PcHelpWare_viewer.exe is not starting

[bart1]

Hello, i have strange problem on my computer. When i doubleclick PcHelpWare_viewer.exe nothing happens. I noticed that, process creates:

c:\temp_phw and cache folders and after this it closes without any message.

My user has administrator rights. Everything is working fine when i start PcHelpWare_viewer.exe from another user on the same computer.


There is output when i run PcHelpWare_viewer.exe under StraceNT:
.......
.......
.......
[T1020] LoadLibraryA(b96244, 10c0460, 4fdd0000, 1, ...) [T1020] CharUpperBuffA(34aa8, ff, 34c10, 35274, ...) [T1020] LCMapStringW(400, 200, 3411c, ff, ...) = ff
= ff
[T1020] GetSystemDirectoryA(349a4, 104, 34c10, 35274, ...) = 13
[T1020] GetSystemDirectoryA(349a4, 104, 34c10, 35274, ...) = 13
[T1020] GetSystemDirectoryA(349a4, 104, 34c10, 35274, ...) = 13
[T1020] GetSystemDirectoryA(349a4, 104, 34c10, 35274, ...) = 13
[T1020] GetSystemDirectoryA(349a4, 104, 34c10, 35274, ...) = 13
[T1020] GetSystemDirectoryA(349a4, 104, 34c10, 35274, ...) = 13
[T1020] LoadLibraryA(b96244, 34c10, 35274, 351ec, ...) = 0
[T1020] GetLastError(34c10, 35274, 351ec, 35208, ...) = 7e
[T1020] VirtualProtect(b67080, 5, 40, 3498c, ...) = 1
[T1020] VirtualProtect(7c801d7b, 5, 40, 3497c, ...) = 1
[T1020] GetCurrentProcess(0, 0, 0, 40, ...) = ffffffff
[T1020] FlushInstructionCache(ffffffff, 0, 0, 0, ...) = 1
[T1020] GetModuleHandleA(b9ecac, b9ecbc, 7e, 0, ...) = 0
[T1020] GetProcAddress(0, b9ecbc, 7e, 0, ...) = 0
[T1020] GetModuleHandleA(ba10a0, 10c046e, b67947, 7e, ...) = 4fdd0000
[T1020] GetModuleHandleA(ba10a0, 10c046e, b67947, 7e, ...) = 4fdd0000
[T1020] GetModuleHandleA(34878, 10c0460, 4fdd0000, 1, ...) = 0
[T1020] GetModuleHandleA(34878, 10c0460, 4fdd0000, 1, ...) = 0
[T1020] GetModuleHandleA(34878, 10c0460, 4fdd0000, 1, ...) = 0
[T1020] GetModuleHandleA(34878, 10c0460, 4fdd0000, 1, ...) = 0
[T1020] GetModuleHandleA(34878, 10c0460, 4fdd0000, 1, ...) = 0
[T1020] GetModuleHandleA(34878, 10c0460, 4fdd0000, 1, ...) = 0
[T1020] GetModuleHandleA(34878, 10c0460, 4fdd0000, 1, ...) = 0
[T1020] GetModuleHandleA(34878, 10c0460, 4fdd0000, 1, ...) = 0
[T1020] LoadLibraryA(b96244, 10c0460, 4fdd0000, 1, ...) [T1020] CharUpperBuffA(340f0, ff, 34258, 348bc, ...)
Exception = c00000fd, Address = a96eae (first-chance!)
[T1020] VirtualQuery(41cc88, 32a74, 1c, 41cc88, ...) = 1c
[T1020] InterlockedExchange(77c61a08, 1, 41cc88, 0, ...) = 0
[T1020] InterlockedExchange(77c61a08, 0, 41cc88, 0, ...) = 1
[T1020] GetLastError(0, 0, 77c32dbc, 0, ...) = 7e
[T1020] TlsGetValue(3, 0, 0, 77c32dbc, ...) = 3f1ea0
[T1020] SetLastError(7e, 0, 0, 77c32dbc, ...) = 7ffdf000
[T1020] UnhandledExceptionFilter(32ab0, 0, 0, 0, ...) = 0
Exception = c00000fd, Address = a96eae (second-chance!)
Target process has been terminated. Exit Code = -1073741571.