Exterminate It! Antimalware

malpedia

Known threats:640,396 Last Update:May 24, 12:31

Testimonials

Thank you so much for developing such a wonderful product. I tried everything: PC Tools, McAffee, and the list goes on but nothing worked to remove a whopping 706 infections including backdoors like exterminate it did. I will recommend this product gladly to everyone I know.

Austin J.

File: lobby.dat

Location of lobby.dat and Associated Malware

Check whether lobby.dat is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific lobby.dat file locations:

  • C:\Documents And Settings\USER_NAME\Application Data\lobby.dat

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific lobby.dat file locations:

  • C:\Users\USER_NAME\AppData\Roaming\lobby.dat

If you find lobby.dat file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The lobby.dat file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of lobby.dat File^

File SizeFile Md5Last Seen
126464AF3BB7C3F3D27094B97CE0B2CD00028AMar 16, 2016
12646463BDCEED5710E3FF50D1C8FE601FA16CMar 17, 2016
1264645A6541346BE392803819D45ED003BB31Apr 13, 2016
126464DF2706512BABB35D37BD41F47AA456C1Apr 18, 2016
126464B64F20AB7CC3B10D4CC316257052F445May 12, 2016
12646460A3388B1000192F22E8B0F20698F0A7May 22, 2016
12646404D9F69047936E8836D4286C856FD4B5May 31, 2016
1264641BAD8178C14489E0A120E4D030D312B3Jun 3, 2016
126464D9BFFBBBC5225B48A717B0B7706AC074Jun 18, 2016
1264645B13D2CBFB9FB715F82CD9DC7AB5F7E2Jul 4, 2016
12646458802B01E4E27D028ED468202ABC1853Jul 14, 2016
126464B7DCBC1078F3022C5EBA4C0A5C775B10Jul 17, 2016
1264644620F17690625894C6342E88D90DCAF0Jul 17, 2016
1264643D2CA5E03FDD09B59252C97CFF8C2609Jul 18, 2016
126464114B7753F06FBA7DDB3C3DCEB846D243Jul 18, 2016
126464FCBC4D5C375707E8E71AE87C916A690AJul 19, 2016
126464831A58ADDF2A0A2F002F647450D1950DJul 19, 2016
12646436CA94DF62A25D3026BF4105B0EB283CJul 21, 2016
126464AA5379FCDC09ACE36A56C3035B8F531BJul 23, 2016
126464CFEA6AE7D52C271A47E4DEF11293845AJul 24, 2016
12646427536172D50E24F977C34981492253EAJul 25, 2016
12646421CCB9C5016CA2C4504F421C800608B3Jul 27, 2016
12646488F28A6AE8051A05E7A5443E296AB8E1Aug 8, 2016
12646467C9EE500FA5EBEC8B475BB85C4EC6FBAug 15, 2016
126464963FB9A077DF0E49A180AB771699F2E4Aug 15, 2016
126464BF9D2B78E1875E1F1091CBE3067D87B0Aug 17, 2016
126464C72C57415E398D558B3DB8AC29606551Aug 17, 2016
1264648D313E086B9CCDD646C5DE958E49F6B1Sep 1, 2016
126464B5ACDA4FA95E842C64A9CD8D4CD3BCE7Sep 13, 2016
126464FE722486CC530CA06283C575C238BAC1Sep 14, 2016
126464F7EC53DE5C74D8805461D28BBF56DDA2Sep 15, 2016
126464261E7391238B61CA338F61E71576884ESep 16, 2016
126464A0C7B196A76FC23EEDEA1B2580C715D7Sep 16, 2016
1264640E4E67136B45ABA00D983B42A03FB2E9Sep 19, 2016
126464A88B49B697933DF6991B9E9837E28C0CSep 19, 2016
126464326ADE757768C0407EE6EF4175F02E15Sep 19, 2016
126464817ECEC9CAA268D22732D63153FF35B8Sep 19, 2016
126464CCB3BE52DDFA8BB93BD72C9C88652AAFSep 20, 2016
12646402C686D5577B3A1EE39B7E62C25BB098Sep 20, 2016
126464D59641FCA18832C8294EA02905C55816Sep 21, 2016
126464C8D7B1E6A121AD08C8DAF6AC4086C3F8Sep 21, 2016
126464DBF124621EC7E1AED996B27251A38050Sep 25, 2016
1264646322A781FAC976A8E1524D34E5898801Sep 25, 2016
12646414864CF5CE3E0CD1465B8E6F3ED540EDSep 25, 2016
1264642B3ADD4E080C151AECF710B3CEA0FF00Sep 26, 2016
12646417894899B67D7324F914F8EC74BAAB4ASep 27, 2016
126464AE9F88835F79AF2D24DC44C915A1BA57Sep 28, 2016
126464138FBA97A7AB9D048EBE200B87191EEASep 29, 2016
126464F0319E92DF9D3AEECE1891A3161823EDOct 12, 2016
12646469A3DC8E258D97D265694DA4C77AE303Oct 12, 2016
126464DE21DC867FDDE3D98B4121FD159CDC8FOct 18, 2016
126464F52F539027698404AB4329057551B436Nov 7, 2016
126464E2B382A082C7E4351CAB51B85E356413Nov 8, 2016
