I've seen the following program flash on the task manager
and can't find any info on what it is or does? Anyone
seen this and have any ideas. The file is RTFREA~1.exe
and it flashes uder the processes screen every couple of
seconds and then goes away. This is happening on W2K
server with Exchange

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

PG wrote:
| I've seen the following program flash on the task manager
| and can't find any info on what it is or does? Anyone
| seen this and have any ideas. The file is RTFREA~1.exe
| and it flashes uder the processes screen every couple of
| seconds and then goes away. This is happening on W2K
| server with Exchange

Sounds like the MSDOS name for something longer.

You could try searching for files with rtfre* and see if it finds
anything I suppose.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBUuvQqmlxlf41jHgRAsH3AKCrfyvFvC9KQis+u2UYGCEPyZyeZwCgoT5H
ON0ROiueELhb7mpW3PUWq+M=
=a3f3
-----END PGP SIGNATURE-----

Thanks. I was thinking that also but nothing shows up in
the search. I've tried MS knowledge base, google,
norton, mcafee and found nothing.

>-----Original Message-----
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>PG wrote:
>| I've seen the following program flash on the task
manager
>| and can't find any info on what it is or does? Anyone
>| seen this and have any ideas. The file is RTFREA~1.exe
>| and it flashes uder the processes screen every couple
of
>| seconds and then goes away. This is happening on W2K
>| server with Exchange
>
>Sounds like the MSDOS name for something longer.
>
>You could try searching for files with rtfre* and see if
it finds
>anything I suppose.
>
>
>-----BEGIN PGP SIGNATURE-----
>Version: GnuPG v1.2.5 (MingW32)
>Comment: Using GnuPG with Thunderbird -
http://enigmail.mozdev.org
>
>iD8DBQFBUuvQqmlxlf41jHgRAsH3AKCrfyvFvC9KQis+u2UYGCEPyZyeZ
wCgoT5H
>ON0ROiueELhb7mpW3PUWq+M=
>=a3f3
>-----END PGP SIGNATURE-----
>.
>

Might want to try "Process Explorer" from SysInternals.com, to see what and where this process comes from.

--
And always try the MS KB first before posting.
The answer is probably already posted.
MS KB: http://support.microsoft.com/default.aspx?scid=fh;EN-US;KBHOWTO
----
Mark-Allen Perry
ALPHA Systems
Marly, Switzerland
mark-allen_AT_mvps_DOT_org

wrote in message news:0d4a01c4a183$dc5a7540$a301280a@phx.gbl...
Thanks. I was thinking that also but nothing shows up in
the search. I've tried MS knowledge base, google,
norton, mcafee and found nothing.

>-----Original Message-----
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>PG wrote:
>| I've seen the following program flash on the task
manager
>| and can't find any info on what it is or does? Anyone
>| seen this and have any ideas. The file is RTFREA~1.exe
>| and it flashes uder the processes screen every couple
of
>| seconds and then goes away. This is happening on W2K
>| server with Exchange
>
>Sounds like the MSDOS name for something longer.
>
>You could try searching for files with rtfre* and see if
it finds
>anything I suppose.
>
>
>-----BEGIN PGP SIGNATURE-----
>Version: GnuPG v1.2.5 (MingW32)
>Comment: Using GnuPG with Thunderbird -
http://enigmail.mozdev.org
>
>iD8DBQFBUuvQqmlxlf41jHgRAsH3AKCrfyvFvC9KQis+u2UYGCEPyZyeZ
wCgoT5H
>ON0ROiueELhb7mpW3PUWq+M=
>=a3f3
>-----END PGP SIGNATURE-----
>.
>

Thanks. This is a great tool. I have since restarted
the SMTP service and after monitoring the file
RTFREA~1.exe no longer is flashing up on the processess
under task manager. Neither the PE tool nor Task Manager
is showing the file since doing this. I still want to
determine what this file is though. Anyone have any
other ideas?

