Parent process

Child process

Related files

Warning 3 antivirus scanners has detected malware.

rtlservice.exe is malware that runs as a service under the name RealtekCU with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including REALTEK Wireless LAN Driver published by Realtek Semiconductor Corp., REALTEK Wireless LAN Driver from Realtek Semiconductor Corp. and REALTEK Wireless LAN Driver by Realtek Semiconductor Corp.. This particular version is usually found on Windows 7 Ultimate (6.1.7601.65536).

Based on 40+ industry antivirus scanners, 3 of them detected the following malware.

CPU
Total CPU:	0.00005864%	0.028634%
Kernel CPU:	0.00003464%	0.013761%
User CPU:	0.00002401%	0.014873%
Kernel CPU time:	203 ms/min	100,923,805ms/min
CPU cycles:	146,824/sec	17,470,203/sec
Memory
Private memory:	2.14 MB	21.59 MB
Private (maximum):	4.5 MB
Private (minimum):	1.37 MB
Non-paged memory:	2.14 MB	21.59 MB
Virtual memory:	37.34 MB	140.96 MB
Virtual memory (peak):	46.45 MB	169.69 MB
Working set:	1.38 MB	18.61 MB
Working set (peak):	4.73 MB	37.95 MB
Page faults:	31,491/min	2,039/min
I/O
I/O read transfer:	7 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	2 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	4	12
Handles:	122	600

wow64.dll (Win32 Emulation on NT64 by Microsoft)
Total CPU:	0.00006954%	0.272967%
Kernel CPU:	0.00003745%	0.107585%
User CPU:	0.00003210%	0.165382%
CPU cycles:	143,617/sec	5,741,424/sec
Memory:	252 KB	1.16 MB
RtlService.exe (main module)
Total CPU:	0.00004280%
Kernel CPU:	0.00003210%
User CPU:	0.00001070%
CPU cycles:	2,603/sec
Memory:	40 KB