Author Topic: Trojan/Backdoor-ASW  (Read 3391 times)

0 Members and 1 Guest are viewing this topic.

rdmaloyjr

  • Guest
Trojan/Backdoor-ASW
« on: August 06, 2006, 04:47:29 AM »
Today Spyware Terminator found a trojan during a fast scan: Trojan/Backdoor-ASW
(Trojan) in File C:\WINDOWS\system32\aswBoot.exe

I ran scans with avast! (thorough) & BitDefender (online), neither detected the above trojan.

Could C:\WINDOWS\system32\aswBoot.exe be avast! boot time scan file?
Is this a false detection of a trojan?

« Last Edit: August 06, 2006, 01:22:32 PM by rdmaloyjr »

Offline TedNelly

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1538
  • Trust No-One!
Re: Trojan/Backdoor-ASW
« Reply #1 on: August 06, 2006, 08:01:02 AM »
I have received the same results and have sent SpywareTreminator an email
regarding this False Posative.

Online scans Jotti and VirusTotal fine nothing wrong with aswBoot.exe
Ewido 4 and a Square report nothing wrong with aswBoot.exe

Safe to call this one a FP
Windows 10 Pro | Intel I7 CPU | 16 Gig 2133 RAM | Avast beta 17.5.2295 | Firefox 54 b9(64-bit) | Cyberfox 52.1 | T-Bird 52.1.1 | SpyWareBlaster 5.5 | MalwareBytes 3.0.0.865 | WinPatrol 35.5.2 | GlassWire 1.2.100 | Cybereason Ransomfree 2.2.7 |  Pulla-dePlug Final!

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Trojan/Backdoor-ASW
« Reply #2 on: August 06, 2006, 03:01:26 PM »
Is this a false detection of a trojan?
Sure a false positive...
aswboot.exe is the boot time scanner of avast.
The best things in life are free.

Spiritsongs

  • Guest
Re: Trojan/Backdoor-ASW
« Reply #3 on: August 06, 2006, 06:23:23 PM »
 :)  Hi all :

     This product was once on Eric Howes "Rogue/Suspect" listing;
     however, it was "de-listed" Mar 9, '06 with the following note :

   Note on SpywareTerminator:  We originally listed Spyware Terminator on this page out of concerns that Crawler, the company behind the product, had established connections with IBIS, a well known adware distributor responsible for such adware programs as Wintools, Websearch, & Huntbar. Although we found no problems in our initial testing with Spyware Terminator, and while the vendor itself announced that it was exiting the adware business (1), we decided out of caution to impose a three month probation period before we would consider re-testing and, if warranted, de-listing the the product from the Rogue/Suspect list. During that three month probation period we monitored the behavior of IBIS and Crawler. At the end of the three month probation period we re-tested Spyware Terminator, again finding no problems serious enough to justify listing the program on this page. As the vendor involved has not been involved in the distribution of adware for many months, and as the program itself exhibits no problems serious enough to warrant mention on this page, we have decided to de-list Spyware Terminator from the Rogue/Suspect list and can no longer regard the program to be "rogue/suspect."