prcview.exe

  • Thread starter Thread starter Ablang
  • Start date Start date
A

Ablang

This is an undesirable program.

This file has been identified as a program that is undesirable to have
running on your computer. This consists of programs that are
misleading, harmful, or undesirable.

If the description states that it is a piece of malware, you should
immediately run an antivirus and antispyware program. If that does not
help, feel free to ask us for assistance in the forums.

Name: Task Manager
Filename: prcview.exe
Command: Unknown at this time.
Description: Added by the W32/Agobot-RT. When started this
infection connects to an IRC server where it waits for remote
commands. It can log key strokes, list or terminate services and
processes, harvest email addresses, flood a given IP address, locate
product keys or execute arbitrary commands.
File Location: %System%
Startup Type: This startup entry is started automatically from a
Run, RunOnce, RunServices, or RunServicesOnce entry in the registry.
HijackThis Category: O4 Entry
Note: %System% is a variable that refers to the Windows System
folder. By default this is C:\Windows\System for Windows 95/98/ME,
C:\Winnt\System32 for Windows NT/2000, or C:\Windows\System32 for
Windows XP.
Removal Instructions: How to remove a Trojan, Virus, Worm, or other
Malware

http://www.bleepingcomputer.com/startups/prcview.exe-8814.html

===
"Work like you don't need the money, Love like you've never been hurt, Dance like nobody's watching..."
-- Richard Leigh
_________________________________________
Usenet Zone Free Binaries Usenet Server
More than 140,000 groups
Unlimited download
http://www.usenetzone.com to open account
 
Ablang said:
This is an undesirable program.
Click to expand...

You forgot an other one : kernel32.dll

I would recommend the you remove it asap.

;:-)
 
Ablang said:
This is an undesirable program.

This file has been identified as a program that is undesirable to have
running on your computer. This consists of programs that are
misleading, harmful, or undesirable.

If the description states that it is a piece of malware, you should
immediately run an antivirus and antispyware program. If that does not
help, feel free to ask us for assistance in the forums.

Name: Task Manager
Filename: prcview.exe
Command: Unknown at this time.
Description: Added by the W32/Agobot-RT. When started this
infection connects to an IRC server where it waits for remote
commands. It can log key strokes, list or terminate services and
processes, harvest email addresses, flood a given IP address, locate
product keys or execute arbitrary commands.
File Location: %System%
Startup Type: This startup entry is started automatically from a
Run, RunOnce, RunServices, or RunServicesOnce entry in the registry.
HijackThis Category: O4 Entry
Note: %System% is a variable that refers to the Windows System
folder. By default this is C:\Windows\System for Windows 95/98/ME,
C:\Winnt\System32 for Windows NT/2000, or C:\Windows\System32 for
Windows XP.
Removal Instructions: How to remove a Trojan, Virus, Worm, or other
Malware

http://www.bleepingcomputer.com/startups/prcview.exe-8814.html
Click to expand...
Funny, but the other day I did an on line scan and it found the packed
version of prcviewer. Actually the file was called l3jmc.exe or I3jmc.exe.
McAfee said it was "infected" with PRCviewer. I managed to unpack it into
several files (including a batch file) and took a look. I think I
downloaded it sometime as a "removal tool" of some spyware on a friend's
computer. I never got around to using it but it is a sobering thought that
one must be careful in looking for removal tools that they come from
reputable sites. I guess I came very close to inadvertently infecting my
friend's computer...
 
Back
Top