This startup item runs a shell script that downloads and executes code from a remote server every time you log in. The address it contacts isn't tied to any software you have installed. Legitimate updaters don't work this way. Recommended: quarantine.