Thanks.
>-----Original Message-----
>Might want to try "Process Explorer" from
SysInternals.com, to see what and where this process
comes from.
>
>--
>And always try the MS KB first before posting.
>The answer is probably already posted.
>MS KB: http://support.microsoft.com/default.aspx?
scid=fh;EN-US;KBHOWTO
>----
>Mark-Allen Perry
>ALPHA Systems
>Marly, Switzerland
>mark-allen_AT_mvps_DOT_org
>
> wrote in message
news:0d4a01c4a183$dc5a7540$a301280a@phx.gbl...
> Thanks. I was thinking that also but nothing shows up
in
> the search. I've tried MS knowledge base, google,
> norton, mcafee and found nothing.
>
> >-----Original Message-----
> >-----BEGIN PGP SIGNED MESSAGE-----
> >Hash: SHA1
> >
> >PG wrote:
> >| I've seen the following program flash on the task
> manager
> >| and can't find any info on what it is or does?
Anyone
> >| seen this and have any ideas. The file is
RTFREA~1.exe
> >| and it flashes uder the processes screen every
couple
> of
> >| seconds and then goes away. This is happening on
W2K
> >| server with Exchange
> >
> >Sounds like the MSDOS name for something longer.
> >
> >You could try searching for files with rtfre* and see
if
> it finds
> >anything I suppose.
> >
> >
> >-----BEGIN PGP SIGNATURE-----
> >Version: GnuPG v1.2.5 (MingW32)
> >Comment: Using GnuPG with Thunderbird -
> http://enigmail.mozdev.org
> >
>
>iD8DBQFBUuvQqmlxlf41jHgRAsH3AKCrfyvFvC9KQis+u2UYGCEPyZyeZ
> wCgoT5H
> >ON0ROiueELhb7mpW3PUWq+M=
> >=a3f3
> >-----END PGP SIGNATURE-----
> >.
> >

Try a search across the entire disk. And do a search across your Registry.

Keep us informed to help others.

--
And always try the MS KB first before posting.
The answer is probably already posted.
MS KB: http://support.microsoft.com/default.aspx?scid=fh;EN-US;KBHOWTO
----
Mark-Allen Perry
ALPHA Systems
Marly, Switzerland
mark-allen_AT_mvps_DOT_org

wrote in message news:091801c4a241$a8933490$a501280a@phx.gbl...
Thanks. This is a great tool. I have since restarted
the SMTP service and after monitoring the file
RTFREA~1.exe no longer is flashing up on the processess
under task manager. Neither the PE tool nor Task Manager
is showing the file since doing this. I still want to
determine what this file is though. Anyone have any
other ideas?

Thanks.
>-----Original Message-----
>Might want to try "Process Explorer" from
SysInternals.com, to see what and where this process
comes from.
>
>--
>And always try the MS KB first before posting.
>The answer is probably already posted.
>MS KB: http://support.microsoft.com/default.aspx?
scid=fh;EN-US;KBHOWTO
>----
>Mark-Allen Perry
>ALPHA Systems
>Marly, Switzerland
>mark-allen_AT_mvps_DOT_org
>
> wrote in message
news:0d4a01c4a183$dc5a7540$a301280a@phx.gbl...
> Thanks. I was thinking that also but nothing shows up
in
> the search. I've tried MS knowledge base, google,
> norton, mcafee and found nothing.
>
> >-----Original Message-----
> >-----BEGIN PGP SIGNED MESSAGE-----
> >Hash: SHA1
> >
> >PG wrote:
> >| I've seen the following program flash on the task
> manager
> >| and can't find any info on what it is or does?
Anyone
> >| seen this and have any ideas. The file is
RTFREA~1.exe
> >| and it flashes uder the processes screen every
couple
> of
> >| seconds and then goes away. This is happening on
W2K
> >| server with Exchange
> >
> >Sounds like the MSDOS name for something longer.
> >
> >You could try searching for files with rtfre* and see
if
> it finds
> >anything I suppose.
> >
> >
> >-----BEGIN PGP SIGNATURE-----
> >Version: GnuPG v1.2.5 (MingW32)
> >Comment: Using GnuPG with Thunderbird -
> http://enigmail.mozdev.org
> >
>
>iD8DBQFBUuvQqmlxlf41jHgRAsH3AKCrfyvFvC9KQis+u2UYGCEPyZyeZ
> wCgoT5H
> >ON0ROiueELhb7mpW3PUWq+M=
> >=a3f3
> >-----END PGP SIGNATURE-----
> >.
> >

Thanks.

