BleepingComputer.com: System 32 Window

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

System 32 Window System 32 window opens on startup

#1 User is offline   Cajun 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 20-February 06

Posted 20 February 2006 - 01:35 PM

My mcafee virus scan found a PUP called PrcViewer which it could not delete. I quarantined it and from quarantine folder, I deleted it. Now upon startup, my System 32 window comes up.

Would appreciate any help in fixing.

#2 User is online   tg1911 

  • Lord Spam Magnet
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Site Admin
  • Posts: 18,574
  • Joined: 06-May 04
  • Gender:Male
  • Location:SW Louisiana

Posted 20 February 2006 - 02:24 PM

See if this helps:
http://support.microsoft.com/?kbid=170086
MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, GPU: eVGA GeForce 9800 GTX+, PSU: Antec TruePower Modular 750W, Soundcard: Asus Xonar D1, Case: CoolerMaster COSMOS 1000, Storage: Internal - 2 x Seagate 250GB SATA, 2 x WD 1TB SATA; External - Seagate 500GB USB, WD 640GB eSATA, 3 x WD 1TB eSATA

Become a BleepingComputer fan: Facebook

#3 User is offline   -David- 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 10,603
  • Joined: 28-October 05
  • Gender:Male
  • Location:London

Posted 20 February 2006 - 02:31 PM

Welcome to BC Cajun

If tg1911's instructions do not work, Click Here to open a Kelly's Korner vbs script . Download a small .vbs file to your desktop.

Once it's downloaded, run it according to the directions at the top of the Kelly's Korner page.

Let me know what happens :thumbsup:

David

#4 User is offline   Leurgy 

  • Voted most likely
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 3,744
  • Joined: 19-September 04
  • Gender:Male
  • Location:Collingwood, Ontario, Canada

Posted 20 February 2006 - 08:34 PM

I think this page is the one that David is referring to. :thumbsup:
**** We use our powers for good, not evil ****
When the only tool you own is a hammer, every problem begins to resemble a nail. Abraham Maslo

#5 User is offline   acklan 

  • Bleepin' cat's meow
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 8,524
  • Joined: 11-January 05
  • Location:Baton Rouge, La.

Posted 20 February 2006 - 09:20 PM

Welcome to BC Cajun.
Posted Image
"2007 & 2008 Windows Shell/User Award"

#6 User is offline   -David- 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 10,603
  • Joined: 28-October 05
  • Gender:Male
  • Location:London

Posted 21 February 2006 - 04:16 AM

Ooops..thanks Leurgy :thumbsup:
David

#7 User is offline   Cajun 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 20-February 06

Posted 21 February 2006 - 08:13 AM

Thank you, everyone, for the welcome and the suggestions. I am thrilled that Davids' vbs file did indeed fix my problem.

tg1911, thank you for your link. (Love your coat-of-arms). I have to admit that reading about editing the registry not only scares the $#!@ out of me, it makes my brain get fuzzy. Sometimes I know just enough to get myself in trouble.

Any ideas on where I may have picked up PrcViewer? Could it be the Dell Support stuff? Is it malicious or legit?

Anyway, thanks for the solution!

:thumbsup:

#8 User is offline   -David- 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 10,603
  • Joined: 28-October 05
  • Gender:Male
  • Location:London

Posted 21 February 2006 - 12:43 PM

Great, glad it worked for you :thumbsup:

'PrcView is a process viewer utility that displays detailed information about processes running under Windows. For each process it displays memory, threads and module usage. For each DLL it shows full path and version information. PrcView comes with a command line version that allows you to write scripts to check if a process is running, kill it, etc. '

I'm sure it's legit. Does this help?

David

#9 User is offline   Cajun 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 20-February 06

Posted 21 February 2006 - 01:02 PM

Thanks David. I just don't know how I picked it up and mcafee couldn't delete it. when I quarantined it and then deleted it, it created my System 32 window problem. if it was legitimately bundled with Dell Support or something else, I would have left it alone to begin with.

#10 User is offline   -David- 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 10,603
  • Joined: 28-October 05
  • Gender:Male
  • Location:London

Posted 21 February 2006 - 01:19 PM

Might you be thinking of prcview.exe? That's completely different to the prcview program....
David

#11 User is offline   Cajun 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 20-February 06

Posted 22 February 2006 - 09:50 AM

David,
McAfee identifies it as a PUP ... PrcViewer. It showed up in Documents and Settings yesterday and I quarantined it.
Today it is showing up as

C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP51\A0008038.exe

and

C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP51\A0008039.exe

I just wish I knew if is legitimately bundled with something. I have uninstalled the Dell Support software thinking it might have been with them. I rebooted, ran virus scan and the above showed up. Don't know if I should quarantine, try to delete or leave alone.

Note: I just noticed The two files in quarantine that PrcViewer is associated with are smitrem.exe and process.exe. I had downloaded smitRem exe. as a fix for removing winhound. It is still on my desktop.

I'm dizzy.

#12 User is offline   acklan 

  • Bleepin' cat's meow
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 8,524
  • Joined: 11-January 05
  • Location:Baton Rouge, La.

Posted 22 February 2006 - 10:40 AM

Here is information or the to .exe files you were wondering about.

Process.exe

smitrem.exe
Posted Image
"2007 & 2008 Windows Shell/User Award"

#13 User is offline   Leurgy 

  • Voted most likely
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 3,744
  • Joined: 19-September 04
  • Gender:Male
  • Location:Collingwood, Ontario, Canada

Posted 22 February 2006 - 12:15 PM

ackan is on the right track there however the process.exe that is bundled in smitrem is not a malicious file but rather part of the smitrem removal tool. It also gives false positives with Kapersky AV and A-Squared Trojan Remover, and perhaps other anti malware programs but those are the only two I'm aware of. There is also a pv.exe included in smitrem.

Quote

C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP51\A0008038.exe


This is part of your XP System Restore. You can remove both those entries by turning off and re-enabling System Restore. This will delete those restore points and create a new (hopefully) clean one. See Windows XP System Restore Guide
**** We use our powers for good, not evil ****
When the only tool you own is a hammer, every problem begins to resemble a nail. Abraham Maslo

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users