Win32:Kreper-C

[jdjohn]

HElP!! whoever put this virus out deserves the death penalty.
Every time I run a scan it is detected and deleted...but when I re-start the virus is back!! Can anyone tell me how to get rid of this #@&*%^*ing virus.
Thanks,
JD

[DavidR]

Please Help us to Help you In order to help fully we need more information....
    - What OS are you using? is it up to date?
    - avast! version and VPS file (virus database) number, e.g. 0436-4 (see about avast!)
    - What was the filename, where was it found
      example (C:\windows\system32\infected-filename.xxx)?
    - What actions have you taken to try and resolve the problem?
Also see this thread for further information and advice User's FAQ.

There is also something else on your system that is reactivating the file, check out these other links Advice & Tools for virus/trojan/malware Removal & Prevention and Eddy's HiJackThis Info and Analysis page, HiJackThis log file analyzer and follow the directions there and get back to us if you need more help....

[jdjohn]

My operating system is XP-Home and I believe it is current. My VPS version is 0448-0. The virus has infested multiple files a couple of them are -
c:\windows\system32\w8c6s4xcm66.dll
c:\windows\system32\75626k1uujx.dll
and on and on and on. The only actions I have taken is running my antivirus, it finds and deletes the virus but as soon as I re-boot it comes back. Thanks for your help.
JD

[DavidR]

Try scheduling a boot time scan, hopefully this will catch the virus before it gets into memory. The two files you list don't look like genuine so move to chest and check and see if google has any info on the filenames.

There are likelty to be other things trying to keep the virus alive so you should download an run the hijackthis program and analyse the results. To help with all this visit Eddy's HiJackThis Info and Analysis page, HiJackThis log file analyzer and follow the directions there and get back to us if you need more help....