Not what you are looking for? Ask the experts!
dtRT.exe Runs High CPU on Startup
I have NIS Version 126.96.36.199 installed on a Win7 32-bit PC. Often on startup dtRT.exe runs with almost 100% CPU for about 1-2 minutes and disappears from Task Manager Processes. It just ran after startup when I connected to WIFI Internet at the Library. The Task Manager Description of dtRT.exe will flash "Symantec Shared Component" off and on about every 2 seconds while dtRT.exe is running. When I search the c: drive for dtRT.exe it can't be found. The following discussion thread indicates "It may be the “Sality.AT” virus".
See excerpt below from above link.
It may be the “Sality.AT” virus.
This is the only reference I can find to it (aside from some 3D rendering stuff that is not likely this):
That suggests it is the Win32/Sality malware.
Sality is the classification for a family of malicious software (malware), which infects files on Microsoft Windows systems. Sality was first discovered in 2003 and has advanced over the years to become a dynamic, enduring and full-featured form of malicious code. Systems infected with Sality may communicate over a peer-to-peer (P2P) network to form a botnet for the purpose of relaying spam, proxying of communications, exfiltrating sensitive data, compromising web servers and/or coordinating dist...
Then farther down the thread...
If I’m reading things correctly, the program changes its name as it executes. So dtRT.exe doesn’t actually exist. Instead, the malicious program creates the dtRT.exe, runs that, then deletes it when it has completed its task.
The come and go behavior described directly above and at the totalhash link matches what I see. What about the come and go "Symantec Shared Component" description in Task Manager while dtRT.exe is running? Any suggestions?