TR/Crypt.XPACK.Gen

Hi Sumit, Le Boule

Thank you for your help.

I noted that the antivirus items were dated. I intend to try them nonetheless.

I was sparing the blushes of the main AV programme, not least as they could be right. But they are known to you and the general public. My concern is that their certainty is out of step with everyone else. Also, my backup quarantined what it identified as malware and so it should no longer be active and possibly not showing up.

My computer was having problems and I am deeply suspicious. I have looked at the malware reports on various sites and the symptoms are very similar. There are a number of the malwares (in the mid-teens). I will try the virus total, but it would seem I would need to upload each infection independently, which I think I can get from the quarantine file (I have just found).

I am seething about this. 

It is difficult if there is not means of finding who is doing this. I was once told that malware can be sourced by identifying how it got onto the machine - but this was expensive. Obviously, if it was downloaded from xyz, then xyz is the hacker or else the next step in the search to find the hacker.

Thank you for your help.

Regards

You have received very good advice from Sumit and simply running the malware scans recommended in the Malwaretips guide should not cause problems for your computer.

But - the malware detection you are seeing is from 2012 and one would expect that your primary AV program would prevent or  at least detect the malware in question.

You might possibly have encountered a false positive detection.  What program detected the malware?

Recommend you submit a copy of the suspected malware file to Virus Total for analysis: https://www.virustotal.com/#/home/upload

Regards…

http://blog.emsisoft.com/2015/01/27/top-10-ways-pups-sneak-onto-your-computer-and-how-to-avoid-them/

A malware is not a part of Windows. This is a serious infection. Run the tools specified in this guide:

https://malwaretips.com/blogs/remove-trcrypt-xp...

Disclaimer:

This is a non-Microsoft website which would provide accurate and safe information. Watch out for ads on the site which are frequently classified as a PUP (Potentially Unwanted Products). There is no need to buy paid products to fix your computers as they do more harm than good sometimes.

Sorry, you cannot find when this got to your computer. Usually, Viruses come from a file downloaded from an Internet or email attachment.

Running the tools specified in the guide are recommended to remove the malware fully.

Hi Sumit

Thank you for your speedy reply. I have two antivirus measures, one of which is only a backup. The backup has quarantined the malware. The main antivirus (a household name) is adamant that this is a part of Microsoft and will hear no different. Is there any document from Microsoft that will prove the matter?

I will look at the site you have highlighted. I have seen advice about needing to clean the registry given a danger of further downloads of other malware, and I am not sure what the registry even is!

I have been targeted and this is likely to happen again, especially as the main antivirus measure is more than happy for this to download without let or hindrance. Is it possible to find out how this got onto my computer and when?

Thanks for your help.

Regards