Exterminate It! Antimalware

malpedia

Known threats:6,393,916 Last Update:November 21, 14:34

Testimonials

Exterminate It is just a superior product. I was having all kinds of problems with Zlob.Fam, MyWebSearch and TrojanSpy.Win32.DKS. Even Norton could not get rid of them. I tried all knids of ways to get rid of them and nothing worked. This save me so much time and as well as reformatting and recovering my PC.
Thank you so much and I will reccommend your product to all of friends.

Mark K.

File: user.ds

Location of user.ds and Associated Malware

Check whether user.ds is present in the following locations:

user.ds file locations that are Windows version independent:

  • C:\Windows\System32\twain_32\user.ds
  • C:\Windows\System32\twain32\user.ds

If you find user.ds file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The user.ds file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of user.ds File^

File SizeFile Md5Last Seen
193945259A6D7F9DC13353EF90A01609E14D42May 10, 2010
30320121B20385885FB1CD8C30EBF61F2E024BMay 28, 2010
220270E62089B8100250FADC314F1F7908DCJun 5, 2010
1586165B5C457FC1A3D9DFB8A057E282B0EA52Jun 18, 2010
13969CEE8112F64B661BD28008CD738384DFJun 20, 2010
9025048622F7AADCDF12967AF520DF21B7A046Jul 5, 2010
73653972B6AD58349117DA8B36FE144BBD818FBAug 4, 2010
113008630EBFA7928D38E27FF3D7030F694AEAug 6, 2010
7430AEB280F1D99DEB9F3C541B2FDE6FFC00Sep 16, 2010
48300EC63E23A9D6E41F6C85662455E144F8Sep 20, 2010
275F1F752041D4E05CDC1096DC2436FADD2Sep 30, 2010
6989651E3BFDF7157B35034980EB55DD7B97Oct 24, 2010
4126241D1CEE86AD576425279910E6C24AF8046Dec 3, 2010
14317BC22000CA09ED827E5D12B594236071Dec 6, 2010
1138787E20262D46F156F94F1B356F28C599E5Jan 19, 2011
15469CCCE8E39A4BE54875AD0D3430A6917B8Mar 28, 2011
13521C364C252556146B1AA29236071DC303Apr 18, 2011
549F2E6AB5A98754A550EBD4A8C2FDBF6BBApr 27, 2011
662682459310CDC43E658B8DDF3E6AB6761EMay 4, 2011
582625673BB3BAFEC77021A9DE359F56DDDBMay 17, 2011
12306B1BB27E904B571F4A54B390B9D4C0FBAug 5, 2011
143218DE8A97E2A2B7267BFF003E148615330FSep 9, 2011
1419507A3238EC2C2BD9E9AA251B4A9E83D9320Nov 28, 2011
55808591CBDE2E1BC0F29BB1CB57A4E7EF533Apr 12, 2012
10041949E9225EC646D70D40F1D1D0DDB63BBDec 17, 2012
276445D6D1F56BD6E4168AFB02C0C06DF42May 10, 2013
21949FA6D2C7AF1B37361DC3AB118EA884398Nov 18, 2013
81013155437F846A878D5207B97A721B80DFA47May 10, 2010
2285836654F2209C682AC5C83D3D4DED9871801May 11, 2010
1083306B66731907F42D31AB5F91337A862May 16, 2010
108BF128D089AFC5A9D0DFCC569BD186FD5May 16, 2010
793F4C429601FD0C2053C2BAD7926FF1A5BMay 19, 2010
33899235E4D355BDF657A39C12A4154355BBEMay 24, 2010
29377B205CA4618FE8226988F67852137788May 27, 2010
48460C8A0CE5A30DAB60CC410FA9968BB1EJun 1, 2010
98282E5A6520CBCF965960E37F33D21BC3B87Jun 4, 2010
34447F5D075939C64B9901ACFBE1881D27ECJun 5, 2010
35904984D9323E1B0381F94FD937EB00081F1Jun 15, 2010
1183F9CB9ABCADB5A6BAAE3A21DC3437577Jun 26, 2010
542FA42E8875E9504C7E4EC1D65F6FDAFD5Jul 5, 2010
331784EAAD36E2058FF0A0F72C9E0F5D04FC0BJul 7, 2010