126464D0D96D0448ECA9031341EE2AC906EED9Nov 9, 2016
1264646045454BEA31D825A29AC9E3551FD63FNov 14, 2016
1264641C14F639818C7A5107F6B7F77FD755BDNov 16, 2016
1264649520F39D9B8BBE46BE99F760EC8EC377Nov 17, 2016
126464998DA7385C24E9A8ED3B60257FBA563ENov 20, 2016
126464F2969DB5244576498FADE75B6A4E036BNov 20, 2016
1264645A1B92756F1E715F3AA1C0094E8FA4CDNov 21, 2016
1264647B252A32E9AB630DC38722ABBF259306Nov 22, 2016
126464C7F867D6372559EC2796A953254EBC90Nov 23, 2016
1264646B73E0F75F200B446705D72355DDA19DDec 7, 2016
126464B7C7CF621B74AEEDB232CF863D56A4BEDec 7, 2016
12646452C0B7BEB3FD1FC5DE7A70C3ABBE75E6Dec 8, 2016
126464B0AB0C207B666D8C13C03410BE143FA3Dec 9, 2016
1264640775E186609DBDDCF4BAC370F6C7D516Dec 17, 2016
126464F57631AF8FFCDA4B22F7ACF52E372989Dec 19, 2016
1264646666640819E363B983D81D7D5E5E436CDec 20, 2016
12646446481DD970EBAFF75CF9358EA6EB6D5EJan 2, 2017
12646483A5E6D23E6F541C15436AA7409F1E40Jan 14, 2017
126464EBBF886E04E3D1B7EB264C6904870D0BJan 16, 2017
126464177590D7E6504157D58F92A225728DDFFeb 3, 2017
126464889A0D3CCC2C77D52DDB46CC7E152F3DFeb 6, 2017
126464E514C5ED1BE9A0F83E9A54966066013AFeb 13, 2017
126464D663194DFA26D67A2E9BC32BFC6BA65CFeb 13, 2017
126464A8726F62E223E0DAEB227FDAAD51851EFeb 16, 2017
126464BA077CA3F3723F3D35AC8539B442FCC7Feb 16, 2017
1264640908812EB6F015FF9021494BA73D852EFeb 22, 2017
1264643B436661342E002FE33E8AA1BF4385C4Feb 23, 2017
126464B0EAC8D0EDB29EB85717019CDF9C46D7Feb 25, 2017
126464EE23FFDF0898F9F8EBC83675C4D5C436Feb 26, 2017
126464309E494136C196280F5548556CCAD111Feb 27, 2017
1264646AA05B285A68B82D29A19AC339CADBAAMar 21, 2017
12646467E78DC21E14A637ADF98A34F82EA760Mar 21, 2017
1264641BBCBC81894370671FE8F2586E06CEB6Mar 25, 2017
12646478A21742311F17F1A999EFF2587A111CMar 27, 2017
126464D17B00B52C036661C1400D674344321EMar 29, 2017
126464DDF42D0F35A7CE3EC2DDE403739D5578Mar 29, 2017
1264649D81B2FD4326E14A40ABA9302A676533Mar 30, 2017
126464B4C3DC8E5EE0645491791B370C21EF65Mar 30, 2017
12646479E26E49EEB33A2BBFFBD4C7578158A9Apr 8, 2017
12646454EAD6976B92DE1C0BD710E55CCC9BDBApr 16, 2017
1264645D499F96BB43B7760FB4C6BC16C777FAApr 20, 2017
12646451CCE3199B7AC65C430B2CFC260D3B70Apr 23, 2017
1264641B3A469B69C6EDBB881DC2D3719155A9Apr 26, 2017
126464462E05C586F0DED4D4BE46D9970D1E7BApr 30, 2017
1264646D9EEBD4640E03E736B480CA71B6D974May 1, 2017
126464617261541C11DA8B850C0E1927FF4B7BMay 5, 2017
126464C794C27CC9B1F366A566730CF30C661FMay 5, 2017
126464B0916F2A87A2F71CE291BF811513806FMay 6, 2017
126464A28D63C1B36EAB6118048A4810686903May 7, 2017
126464CE45DA33C2715B18372EB2B23C55353BMay 12, 2017
12646496C087CC23575434B9CFFFD8ABAA8354May 16, 2017
12646416460956E731EBE70E20F51EA3D38270May 18, 2017
126464A59C345195D0D185E7584F679B80AD3FMay 22, 2017
1264645DE22EF88C8E4A3C25D659B790C6DCBDMay 22, 2017
1264644FF1F59C8009137077C03F8BCCE31C4EMay 22, 2017
1264647127B82DAA379EEE8D7BA91E518ADD26May 22, 2017
126464EF0181647D7C4921F38E5B8B2A367ADFMay 23, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove lobby.dat^

  1. To enable deleting the lobby.dat file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select lobby.dat and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of lobby.dat and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of lobby.dat and Associated Malware.
  6. Notes:

    • The deletion of lobby.dat will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of lobby.dat will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a lobby.dat malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type lobby.dat. The name of the first found registry value referencing lobby.dat is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to lobby.dat, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of lobby.dat and Associated Malware.