I did a search from the command prompt instead of using
windows find and this is the closest match to the file.
The file it found was RTFreader.exe located under savfmse
which is Norton.

When I scanned the registry it found rtfrea*.exe and
rtfrea*1.exe under the Key Internet Explorer\Explorer
Bars\{C4E.......}\FilesNamedMRU The type is REG_SZ and
rtfrea*.exe are listed under data.

Not related but also under this directory of keys
has "you should not see
me.exe", "me.exe" , "shampagi.dll" and CDO.dll to name a
few.


>-----Original Message-----
>Try a search across the entire disk. And do a search
across your Registry.
>
>Keep us informed to help others.
>
>--
>And always try the MS KB first before posting.
>The answer is probably already posted.
>MS KB: http://support.microsoft.com/default.aspx?
scid=fh;EN-US;KBHOWTO
>----
>Mark-Allen Perry
>ALPHA Systems
>Marly, Switzerland
>mark-allen_AT_mvps_DOT_org
>
> wrote in message
news:091801c4a241$a8933490$a501280a@phx.gbl...
> Thanks. This is a great tool. I have since restarted
> the SMTP service and after monitoring the file
> RTFREA~1.exe no longer is flashing up on the
processess
> under task manager. Neither the PE tool nor Task
Manager
> is showing the file since doing this. I still want to
> determine what this file is though. Anyone have any
> other ideas?
>
> Thanks.
> >-----Original Message-----
> >Might want to try "Process Explorer" from
> SysInternals.com, to see what and where this process
> comes from.
> >
> >--
> >And always try the MS KB first before posting.
> >The answer is probably already posted.
> >MS KB: http://support.microsoft.com/default.aspx?
> scid=fh;EN-US;KBHOWTO
> >----
> >Mark-Allen Perry
> >ALPHA Systems
> >Marly, Switzerland
> >mark-allen_AT_mvps_DOT_org
> >
> > wrote in
message
> news:0d4a01c4a183$dc5a7540$a301280a@phx.gbl...
> > Thanks. I was thinking that also but nothing shows
up
> in
> > the search. I've tried MS knowledge base, google,
> > norton, mcafee and found nothing.
> >
> > >-----Original Message-----
> > >-----BEGIN PGP SIGNED MESSAGE-----
> > >Hash: SHA1
> > >
> > >PG wrote:
> > >| I've seen the following program flash on the
task
> > manager
> > >| and can't find any info on what it is or does?
> Anyone
> > >| seen this and have any ideas. The file is
> RTFREA~1.exe
> > >| and it flashes uder the processes screen every
> couple
> > of
> > >| seconds and then goes away. This is happening
on
> W2K
> > >| server with Exchange
> > >
> > >Sounds like the MSDOS name for something longer.
> > >
> > >You could try searching for files with rtfre* and
see
> if
> > it finds
> > >anything I suppose.
> > >
> > >
> > >-----BEGIN PGP SIGNATURE-----
> > >Version: GnuPG v1.2.5 (MingW32)
> > >Comment: Using GnuPG with Thunderbird -
> > http://enigmail.mozdev.org
> > >
> >
>
>iD8DBQFBUuvQqmlxlf41jHgRAsH3AKCrfyvFvC9KQis+u2UYGCEPyZyeZ
> > wCgoT5H
> > >ON0ROiueELhb7mpW3PUWq+M=
> > >=a3f3
> > >-----END PGP SIGNATURE-----
> > >.
> > >

FilesNamedMRU = most recently used (files names) - probably ok

Ahhhh...... now that's interesting.

Symantec AntiVirus/Filtering for Microsoft Exchange (SAVFMSE) 3.0

Running Exchange/Outlook? Looks like this guy pops up when it needs to do checking.

This issue looks ok to me. It's just protecting your emails and whatnot.

Does this help?

--
And always try the MS KB first before posting.
The answer is probably already posted.
MS KB: http://support.microsoft.com/default.aspx?scid=fh;EN-US;KBHOWTO
----
Mark-Allen Perry
ALPHA Systems
Marly, Switzerland
mark-allen_AT_mvps_DOT_org

wrote in message news:342001c4a278$180c6fe0$a601280a@phx.gbl...
Thanks.

