Trojan/Backdoor-ASW

Viruses and worms
1

Today Spyware Terminator found a trojan during a fast scan: Trojan/Backdoor-ASW
(Trojan) in File C:\WINDOWS\system32\aswBoot.exe

I ran scans with avast! (thorough) & BitDefender (online), neither detected the above trojan.

Could C:\WINDOWS\system32\aswBoot.exe be avast! boot time scan file?
Is this a false detection of a trojan?

http://img146.imageshack.us/img146/5169/20060805211608yu6.png

2

I have received the same results and have sent SpywareTreminator an email
regarding this False Posative.

Online scans Jotti and VirusTotal fine nothing wrong with aswBoot.exe
Ewido 4 and a Square report nothing wrong with aswBoot.exe

Safe to call this one a FP

3

Sure a false positive…
aswboot.exe is the boot time scanner of avast.

4

:slight_smile: Hi all :

 This product was once on Eric Howes "Rogue/Suspect" listing;
 however, it was "de-listed" Mar 9, '06 with the following note :

Note on SpywareTerminator: We originally listed Spyware Terminator on this page out of concerns that Crawler, the company behind the product, had established connections with IBIS, a well known adware distributor responsible for such adware programs as Wintools, Websearch, & Huntbar. Although we found no problems in our initial testing with Spyware Terminator, and while the vendor itself announced that it was exiting the adware business (1), we decided out of caution to impose a three month probation period before we would consider re-testing and, if warranted, de-listing the the product from the Rogue/Suspect list. During that three month probation period we monitored the behavior of IBIS and Crawler. At the end of the three month probation period we re-tested Spyware Terminator, again finding no problems serious enough to justify listing the program on this page. As the vendor involved has not been involved in the distribution of adware for many months, and as the program itself exhibits no problems serious enough to warrant mention on this page, we have decided to de-list Spyware Terminator from the Rogue/Suspect list and can no longer regard the program to be “rogue/suspect.”