SuperOneClick is a virus rootkit

Upon scanning a very popular mobile Android rooting program, SuperOneClick, that was downloaded to my PC with Avast the results showed no virus. But after installing the program and then running a boot-time scan, several viruses showed up and were cleared by Avast.

The good: Boot-scan fixed the problem
The bad: If I hadn’t run a boot-scan the virus would have thrived
The ugly: Avast should have detected the virus when I scanned it in the first place.

What was the malware name(s) given by avast?

Upload and test the program file at www.virustotal.com if tested before, click new scan
Post link to scan result here

SuperOneClick is a program to root your android device.
To get the best advice and information this should be posted in the android section:
http://forum.avast.com/index.php?board=39.0

@bob the program was detected on his PC … by avast boot scan he say

i suspect he may have downloaded it from CNET http://download.cnet.com/SuperOneClick/3000-2094_4-75447027.html
and we all love cnet downloads …as we all know what usually follow those download

so i suspect he got PUP detections when running avast boot scan (avast pup detection is default off exept for in boot scan)
PUP = not virus / Possible Unwanted Program … usually crapware that is bundled with freeware downloads

anyway this is speculation unless he answer the question… what malware name did avast give those detections?

the program itselfe is detected by many AV as a exploit … since it is a root program i guess
also lootor that i think is some annoying popup ads
https://www.virustotal.com/nb/file/c9735121f35dd5df09406ddd91e5f6cafe072c6eed47c27e1c3b1b7bc99c367b/analysis/1398719317/

First submission 2012-01-03 07:11:07 UTC ( 2 years, 3 months ago )

Of course it’s a rootkit. It gives Android devices ROOT access. Donno under what name avast! detectes it, but if it says that specifically, then it’s ok and should be detected under PUP.

I did use this app once to root my HTC Wildfire few years ago…