can do certain actions which are only allowed for root user, such as remove pre-installed apps and configure the auto-start app list among others.

Note, however that the root privilege can also be used by some other malware, and can endanger the whole system.