Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I apologize in advance for not knowing much about the more technical aspects of computers, so I'm hoping someone will be able to help me, in language I can understand.
I just happened to be browsing through the folders on my C:\ drive, when I opened a folder called "BOOTDISK" -- and that's where I found a file called "VIRUS.EXE", along with another one that is a shortcut called "Virus". The shortcut is to a file called "virus.pif" that seems to reside in CPQS\QUICKSR\DISKS.
I am not sure even sure if the BOOTDISK folder is a normal Windows system folder, or how it got there if it's not.
The weird thing is I run Norton Antivirus, as well as HouseCall, regularly.
I am freaking out just a bit, and would be ever so much appreciate someone helping me with this.
Connie

That looks to be part of your Compaq utilities - see if you have any documentation
Science is built up with facts, as a house is with stones. But a collection of facts is not more a science than a heap of stones is a home

Oh really, it's likely not a virus, then? Hmmm, OK, I will look for something like that. I feel much better--thanks for your response.

I'm not *absolutely* postitive, but the name of the folder (CPQS) sure sounds like it's from Compaq - - and viruses are not typically so obviously named.
Should be some documentation in one or another of the folders - you can always submit the file here for analysis
Science is built up with facts, as a house is with stones. But a collection of facts is not more a science than a heap of stones is a home

Haven't found any "documentation", though I guess I'm not really sure what I'm looking for.
Thank you so much for the link, jboy. I will definitely do that scan.

Hmm, the results of the scan were inconclusive:
"MIGHT BE INFECTED/MALWARE (Sandbox emulation took a long time and/or runtime packers were found, this is suspicious. Normally programs aren't packed and don't force the sandbox into lengthy emulation. Do realize no scanner issued any warning, the file can very well be harmless. Caution is advised, however.)"
Packers detected:
EXEPACK, BAT2EXEC"As it states, none of the scanners found anything, though. Maybe I should add that when I look at the Properties for the file, I get:
Created: Tuesday, February 16, 1999 2:58:26 PM
Modified: Wednesday, November 04, 1998 5:48:36 PM
Accessed: Wednesday, February 08, 2006So it's not like it's anything new.

Yeah - that is inconclusive, and can also happen if the file is overly large - file creation dates aren't necessarily ironclad either, but that one may be accurate
A little more research shows there are a couple of trojans etc that do go by the name of 'virus.exe' (so much for sweeping generalizations) - but the location of the file sure sounds like some sort of Compaq utility.
If Norton and other scans haven't turned up anything, I would tend to think you're ok, and it's just an unfortunately named application - but it never hurts to be vigilant, maybe try another scan at Panda for peace of mind. If your machine came with any sort of help files for Compaq Diagnostics, possibly there's a mention there
Regardless - malware files do no harm by just sitting there, they have to be running
Science is built up with facts, as a house is with stones. But a collection of facts is not more a science than a heap of stones is a home

Virus.exe is an executable file that is responsible for launching parasites, loading main components of malicious programs and running a destructive payload. File is installed and used by worm W32.HLLW.Syney and trojan Pounds Trojan. Please try Pounds Trojan removal instructions.

You state that with quite a bit of (unwarranted) certainty
From Symantec
Trojan.Pounds
This Trojan horse copies itself into the C:\Windows\System folder and configures a registry key so that it runs when Window starts. When it is run, displays a message that a fatal error has occurred. It then displays a window with the following title:
Error - - - S#########ER
When attempting to identify malware, file name *and* location are just two considerations.I'm somewhat dubious of that 2-spyware site (and their software)
Science is built up with facts, as a house is with stones. But a collection of facts is not more a science than a heap of stones is a home

Yeah, I did find reference to a "virus.exe" Trojan on the Web, but that doesn't mean this is the same file necessarily, right? I don't seem to have any of the aforementioned symptoms, and have certainly never seen that window jboy mentions.
Panda? I'll look for that. And for help files for Compaq Diagnostics.
Thanks again, very much, for all the feedback.
Connie

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |