Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

PrcViewer


  • Please log in to reply
8 replies to this topic

#1 Shandley

Shandley

  • Members
  • 166 posts
  • OFFLINE
  •  
  • Local time:02:55 AM

Posted 09 March 2009 - 01:31 PM

Greetings to all.

I was directed here by a member of a McAfee support forum. I will post what I posted there and please let me know what further information you need...

------

My McAfee virus scan (the latest and greatest version) came up with a PUP that is called PrcViewer. I've read a million could-be posts on a thousand maybe forums. They all say something different.

The path shown to this PUP is C:\System Volume Information\_restore\{EA10BEA4-2D2C-494D-9EF3-5EC8A5B65143}\RP669\A0086001.exe

I am running Windows XP Professional SP3

Please help!


------

Thank you,
Shandley

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,870 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:05:55 AM

Posted 09 March 2009 - 02:12 PM

Turn off System Restore...run a thorough scan...turn SR back on.

What you posted points to a malware item in your SR vault.

http://www.theeldergeek.com/system_volume_...ion_folder1.htm

Louis

#3 Shandley

Shandley
  • Topic Starter

  • Members
  • 166 posts
  • OFFLINE
  •  
  • Local time:02:55 AM

Posted 10 March 2009 - 09:10 AM

I shut off system restore, did a scan. The result, no PUP found! I left system restore off. Then the automatic scan came on at 3am as it does everyday and the same PUP was found. System restore is STILL OFF! I am confused. It shows the same file in the same path.

#4 hamluis

hamluis

    Moderator


  • Moderator
  • 55,870 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:05:55 AM

Posted 10 March 2009 - 12:07 PM

I think I'd question the integrity of the program you are scanning with...which is not a good thing.

You're sure that SR is off for all partitions?

Louis

#5 Animal

Animal

    Bleepin' Animinion


  • Site Admin
  • 35,305 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Where You Least Expect Me To Be
  • Local time:03:55 AM

Posted 10 March 2009 - 03:47 PM

There is also this discussion that includes McAfee and the PUP known as PrcViewer: http://www.bleepingcomputer.com/forums/t/44790/system-32-window/

The Internet is so big, so powerful and pointless that for some people it is a complete substitute for life.
Andrew Brown (1938-1994)


A learning experience is one of those things that say, "You know that thing you just did? Don't do that." Douglas Adams (1952-2001)


"Imagination is more important than knowledge. Knowledge is limited. Imagination circles the world." Albert Einstein (1879-1955)


Follow BleepingComputer on: Facebook | Twitter | Google+

#6 hamluis

hamluis

    Moderator


  • Moderator
  • 55,870 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:05:55 AM

Posted 10 March 2009 - 04:53 PM

Thanks for shedding much light, Animal :thumbsup:.

Louis

#7 Shandley

Shandley
  • Topic Starter

  • Members
  • 166 posts
  • OFFLINE
  •  
  • Local time:02:55 AM

Posted 11 March 2009 - 10:46 AM

I think I'd question the integrity of the program you are scanning with...which is not a good thing.

You're sure that SR is off for all partitions?


The integrity of the program I am using seems to be intact. I have scanned the hard drive with a different machine with the same program and get the same issue. Odd, no?

System Restore is OFF for all drives, all partitions.

#8 Shandley

Shandley
  • Topic Starter

  • Members
  • 166 posts
  • OFFLINE
  •  
  • Local time:02:55 AM

Posted 11 March 2009 - 10:49 AM

There is also this discussion that includes McAfee and the PUP known as PrcViewer: http://www.bleepingcomputer.com/forums/t/44790/system-32-window/


I've read that one prior to posting but I tried the scripts with no luck and tried the shutting off system restore with no luck. I can't win! lol.

#9 Shandley

Shandley
  • Topic Starter

  • Members
  • 166 posts
  • OFFLINE
  •  
  • Local time:02:55 AM

Posted 21 April 2009 - 09:14 AM

I hate to be a bugger here but this issue still persists.

Any ideas?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users