Exterminate It! Antimalware

malpedia

Known threats:7,217,663 Last Update:August 28, 10:33

Testimonials

I have had major computer issues in the last week. I was infected with the Darksma and Vundo downloader trojans. After researching the net for possible solutions, i found they are extremely difficult to remove. I tried a variety of spyware removal tools to no avail. To do it manually is near on impossible.
The symptoms are, computer runs slow, constant ad pop ups, hijacking of emails, theft of information and locking of a variety of functions.
I then found buried deep in a google search a link to Exterminate It. After reading it, I downloaded to do a free scan and a lot of stuff no other spyware had found showed up. So i went searching the locations and sure enough the files where there on my system. I tried removing them with no luck. So i spent the $25 usa to activate.
http://www.exterminate-it.com/
It removed all but 4. I was disappointed that the Trojans once again reloaded and my problems continued. So, i used the SUBMIT STATE service. I supplied all the info i could gather, pop up addys and what they were for , what others programs had found and Exterminate had missed etc. Within 24 hours i received and email telling me they had updated there system and to download it. I rescanned the system and it deleted all the previous locked files.
Darksma and Vundo downloader trojans have not done their re appearing act since and my comp is running normal again.

It's worth remembering the addy or downloading it to see what it finds. I had no problems doing so in anyway with this program. They done what they said they would on there web site in under the time frame.

Source

Administrator of Horse Racing Forums

File: local.ds

Location of local.ds and Associated Malware

Check whether local.ds is present in the following locations:

local.ds file locations that are Windows version independent:

  • C:\Windows\System32\twain32\local.ds
  • C:\Windows\System32\twain_32\local.ds

If you find local.ds file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The local.ds file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of local.ds File^

