Home » Trojan » TR/Crypt.XPACK.Gen

TR/Crypt.XPACK.Gen

17 February 2009

TR/Crypt.XPACK.Gen is a generic detection for a commonly malicious parasitic type of file that belongs to a family of trojan which can infect computer by exploiting software vulnerabilities. TR/Crypt.XPACK.Gen can allow a remote attacker to gain full unauthorized access on infected computer and steal confidential information without users knowledge.

Aliases:
Trojan Crypt.XPACK.Gen

Risk Level: Low

File Size: Varies

Affected System: Windows

Related posts:

  1. Trojan Horse BackDoor.VB.ZT

    Trojan Horse BackDoor.VB.ZT is a trojan that can allow remote unauthorized access and grant the attacker to take full control of...

  2. Logger.Pcap.a

    Logger.Pcap.a is a trojan horse that may steal sensitive information such as typed user name and passwords on the infected computer...

  3. Backdoor.Haxdoor.K

    Overview: Backdoor.Haxdoor.K is a Trojan horse with back door capabilities that lowers security settings on the compromised computer. It also steals...

19 Comments »

  • 1 }
    jeff said:

    kindly help me to remove this virus on my pc thanks

    23 February 2009 at 4:51 am
  • 2 }
    arkey said:

    how can i remove this TR/Crypt.XPACK.Gen virus or spyware

    23 February 2009 at 6:16 am
  • 3 }
    Bin said:

    Please help…. i also got this virus in my pc. how can i remove this???

    25 February 2009 at 2:53 am
  • 4 }
    webmaster (author) said:

    1. Download Malwarebytes’ Anti-Malware (mbam-setup.exe) and save it on your Desktop.
    2. After downloading, double-click on mbam-setup.exe to install the application.
    3. Follow the prompts and install as “default” only
    4. Before the installation completes, check on the following prompts:
    – Update Malwarebytes’ Anti-Malware
    – Launch Malwarebytes’ Anti-Malware
    5. Click “Finish.” Program will run automatically and you will be prompt to update the program before doing a scan. Please update.
    6. Scan your computer thoroughly.
    7. When scanning is finished click on the “Show Results”
    8. Make sure that all detected threats are marked, click on Remove Selected.
    9. Restart your computer.

    Note: Some malware may prevent mbam-setup.exe from downloading and running. You can download and rename this program from a different computer before running it on infected system.

    25 February 2009 at 8:20 am
  • 5 }
    John said:

    The advice given above did not work for the variant I have. The Anti-Virus solutions that failed to find it include:

    1. Macafee
    2. Kaspersky
    3. Malbytes Anti-Malware (Found but false clean!)

    Avira antivir personal found and quarantined the infected files. I have no axe to grind with any of the above products. But after the original scan and clean I was lulled into a false sense of security. I don’t think this is the end of the story as the registry scan did not reveal how the virus is loaded. If I discover how the virus starts up I will post the info here. As a courtesy I will send copies of the infected files to the above companies.

    13 March 2009 at 11:32 pm
  • 6 }
    Billy said:

    update anyone? cant get rid of it….. mbam, avira, avast, none work???? HELP

    27 March 2009 at 6:00 am
  • 7 }
    nick said:

    im at work and unfortunately the work computer uses windows 2000 and the virus popped up soon after i downloaded an extension form from the irs website…now i cant access the internet to fix the problem and i cant even use my usb slots to upload a file from a flash drive…what do i do?????????

    18 April 2009 at 4:04 pm
  • 8 }
    Justin Mitchell said:

    I’ve had no luck (so far) removing this virus from a Win XP machine. I’ve run nod32, kaspersky, bitdefender, superantispyware, malwarebytes, avg, and avira.

    MLB and Avira detected it, but failed to remove it. In fact, any time I ran Avira, the computer would shutdown. Running under safe mode gave me better results, but the virus persisted, even though avira said it removed it.

    Another website suggested trendmicro housecall, which I will try next.

    30 April 2009 at 6:00 am
  • 9 }
    Sam said:

    i have Avira Free version i also have Deepfreeze so i always have a popup window telling me that this virus is on my comp. i keep on deleting but it doesn’t work. also i think maybe because of the deepfreeze. but im too scared to remove it because it might crash it while deepfreeze is disabeled. Help me pls O_O

    23 May 2009 at 5:21 am
  • 10 }
    Dustin said:

    Anyone got any solution for this virus? every time i boot my pc and scan my drives this virus is still there even though the previous scan that i did showed that it has been contained. Mushqila, this virus is so persistent.

    21 July 2009 at 4:30 am
  • 11 }
    Rob said:

    The reason most of you are having trouble removing it is because your running your virus scanners in Windows or a safe mode environment, your best bet would be to use a boot cd of sorts and run a virus scanner (avira) /malwarebytes. It will work 99.95% of the time.

    29 July 2009 at 6:56 pm
  • 12 }
    Eve – New for Technician Computer said:

    How to remove the virus :
    - TR/Crypt.XPACK.Gen
    -TR/Dropper.Gen
    -TR/PSW.43008.10
    -SPR/tcpip.sys.Patch

    17 August 2009 at 12:55 pm
  • 13 }
    Ravi said:

    Disconnected the Hard Disk.
    and mounted it on a clean enviroment
    Still the Same

    29 August 2009 at 9:41 am
  • 14 }
    Mel said:

    I have tried Avira, Malwarebytes and Spybot, all of which have not removed the virus. It is in my temp folder and every time I delete it, it pops up under a different file name. Please help. It’s starting to drive me insane

    19 October 2009 at 7:39 am
  • 15 }
    aleksi said:

    I have similar problems with trojan Crypt.XPACK.Gen
    I have tried Avira, Malwarebytes and Avast, all of which have not removed the virus. It is in my temp folder and every time I delete it, it pops up under a different file name. Please help.

    17 November 2009 at 7:09 am
  • 16 }
    me said:

    http://threatinfo.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ%5FSELEX%2EA&VSect=Sn

    do exactly as it says, good luck

    31 December 2009 at 6:36 pm
  • 17 }
    Abe said:

    Hi. I have the following:
    TR/Crypt.XPACK.Gen

    I’m not sure if it’s still in my system but i have the proof!! My laptop is so slow, everytime i open the laptop, Avira Gaurd is disabled, and sometimes my firewall turns of everytime i open the laptop.

    Please help me!!!! I’m not sure if it’s in my laptop but i’m very sure it’s infected!! thanks

    7 January 2010 at 3:52 am
  • 18 }
    CJ said:

    Down load (free) AntiVir Personal software…run the defaul settings. It will remove this virus…I’ve done my ProBono for today. :) Let me know the outcome.

    30 January 2010 at 1:45 am
  • 19 }
    s.b said:

    it also infect the file svchosts file. in the process list in Task Manager in some cases. remove tre proces and then run AV program. ceck again in task manager
    hope it works

    2 February 2010 at 9:07 am

Leave your response!

Add your comment below or subscribe to these comments via RSS.
Be nice. Keep it clean. Stay on topic. No spam.