Please confirm… Getting hits on this file and it’s restore point.
D:\i386\apps\APP12382.exe|>hp\tmp\SUPPORT\TOOLS\ACT20.EXE
D:\System Volume Information_restore{C3A256EC-F74E-4D1B-B627-49321DAD0241}\RP34\A0012431.exe|>hp\tmp\SUPPORT\TOOLS\ACT20.EXE
Upon further research, this file is the Application Compatibility Toolkit, per Microsoft:
hxxp://technet.microsoft.com/en-us/library/bb457102.aspx
As defined in the article:
[b]Table 4-1 lists some of the key deployment tools that are in the \Support\Tools folder.[b]
As further defined in Table 4-1,
[b]Support Tools That Aid in Deployment [b]
[b]Application
Compatibility Toolkit
Act20.exe
The Application Compatibility Toolkit for Windows XP contains tools and documents to help you diagnose and resolve application compatibility issues. Some of the tools in the Toolkit include:
Compatibility Administration Tool, which provides an interface for working with compatibility data and features on Windows XP computers
Application Verifier Tool, which is designed to help developers identify compatibility and stability issues in their applications
QfixApp, which provides a quick way of testing applications that have any of the common compatibility fixes provided in the Windows XP operating system
PageHeap, which helps developers find heap-related bugs, corruptions, and leaks in applications[/b]
I submitted it to Jotti and all scanners, except for Avast, found nothing. Here’s the link and hash:
hxxp://virusscan.jotti.org/en/scanresult/670b9aedacd33e9f4cf4da524298add6f82702b0
78140fa1a41157bfbd48553283c8668e
Seems to be another FP…