I did a search from the command prompt instead of using
windows find and this is the closest match to the file.
The file it found was RTFreader.exe located under savfmse
which is Norton.

When I scanned the registry it found rtfrea*.exe and
rtfrea*1.exe under the Key Internet Explorer\Explorer
Bars\{C4E.......}\FilesNamedMRU The type is REG_SZ and
rtfrea*.exe are listed under data.

Not related but also under this directory of keys
has "you should not see
me.exe", "me.exe" , "shampagi.dll" and CDO.dll to name a
few.


>-----Original Message-----
>Try a search across the entire disk. And do a search
across your Registry.
>
>Keep us informed to help others.
>
>--
>And always try the MS KB first before posting.
>The answer is probably already posted.
>MS KB: http://support.microsoft.com/default.aspx?
scid=fh;EN-US;KBHOWTO
>----
>Mark-Allen Perry
>ALPHA Systems
>Marly, Switzerland
>mark-allen_AT_mvps_DOT_org
>
> wrote in message
news:091801c4a241$a8933490$a501280a@phx.gbl...
> Thanks. This is a great tool. I have since restarted
> the SMTP service and after monitoring the file
> RTFREA~1.exe no longer is flashing up on the
processess
> under task manager. Neither the PE tool nor Task
Manager
> is showing the file since doing this. I still want to
> determine what this file is though. Anyone have any
> other ideas?
>
> Thanks.
> >-----Original Message-----
> >Might want to try "Process Explorer" from
> SysInternals.com, to see what and where this process
> comes from.
> >
> >--
> >And always try the MS KB first before posting.
> >The answer is probably already posted.
> >MS KB: http://support.microsoft.com/default.aspx?
> scid=fh;EN-US;KBHOWTO
> >----
> >Mark-Allen Perry
> >ALPHA Systems
> >Marly, Switzerland
> >mark-allen_AT_mvps_DOT_org
> >
> > wrote in
message
> news:0d4a01c4a183$dc5a7540$a301280a@phx.gbl...
> > Thanks. I was thinking that also but nothing shows
up
> in
> > the search. I've tried MS knowledge base, google,
> > norton, mcafee and found nothing.
> >
> > >-----Original Message-----
> > >-----BEGIN PGP SIGNED MESSAGE-----
> > >Hash: SHA1
> > >
> > >PG wrote:
> > >| I've seen the following program flash on the
task
> > manager
> > >| and can't find any info on what it is or does?
> Anyone
> > >| seen this and have any ideas. The file is
> RTFREA~1.exe
> > >| and it flashes uder the processes screen every
> couple
> > of
> > >| seconds and then goes away. This is happening
on
> W2K
> > >| server with Exchange
> > >
> > >Sounds like the MSDOS name for something longer.
> > >
> > >You could try searching for files with rtfre* and
see
> if
> > it finds
> > >anything I suppose.
> > >
> > >
> > >-----BEGIN PGP SIGNATURE-----
> > >Version: GnuPG v1.2.5 (MingW32)
> > >Comment: Using GnuPG with Thunderbird -
> > http://enigmail.mozdev.org
> > >
> >
>
>iD8DBQFBUuvQqmlxlf41jHgRAsH3AKCrfyvFvC9KQis+u2UYGCEPyZyeZ
> > wCgoT5H
> > >ON0ROiueELhb7mpW3PUWq+M=
> > >=a3f3
> > >-----END PGP SIGNATURE-----
> > >.
> > >

Yes this does help. It does make me curious however that
I couldn't find anything on Symantecs website referencing
these files. You have been a big help, Thanks.


