@bob the program was detected on his PC … by avast boot scan he say

i suspect he may have downloaded it from CNET http://download.cnet.com/SuperOneClick/3000-2094_4-75447027.html
and we all love cnet downloads …as we all know what usually follow those download

so i suspect he got PUP detections when running avast boot scan (avast pup detection is default off exept for in boot scan)
PUP = not virus / Possible Unwanted Program … usually crapware that is bundled with freeware downloads

anyway this is speculation unless he answer the question… what malware name did avast give those detections?

the program itselfe is detected by many AV as a exploit … since it is a root program i guess
also lootor that i think is some annoying popup ads
https://www.virustotal.com/nb/file/c9735121f35dd5df09406ddd91e5f6cafe072c6eed47c27e1c3b1b7bc99c367b/analysis/1398719317/

First submission 2012-01-03 07:11:07 UTC ( 2 years, 3 months ago )