Expert: Brian Benosky - 2/10/2010

Question
Hi,

I have these worms/virus(TR/CRYPT.XPACK.GEN, DR/DELPHI.GEN DROPPER, WORM/lRCBOT.41984.8, WORM/VANBOT.boa) in my pc. I am using Avira anti-virus software. How can i remove these virus permanently as these virus keep poping up in my PC, especially when i start-up my PC and some flash or external drive connect to my PC.

Please guide me and let me know the solution to solve this.

Thank you.

Answer
Hi Julia

Please download Malwarebytes' Anti-Malware to your desktop from here:
http://www.besttechie.net/tools/mbam-setup.exe
Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to
      o Update Malwarebytes' Anti-Malware
      o and Launch Malwarebytes' Anti-Malware
* then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.  Please save it to your desktop.  Reboot your computer.

After rebooting, please download TrendMicro HijackThis! from the following link:
http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
* Save HJTInstall.exe to your desktop.
* Doubleclick on the HJTInstall.exe icon on your desktop.
* By default it will install to C:\Program Files\Trend Micro\HijackThis.
* Click on Install.
* It will create a HijackThis icon on the desktop.
* Once installed, it will launch Hijackthis.
* Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
* Click on "Edit > Select All" then click on "Edit > Copy" and Paste the entire contents of the log in a follow-up to me, along with the Malwarebytes' Anti-Malware log.


Brian