ON booting up I get a pop up window from Online-Armor. It is telling me that “avast.setup wants to run. The program is located here: C:\Program files\Alwil Software\Avast 4\Setup. The prgroam is suspicious. Take extreme care.” bla bla bla then it says, " Some dangerous programs replace trusted programs by themselves to trick you into running them.
This program has the same content as c:\Program Files\Alwil software\Avast 4\setup\setup.ovr but its filename is C:\Program files\Alwil Software\Avast 4\Setup."
It’s the fact that it says same content that worries me. Should I worry or is this a false positive–therefore meaning I should contact Online armor and tell them of it.
Allow it it is the avast update process checking for updates, it checks for updates when you establish an internet connection. So it looks like your broadband connection is established very quickly.
OA knows nothing about what the program/process does so its alert is at bes behaviour/heuristic based. avast has a self-defence module to protect its files and registry entries, etc. so this greatly reduces the possibility of replacement/modification of avast processes.
The setup.ovr, is the base for the creation of the avast.setup which would also reduce the probability of avast.setup also being hijacked.