I don't have much experience with Android malware, but I couldn't find anything bad in the downloaded file. I scanned the .zip file with avast! (free) and ClamAV, but they didn't find anything. Then I unzipped the file and scanned it on virustotal.com, which uses around 40 different anti-malware engines. There's a 32MB limit, so I zipped up some of the folders and uploaded them separately. I scanned the whole ROM this way though. I checked the download site on virustotal.com too, and it was safe. I scanned my SD card with avast, just for good measure, and that was fine too. I've seen reports of avast! and ClamAV catching DroidKungFu on virustotal.com, so I'm pretty confident that it's not there. I'll update once I run Kinetoo (which claims to be able to catch DroidKungFu) and avast! Mobile Security scans. EDIT Both scans found no problems. I'm pretty sure there's no malware in this ROM then.