Mrxpriumpstc service can't be found

Has anyone come across this service? It doesn't turn up on Google or on a
search of my computer. Doing a Find in Regedit doesn't turn up anything
either.

Anyone know what this is?

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 12/26/2005
Time: 10:44:10 PM
User: N/A
Computer: IBM-A0DC4189602
Description:
The Mrxpriumpstc service failed to start due to the following error:
The system cannot find the file specified.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Steven
Mon Dec 26 23:36:10 CST 2005

It sounds like a bogus service that may be remnant of malware that was
removed from your computer. You could use msconfig [for XP] or something
like Autoruns from SysInternals to disable it from trying to startup with
the computer or manually try to clean the registry for that service in HKLM
if you are familiar with editing the registry. --- Steve

http://www.sysinternals.com/Utilities/Autoruns.html

"Michael S. Zablocky" <mszablocky@verizon.net> wrote in message
news:eGaPjxpCGHA.2552@TK2MSFTNGP10.phx.gbl...
> Has anyone come across this service? It doesn't turn up on Google or on a
> search of my computer. Doing a Find in Regedit doesn't turn up anything
> either.
>
> Anyone know what this is?
>
> Event Type: Error
> Event Source: Service Control Manager
> Event Category: None
> Event ID: 7000
> Date: 12/26/2005
> Time: 10:44:10 PM
> User: N/A
> Computer: IBM-A0DC4189602
> Description:
> The Mrxpriumpstc service failed to start due to the following error:
> The system cannot find the file specified.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
>

Michael
Tue Dec 27 06:00:51 CST 2005

Actually I've tried just about every method available to locate this thing.
The ONLY place it shows up is in the Event Viewer. I even tried doing a
manual search of the registry, but didn't turn up anything either. No trace
of it in HijackThis or any of my AntiSpyware software.

Any other suggestions? Thanks, all.

Malke
Tue Dec 27 07:53:39 CST 2005

Michael S. Zablocky wrote:

> Actually I've tried just about every method available to locate this
> thing. The ONLY place it shows up is in the Event Viewer. I even tried
> doing a manual search of the registry, but didn't turn up anything
> either. No trace of it in HijackThis or any of my AntiSpyware
> software.
>
> Any other suggestions? Thanks, all.

You didn't say what antispyware tools you have used. I would use a
combination of HijackThis (including HJT's advanced tools like the
Startup List), Systernals' ProcessExplorer, and Killbox. Finding and
removing the malware will be tricky. Since I don't know your skill
level, I'm going to recommend you run HJT and post your log at one of
the following specialty forums (not here, please):

http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Merijn
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42 -
another tutorial
http://aumha.net/viewforum.php?f=30
http://castlecops.com/forum67.html
http://spywarewarrior.com/viewforum.php?f=5 - Spyware Warrior HijackThis
forum
http://www.wilderssecurity.com/
http://forums.tomcoyote.org/

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Michael
Tue Dec 27 07:59:23 CST 2005

I ran every major spyware app and the other apps you mentioned, not Killbox
though. Thanks, I'll post my HJT log and see what comes back.

"Malke" <notreally@invalid.invalid> wrote in message
news:eYBxxzuCGHA.3976@TK2MSFTNGP10.phx.gbl...
> Michael S. Zablocky wrote:
>
>> Actually I've tried just about every method available to locate this
>> thing. The ONLY place it shows up is in the Event Viewer. I even tried
>> doing a manual search of the registry, but didn't turn up anything
>> either. No trace of it in HijackThis or any of my AntiSpyware
>> software.
>>
>> Any other suggestions? Thanks, all.
>
> You didn't say what antispyware tools you have used. I would use a
> combination of HijackThis (including HJT's advanced tools like the
> Startup List), Systernals' ProcessExplorer, and Killbox. Finding and
> removing the malware will be tricky. Since I don't know your skill
> level, I'm going to recommend you run HJT and post your log at one of
> the following specialty forums (not here, please):
>
> http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Merijn
> http://www.bleepingcomputer.com/forums/index.php?showtutorial=42 -
> another tutorial
> http://aumha.net/viewforum.php?f=30
> http://castlecops.com/forum67.html
> http://spywarewarrior.com/viewforum.php?f=5 - Spyware Warrior HijackThis
> forum
> http://www.wilderssecurity.com/
> http://forums.tomcoyote.org/
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User

Steven
Tue Dec 27 12:39:40 CST 2005

Did you try using Autoruns [latest version] looking under everything?? I
would be really surprised if you can not track it down and disable it
ere. --- Steve


"Michael S. Zablocky" <mszablocky@verizon.net> wrote in message
news:%235oD00tCGHA.3784@TK2MSFTNGP15.phx.gbl...
> Actually I've tried just about every method available to locate this
> thing. The ONLY place it shows up is in the Event Viewer. I even tried
> doing a manual search of the registry, but didn't turn up anything either.
> No trace of it in HijackThis or any of my AntiSpyware software.
>
> Any other suggestions? Thanks, all.
>

Michael
Tue Dec 27 13:42:19 CST 2005

It seems the Mrxpriumpstc key resided in the
Hkey_Local_Machine\system\currentcontrolset\services location. I wasn't able
to delete the key without first changing permissions. After that, I removed
it without noticing any changes in my system or major apps.

Still, the funny thing is that nothing I used to scan my computer turned
this up. I only found it by manually searching the registry. I still would
like to know what installed this in the first place.

Thanks to everybody for your help.

PA
Tue Dec 27 15:01:39 CST 2005

What problem? If you don't reply to your original thread (without changing
the Subject), no one will ever know.

Michael S. Zablocky wrote:
> It seems the Mrxpriumpstc key resided in the
> Hkey_Local_Machine\system\currentcontrolset\services location. I wasn't
> able to delete the key without first changing permissions. After that, I
> removed it without noticing any changes in my system or major apps.
>
> Still, the funny thing is that nothing I used to scan my computer turned
> this up. I only found it by manually searching the registry. I still would
> like to know what installed this in the first place.
>
> Thanks to everybody for your help.

Michael
Tue Dec 27 15:07:47 CST 2005

Apologies. I'll remenmber to reply to the original thread in the future.

"PA Bear" <PABearMVP@gmail.com> wrote in message
news:OuhH0iyCGHA.628@TK2MSFTNGP14.phx.gbl...
> What problem? If you don't reply to your original thread (without changing
> the Subject), no one will ever know.
>
> Michael S. Zablocky wrote:
>> It seems the Mrxpriumpstc key resided in the
>> Hkey_Local_Machine\system\currentcontrolset\services location. I wasn't
>> able to delete the key without first changing permissions. After that, I
>> removed it without noticing any changes in my system or major apps.
>>
>> Still, the funny thing is that nothing I used to scan my computer turned
>> this up. I only found it by manually searching the registry. I still
>> would
>> like to know what installed this in the first place.
>>
>> Thanks to everybody for your help.
>