Please How do i go about this Virus (Win32/Expiro.EB!MTB, Win64/Expiro.DD!MTB)

Hi. I'm David, and I'm happy to help you.

Have you already clicked on each item, chosen the action to be taken, and at the bottom of the list, clicked on the "Start actions" button?

This is the procedure that must be done whenever a threat is detected.

If the threat continues to be detected after doing this procedure, I suggest doing the following:

Perform a full scan using Microsoft Safety Scanner. Download from the link below.

https://docs.microsoft.com/en-us/windows/securi...

Also, perform a full scan using Malwarebytes as a second opinion.

Download through this link: https://malwarebytes.com/

IMPORTANT: When installing, a 14-day trial will be activated. I suggest disabling this trial to avoid conflict with your current antivirus. Access the Malwarebytes settings (gear icon at the top of the window), tab "Account" and click "Disable".

After scanning, you can uninstall it.

If both tools do not report threats and the threat notification keeps showing, do the following:

1. Open File Explorer, paste the address below into the address bar, and press Enter:

C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service\

2. Inside this folder, delete the folder "DetectionHistory";
3. Then restart your computer.

Then, see if the notification is no longer present, and run a scan now using Defender, just in case.

Feel free to ask back any questions.

________________________________________________________

Standard Disclaimer: There is a link to a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

thanks for your support Mr. David i appreciate

I exhausted all the option you list above i was able to stop the threat and the notification form coming

but some of my programs stop work e.g

1. All the MS Office
2. Adobe Programs etc

but i feel like they are not gone completely because i can still see their traces on my PC

when i try uninstalling them manually i get the error in the attached screenshots

and under the system security the Memory Integrity aspect refuses to turn ON the error showing is not compatible i want to know if it should be ON or OFF and what the implications are

The error displayed in your screenshot seems to be related to a problem with the Windows Installer.

See if one of the procedures below helps resolve the issue.

Start the Windows Installer service:

1. Press "Ctrl + Shift + Esc" to open Task Manager;
2. Select the "Services" tab;
3. Look for "msiserver" service, right-click and select "Start".

Make sure the service status changes to "Running" and try to uninstall Adobe.

If it persists, re-register Windows Installer.

1. Open Start and type cmd, right-click on "Command Prompt", and select "Run as administrator".
2. Run the following commands at the Command Prompt one at a time:

%windir%\system32\msiexec.exe /unregister

%windir%\system32\msiexec.exe /regserver

%windir%\syswow64\msiexec.exe /unregister

%windir%\syswow64\msiexec.exe /regserver

3. Close the Command Prompt and see if the problem is resolved.

If it persists, use the system file checker to repair possible corrupted or missing system files.

1. Open Start and type cmd, right-click on "Command Prompt", and select "Run as administrator".
2. Run the following commands at the Command Prompt one at a time:

dism.exe /online /cleanup-image /scanhealth

dism.exe /online /cleanup-image /restorehealth

dism.exe /online /cleanup-image /startcomponentcleanup

sfc /scannow

3. Restart the PC and see if the problem is resolved.

Hi. I'm David, and I'm happy to help you.

Have you already clicked on each item, chosen the action to be taken, and at the bottom of the list, clicked on the "Start actions" button?
This is the procedure that must be done whenever a threat is detected.

If the threat continues to be detected after doing this procedure, I suggest doing the following:

Perform a full scan using Microsoft Safety Scanner. Download from the link below.
https://docs.microsoft.com/en-us/windows/securi...

Also, perform a full scan using Malwarebytes as a second opinion.
Download through this link: https://malwarebytes.com/
IMPORTANT: When installing, a 14-day trial will be activated. I suggest disabling this trial to avoid conflict with your current antivirus. Access the Malwarebytes settings (gear icon at the top of the window), tab "Account" and click "Disable".

After scanning, you can uninstall it.

If both tools do not report threats and the threat notification keeps showing, do the following:

1. Open File Explorer, paste the address below into the address bar, and press Enter:

C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service\

2. Inside this folder, delete the folder "DetectionHistory";
3. Then restart your computer.

Then, see if the notification is no longer present, and run a scan now using Defender, just in case.

Feel free to ask back any questions.
________________________________________________________
Standard Disclaimer: There is a link to a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

this problem is really not what you pretend to know because there is no solution it is microsoft alone that can give a solution because all computers that install windows from may 2023 have this problem from the first update on windows update All Windows Update updates from May 2023 onwards are infected and contain Win32/Expiro.EB!MTB, Win64/Expiro.DD!MTB. If you want to see for yourself, reinstall your PC and update it, you'll see.

The error displayed in your screenshot seems to be related to a problem with the Windows Installer.

See if one of the procedures below helps resolve the issue.

Start the Windows Installer service:

1. Press "Ctrl + Shift + Esc" to open Task Manager;
2. Select the "Services" tab;
3. Look for "msiserver" service, right-click and select "Start".
   Make sure the service status changes to "Running" and try to uninstall Adobe.

If it persists, re-register Windows Installer.

1. Open Start and type cmd, right-click on "Command Prompt", and select "Run as administrator".
2. Run the following commands at the Command Prompt one at a time:

%windir%\system32\msiexec.exe /unregister
%windir%\system32\msiexec.exe /regserver
%windir%\syswow64\msiexec.exe /unregister
%windir%\syswow64\msiexec.exe /regserver

3. Close the Command Prompt and see if the problem is resolved.

If it persists, use the system file checker to repair possible corrupted or missing system files.

1. Open Start and type cmd, right-click on "Command Prompt", and select "Run as administrator".
2. Run the following commands at the Command Prompt one at a time:

dism.exe /online /cleanup-image /scanhealth
dism.exe /online /cleanup-image /restorehealth
dism.exe /online /cleanup-image /startcomponentcleanup
sfc /scannow

3. Restart the PC and see if the problem is resolved.

this problem is really not what you pretend to know because there is no solution it is microsoft alone that can give a solution because all computers that install windows from may 2023 have this problem from the first update on windows update All Windows Update updates from May 2023 onwards are infected and contain Win32/Expiro.EB!MTB, Win64/Expiro.DD!MTB. If you want to see for yourself, reinstall your PC and update it, you'll see.