Top 10 Alerts

Latest 10 Malware Files

Testimonials

Exterminate It is just a superior product. I was having all kinds of problems with Zlob.Fam, MyWebSearch and TrojanSpy.Win32.DKS. Even Norton could not get rid of them. I tried all knids of ways to get rid of them and nothing worked. This save me so much time and as well as reformatting and recovering my PC. Thank you so much and I will reccommend your product to all of friends.

Mark K.

More ...

Find4u Registry Values

Scan your Windows registry for Find4u

HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\get\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\system32\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%WINDOWS%]\winlogon.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM_DRIVE%]\system\appdata\roaming\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM_DRIVE%]\Java\RE\uSvchost.com
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%PROFILE_TEMP%]\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%PROFILE_TEMP%]\System32.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\Microsoft\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\svchosts.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%APPDATA%]\winlogon.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%WINDOWS%]\win_sp.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\bot.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%PROFILE_TEMP%]\svchost
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\Temp\9842.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\Svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%WINDOWS%]\winkeylogon.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\401984581.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\JUSTIN BIEBER 10 HOT PICS SLIDESHOW.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%PROFILE_TEMP%]\CC.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\EpicbotC.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%PROFILE_TEMP%]\msn.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%WINDOWS%]\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\death.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\fgbpqwc227\gqxny.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\svchost .exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\service\microsoft.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%COMMON_APPDATA%]\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\Glock\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\darkcrypt.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost="[%APPDATA%]\svchost.exe"
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\Microsoft\System\Services\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%APPDATA%]\Microsoft\System\Services\winlogon.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\ueycpb.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\svchost\server.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost="[%APPDATA%]\Microsoft Corporation\Hostprozess fьr Windows-Dienste\3.5.7.7\svchost.exe" /bg
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\config\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%WINDOWS%]\winsp.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%SYSTEM_DRIVE%]\Documents and Settings\All Users\Menu Dйmarrer\Programmes\Dйmarrage\winlogon.vbe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\svchost64\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\avsca.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%COMMON_DOCUMENTS%]\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%WINDOWS%]\csrss.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\svchost\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\win.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%PROFILE_TEMP%]\setup_m.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=F:\system.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%PROFILE_TEMP%]\juanp.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\sock\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM_DRIVE%]\System32\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\AudioTreiber_x64.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%LOCAL_APPDATA%]\winlogon.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM_DRIVE%]\temp\conhost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%APPDATA%]\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\svchost32.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\Nvidia\Svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\QLBPGHS48N.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\wDaxkbSKyQ.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%PERSONAL%]\Important\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%WINDOWS%]\lsaas.com
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%PROFILE_TEMP%]\y.exy
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%PROGRAM_FILES%]\Easy-Hide-IP\patch.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\spoolsv\server.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM_DRIVE%]\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\Win32Update.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\system\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\svcst.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%WINDOWS%]\winscr.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%PROFILE_TEMP%]\logon.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=D:\Master\Oracle Bot PW\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%PROFILE_TEMP%]\winlogin.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon="[%WINDOWS%]\winkeylogon.exe"
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\Avon\mRhod.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\yhmgd\yhMgDa.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%COMMON_STARTUP%]\winlogon.vbe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\Avon\Gemiod.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\Windows\cpgeh.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\twunk_32.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\efcic\yonyihi.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\vvn\wjWmZa.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM_DRIVE%]\programfiles\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\Apex.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM_DRIVE%]\i386\Config.Msi\Winlogon.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\dllcache\svshost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\svchosts.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\online.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\system\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\explorer.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\svchost.exe //e:VBScript "[%SYSTEM%]\serviks.sys"
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\Microsoft\Temp\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%DESKTOP%]\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%LOCAL_APPDATA%]\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\Microsoft\conhost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%COOKIES%]\Svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM_DRIVE%]\Server\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%WINDOWS%]\Firewall-X
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\i4i.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%PROFILE_TEMP%]\dlcpt.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\local.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%PROFILE_TEMP%]\8D.tmp
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%SYSTEM%]\drivers\winlogon.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\regedit\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%PROGRAM_FILES%]\Windows User\winlogon.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM_DRIVE%]\Downloads\Windows.7.Anytime.Upgrade.Keygen(rehacked).exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\svchost\server.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\twunk_64.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\Microsoft\Security\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%PROFILE_TEMP%]\winlogon.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%PROFILE%]\AppData\Roaming:svchos.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%PROFILE_TEMP%]\nbkbdmpy.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\Program.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%PROFILE_TEMP%]\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%PROFILE_TEMP%]\scvhost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%WINDOWS%]\TEMP\scvhost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%PROGRAM_FILES%]\Window Defender\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\config\systemprofile\Anwendungsdaten\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\config\systemprofile\Application Data\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%PROFILE_TEMP%]\TUUnInstallHelper.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\install\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost="[%APPDATA%]\Microsoft\svchost.exe"
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%PROFILE%]\Downloads\Programs\By HaXze_2.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%PROFILE%]\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%SYSTEM%]\cleanmg.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon="[%WINDOWS%]\winlogon.EXE
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%WINDOWS%]\system\TAPI.exe /shell
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%PROFILE_TEMP%]\e.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%WINDOWS%]\winscr.ex
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%PROFILE%]\Local Settings\Application Data\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\ReAct_acer\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\MDM.EXE
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost="[%WINDOWS%]\svchost.exe"
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\schtasks.exe /RUN /TN "svchost"
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\Windows\Svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\test\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%APPDATA%]\winlogin.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%SYSTEM%]\mstwain32.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon="[%PROGRAM_FILES%]\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%PROFILE_TEMP%]\winl0gin.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%SYSTEM_DRIVE%]\
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%PROFILE_TEMP%]\71481.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%PROFILE_TEMP%]\iexplorer.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\install\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%COMMON_APPDATA%]\csrss.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\Johann\MsnEmoticons.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%WINDOWS%]\inf\win32\rundll.bat
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon="[%APPDATA%]\winlogon.exe"
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%APPDATA%]\Isass.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=H:\(Top100 Warez) [273_498] - _Microsoft_Office_Home_and_Student_2007_Activation_Keys.exe_ yEnc\Microsoft_Office_Home_and_Student_2007_Activation_Keys.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%STARTUP%]\svchost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%SYSTEM%]\ollcaxasp\svchost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%SYSTEM%]\pldnbvbdom\svchost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%SYSTEM%]\vdzjik\svchost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%SYSTEM%]\zytogmrrt\svchost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%WINDOWS%]\SVCHOST.EXE
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, svchost=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%WINDOWS%]\csrss.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%WINDOWS%]\logon.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%WINDOWS%]\nvchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%WINDOWS%]\s1kg.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=[%WINDOWS%]\winlogon.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winlogon=
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, search bar=http://69.50.184.54/find4u/sp.htm
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, search page=http://69.50.184.54/find4u/sp.htm
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, start page=http://69.50.184.54/find4u/
HKEY_CURRENT_USER\software\microsoft\internet explorer\search, searchassistant=http://69.50.184.54/find4u/sp.htm
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, olehelp=

Scan your system registry for FREE

CURIOLAB S.M.B.A., Amagertorv 15, 2, 1160 Copenhagen K, Denmark, +45.36965533