33289622A3B8D2BAA48D1308A071AA78A15EA9Jul 8, 2010
203945250A42FC008EA856CBB58C782076FAJul 26, 2010
113468637F2A996C096943F5E93C913810BF4Aug 22, 2010
1085E2C0017B09FAF5BB5718FDCB772A8E7Aug 28, 2010
1426471CD8385B3AC737E5639D41A0DDEFEBA5Aug 29, 2010
10697BE20F1F3BC24F0EDEC9A8426A3D6C040Sep 1, 2010
245932CB799BCBA9F639F695EE1E8EB4DB95Sep 15, 2010
678162D479A90FCE3894F3207DBF1945172Sep 20, 2010
550DA2C4F1E5771DEFF4E18822D16C1357FOct 12, 2010
868960D843BFECB9D6F8D76E51AAA6038C319FOct 18, 2010
16161666E4B07F5E8EB26A67B1938999B3D61Oct 18, 2010
768009292E40EB51B4FB2ADF2B2D8AB5F7D6Oct 26, 2010
218250688773EC3FC0F5BF44ECA8D0861A5951Nov 9, 2010
108E95B44CEF7B1FFADFB6E6E92E09D1993Nov 18, 2010
32520152591A3F8AEDE0CDD6ABE4F7A55C1EEC94Dec 8, 2010
47918C9C5AA1906B710793794D0FEA24F097FJan 10, 2011
3290581C0A7BCDA0A79E0CF188E5D087B3EEJan 21, 2011
139DC912168A21E0E1F9CBEF2B90ABB4246Feb 4, 2011
108E168088A7D77FA47113BCEECA5F80E40Feb 8, 2011
224963E56277BD274850D5876C2499E871B023Feb 25, 2011
2574E5588F0753E478573A618F9BF29D78BMar 26, 2011
519290852CCB364536634F57309270550322E6EMay 9, 2011
2147483647D41D8CD98F00B204E9800998ECF8427EJun 4, 2011
10849770DAC0F5D8946A5019034CD57CD31Jun 8, 2011
90423D5E8B87BC886A6349909C4445CD6992DJun 25, 2011
138548349CFFDB0DAE5A2CF4F156A56737EF1D55Jun 27, 2011
393138B47DB84087668E7BF890DA7BA7D79041Jul 22, 2011
3357269882AFBD469BDFB09536887BD9D65F54Aug 31, 2011
260341783B3EB65C8DCE4CC73C9183A894F0BSep 9, 2011
39304645AB1BE8EA7173C8E859125AB7324Sep 17, 2011
108CD2D784D48576543D50F62A9E4186E58Sep 30, 2011
945865533A1C8AF3B8D87E708F8794C2CBB0Oct 4, 2011
503360182554AA4F3D9CDE982AD7637281F625C4Oct 11, 2011
2402F9E5DAFCC02261B79524C2CDE39C2AEAOct 16, 2011
36069300719B6F1715B37458C5A748092911CE3Oct 25, 2011
1833975387AE9134BCBA1FC43AECD12B5069C3Dec 5, 2011
26398807A80FC9819444DF4F28FE5D583CD539CDec 23, 2011
65050AD020D4C36D1C7BF3878E67DF2BA17Jun 29, 2012
18872B26F02309BF25F7FF01BDF69B4CFBDEAug 20, 2012
15466D959794C00F5E7DBA4F6CCCC2AB68099Dec 31, 2012
1255660EE0A63CBDECF35AF3959FCC7F9B9890Sep 10, 2013
60359006A770C000D2DA094AA6A40F09D6A5CF5Feb 5, 2014
124420D87F8D88B8AA42CA10F40430FEAFC095Feb 12, 2014

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove user.ds^

  1. To enable deleting the user.ds file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select user.ds and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of user.ds and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of user.ds and Associated Malware.
  6. Notes:

    • The deletion of user.ds will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of user.ds will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a user.ds malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type user.ds. The name of the first found registry value referencing user.ds is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to user.ds, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of user.ds and Associated Malware.