internat.exe is this a Virus ??

[Guest]

Hi All,
I have performed scanning and cleaning on my PC with both MS AntiSpyware and
Ewido Security Suite.
If I then run XoftSpy it shows up the following virus.
Vendor: A4Zeta Beta 1
Type: Registry Value
Category: RAT
Object: software\microsoft\windows\currentversion\run\internat.exe
Danger: Threat
Is this an error on the part of XoftSpy or are both of the other apps not
recognizing this threat.
Thanks in advance

 

[Guest]

A suggestion: before any doubt, advice not only requests since it beams, but
look for in google. This data fué the first in the list when entering the
name of the program

Process name: loads the different input locales

Product: Windows

Company: Microsoft

File: internat.exe

Security Rating:
Internat.exe runs at startup; it loads the different input locales that are
specified by the user. The locales to be loaded for the current user are
taken from the following registry key:
HKEY_CURRENT_USER\Keyboard Layout\Preload
Internat.exe loads the "EN" icon into the system tray, allowing the user to
easily switch between locales. This icon disappears when the process is
stopped, but the locales can still be changed through Control Panel.
Note The locales for the "System" are loaded from here:
HKEY_USERS\.DEFAULT\Keyboard Layout\Preload
These locales are used by system services that are running under the Local
System account or when no user is logged on (for example, at the logon
prompt).


Note: The internat.exe file is located in the c:\windows\System32 folder. In
other cases, internat.exe is a virus, spyware, trojan or worm! Check this
with Security Task Manager.

 

[Bill Sanderson]

This could well be a false positive.

One way to get further information is to find internat.exe on your system,
and submit the file at one or more of the following sites:

http://www.virustotal.com

http://virusscan.jotti.org

Each has a browse window in the upper right to do the submission, and will
check out your file with 10 or so antivirus vendors with one submission.

A clean reading at these sites is not proof that a file is safe, but I'd say
in this case that it is likely to be a good indicator that, in fact, the
file is safe, and you are seeing a false positive.