View Full Version : Fixed: Fraud Virus Doctor
I had this come up process id 1116 found in c:\hp\kbd\ indentifed fraud.virus doctor I allowed file removal . I found out that kbd.exe runs side buttons for hp ps/2 keyboard which now do not work. I reinstalled software for key board and when spybot reflaged I then allowed kbd to run. Still unable to get side keys to show in key board properties. Running vista home premium 32, spybot 1.6 latest up date was april 1
Thank you for reporting this issue.
This appears to be a false positive related to the Teatimer.
Please follow the first post of this thread (http://forums.spybot.info/showthread.php?t=47196)
I had this come up process id 1116 found in c:\hp\kbd\ indentifed fraud.virus doctor I allowed file removal . I found out that kbd.exe runs side buttons for hp ps/2 keyboard which now do not work. I reinstalled software for key board and when spybot reflaged I then allowed kbd to run. Still unable to get side keys to show in key board properties. Running vista home premium 32, spybot 1.6 latest up date was april 1
01/04/2009 6:56:13 PM Encountered and terminated Fraud.VirusDoctor in C:\hp\KBD\KbdStub.exe!
01/04/2009 10:11:10 PM Allowed (based on user decision) value "KBD" (new data: "") deleted in System Startup global entry!
01/04/2009 10:11:18 PM Allowed (based on user decision) value "wextract_cleanup0" (new data: "rundll32.exe C:\Windows\system32\advpack.dll,DelNodeRunDLL32 "C:\Users\Calvin\AppData\Local\Temp\IXP000.TMP\"") added in System Startup global entry!
01/04/2009 10:11:19 PM Allowed (based on user decision) value "wextract_cleanup0" (new data: "") deleted in System Startup global entry!
01/04/2009 10:11:27 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 10:11:29 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 10:11:31 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 10:11:32 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 10:11:34 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 10:11:36 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 10:11:37 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 10:11:39 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 10:11:41 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 10:11:42 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 10:11:44 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 10:11:46 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 10:15:46 PM Encountered and terminated Fraud.VirusDoctor in C:\hp\KBD\KbdStub.exe!
01/04/2009 11:13:40 PM Allowed (based on user decision) value "KBD" (new data: "") deleted in System Startup global entry!
01/04/2009 11:13:49 PM Allowed (based on user decision) value "wextract_cleanup0" (new data: "rundll32.exe C:\Windows\system32\advpack.dll,DelNodeRunDLL32 "C:\Users\Calvin\AppData\Local\Temp\IXP000.TMP\"") added in System Startup global entry!
01/04/2009 11:13:50 PM Allowed (based on user decision) value "wextract_cleanup0" (new data: "") deleted in System Startup global entry!
01/04/2009 11:13:58 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:14:00 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:14:03 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:14:05 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:14:07 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:14:08 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:14:10 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:14:11 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:14:13 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:14:15 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:14:16 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:14:18 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:18:39 PM Encountered and terminated Fraud.VirusDoctor in C:\hp\KBD\KbdStub.exe!
01/04/2009 11:28:43 PM Allowed (based on user decision) value "KBD" (new data: "") deleted in System Startup global entry!
01/04/2009 11:56:41 PM Allowed (based on user decision) value "wextract_cleanup0" (new data: "rundll32.exe C:\Windows\system32\advpack.dll,DelNodeRunDLL32 "C:\Users\Calvin\AppData\Local\Temp\IXP000.TMP\"") added in System Startup global entry!
01/04/2009 11:56:42 PM Allowed (based on user decision) value "wextract_cleanup0" (new data: "") deleted in System Startup global entry!
01/04/2009 11:56:48 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:56:50 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:56:55 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:56:57 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:56:59 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:57:00 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:57:02 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:57:03 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
01/04/2009 11:57:06 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 12:00:56 AM Encountered and terminated Fraud.VirusDoctor in C:\hp\KBD\KbdStub.exe!
02/04/2009 12:30:08 AM Allowed (based on user decision) value "KBD" (new data: "") deleted in System Startup global entry!
02/04/2009 12:30:15 AM Allowed (based on user decision) value "wextract_cleanup0" (new data: "rundll32.exe C:\Windows\system32\advpack.dll,DelNodeRunDLL32 "C:\Users\Calvin\AppData\Local\Temp\IXP000.TMP\"") added in System Startup global entry!
02/04/2009 12:30:17 AM Allowed (based on user decision) value "wextract_cleanup0" (new data: "") deleted in System Startup global entry!
02/04/2009 12:30:24 AM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 12:30:27 AM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 12:30:30 AM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 12:30:34 AM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 12:30:36 AM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 12:30:38 AM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 12:34:42 AM Encountered and terminated Fraud.VirusDoctor in C:\hp\KBD\KbdStub.exe!
02/04/2009 12:41:26 AM Encountered and terminated Fraud.VirusDoctor in C:\hp\KBD\KbdStub.exe!
02/04/2009 12:42:34 AM Allowed (based on user decision) value "KBD" (new data: "") deleted in System Startup global entry!
02/04/2009 2:26:41 AM ============================================================
02/04/2009 2:26:41 AM >>> User decisions reset! <<<
02/04/2009 2:26:41 AM ------------------------------------------------------------
02/04/2009 4:34:47 PM Allowed (based on user decision) value "wextract_cleanup0" (new data: "rundll32.exe C:\Windows\system32\advpack.dll,DelNodeRunDLL32 "C:\Users\Calvin\AppData\Local\Temp\IXP000.TMP\"") added in System Startup global entry!
02/04/2009 4:34:48 PM Allowed (based on user decision) value "wextract_cleanup0" (new data: "") deleted in System Startup global entry!
02/04/2009 4:34:53 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:34:55 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:34:56 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:34:58 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:00 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:02 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:03 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:05 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:06 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:08 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:10 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:11 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:13 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:14 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:16 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:17 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:19 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:20 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:22 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:23 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:25 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:27 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
02/04/2009 4:35:29 PM Denied (based on Spybot-S&D scan) value "KBD" (new data: "C:\HP\KBD\KbdStub.EXE") added in System Startup global entry!
I was able to rectify this by unplugging keyboard and rebooting,went into device manager and reset side buttons.