Robin said:
Incidentally, the latest Realtek driver according to Hardware Helper is
6.0.1.6649. The one I just downloaded from Realtek is 6.0.1.6662. Both
of these are about 50 mB.
The one on the Realtek site is 6.0.1.6554, and is over 100 mB, the
difference, presumably, being Dolby.
Can the files be opened with 7-ZIP ?
http://en.wikipedia.org/wiki/7-zip
That's how I take various drivers apart, compare them, and so on.
Not all drivers can be disassembled easily. Some are Installshield,
with encrypted CABs inside. Others, they use a "packer", like UPX,
at the top level, and then 7-ZIP won't open them at all.
So actually being able to guarantee disassembly is pretty difficult.
Too many techniques to obscure them.
On occasion, I use WINE in a Linux virtual machine, to crack
open an installer. With less danger to my running Windows OS.
So that's another forensic technique that works sometimes.
I use that for webcam drivers from Chinese sites, the ones
where you wonder whether they're infected or not.
For dodgy sites, you can also upload the file to virustotal.com
and scan it there. I believe I had one Chinese webcam driver,
that "smelled bad".
I'd like to help you, but I really don't understand how the
software knows Dolby stuff is to be installed or not. I can't really
simulate that here.
Paul