Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


MPREXE... virus?

Posted on 2005-03-09
Medium Priority
Last Modified: 2013-12-04
Anyone know anything about  this virus. I know that I picked it up by stupidly clicking on a popup disguised as a security patch for msie. It seemed to start automatically downloading a bunch of dll's and stuff from some porno site. Anyway even though I got rid of all the dll's and exe files from the hard drive and from the registry it just wouldnt go away. Windows would load but would show only my desktop background along with a message box stating that  mprexe caused a fault in kernell32.dll.
So I had to reformat my hard drive and reload windows98. Everything seemed fine and it was going okay until i turned the computer off and then back on about 3 hours later. Then it loads and up comes the mprexe message. But after turning it off and back on the message disappeared.
Now the only thing on there that was copied from the infected disk were the Favorites for msie which I had transferred to a floppy and then back to the new reload. Is it possible that the virus could be hiding in the Favorites
I did a scan with trend micro housecall and it showed no viruses or trojans.
I did read somewhere on the net perhaps it was here at experts exchange that someone had a problem with mprexe showing up from time to time but not really causing any harm. Perhaps it no longer has the dll's to help spawn itself but anyway I'd really like to know a lot more about how it functions.
Question by:librazone
LVL 58

Expert Comment

by:Pete Long
ID: 13494648
Hi librazone,
do you mean mpr.exe - this is a windows 95/98 file?


Accepted Solution

Mikho earned 160 total points
ID: 13495248
i did a little search about mpr.exe and found this message

Copy/Pasted from other page
The message means that password file has been corrupted.
Solution is to delete all .pwl files.
To do so, go to Start/Search
Use *.pwl as a search term.
When the files are found, delete them.
However, deleting pwl files will mean that you will have to re-enter all passwords you have been using.

end copy/paste.

Try that and see if the error still is showing.

Assisted Solution

FMComputers earned 120 total points
ID: 13495798
Interesting that your password files would be corrupted when the system was re-loaded from scratch.

There is a MS 9x process called MPREXE for using multiple network adapters.  Did you re-load any software (AOL, etc) after you re-started the machine?  I would disable all network adapters in Control Panel and see if that makes the error go away.

If so, re-load your network "stuff" to the system.  Sorry I can't be more specific on the re-load, but 98 was a long long time ago for me . . .

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

LVL 24

Assisted Solution

SunBow earned 120 total points
ID: 13498596
MPR is valid, in that it is part of managing yourself as a client.  But as everything else, it is subject to invasions and cloning attempts.  Format is of course a solution.

An IE hack can leave you vulnerable to anything managing its configuration and preferences. The format wiped your registry (better than any attempt to merely replace damaged files or other recovery options).  Home pages are hacked, and then there's the java, ActiveX, and plugin problems.  Best guess is they hijacked the homepage to run their dirty deeds.

Before loading any favorites, you can try advanced options under internet tools and uncheck any autoruns etc

Author Comment

ID: 13500849
well it seems to be working okay now.thanks for the input.
LVL 24

Expert Comment

ID: 13501237

Featured Post

Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
Article by: btan
The intent is not to repeat what many has know about Ransomware but more to join its dots of what is it, who are the victims, why it exists, when and how we respond on infection. Lastly, sum up in a glance to share such information with more to help…
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…
The Relationships Diagram is a good way to get an overall view of what a database is keeping track of. It is also where relationships are defined. A relationship specifies how two tables connect to each other. As you build tables in Microsoft Ac…
Suggested Courses

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question