SuperOneClick is a virus rootkit

[VRod007]

Upon scanning a very popular mobile Android  rooting program, SuperOneClick, that was downloaded to my PC with Avast the results  showed no virus. But after installing the program and then running a boot-time scan, several viruses showed up and were cleared by Avast.

The good: Boot-scan fixed the problem
The bad: If I hadn't run a boot-scan the virus would  have thrived
The ugly: Avast  should have detected the virus when I scanned it in the first place.

[Pondus]

What was the malware name(s) given by avast?

Upload and test the program file at www.virustotal.com   if tested before, click new scan
Post link to scan result here

[bob3160]

Upon scanning a very popular mobile Android  rooting program, SuperOneClick, that was downloaded to my PC with Avast the results  showed no virus. But after installing the program and then running a boot-time scan, several viruses showed up and were cleared by Avast.

The good: Boot-scan fixed the problem
The bad: If I hadn't run a boot-scan the virus would  have thrived
The ugly: Avast  should have detected the virus when I scanned it in the first place.

SuperOneClick is a program to root your android device.
To get the best advice and information this should be posted in the android section:
http://forum.avast.com/index.php?board=39.0

[Pondus]

@bob   the program was detected on his PC ... by avast boot scan he say

i suspect he may have downloaded it from CNET  http://download.cnet.com/SuperOneClick/3000-2094_4-75447027.html
and we all love cnet downloads ...as we all know what usually follow those download

so i suspect he got PUP detections when running avast boot scan (avast pup detection is default off exept for in boot scan)
PUP = not virus / Possible Unwanted Program ..... usually crapware that is bundled with freeware downloads

anyway this is speculation unless he answer the question..... what malware name did avast give those detections?



the program itselfe is detected by many AV as a exploit ..... since it is a root program i guess
also lootor that i think is some annoying popup ads
https://www.virustotal.com/nb/file/c9735121f35dd5df09406ddd91e5f6cafe072c6eed47c27e1c3b1b7bc99c367b/analysis/1398719317/

First submission 2012-01-03 07:11:07 UTC ( 2 years, 3 months ago )

[RejZoR]

Of course it's a rootkit. It gives Android devices ROOT access. Donno under what name avast! detectes it, but if it says that specifically, then it's ok and should be detected under PUP.

I did use this app once to root my HTC Wildfire few years ago...