>-----Original Message-----
>FilesNamedMRU = most recently used (files names) -
probably ok
>
>Ahhhh...... now that's interesting.
>
>Symantec AntiVirus/Filtering for Microsoft Exchange
(SAVFMSE) 3.0
>
>Running Exchange/Outlook? Looks like this guy pops up
when it needs to do checking.
>
>This issue looks ok to me. It's just protecting your
emails and whatnot.
>
>Does this help?
>
>--
>And always try the MS KB first before posting.
>The answer is probably already posted.
>MS KB: http://support.microsoft.com/default.aspx?
scid=fh;EN-US;KBHOWTO
>----
>Mark-Allen Perry
>ALPHA Systems
>Marly, Switzerland
>mark-allen_AT_mvps_DOT_org
>
> wrote in message
news:342001c4a278$180c6fe0$a601280a@phx.gbl...
> Thanks.
>
> I did a search from the command prompt instead of
using
> windows find and this is the closest match to the
file.
> The file it found was RTFreader.exe located under
savfmse
> which is Norton.
>
> When I scanned the registry it found rtfrea*.exe and
> rtfrea*1.exe under the Key Internet Explorer\Explorer
> Bars\{C4E.......}\FilesNamedMRU The type is REG_SZ
and
> rtfrea*.exe are listed under data.
>
> Not related but also under this directory of keys
> has "you should not see
> me.exe", "me.exe" , "shampagi.dll" and CDO.dll to name
a
> few.
>
>
> >-----Original Message-----
> >Try a search across the entire disk. And do a search
> across your Registry.
> >
> >Keep us informed to help others.
> >
> >--
> >And always try the MS KB first before posting.
> >The answer is probably already posted.
> >MS KB: http://support.microsoft.com/default.aspx?
> scid=fh;EN-US;KBHOWTO
> >----
> >Mark-Allen Perry
> >ALPHA Systems
> >Marly, Switzerland
> >mark-allen_AT_mvps_DOT_org
> >
> > wrote in
message
> news:091801c4a241$a8933490$a501280a@phx.gbl...
> > Thanks. This is a great tool. I have since
restarted
> > the SMTP service and after monitoring the file
> > RTFREA~1.exe no longer is flashing up on the
> processess
> > under task manager. Neither the PE tool nor Task
> Manager
> > is showing the file since doing this. I still want
to
> > determine what this file is though. Anyone have
any
> > other ideas?
> >
> > Thanks.
> > >-----Original Message-----
> > >Might want to try "Process Explorer" from
> > SysInternals.com, to see what and where this
process
> > comes from.
> > >
> > >--
> > >And always try the MS KB first before posting.
> > >The answer is probably already posted.
> > >MS KB: http://support.microsoft.com/default.aspx?
> > scid=fh;EN-US;KBHOWTO
> > >----
> > >Mark-Allen Perry
> > >ALPHA Systems
> > >Marly, Switzerland
> > >mark-allen_AT_mvps_DOT_org
> > >
> > > wrote in
> message
> > news:0d4a01c4a183$dc5a7540$a301280a@phx.gbl...
> > > Thanks. I was thinking that also but nothing
shows
> up
> > in
> > > the search. I've tried MS knowledge base,
google,
> > > norton, mcafee and found nothing.
> > >
> > > >-----Original Message-----
> > > >-----BEGIN PGP SIGNED MESSAGE-----
> > > >Hash: SHA1
> > > >
> > > >PG wrote:
> > > >| I've seen the following program flash on the
> task
> > > manager
> > > >| and can't find any info on what it is or
does?
> > Anyone
> > > >| seen this and have any ideas. The file is
> > RTFREA~1.exe
> > > >| and it flashes uder the processes screen
every
> > couple
> > > of
> > > >| seconds and then goes away. This is
happening
> on
> > W2K
> > > >| server with Exchange
> > > >
> > > >Sounds like the MSDOS name for something longer.
> > > >
> > > >You could try searching for files with rtfre*
and
> see
> > if
> > > it finds
> > > >anything I suppose.
> > > >
> > > >
> > > >-----BEGIN PGP SIGNATURE-----
> > > >Version: GnuPG v1.2.5 (MingW32)
> > > >Comment: Using GnuPG with Thunderbird -
> > > http://enigmail.mozdev.org
> > > >
> > >
> >
>
>iD8DBQFBUuvQqmlxlf41jHgRAsH3AKCrfyvFvC9KQis+u2UYGCEPyZyeZ
> > > wCgoT5H
> > > >ON0ROiueELhb7mpW3PUWq+M=
> > > >=a3f3
> > > >-----END PGP SIGNATURE-----
> > > >.
> > > >