Open Candy in executable from unwanted website.

See: http://urlquery.net/report.php?id=1425837034123
See: http://www.herdprotect.com/freemakemusicboxsetup.exe-1354ebdc95b69906155c70de6450debabaf72e6d.aspx
htxp://www.freemake.com/download?id=FreemakeMusicBox.exe redirects to htxp://download2.freemake.com/FreemakeOriginals/FreemakeMusicBoxSetup.exe

htxp://download2.freemake.com/FreemakeOriginals/FreemakeMusicBoxSetup.exe is present in the Dr.Web database of unwanted sites!

Does avast detect the most recent versions?

polonus

https://www.virustotal.com/en/file/df761768da0213d46a4cb046277098bc27a8cd3eebba63cae3b8331ec69823ec/analysis/1425841282/

Certainly avast may alert this in PUP-mode,

pol