Trojan.FraudPack

Trojan.FraudPack is yet another form of malicious malware. Once Trojan.FraudPack is executed and embedded within a system, it performs the following activities: Trojan.FraudPack will download the fraud tool "Antispyware PRO XP" and install it on user's computer. Trojan.FraudPack will then display false reports of fictitious threats on the computer whilst performing a system scan. Trojan.FraudPack infiltrates a system as a file dropped by other malware. One should bear in mind that Trojan.FraudPack is extremely dangerous for any system; therefore it should be deleted as soon as it has been detected on a system.
Download Trojan.FraudPack scanner
  • Quick & tested solution for Trojan.FraudPack threat removal.
  • Save to your desktop & launch now!
Click on screenshot to zoom
Danger level 8
Type: Trojan
Common infection symptoms:
  • Connects to the internet without permision
  • Shows commercial adverts
  • Strange toolbar installed without Your permission
  • Slow internet connection
  • System crashes
  • Annoying pop-up's
  • Slow Computer

How to manually remove Trojan.FraudPack

Files associated with Trojan.FraudPack infection:

msxml71.dll
~tmpc.exe
~tmpad.exe
42w2bbrv.exe
frmwrk32.exe
iehelper.dll
1000[1].exe
18552814.exe
17170004.exe
f.exe
av2[1].exe
TckBX673.exe
av2009.exe
NetFilter.exe
shkbubrhkk.dll
msxmlm.dll
b.exe
msh.exe
shell32.dll
svchast.exe
iehelpmod.dll
lizkavd.exe
2E1.tmp.exe
a.exe
video207.cfg.exe
5247.exe
win32extension.dll
~33.dll
settdebugx.exe
wscsvc32.exe
fbabj220320.exe
cmkisftav.exe
cbsd.exe
laensftav.exe
MSASCui.exe
rjvjlsvw.exe

Trojan.FraudPack DLL's to remove:

msxml71.dll
iehelper.dll
shkbubrhkk.dll
msxmlm.dll
shell32.dll
iehelpmod.dll
win32extension.dll
~33.dll

Trojan.FraudPack processes to kill:

~tmpc.exe
~tmpad.exe
42w2bbrv.exe
frmwrk32.exe
1000[1].exe
18552814.exe
17170004.exe
f.exe
av2[1].exe
TckBX673.exe
av2009.exe
NetFilter.exe
b.exe
msh.exe
svchast.exe
lizkavd.exe
2E1.tmp.exe
a.exe
video207.cfg.exe
5247.exe
settdebugx.exe
wscsvc32.exe
fbabj220320.exe
cmkisftav.exe
cbsd.exe
laensftav.exe
MSASCui.exe
rjvjlsvw.exe

Remove Trojan.FraudPack registry entries:

Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{500BCA15-57A7-4eaf-8143-8C619470B13D}
{BB28A003-32B3-F829-C4BC-F13F7CDC1FFD}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ABD42510-9B22-41cd-9DCD-8182A2D07C63}
{ABD42510-9B22-41cd-9DCD-8182A2D07C63}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ABC42510-9B22-41c1-9DCD-8182A2D07C63}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ABD45510-9B22-41cd-9ACD-8182A2DA7C63}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBD4551A-9B23-41cd-9BCD-818AA2DA7B63}
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 18552814
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 17170004
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 32439686185494356466812044125310
RUNNING PROGRAM\NetFilter.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{500BCA15-57A7-4eaf-8143-8C619470B13D}
RUNNING PROGRAM\explorer.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{A77D3539-581D-450C-9E44-A84C415A6172}
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Monopod
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ NordBull
RUNNING PROGRAM\b.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AntiPol
RUNNING PROGRAM\lizkavd.exe
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Somefox
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 21109
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{9ED3EB90-FB3D-430C-B54F-8A2D5F03AE3B}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{60242C4F-F730-44B0-8440-F59C489C0219}
RUNNING PROGRAM\MSASCui.exe
RUNNING PROGRAM\cbsd.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ vshnnwvc
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{F9724685-E158-42E4-AF50-F613AA2D8BCF}
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ objsvkml
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{B1D3576A-CA42-4D09-83C1-15D563C19D71}
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ settdebugx.exe
RUNNING PROGRAM\wscsvc32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ realtecs
Disclaimer

Comments

  1. K Sep 16, 2009

    Directions would be nice... especially for us computer illiterates!

  2. Jalee Mar 9, 2010

    Yehh, I agree..

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots. (see: www.captcha.net)