Author Topic: Win32: FraudTool-CV...can't find when search internet  (Read 3992 times)

0 Members and 1 Guest are viewing this topic.

gruelly

  • Guest
Win32: FraudTool-CV...can't find when search internet
« on: July 28, 2008, 07:48:03 AM »
What should I do about this.

Networking 4 user computers in one house. My computer started behaving oddly 2 weeks ago.
 Then I was using Windows Live One Care and the green bar that moves across the screen was not showing any green. Today my pc became slow and would not shut down so I have been checking up on my PC doing boot scans 3 times with Avast and online Trend Micro and Windows Live One Care free online complete computer scan and now my pc seems to be clean. Then I thought I had better check on the other pcs in the house.

Found this in a Vista computer ......

Win32:FraudTool-CV which I can not find any information about.

Earlier I did a boot scan with Avast in that pc and it found:

File C:\Users\User\Documents\Downloads\Programs\daemon 408-139x64.exe\$INSTDIR\SetupDTSB.exe\DaemonTools|WhenUSave_Installer.exe is infected by....

File C: Windows\Installer\142ebfd.msi\Icon.Icon.exe  Adware-gen
 
and

File C: Windows\Installer\17580.ms\Icon.Icon.exe Adware-gen

What to do?

EDITED: all found infected files are being reported as "not repaired". I know this guy uses game key cracks but I am worried about what is going to happen to the networked pcs.
« Last Edit: July 28, 2008, 08:32:34 AM by gruelly »

Jtaylor83

  • Guest
Re: Win32: FraudTool-CV...can't find when search internet
« Reply #1 on: July 28, 2008, 08:47:41 AM »
I need to see the warning log and you need to get rid of LiveOneCare. Having two AVs is a no no.

I suggest the following to get rid of the infections:

Ad-Aware Free

MalwareByte's Anti-Malware

SuperAntiSpyware Free

Spybot - Search & Destroy

Spyware Terminator (exclude the crawler toolbar, add-on, and the ClamAV module)
« Last Edit: July 28, 2008, 08:57:09 AM by Jtaylor83 »

gruelly

  • Guest
Re: Win32: FraudTool-CV...can't find when search internet
« Reply #2 on: July 28, 2008, 08:57:28 AM »
Hi, I use the free online One Care scan sometimes.
I have a few of the tools you mentioned and will run all of the tools.

This is reported in the current Avast boot scan in my pc.

File C:\WINDOWS\SoftwareDistribution\Download\d9xxxxx...xxxxxx1a4\BITB7.tmp\MAINSP3.msp ERROR 42127 {CAB archive is corrupted}

...and in the first Avast scan this was found:

 File D:\FolderDocuments\Webcam\Shareware\wp402e.exe\%MAINDIR%\sx53inst.exe  is infected by Win32: Trojan-gen{other}

...this was removed by that scan.

Jtaylor83

  • Guest
Re: Win32: FraudTool-CV...can't find when search internet
« Reply #3 on: July 28, 2008, 09:02:18 AM »
Download HiJackThis and post a log here.

gruelly

  • Guest
Re: Win32: FraudTool-CV...can't find when search internet
« Reply #4 on: July 28, 2008, 09:04:39 AM »
Hi, thank you,
 I will have to do this tomorrow now.