Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Rootkit problems

30 Sep 2010   #1

Windows 7 Ultimate
Rootkit problems

I got what I believe is a rootkit virus, RtkBtMnt.exe, that has installed itself in my temp folder and is associated with a running process Realtek HD Audio Data Rerouter. I don't think Realtek would design their program to run from the temp folder which is routinely cleaned.

I ran a full scan with MSE, which did not find it.
I ran Malwarebytes and used the Fileassassin tool to delete it but it doesn't stay deleted - reappears after rebooting.

There is also this txt file in the temp folder which also cannot be deleted: FXSAPIDebugLogFile.txt.

Any good trouble shooters here that can offer some suggestions?


My System SpecsSystem Spec

30 Sep 2010   #2

Windows 8 Pro

I really don't think it's anything to worry about.

rtkbtmnt.exe - Realtek HD Audio Data Rerouter

Supposedly the process is responsible for routing your audio through bluetooth.
My System SpecsSystem Spec
30 Sep 2010   #3

Windows 7 Ultimate

Thanks for your reply... but should it be running from the User/Temp folder and be completely un-deletable? I found this guy had a real problem with it:
Since it appears in the temp file, it starts creating labuage.bin files, useless foulders and rubbish that fill up your disk at great speed. If you try to delete it, you can't. Unlocker is useless against it. If you restart your pc in safe mode, file is unavailable, nor can it be found.
So far, the only I was able to do, was to open the task manager whenever I start my pc, and stop its process. That seems to stop its creating new rubbish.
I don't know why people that seem to know a lot, keep on stating it;s a normal process. No Realtek file is so protected, or installed in a temp folder. Please, post your solution if you happen to find it.
Also, in process explorer, it had a slightly different name than the HD Audio Control Panel process of which it is listed as a child (Realtek Semiconductor vs. Realtek Semiconductor Corp.)
My System SpecsSystem Spec

2 Weeks Ago   #4

Windows xp

I had that a few months ago. I ended up having to delete the sound driver. Have not seen the process or item in my temp folder since. Not t worry the driver re-installs itself on reboot
My System SpecsSystem Spec
2 Weeks Ago   #5

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1 Pro

D/L & run TDSSKiller & see what it finds.

TDSSKiller Download

NOTE: When running TDSSKiller, launch the program, click on the blue text "Change Parameters" & check the box marked "Detect TDLFS File system." Click OK & then run the scan.
My System SpecsSystem Spec

 Rootkit problems

Thread Tools

Similar help and support threads for2: Rootkit problems
Thread Forum
ZA Reg Rootkit??? System Security
Hi Guys, Multiple Problems Due to Rootkit! Performance & Maintenance
Require (Rootkit.TDSS.TDL4) Rootkit Removal & Cleanup walkthrough System Security
Potential Rootkit System Security
Need help with Rootkit problem? Performance & Maintenance
rootkit System Security
Rootkit Found System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 11:03 PM.
Twitter Facebook Google+

Windows 7 Forums

Seven Forums Android App Seven Forums IOS App

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33