Task Manger weird program

[PG]

I've seen the following program flash on the task manager
and can't find any info on what it is or does? Anyone
seen this and have any ideas. The file is RTFREA~1.exe
and it flashes uder the processes screen every couple of
seconds and then goes away. This is happening on W2K
server with Exchange

 

[andy smart]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

PG wrote:
| I've seen the following program flash on the task manager
| and can't find any info on what it is or does? Anyone
| seen this and have any ideas. The file is RTFREA~1.exe
| and it flashes uder the processes screen every couple of
| seconds and then goes away. This is happening on W2K
| server with Exchange

Sounds like the MSDOS name for something longer.

You could try searching for files with rtfre* and see if it finds
anything I suppose.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBUuvQqmlxlf41jHgRAsH3AKCrfyvFvC9KQis+u2UYGCEPyZyeZwCgoT5H
ON0ROiueELhb7mpW3PUWq+M=
=a3f3
-----END PGP SIGNATURE-----

 

[Guest]

Thanks. I was thinking that also but nothing shows up in
the search. I've tried MS knowledge base, google,
norton, mcafee and found nothing.

 

[Mark-Allen Perry]

Might want to try "Process Explorer" from SysInternals.com, to see what and where this process comes from.

--
And always try the MS KB first before posting.
The answer is probably already posted.
MS KB: http://support.microsoft.com/default.aspx?scid=fh;EN-US;KBHOWTO
----
Mark-Allen Perry
ALPHA Systems
Marly, Switzerland
mark-allen_AT_mvps_DOT_org

Thanks. I was thinking that also but nothing shows up in
the search. I've tried MS knowledge base, google,
norton, mcafee and found nothing.

 

[Guest]

Thanks. This is a great tool. I have since restarted
the SMTP service and after monitoring the file
RTFREA~1.exe no longer is flashing up on the processess
under task manager. Neither the PE tool nor Task Manager
is showing the file since doing this. I still want to
determine what this file is though. Anyone have any
other ideas?

Thanks.

-----Original Message-----
Might want to try "Process Explorer" from

SysInternals.com, to see what and where this process
comes from.

 

[Mark-Allen Perry]

Try a search across the entire disk. And do a search across your Registry.

Keep us informed to help others.

--
And always try the MS KB first before posting.
The answer is probably already posted.
MS KB: http://support.microsoft.com/default.aspx?scid=fh;EN-US;KBHOWTO
----
Mark-Allen Perry
ALPHA Systems
Marly, Switzerland
mark-allen_AT_mvps_DOT_org

Thanks. This is a great tool. I have since restarted
the SMTP service and after monitoring the file
RTFREA~1.exe no longer is flashing up on the processess
under task manager. Neither the PE tool nor Task Manager
is showing the file since doing this. I still want to
determine what this file is though. Anyone have any
other ideas?

Thanks.

-----Original Message-----
Might want to try "Process Explorer" from

SysInternals.com, to see what and where this process
comes from.

 

[Guest]

Thanks.

I did a search from the command prompt instead of using
windows find and this is the closest match to the file.
The file it found was RTFreader.exe located under savfmse
which is Norton.

When I scanned the registry it found rtfrea*.exe and
rtfrea*1.exe under the Key Internet Explorer\Explorer
Bars\{C4E.......}\FilesNamedMRU The type is REG_SZ and
rtfrea*.exe are listed under data.

Not related but also under this directory of keys
has "you should not see
me.exe", "me.exe" , "shampagi.dll" and CDO.dll to name a
few.

-----Original Message-----
Try a search across the entire disk. And do a search across your Registry.

Keep us informed to help others.

--
And always try the MS KB first before posting.
The answer is probably already posted.
MS KB: http://support.microsoft.com/default.aspx? scid=fh;EN-US;KBHOWTO
----
Mark-Allen Perry
ALPHA Systems
Marly, Switzerland
mark-allen_AT_mvps_DOT_org

Thanks. This is a great tool. I have since restarted
the SMTP service and after monitoring the file
RTFREA~1.exe no longer is flashing up on the processess
under task manager. Neither the PE tool nor Task Manager
is showing the file since doing this. I still want to
determine what this file is though. Anyone have any
other ideas?

Thanks.

-----Original Message-----
Might want to try "Process Explorer" from

SysInternals.com, to see what and where this process
comes from.

 

[Mark-Allen Perry]

FilesNamedMRU = most recently used (files names) - probably ok

Ahhhh...... now that's interesting.

Symantec AntiVirus/Filtering for Microsoft Exchange (SAVFMSE) 3.0

Running Exchange/Outlook? Looks like this guy pops up when it needs to do checking.

This issue looks ok to me. It's just protecting your emails and whatnot.

Does this help?

--
And always try the MS KB first before posting.
The answer is probably already posted.
MS KB: http://support.microsoft.com/default.aspx?scid=fh;EN-US;KBHOWTO
----
Mark-Allen Perry
ALPHA Systems
Marly, Switzerland
mark-allen_AT_mvps_DOT_org

Thanks.

I did a search from the command prompt instead of using
windows find and this is the closest match to the file.
The file it found was RTFreader.exe located under savfmse
which is Norton.

When I scanned the registry it found rtfrea*.exe and
rtfrea*1.exe under the Key Internet Explorer\Explorer
Bars\{C4E.......}\FilesNamedMRU The type is REG_SZ and
rtfrea*.exe are listed under data.

Not related but also under this directory of keys
has "you should not see
me.exe", "me.exe" , "shampagi.dll" and CDO.dll to name a
few.

 

[Guest]

Yes this does help. It does make me curious however that
I couldn't find anything on Symantecs website referencing
these files. You have been a big help, Thanks.

-----Original Message-----
FilesNamedMRU = most recently used (files names) - probably ok

Ahhhh...... now that's interesting.

Symantec AntiVirus/Filtering for Microsoft Exchange (SAVFMSE) 3.0

Running Exchange/Outlook? Looks like this guy pops up when it needs to do checking.

This issue looks ok to me. It's just protecting your emails and whatnot.

Does this help?

--
And always try the MS KB first before posting.
The answer is probably already posted.
MS KB: http://support.microsoft.com/default.aspx? scid=fh;EN-US;KBHOWTO
----
Mark-Allen Perry
ALPHA Systems
Marly, Switzerland
mark-allen_AT_mvps_DOT_org

Thanks.

I did a search from the command prompt instead of using
windows find and this is the closest match to the file.
The file it found was RTFreader.exe located under savfmse
which is Norton.

When I scanned the registry it found rtfrea*.exe and
rtfrea*1.exe under the Key Internet Explorer\Explorer
Bars\{C4E.......}\FilesNamedMRU The type is REG_SZ and
rtfrea*.exe are listed under data.

Not related but also under this directory of keys
has "you should not see
me.exe", "me.exe" , "shampagi.dll" and CDO.dll to name a

few.


-----Original Message-----
Try a search across the entire disk. And do a search across your Registry.

Keep us informed to help others.