[AT&T HTC One (M8)] jarmst:
This might be a little late but I was searching Google for a solution, and stumbled onto this thread.

I think I have an answer to this. I just rooted my HTC One M8 (running 4.4.4 on AT&T), and started reinstalling apps. The stock 4.4.4 ROM might not have C IQ, but I think the HTC Service Pack (v. 1.1.853606) patches it onto devices. This is auto-installed inside of the Google Play store, I just saw it installing about a month ago and didn't realize it contained Carrier IQ.

The reason why I think this delivers it, is because around that date, I also noticed my "GPS signal" icon turning on, even when Wifi+4G+GPS were all turned off. I downloaded the Voodoo CarrierIQ Detector and confirmed that "Carrier IQ has been found and is active."

The app gives me these details:

detection score: 270

ROM binaries and daemons

/system/lib/libiq_client.so

/system/lib/libiq_service.so

Running processes

system 3815 1605............diagandroid.iqd

Suspicious classes

com.carrieriq.iqagent.service.receivers.BootCompletedReceiver

So, somehow, in the few apps I've installed, Carrier IQ has definitely been added, and is definitely recording data.

EDIT: Actually, I'm starting to find some of the files. Using File Explorer (FX) on a rooted HTC One M8, I looked in (from the 'Home page' of the app):

System(root) > system > app

I see the "HtcResetNotify.apk" and .odex files. I'll attempt to delete and modify the files listed in the first post and confirm that I can manually remove them.

EDIT 1.5: I couldn't find three of the files the original post had listed for delete (all in the /system/framework folder):

frameworkEDIAG.jar

frameworkEDIAG.odex

framework-res.odex

EDIT 2: Deleting files went fine. I copied over the other files and...well....my phone immediately rebooted and it's now stuck on the 'htc one' splash page during boot. I'm praying that someone has the original files for the 3 "MODIFIED" files. Anyone?

EDIT 3: All is not lost! I forced a reboot (Power+Volume Up) and it came back on. I checked the folders where I deleted, and the libiq_client/_service files were back. Deleted those again. The other files I deleted seem to be back as well...not sure what happend.

EDIT 4: Ok, so in case anyone finds this. I have a rooted HTC One M8, and I want to keep it stock (except for the root). My solution was to get two apps:

1. "AutoStarts." This was a paid app ($1.60 USD I think?) but ended up not having Carrier IQ in the process list. I did end up using it to block other auto-starting applications, and it immensely sped up my boot time and kept the OS running smoothly for long stretches, no reboots required.

2. "MyAndroidTools." This was free (I think it has a paid version) and allowed me to find and disable the Carrier IQ process. Note that this app is made by the same developer as "Disable Services," less filter features in Disable Services but no ads as far as I can tell. Same exact processes show up though, and the disabled/enabled carries through between MAT and DS.

After setting MyAndroidTools up to disable Carrier IQ (found under "Service" type -> "System" tab -> "Android System" item), I used "Voodoo Carrier IQ" to check for the process. It found the files, but said it was inactive.

However, either after rebooting or a long enough period, it seems to be running again according to Voodoo. I have not seen it turn on GPS anymore, so MyAndroidTools may at least prevent it from re-hooking and turning on GPS. Maybe it's just on and logging local actions, I'm not sure. But I still have not seen in show in Autostarts; if it did, I would hope to step the process from re-hooking completely.

Hopefully someone getting here from Google will find some of this helpful.