Fedex Tracking Number Email Virus Removal Instructions
August 13th, 2008 | by Alex |“Fedex Tracking Number” Email Descriptions:
“Fedex Tracking Number” Email Virus or “Fedex Tracking Number” is another fraudulent email that circulates the web lately. The creator of this virus is getting more creative each time. “Fedex tracking number” email just pretends that it’s from fedex.com. No! It’s not! “Fedex Tracking Number” Email is malicious and dangerous. Do NOT open the attachments. This e-mail attachment contains a virus.
If you open the attachment, your computer will be infected. Simply delete it if you happen to see this email in your mailbox. What if you opened it already? Don’t panic. We have put together a simple removal instruction to take care of this. Be sure to stay away from this or remove it immediately if your computer is infected. Good luck!
Download SpyHunter* Spyware Detection Utility.
Manual Removal Instructions:
Stop “Fedex Tracking Number” Email Processes:
(Learn how to do this)
CbEvtSvc.exe
lphcjkrj0etfg.exe
phcjkrj0etfg.bmp
pphcjkrj0etfg.exe
Find and Delete these “Fedex Tracking Number” Email Files:
(Learn how to do this)
c:\Program Files\rhcnkrj0etfg
c:\Program Files\rhcnkrj0etfg\database.dat
c:\Program Files\rhcnkrj0etfg\license.txt
c:\Program Files\rhcnkrj0etfg\MFC71.dll
c:\Program Files\rhcnkrj0etfg\MFC71ENU.DLL
c:\Program Files\rhcnkrj0etfg\msvcp71.dll
c:\Program Files\rhcnkrj0etfg\msvcr71.dll
c:\Program Files\rhcnkrj0etfg\rhcnkrj0etfg.exe
c:\Program Files\rhcnkrj0etfg\rhcnkrj0etfg.exe.local
c:\Program Files\rhcnkrj0etfg\Uninstall.exe
c:\WINDOWS\system32\blphcjkrj0etfg.scr
c:\WINDOWS\system32\CbEvtSvc.exe
c:\WINDOWS\system32\lphcjkrj0etfg.exe
c:\WINDOWS\system32\phcjkrj0etfg.bmp
c:\WINDOWS\system32\pphcjkrj0etfg.exe
c:\WINDOWS\system32\drivers\54c70b2e.sys
c:\Documents and Settings\All Users\Desktop\Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\How to Register Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\License Agreement.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Register Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Uninstall.lnk
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine
Remove “Fedex Tracking Number” Email Registry Values:
(Learn how to do this)
HKEY_CURRENT_USER\Software\Sysinternals\Bluescreen Screen Saver
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\rhcnkrj0etfg
HKEY_LOCAL_MACHINE\SOFTWARE\rhcnkrj0etfg
Download SpyHunter* Spyware Detection Utility.
6 Responses to “Fedex Tracking Number Email Virus Removal Instructions”
By Jason on Aug 21, 2008 | Reply
When a coworker was infected, it immediately shut her computer down. She’s on a company network (3 people connected to a server with Win 2000 or possibly 2003), and it locked her out of her account. She can’t get back into the pc, even in safe mode. What can she do?
By Dee Anna on Aug 21, 2008 | Reply
This happened to my home computer yesterday. Husband opened email and clicked the link. I’m going to try and reboot tonight in safe mode – hope it works. When I logged in last night, it would just log back out. Went in BIOS and might try to boot from a recovery disk if none of these options work for me.
Haven’t really seen anyone say they were not able to log back on, except you, so I’m also waiting for an answer.
Good luck!
By Wilbur on Aug 21, 2008 | Reply
So what do you do when the virus has been allowed by an unwary loved one to run, has locked up your machine, and now you can’t log in at all to perform these recommended operations?
By Dee Anna on Aug 22, 2008 | Reply
I was able to login to Safe Mode, but it still logged me right back off. I guess I will try to boot from a Linux cd and see if that will work. If so, I’ll have to try and copy my files to it and start over -
By Michael Gordon on Mar 28, 2009 | Reply
I received the e-mail today. Upon opening the attached container (generated by The Bat! e-mail client) I saw a file with an .exe extension. I marked the e-mail as junk and deleted it, file and all.
By Sinu Sekhar on Nov 4, 2009 | Reply
Luckily I had the Free AVG Antivirus installed on my machine and it detected the virus and I moved it to Virus Vault immediately.