kinguser replacement by superuser by Koush.... but N9000W still has malware

I wrote in XDA (I am hunktb user)
http://forum.xda-developers.com/showpost.php?p=58491927&postcount=27
"I finally managed to replace kinguser with superuser (opensource, com.koushikdutta.superuser), so I have a clean system.
The phone is still rooted and new superuser app works fine."

http://forum.xda-developers.com/showpost.php?p=58492531&postcount=17

But after that (4 days ago,  no kinguser installed), I still have some malware:
In notification appears an "i" and it informs some app has been installed, for example
com.skymobi.oversea.gamecenter
com.skymobi.mopoplay.appstore
Another notification was about Whatsapp, already installed (but I think it would have been installed if it wasn't)

Internet Security detects malware in RomasterSu_1.1.4_140611_1000.apk used, but nothing installed.
Where is malware?
-I removed Cooee Kauncher (com.cooee.launcherS4)
-I removed kinguser

 With titanium backup I found two more apps I also removed:
-com-cooee.digitalclock (Digital Clock)
-com.cooee.floatwindow (FlasBarService)


I see an app with chinese name, package com.mediatek.factorymode
¿I should look for init script and review something not listed as package?
or ... maybe, new idea, ... if it installs app it could be a fake /malware Google Play???

Googling it
https://blog.gdatasoftware.com/blog/article/android-smartphone-shipped-with-spyware.html

Looking with titanium, Google Play Store 5.1.1 package is "com.android.vending", and it has some updates applied
If I remove updates, initial version is 4.6.17, and it updates again to 5.1.1, it seems from Google ...

I need more time, more ideas ...

adbcontrol

Interesting tool
Used with my broken screen phone
http://marian.schedenig.name/2014/07/03/remote-control-your-android-phone-through-adb/
Just edited config.properties to put adb path
A little bit slow in screen refresh, but it works

ijoy stone 4GB root and adb with ubuntu

I used chinese version iRoot2_2.0.6_141122_1811_1000_r.apk
and it intalled chinese root (com.mgyun.superuser in /system/app/irootsu.apk), but I installed superuser from koush using fdroid and it replaced it ok

adb shell does not work, despite setting usb debugging in config and tablet says "USB debugging enabled" when plugged

Some tests

adb shell
error: device not found
adb devices
List of devices attached

lsusb
Bus 002 Device 014: ID 2207:0010  

dmesg output when plugged

[ 7911.216166] usb 2-1: new high-speed USB device number 16 using ehci-pci
[ 7911.350384] usb 2-1: New USB device found, idVendor=2207, idProduct=0010
[ 7911.350396] usb 2-1: New USB device strings: Mfr=2, Product=3, SerialNumber=4
[ 7911.350403] usb 2-1: Product: Tablet Stone
[ 7911.350410] usb 2-1: Manufacturer: i-Joy
[ 7911.350415] usb 2-1: SerialNumber: D902013112900035A
[ 7911.352183] usb-storage 2-1:1.0: USB Mass Storage device detected
[ 7911.352403] scsi16 : usb-storage 2-1:1.0
[ 7912.353713] scsi 16:0:0:0: Direct-Access     i-Joy                          PQ: 0 ANSI: 2
[ 7912.354288] scsi 16:0:0:1: Direct-Access     i-Joy                          PQ: 0 ANSI: 2
[ 7912.356480] sd 16:0:0:0: Attached scsi generic sg2 type 0
[ 7912.356918] sd 16:0:0:1: Attached scsi generic sg3 type 0
[ 7912.364920] sd 16:0:0:0: [sdb] Attached SCSI removable disk
[ 7912.365533] sd 16:0:0:1: [sdc] Attached SCSI removable disk

Editing "/etc/udev/rules.d/99-android.rules, adding this and restarting does not solve it

SUBSYSTEM=="usb", ATTRS{idVendor}=="2207", ATTRS{idProduct}=="0010", MODE="0666"

sudo /etc/init.d/udev restart

Nothing new adding 0x2207 in .android/adb_usb.ini

But after all this, I decided to reboot ubuntu ... and then it worked