How to completely remove Win32/Expiro.EB!MTB, Win32/Expiro.DD!MTB etc. viruses from windows 10?

Question

I have a 10 year old HP laptop which has a Pentium B960 @2.20GHz processor. Recently I gave my computer to a local shop for fixing it. They installed and changed some hardware and installed some cracked softwares(May be this is the reason of the virus infection). After getting my laptop back, when I opened it for the first time it was all OK until I turned on the Windows Defender Antivirus(It was turned off). Just after turning on, it gave me a notification of a virus infection in my computer. I thought it was a regular virus and it can be removed easily by windows defender. So I clicked on "Start actions". Later on, some more notifications came notifying me of the same virus infection. Gradually the number of notifications increased. It was continuously notifying me of the same virus infection. So I tried to see the files which were infected. I saw that many files were affected by the same virus. It was increasing and gradually more and more notifications were coming. Then I went online to see some solutions. I literally tried every single thing I could for the last three days. Still I couldn't terminate the virus. I also did a virus scan with MSERT in safe mode. That showed me 245 infections of which it could partially fix some, but not all. For that reason, this started to replicate its code and infect more apps. I uninstalled every third-party apps except the driver softwares. I downloaded Malwarebytes for scanning but it got infected itself. When I tried to remove that app, it showed me "Access is denied". Then I went to safe mode and permanently deleted MalwareBytes folder. All the files in the Downloads section were getting automatically infected by it. After downloading anything, it could be opened for once. Whenever I tried to open it for the second time, it would not open and said "This app couldn't be opened because it is infected by virus." or something like this. Is there any permanent solution that will terminate the virus without data loss or should I reset my computer? Please help as soon as possible!

Answer 1

Hello,

Firstly, disconnect your network connection to prevent any potential remote access to your PC.

Attempt to resolve the issue with an antivirus scan. If the antivirus does not effectively address the problem, consider resetting your PC.

Best Regards,
Karlie Weng

---

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

I tried out so many things to solve it. Lastly, re-installing windows was the only way out. Follow these steps:

1. Re-install windows using a Flash drive/usb/disk
2. While installing, choose to remove all the apps and settings. You should NOT keep the apps and settings or this may not work (btw, you may try this method out. I didn't try keeping the apps and settings)
3. Go through all the installation process & it's done. No more virus.

It solved my problem but it may not work for others. I hope you won't lose any of your data except the previously installed apps. You can re-install & use those again. You'll also lose the previously installed driver softwares. You can re-install those too.