Researchers who during August 8-12, 2011 attended the USENIX Security Symposium held at San Francisco's Westin St. Francis presented a paper titled "Measuring Pay-per-Install: The Commoditization of Malware Distribution" wherein they offered certain current analysis related to the way the underground crime world valued hijacked PCs that belonged to the ever-expanding as well as profitable botnet trade. ORC reported this on August 15, 2011.
Essentially as accords to the study, in PPI schemes where contaminated computers are obtained and used for unleashing malware, cyber-criminals may sell such computers' services to individuals or groups that seek a place for running their malware. Occasionally such sellers engage middlemen for providing the hijacked PCs at an agreed price following which they sell those systems on retail.
Describing the process more clearly, the researchers say that at first a downloader is installed, which hunts and pulls down malware onto the victim's computer. For escaping identification, the PPI operators utilize packer software, which disguise the downloaders' signatures. At a mean of every 11 days, the operators repacked those downloaders, while they repacked the SecuritySuite downloader twice daily on average.
...