File named: DAMN_MPS.EXE Virus?

[ajskydiver]

I've found in my msconfig/startup tab, a reference that says "E:\DAMN_MPS.EXE" (no quotes of course)

I cannot find this file, NAV does not detect anything, but I've manually checked my registry and there is no trace of this file...except through msconfig...

Anyone heard of this? I'm stumped...any suggestions?

 

[okydoky]

If there is no association to other programs, kill it. In the registry goto HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run... Check everything under the Run key including services, etc... Find that sucker and delete it.... I forgot to mention... @ your own risk.... I've installed "Winders" over itself and reinstalled drivers as well. It always seems to allow double the commands in this key for start up. If you need to get something permanently out of start up, this is the key that "doodit"...

 

[ajskydiver]

okydoky: I checked there...and throughout my registry...that's what I mean when it shows up only when I use MSCONFIG, under the startup tab...otherwise, I can't find a trace of it anywhere else.

 

[okydoky]

That is the only place I know of to find it. Anybody else got any suggestions?????

 

[1KrazyFool]

Check your win.ini file in the %windows% folder. At the top there are two lines, called

run=
load=

See if they have that entry in them.

 

[Slikkster]

heheh...from my research, it looks like someone, without your knowledge, of course, installed a "crack" for the program CloneCD. The file being referenced is one of the files from the crack author, the "distribution" group "Damn". This makes sense because the drive being referenced is usually allocated to a CDROM. So, I'd uncheck the thing and make sure you ferret out the *&(&#$! who's installing pirate software on your machine without your knowledge.

You can see what I mean by going to the following website, and looking at the "NFO" file(s) (with notepad or an NFO viewer) and reading the ones referring to CloneCD.

http://www.damn.to/release_list.html

 

[ajskydiver]

Slikkster: After reading your post I had *almost* an epiphany...I had installed CloneCD and used it for archiving (of course) but only at 2X due to it being a trial version...when inquiring with my roommate (gotta love'em) he "remembered fixing" it for me -- now I know how he did it-- he tried to make me think it was his skills or something so that I would be impressed, which of course I was...but now I know...I'll check my .ini files asap.

Edit: Oh, my E drive is a partition (C=boot, D=Games, E=swapfile F/G CDROM/CDRW)...why would it reference to a hard drive partition of 250mb?