re-hijack this

joe134

OTE=joe134;45955945]I don,t get that when I visit. I get,choose file to the left, and no browse at all to the right.I,ve E-mailed them, but thats supposed to be an /or the Attached file, which I cannot find, so just typed it, and sent.[/QUOTE]update, When I type that file name in,it says not valid, even when I try and search for it.How did you post that screenshot?

RussJK

I uploaded it to a website, then linked to it as a file.

I seem to have food poisoning (mussels) so I'll let someone else take over

joe134

RussJK wrote: »

I uploaded it to a website, then linked to it as a file.

I seem to have food poisoning (mussels) so I'll let someone else take over

Thanks russ.Hope you pick up, it,s probably my virus that you,ve got.In task manager it,sshowing as 00.152K.realtek.not running as I see.

joe134

waddler_8 wrote: »

You'll find lots of instances of the legitimate Realtek file RtkBtMnt.exe running from %temp%

http://systemexplorer.net/filereviews.php?fid=42351

http://www.virustotal.com/file-scan/report.html?id=d0d489c248df89f867f028bb4b19af65b3ccfe24e2410010ea8f80b46bf3a9eb-1308412059

Hi, are you sure system explorer is cosher, because I,ve just clicked on it, and the spelling is diabolical.I don,t think I.ll be up/or/downloading from it.

waddler_8

Rest assured I wouldn't post any link that could be considered not "cosher". I don't know how much regard you pay to site raters such as the Web of Trust, but it shows as reputable.

http://www.mywot.com/en/scorecard/systemexplorer.net

You've no need to download/upload anything from the site, just take note of the file information it freely gives. Note that it shows it runs from a temp location, as does yours.

Product: Realtek HD Audio Data Rerouter
Company: Realtek Semiconductor Corp.
Description: Realtek HD Audio Data Rerouter
Version: 1.0.0.5
MD5: 7EDAF6D5B928A4D81EB20D6F97C1225B
SHA1: 7D3170804531B81BE11DA118169BB0C40BF39FC9
SHA256: D0D489C248DF89F867F028BB4B19AF65B3CCFE24E2410010EA8F80B46BF3A9EB
Size: 507904
Directory: %TEMP%\RtkBtMnt.exe

From the MD5 & other information, you can see the VT result also shows it is a legit file. It's a file that has been around for a few years now. If it was bad, AV's would be detecting it by now. From VT:

First seen: 2007-09-25 22:48:14
Last seen : 2011-06-18 15:47:39

RussJK

joe134 wrote: »

Thanks russ.Hope you pick up, it,s probably my virus that you,ve got.In task manager it,sshowing as 00.152K.realtek.not running as I see.

Picked up a bit thanks, second time this year with seafood!

RussJK

joe134 wrote: »

Hi, are you sure system explorer is cosher, because I,ve just clicked on it, and the spelling is diabolical.I don,t think I.ll be up/or/downloading from it.

Not meaning to get you worried about the file, as I said it usually turns out to be legit but worth checking with what is normally a one minute job with virustotal (when it works!).

You could try with a portable browser, and then delete the browser afterwards:
http://portableapps.com/apps/internet/firefox_portable

joe134

waddler_8 wrote: »

Rest assured I wouldn't post any link that could be considered not "cosher". I don't know how much regard you pay to site raters such as the Web of Trust, but it shows as reputable.

http://www.mywot.com/en/scorecard/systemexplorer.net

You've no need to download/upload anything from the site, just take note of the file information it freely gives. Note that it shows it runs from a temp location, as does yours.



From the MD5 & other information, you can see the VT result also shows it is a legit file. It's a file that has been around for a few years now. If it was bad, AV's would be detecting it by now. From VT:

Hi Waddler, I didn,t mean to cast aspertions on your efficiency, and thank you for your input.It,s just the way the article is written, a lot of language errors, the type one finds on spoof sites.Idid read it though, and don,t think My file is a virus,BUT am following Russ,s advice to verify it.Sorryy if I offended you,Didn,t intend to.

waddler_8

No offence taken, it's better to be safe than sorry...

joe134

RussJK wrote: »

Not meaning to get you worried about the file, as I said it usually turns out to be legit but worth checking with what is normally a one minute job with virustotal (when it works!).

You could try with a portable browser, and then delete the browser afterwards:
http://portableapps.com/apps/internet/firefox_portable

Hi Russ, glad your better.I am just clicking on the link you gave me.Where you get browse on the right.I gey choose a file from a drop down on the left.But cannot find that file to attach, and no dialoue box to type into, so sent second e-mail to them,await a reply.I,ve taken Spybot off temporaraly.if you tell me how to post screenshot, i will post the picture of virustool page,when I click oninsert image, it asks for url:::?