Results 1 to 5 of 5

Thread: Cannot delete Trojan/FraudPack.cmn

  1. #1
    Join Date
    Feb 2010
    Posts
    129

    Cannot delete Trojan/FraudPack.cmn

    I am using Windows XP operating system with Avira antivirus and my browser is Internet Explorer 8. Actually, I am facing a problem that I cannot delete Trojan/FraudPack.cmn with the help of the above mentioned antivirus. Many of my friends had suggested that it is a very good antivirus, but this particular threat cannot be deleted using this antivirus. Please help on what should be done in this situation.

  2. #2
    Join Date
    Apr 2008
    Posts
    3,424

    Manual deletion method for Trojan/FraudPack.cmn

    The manual deletion method for Trojan/FraudPack.cmn are as given below:
    Get rid of the following files from your system:
    • msxml71.dll
    • ~tmpc.exe
    • ~tmpad.exe
    • 42w2bbrv.exe
    • frmwrk32.exe
    • iehelper.dll
    • 1000[1].exe
    • 18552814.exe
    • 17170004.exe
    • f.exe
    • av2[1].exe
    • TckBX673.exe
    • av2009.exe
    • NetFilter.exe
    • shkbubrhkk.dll
    • msxmlm.dll
    • b.exe
    • msh.exe
    • shell32.dll
    • svchast.exe
    • iehelpmod.dll
    • lizkavd.exe
    • 2E1.tmp.exe
    • a.exe
    • video207.cfg.exe
    • 5247.exe
    • win32extension.dll
    • ~33.dll
    • settdebugx.exe
    • wscsvc32.exe
    • fbabj220320.exe
    • cmkisftav.exe
    • cbsd.exe
    • laensftav.exe
    • MSASCui.exe
    • rjvjlsvw.exe

    Kill the processes that are given below from the task manager:
    • ~tmpc.exe
    • ~tmpad.exe
    • 42w2bbrv.exe
    • frmwrk32.exe
    • 1000[1].exe
    • 18552814.exe
    • 17170004.exe
    • f.exe
    • av2[1].exe
    • TckBX673.exe
    • av2009.exe
    • NetFilter.exe
    • b.exe
    • msh.exe
    • svchast.exe
    • lizkavd.exe
    • 2E1.tmp.exe
    • a.exe
    • video207.cfg.exe
    • 5247.exe
    • settdebugx.exe
    • wscsvc32.exe
    • fbabj220320.exe
    • cmkisftav.exe
    • cbsd.exe
    • laensftav.exe
    • MSASCui.exe
    • rjvjlsvw.exe

    Now, eradicate the following dlls:
    • msxml71.dll
    • iehelper.dll
    • shkbubrhkk.dll
    • msxmlm.dll
    • shell32.dll
    • iehelpmod.dll
    • win32extension.dll
    • ~33.dll

    Finally, the following registry entries are to be removed:
    • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{500BCA15-57A7-4eaf-8143-8C619470B13D}
    • {BB28A003-32B3-F829-C4BC-F13F7CDC1FFD}
    • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ABD42510-9B22-41cd-9DCD-8182A2D07C63}
    • {ABD42510-9B22-41cd-9DCD-8182A2D07C63}
    • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ABC42510-9B22-41c1-9DCD-8182A2D07C63}
    • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ABD45510-9B22-41cd-9ACD-8182A2DA7C63}
    • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBD4551A-9B23-41cd-9BCD-818AA2DA7B63}
    • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 18552814
    • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 17170004
    • HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 32439686185494356466812044125310
    • RUNNING PROGRAM\NetFilter.exe
    • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
    • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{500BCA15-57A7-4eaf-8143-8C619470B13D}
    • RUNNING PROGRAM\explorer.exe
    • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{A77D3539-581D-450C-9E44-A84C415A6172}
    • HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Monopod
    • HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ NordBull
    • RUNNING PROGRAM\b.exe
    • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AntiPol
    • RUNNING PROGRAM\lizkavd.exe
    • HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Somefox
    • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 21109
    • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{9ED3EB90-FB3D-430C-B54F-8A2D5F03AE3B}
    • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{60242C4F-F730-44B0-8440-F59C489C0219}
    • RUNNING PROGRAM\MSASCui.exe
    • RUNNING PROGRAM\cbsd.exe
    • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ vshnnwvc
    • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{F9724685-E158-42E4-AF50-F613AA2D8BCF}
    • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ objsvkml
    • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{B1D3576A-CA42-4D09-83C1-15D563C19D71}
    • HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ settdebugx.exe
    • RUNNING PROGRAM\wscsvc32.exe
    • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ realtecs

  3. #3
    Join Date
    Jan 2006
    Posts
    3,792

    Avira is not a recommended antivirus

    I am not quite sure, but I do not think that Avira is not a recommended antivirus. I suggest you to remove this current antivirus and install AVG. This antivirus will help you to remove all kinds of infections including trojans, worms and virus too. The problem that you cannot delete Trojan/FraudPack.cmn can also be solved because from the name itself you can see that this is trojan and AVG helps to get rid of the same.

  4. #4
    Join Date
    Apr 2008
    Posts
    3,339

    The activities in the system has to be monitored

    You cannot delete Trojan/FraudPack.cmn because the files of this infection seems to be genuine from outside and they actually work internally to destroy the system. So, the activities in the system has to be monitored and this can only be done with the help of a security program called as an anti-spyware. As all the applications and programs will be monitored, any malicious activity caused by any of them will be removed from the computer.

  5. #5
    Join Date
    May 2008
    Posts
    2,945

    The boot scan will help

    The boot scan will help to delete Trojan/FraudPack.cmn and this scan cannot be performed using any antivirus, as this is a limited feature available with some of the antivirus. According to me, the latest version of the Quick Heal antivirus is the best one for this situation. This is because it has a firewall too and it can also repair the files that are corrupted by the infections.

Similar Threads

  1. Solution to get rid of Trojan.Win32.FraudPack.qhx
    By Marcya in forum Networking & Security
    Replies: 5
    Last Post: 13-03-2010, 04:59 AM
  2. Technique to avoid Trojan/FraudPack.cop
    By Liliana in forum Networking & Security
    Replies: 5
    Last Post: 12-03-2010, 04:39 AM
  3. Solution to delete Trojan/W32.FraudPack.580381
    By Alejandro80 in forum Networking & Security
    Replies: 5
    Last Post: 10-03-2010, 12:08 AM
  4. Cannot remove Win-Trojan/Fraudpack.596122
    By Fernandoa in forum Networking & Security
    Replies: 6
    Last Post: 09-03-2010, 08:25 PM
  5. Help to delete Trojan.Win32.FraudPack.qhu
    By Avikshit Sinha in forum Networking & Security
    Replies: 5
    Last Post: 03-03-2010, 12:10 AM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,711,638,863.51586 seconds with 17 queries