File SizeFile Md5Last Seen
10352B8C905116D0185F11111ADF899785515May 16, 2010
65903B554EB45CDC2A4A030E27715BEBB639DMay 23, 2010
17518596DFB265CF006C21725DB36C9C8045EMay 28, 2010
5165615AD33977D2F20580667DBC102CBA2F8May 29, 2010
9344B97641F9B8BA72C04E77BC1AF519AFEDJun 5, 2010
23390517E65FF58CC0F36D5B88970CE459DBDJun 18, 2010
7904764D83AC5A6D868C53D82D3B125A5A346Jun 20, 2010
21388BD28BA7695AF5DD6C624E4CA83960E0FJun 29, 2010
12832FEC16922D5837020CD9FA3D5CF010453Jun 30, 2010
72987A50E683812EAF097158AF1859BAADF8Jun 30, 2010
126615A6D401DA7D0E3AD9529FFE3A835EAB0BJul 5, 2010
1167995EA75982888AC2A47ED3FF5B2FEA9AD8Aug 6, 2010
45406148176635D5EF542D67516703E599D79Aug 15, 2010
68252C3BC69705A23BA6738F14FA2C08252EEAug 29, 2010
120435F2D0BCDB9B6DB6DDD2D1B100CE868D0Sep 16, 2010
1769853F59C9B658578FC09409405D5C29FF9Sep 30, 2010
23787FD559AB40D5EDE9296E3A70BB467888COct 13, 2010
46629CDF9C71AE27D9742FB7913BF407110CAOct 24, 2010
49370D5FAD619C5AEAFAF3C9BAB9BF1C71D3BOct 26, 2010
1094331167DC771E4F248ECBD09C0ED1F58AANov 13, 2010
31932ED8B762003C6EC321EAFB74252FDE22ADec 6, 2010
438596C3F19333399F11916D4271CE9C89429Dec 15, 2010
145E2F9282D806C4B3393DCE42945F78511Jan 15, 2011
126616474DAAAED6236980ADF8CCB3D857003DJan 19, 2011
60828F09D70FFBADE7C6AEE5F2B2C213A223Mar 16, 2011
4298869E0A043168C00346E9B05298D831023Mar 28, 2011
35150692636F3EFA4457260346E1DC5CCF1EBApr 14, 2011
2425774022671FFC0A78BFB69E74026DE13FApr 18, 2011
7236535010437647B47C65CA7AFEB67439B9FApr 27, 2011
3928B9F2E8A9F8A6E81E565B00857A82D220May 1, 2011
342CE5402E12E179EFCB8A156FAA6BA61CFMay 5, 2011
23791039A06A906BF8731251E807EEDAA4D6DMay 17, 2011
534292F2EE81662F612E95E9B4CBD36054CF3Jun 25, 2011
12368570E3ABB573025AB22DA3E1BA67E7264AAug 5, 2011
7290266AF4E217313B6D052B84F8065F8C10Aug 7, 2011
48894CB11A5D02879C9D4BA31AA016D7CDD48Aug 16, 2011
278092ABA3E9A7ABFF466D0A3B5C281D9E98Oct 6, 2011
67705756EBA505F601BC8A75390DA36DFF799Nov 20, 2011
1210395FF703B277BBF59A51C0F92A36AB5722Nov 28, 2011
41342D391A8C8F4C16196C65387B5E5338EC5Dec 30, 2011
7129D5D3BB417C6484F17CDC95028E846D3FJan 19, 2012
28230DCAFB9D054BF2BFC8787863054648025Feb 8, 2012
1162687E6F576250EF5D696CEB75074D044E44Mar 2, 2012
272500769FA91C6286F503BCD66FA9878002CMar 31, 2012
47432E2315787EA6F038F5D4012FF0B6F1201Apr 30, 2012
17662C6AF95029087575097D127135ECEFFB5Aug 18, 2012
38350F6604B378DBD99F8CE182FED8E44374FOct 9, 2012
4826186872181D9EF7936E322310A5153C877Dec 4, 2012
49850A167EC4EB97357A6C3E8E8CD45815A3Dec 17, 2012
18306D7D214B306FEA41BE7A1B5D1C5A8442CMay 10, 2013
186729571B65CEB21C0A30465F88B3A663073Nov 18, 2013
4340A2F2297BB52D20EFA3F2D9779B96EB18May 10, 2010
5448530E22D229CDF9C5B94C48FE6324F4448May 11, 2010
13325EA010A37C174C216C0DCA4A7922D8FB2May 16, 2010
55384277EBB0987071FB2832EF8DBDD9D9628May 18, 2010
25551D6F9D2CB3C3158BF2C4F2FBFA876505BMay 19, 2010
120413C9EFF393A1F9458C403D2DD3AD008355May 23, 2010
15430549D9E4D704FDAEE7D3AB7F75C832B01DMay 24, 2010
88728C57A55B405034190A3899168B3957402May 27, 2010
37566BDBE2A4B81D2718A916F7A6E800085D3Jun 4, 2010
48957C673C0BC42388236CF510ABC7E0421B7Jun 5, 2010
174127462B72655854086C655E34F30A45993Jun 11, 2010
12862EA77EFC3EA2289544FABE4E502832207Jun 15, 2010
142818BBAB6F07F9A19BBD09670F0FAFA54F9Jun 22, 2010
14252C66DDD4EC38B480F7581A37C2C8132BEJun 25, 2010
156888C3ACD7EFEBAB9C5528B54B11215F9F2Jun 26, 2010
505707355AD0F90A42DD1996EFBA9E22C61F9Jun 27, 2010
