I'm running Windows 98 SE. After I run SAS there is a file created:
Windows/Win386.swp. The real swap file is in c:, not Windows directory.
When Avast scans it finds this file has malware. Usually it's a trojan. Today Avast named the file DC390.Swp but my directory listing said Win386.swp. Avast said this file is infected with Win32:AutoRun-AKO[wm].
I looked at my Windows directory before I did the SAS scan and immediately after the scan, and the file was not there before but it was there after.
This has happened about 4 times now and the name of the malware is always different. Last time it was Win32:Dialer-DW[trj].