Who is new user IUSR_NMPR?

[shan]

Hi,

I am the sole user on a standalone HP PC, which runs on Vista Home Premium.
I found a new user called IUSR_NMPR on my PC whom I did not put there and I
do not know. Is it a system set-up user or an intruder? Is it safe to delete
it?

Thanks a lot for your help!

 

[P. Di Stolfo]

Hello,

according to this post
http://www.bleepingcomputer.com/forums/topic104790.html
it's no intruder, but a system account.
I believe it's safe to remove it.

 

[shan]

Hi,
Thanks a lot for your prompt response.
I’m relieved to know that it’s not an intruder.
Just wondering though… how it popped up on my PC and if there’s a need for
it in the future.

Appreciate advice, please.

Best regards,
shan

 

[P. Di Stolfo]

Hello,

I'm sorry I can't really tell why it has popped up, but I think there's no
real need for the future as the application which has installed the user can
easily reinstall it if necessary.
It is possibly the Windows Media Network Sharing service that installed it,
so try deleting the user and see if anything peculiar happens.

Please post back if you have any issues.

 

[shan]

Hi,

Will do. Thanks so much for your help and have a great weekend.

Best regards,
shan

 

[P. Di Stolfo]

You're welcome. Have a nice weekend, too!

 

[Colin]

I have had this mystery account. I believe it is set up by Intel VIIV
Software to enable sharing of media files.
I have recently deleted the VIIV software as it provides absolutely no
benefit over functionality now built into Vista. Indeed Intel have now
mothballed support for it.

I deleted the account after I uninstalled VIIV.

 

[JesusSaves]

Vista Home Premium user:
IUSR_NMPR was created while using DVDFab/HD decrypter
Noticed that could not delete video files created by Fab – access was denied
I discovered 2 dangerous facts:
1. Under: System Properties, Advanced, Performance settings, Data Execution
Prevention, Turn on DEP for all programs & services except those I select -
DVDFab was listed as an exception
2. remote assistance was also allowed (was not my permission)