Strange XP Service unable to locate

Howdy,
I`m working on one of my XP boxes and noticed this:

MFE_RR: \??\C:\DOCUME~1\Owner\LOCALS~1\Temp\mfe_rr.sys (manual start)

Searching revealed nothing on this service but Google referenced indirectly to some sort of infection. Also there are services disabled dmboot,dmio,dmload where historicaly I can not recall this being true.

What is this mfe_rr.sys service?

System runs fine nothing remarkable it is the post I have read that contain the above line that I am uncomfortable with.

Thank You

Bat Masterson

 

The rather lengthy post I found on the ComboFix Forum says you've got rootkit zero access. So, head over to the Malware Forum as instructed by plodr.

 

Just to ease the OP's mind -
mfe_rr.sys is the 32 bit rootkit remover driver from McAfee Rootkit Remover. The file is signed and the certificate verifies, meaning it is totally legitimate.
The driver is extracted to your user temp directory, then deleted once it has loaded.
McAfee Rootkit Remover available at http://www.mcafee.com/au/downloads/free-tools/rootkitremover.aspx
VT report for mfe_rr.sys (0/47): https://www.virustotal.com/en/file/...7ade014d4b4c99b660fe2a4b/analysis/1374334167/