What is turbo.exe? Anyone else have this?

[nikemen]

I just found this, running the malicious software tool Not that the tool said it was a problem, but the tool HUNG at this item.

It is located in SWTOOLS\apps\utils.

I thought this directory was a thinkpad specific directory? I cannot find info on the web about what TURBO.EXE is?

I'm thinking get rid of it, zip it up and see what happens.

[RealBlackStuff]

Some T6x laptops have turbo-memory. Maybe that's a program for it?

[killer]

Nothing found on my T43 with MS search.

A search on google found all sorts of things that might suggest it is malware. Did you try this?

Anyway, if it is malware then remove it asap. If it is valid then report back.

[nikemen]

I found some google links, one said some porn dialer, one said download accelerator. I'm going to remove it, and see what happens.

[Marin85]

What model is your ThinkPad?

Since this files is located in SWTOOLS, it could be simply the executive package that includes Intel Turbo Memory software/driver. Even so, deleting it from that folder shouldn´t have any impact on your system.

[blue2]

Judging a file's authenticity via Google is NOT a good idea. Google results can be inaccurate as well as intentionally "poisoned".

The standard procedure is to submit the file to a meta scanner such as Jotti ( http://virusscan.jotti.org/ ), Virus Total ( http://www.virustotal.com/ ) or Virus Org ( http://scanner.virus.org/ ) that use multiple AV engines (KAV, NOD, Norton, McAfee, fProt, etc.) to evaluate if a file is ok. If they all come up clean, its reasonably safe to assume the file is authentic.

I'd also be surprised to find such a file in a Thinkpad folder. Malware isn't usually designed for individual manufacturers and so it would be much more likely to find it in a general OS location.

I remember emails in circulation saying to delete XYZ suspect file immediately. Of course, those that did, soon found out it was a windows file needed for the OS to boot, and thereby requiring them to re-install. So while I wouldn't click on it until you confirm it's safe, I also wouldn't be so quick to delete it.