Author Topic: SuperOneClick is a virus rootkit  (Read 3887 times)

0 Members and 1 Guest are viewing this topic.

Offline VRod007

  • Newbie
  • *
  • Posts: 2
SuperOneClick is a virus rootkit
« on: April 28, 2014, 10:50:27 PM »
Upon scanning a very popular mobile Android  rooting program, SuperOneClick, that was downloaded to my PC with Avast the results  showed no virus. But after installing the program and then running a boot-time scan, several viruses showed up and were cleared by Avast.

The good: Boot-scan fixed the problem
The bad: If I hadn't run a boot-scan the virus would  have thrived
The ugly: Avast  should have detected the virus when I scanned it in the first place.

Offline Pondus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 35774
Re: SuperOneClick is a virus rootkit
« Reply #1 on: April 28, 2014, 10:58:03 PM »
What was the malware name(s) given by avast?

Upload and test the program file at www.virustotal.com   if tested before, click new scan
Post link to scan result here
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40822
  • 59 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: SuperOneClick is a virus rootkit
« Reply #2 on: April 28, 2014, 11:07:01 PM »
Upon scanning a very popular mobile Android  rooting program, SuperOneClick, that was downloaded to my PC with Avast the results  showed no virus. But after installing the program and then running a boot-time scan, several viruses showed up and were cleared by Avast.

The good: Boot-scan fixed the problem
The bad: If I hadn't run a boot-scan the virus would  have thrived
The ugly: Avast  should have detected the virus when I scanned it in the first place.
SuperOneClick is a program to root your android device.
To get the best advice and information this should be posted in the android section:
http://forum.avast.com/index.php?board=39.0
Free avast! Security Seminar: https://goo.gl/kh3cqR  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v1903 64bit, 8 Gig Ram, AvastFree 19.5.2378, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline Pondus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 35774
Re: SuperOneClick is a virus rootkit
« Reply #3 on: April 28, 2014, 11:17:12 PM »
@bob   the program was detected on his PC ... by avast boot scan he say

i suspect he may have downloaded it from CNET  http://download.cnet.com/SuperOneClick/3000-2094_4-75447027.html
and we all love cnet downloads ...as we all know what usually follow those download

so i suspect he got PUP detections when running avast boot scan (avast pup detection is default off exept for in boot scan)
PUP = not virus / Possible Unwanted Program ..... usually crapware that is bundled with freeware downloads

anyway this is speculation unless he answer the question..... what malware name did avast give those detections?



the program itselfe is detected by many AV as a exploit ..... since it is a root program i guess
also lootor that i think is some annoying popup ads
https://www.virustotal.com/nb/file/c9735121f35dd5df09406ddd91e5f6cafe072c6eed47c27e1c3b1b7bc99c367b/analysis/1398719317/

First submission 2012-01-03 07:11:07 UTC ( 2 years, 3 months ago )

« Last Edit: April 29, 2014, 01:22:14 PM by Pondus »
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9243
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: SuperOneClick is a virus rootkit
« Reply #4 on: April 29, 2014, 12:51:08 PM »
Of course it's a rootkit. It gives Android devices ROOT access. Donno under what name avast! detectes it, but if it says that specifically, then it's ok and should be detected under PUP.

I did use this app once to root my HTC Wildfire few years ago...
Visit my webpage RejZoR's Flock of Sheep