Dritek Launch Manager for Acer Aspire laptop - malware?

[theguestfromthewest]

I got an Acer Aspire V15 Nitro laptop. Unfortunately, there are no indicators for showing enganged/disengaged buttons such as Caps Lock, Scroll Lock, Num Lock etc. I googled to find a solution and ended up on the following website...

How can I get a Caps Lock indicator to show on my Aspire E1 571?

I downloaded the file from the link in the second post (from user Aztek) in the following line...

"This is the driver packaged I have:

'http://global-download.gateway.com/GDFiles/Application/LaunchManager/LaunchManager_Dritek_5.1.15_W7x64_A.zip?acerid=634725820578255695&Step1=NOTEBOOK&Step2=NV%20SERIES&Step3=NV76R&OS=ALL&LC=en&BC=GATEWAY&SC=PA_6G']LaunchManager_Dritek_5.1.15_W7x86W7x64_A

"

After unzipping and scanning the executable with first an updated and pre-installed version of Malwarebytes as well as with ditto Avast Antivirus which both reported no malicious content, I gave it a try and installed. Nothing happened herafter. Only that Windows went into a reboot (common windows reboot screen appeared and reboot initiated). After restart of Windows, no installed program could be found in the program list in controlpanel (neither in Ccleaner). I did a complete scan of the system with Malwarebytes (the whole works) and again, nothing malicious was found. Then went to Jotti's to analyse the file there, but none of the scanners reported anything malicious. Had a quick look in the process list but didn't see any unusual processor activity there.

My question is now, can anyone confirm that this file is harmless? I can't get really get any peace of mind before this file is 100% deemed safe. File can be obtained and downloaded from added link in the post for analysis.

Would it be a good idea to do a HijackThis scan?

Looking forward to any reply, big or small.

Thanks in advance.

 

[theguestfromthewest]

Did some research and found this...

RfBtnSvc64.exe Windows process - What is it?

...which indicates, the file is good.

Ran a complete Malwarebytes scan without finding any malware or issues. Afterwards checked task manager and found the following process which was also in the startup list of Ccleaner.

Disabled said process in Ccleaner, then checked files in the location. None came up as malicious in scans. However, the process would still run and not do anything at all. Removed the entire folder called 'RadioController' and did a reboot. After this action, the process has disappeared from the process list and the folder is permanently deleted. There is just one process item I am still wondering a bit about. It's called 'Execution Service (32-bit) --> Cron Service' in the task manager and has a green puzzle piece-style icon. I tried to google this one and came up with some information which indicated, that this should be a program for scheduling tasks in Unix/Windows. Is this process good and what about the other deleted process? Is anybody able to confirm the validity and harmlessness of the same?

Looking forward to any reply.

 

[Ink]

Acer owns Gateway Inc.

Other Acer drivers also originate that the *.gateway.com domain
https://www.herdprotect.com/domain-global-download.gateway.com.aspx

If you are unsure, why not download the appropriate drivers/software yourself from Acer Driver Support site.

 

[theguestfromthewest]

Hi Spawn,

thanks for your reply.

Sounds good with the link apparently being okay and owned by Acer.

To your other question, I cannot find this type of management software for my model on the Acer website under drivers, programs and the like. An alternative would be to use third-party software. But after this experience, I think I'll live with the lack of indicators for the aforementioned buttons.

Thanks again for your help and time.

 

[Gandalf_The_Grey]

If you want an alternative solution I use the free version of TrayStatus on my Acer laptop: TrayStatus

 

[theguestfromthewest]

If you want an alternative solution I use the free version of TrayStatus on my Acer laptop: TrayStatus

View attachment 194025

Hi Gandalf_The_grey,

and thanks for the tip. Sounds interesting. ;-)

I'll look into this option and see if it can meet my needs.

Thanks again for your help and time.