hi i run WinPfind in my computer. and while reading the log file, i saw this entry.
UPX! 9/25/2006 8:45:08 AM 666240 C:\WINDOWS\SYSTEM32\aswBoot.exe
i did a google search. most are showing its a trojan/backdoor.
but when i went to check at c:\windows\system32\asBoot.exe
right clicked then properties its showed :
Description: avast! start-up scanner
File size: 651KB
File Version: 4.7.892.0
maybe someone can enlighten me on this one …
When I scan Google for aswboot.exe I see a lot of references that a mass mailing worm attempts to remove any reference to this avast startup scanner from the registry (among a large number of other programs). I see only one site that reports it is a threat (I suspect they probably failed to copy the details correctly from the sarc site).
The information you posted references the currently valid details and location of the avast startup scanner.