56736CA0DFB0D24430ABB884136A4B5DA067Jul 7, 2010
80710341D0A91C02DF8CF15B2CB575A0B48D2Jul 7, 2010
250B733EE5A5AA3828228E8203F18C4EA50Jul 8, 2010
4754505BBECC82607C1EF3AF9A9EA80282C27Jul 13, 2010
17041ED24E1C8D478CCC53331872137D561DEJul 18, 2010
1102904B86A515DA84FC68B05BEDC47857B326Jul 26, 2010
10891366F70575A6B4B4186B059877D6173B8AJul 26, 2010
200043694DB54E4AE82F71B4C23C43A4F11F8Aug 11, 2010
713952EE44E2C2E67A53CAACE5FD907FE790FAug 15, 2010
713958829FCE4D7AF7605F2D4D483C964BA62Aug 22, 2010
1534053BB190D74725CCD75F8349222513439Aug 28, 2010
80536AC3B4042B48478F435182CC816A027C2Sep 1, 2010
94673585183271FBB65329BAE802D0CBBBC86Sep 20, 2010
735476C101A1439BA41D48B1386330C345CFOct 9, 2010
524340BE6E8C13D9D543E5D4B4294FDE59B29Oct 18, 2010
71395C939068ED1A4920770B41D08B5204824Nov 7, 2010
7600580760AFAB918D8C88FB80656BFB9E012Nov 9, 2010
529398512655D1460028375417D4C546AAFCBNov 21, 2010
4963413B6D3BDBB53D8CF4265061C89BD32A8Nov 25, 2010
186342CA866367A70DB97E8CB9BB763A9F810Dec 8, 2010
713952A2242E672D57F0DB3283C1870B6B151Dec 27, 2010
496227588E3E642E79753209FEADD8EF6CAFDFeb 4, 2011
355054C96EF54CB8C08FC2ECFF2B8DAF070CFeb 24, 2011
43064B6CAF1DE318C871A2382250C13E1D4FAFeb 25, 2011
265A62C39C75A5890C89BB9FBF77EA2DDEBMar 1, 2011
262B38EC46850B60581F75520F8FBD96332Mar 26, 2011
90056B24F38B8378EB01A5DA08E8623A4E3CApr 12, 2011
3724512971E34F6D1D2811E3F9A1E83A0F38DMay 9, 2011
1838413E595978E9D45AE860F9DF6CF69A1May 14, 2011
15988D97421EDACD4084ED7C311F3A9AA96F4Jun 8, 2011
50227996A2984EF47F21CADE3E97617802291Jun 27, 2011
1193578A3D08EFDD21E75E7AF2DBEC02DF4852Aug 7, 2011
71371F929C5FC66AABB1017266323625479A7Sep 9, 2011
50726990F4A3AAD2B420C831D155A207FD3E4Sep 17, 2011
159615E5CCD814D4361C8CF173AE4928E9895Sep 30, 2011
801807911C6067ED45A071C7D4EDD80837192Oct 4, 2011
1868612DD8655D74214260D0C7F86CF45D4B6Oct 11, 2011
801433C6D4FDE7884F69391420B127A227270Oct 11, 2011
1426886EBCCE156FDE1870BD9F6FB1811B607COct 16, 2011
15968CA2A55F78690470CC1945CE26C20ED80Nov 16, 2011
159687A542E219EF5CFFE9442DC70E51B8541Dec 8, 2011
12692CF8C830E4A9D2252DB4B1C8D42979ABEDec 18, 2011
1889FD77506C7E9AA538A3CC01A9E739CD3Dec 21, 2011
42762FDB563AAD9ED76C99893CC8654CA4909Dec 23, 2011
46092047A3F17A32C9B155C20B842CD00147FJan 11, 2012
17495A97973766546C6920F4BCFDD34EBAE01Mar 31, 2012
17244D06DEEF32BE962DE46EBEBE520DDF5Jun 29, 2012
215CDDB82DBA47914A7D08C0886447352FEAug 20, 2012
8422655B0A5DE4365AFFFBD352EA70FEF1DDCSep 10, 2013
38728B0F7FB8075ADC0337528810D1334737EFeb 5, 2014
71352F0141B70C3D669731E3730E0B87AB96BFeb 12, 2014

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove local.ds^

  1. To enable deleting the local.ds file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select local.ds and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of local.ds and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of local.ds and Associated Malware.
  6. Notes:

    • The deletion of local.ds will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of local.ds will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a local.ds malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type local.ds. The name of the first found registry value referencing local.ds is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to local.ds, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of local.ds and Associated Malware.