Exterminate It! Antimalware


Known threats:700,086 Last Update:March 16, 12:51


I have had major computer issues in the last week. I was infected with the Darksma and Vundo downloader trojans. After researching the net for possible solutions, i found they are extremely difficult to remove. I tried a variety of spyware removal tools to no avail. To do it manually is near on impossible.
The symptoms are, computer runs slow, constant ad pop ups, hijacking of emails, theft of information and locking of a variety of functions.
I then found buried deep in a google search a link to Exterminate It. After reading it, I downloaded to do a free scan and a lot of stuff no other spyware had found showed up. So i went searching the locations and sure enough the files where there on my system. I tried removing them with no luck. So i spent the $25 usa to activate.
It removed all but 4. I was disappointed that the Trojans once again reloaded and my problems continued. So, i used the SUBMIT STATE service. I supplied all the info i could gather, pop up addys and what they were for , what others programs had found and Exterminate had missed etc. Within 24 hours i received and email telling me they had updated there system and to download it. I rescanned the system and it deleted all the previous locked files.
Darksma and Vundo downloader trojans have not done their re appearing act since and my comp is running normal again.

It's worth remembering the addy or downloading it to see what it finds. I had no problems doing so in anyway with this program. They done what they said they would on there web site in under the time frame.


Administrator of Horse Racing Forums

File: BlockAndSurf Update.job

Location of BlockAndSurf Update.job and Associated Malware

Check whether BlockAndSurf Update.job is present in the following locations:

BlockAndSurf Update.job file locations that are Windows version independent:

  • C:\Windows\Tasks\BlockAndSurf Update.job

If you find BlockAndSurf Update.job file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The BlockAndSurf Update.job file is associated with malware only if found in the locations listed above.


Different Variations of BlockAndSurf Update.job File^

File SizeFile Md5Last Seen
434E12B8C8360797980A63802E5456CEADEMay 5, 2014
416A1EACC63A9D7368DCD3904B84C999902May 7, 2014
400E5697B5349DC2D112CB21E021C9B55A6May 15, 2014
426B880C6B23BDB9D33C9F33020BFE64032May 27, 2014
432BE1871B74E96A148C69234CFC20D5914Jun 2, 2014
4381035A4FD2336B44C73406A8A2574F9D5Jun 9, 2014
420D6B83C87C7DE0E4ED7733E8C3B244FB9Jun 11, 2014
444A8A189B7FFF4A02E6F51B9B7C22CBF7DJun 13, 2014
4044A38075041D9142C3CF61EDBF1539830Jun 14, 2014
424CE7BEC8FB1A36039999EFA7FA0FF1DC7Jun 14, 2014
40616BB5EFD22FCAFDA23FDE0FFE534091AJun 16, 2014
4385AA95782FA69ED6B11663D4CE9AF739EJun 22, 2014
402F99CBEAE0515E176C937CB47C5AB3DD6Jun 24, 2014
4423F3B9226E1B17DA2BC4C7276FCFFD317Jun 26, 2014
40462DB28CEEECAD2880776D17CFA7E5B11Jun 26, 2014
4227EF164C1A95E7D9B425C1DEB7541B3F7Jun 27, 2014
4322299B8C72E08A9D46700474D1E25C75DJul 1, 2014
40683AF41CE3D6FBCEE9E7C77593F370BB4Jul 4, 2014
4265633F46DB7055C661B1ADE8BA3432E7FJul 8, 2014
43200BE3E55B28D4CE5E32CA00D03EAFBB2Jul 9, 2014
378FDF006956A0777081532E852E2E93222Jul 9, 2014
424B88C16F214A62B0A8650EFDA53E0DD15Jul 12, 2014
440AC1B5F389BB2C4C5388E7962AC7F15DBJul 12, 2014
42677AA13A948E7B00C368DA149D90F7035Jul 23, 2014
418453B12685B995785799AA06243EB7E1CJul 24, 2014
45443485A2BE7284080CFE34D4513CD19F5Jul 27, 2014
432EC42A23063DF450F10B2F42A2468A41CJul 29, 2014
406984F29402B6279D678E49E2144659A96Jul 29, 2014
418C6A47023FA9F4C87A8ECFB26C94AB6D8Aug 4, 2014
40688E325E4A1250BE49E8009E63170AB8FAug 6, 2014
42812E7511142F479B751457BEAEBC87D28Aug 6, 2014
394EAB2A565F9BF919559C05F35C79F9CEBAug 6, 2014
442ED78CC45A5E9C9B6C98282ADF76C82D0Aug 8, 2014
4226CC3B00A783994B8BF83B08273520698Aug 9, 2014
4707A87955836B23FC8DA5BBDD60780CF12Aug 10, 2014
470C1E432BF3EC3CB8285EB9F190F7F72B8Aug 10, 2014
4263945523FE275600D7C5FD92E6C0012AEAug 13, 2014
374D5847E94469A0701250AA1B65F6BF532Aug 18, 2014
4449AA5A6D33B7188B9FE2798D3148FEC8FAug 22, 2014
4228F48CBA6F56FAB5C88318B6BA471FE61Aug 26, 2014
424D8B10C4714AEDC671F5453EF392927F7Aug 30, 2014
448BFA5B99DDD449D1151F5975895D35C86Aug 31, 2014
42453542EE8DA0CCBB6DEF67D1B2A7D620BSep 1, 2014
4249B3BB794C6218CB2E58A79BF0603930DSep 6, 2014
4207F2118E51D350E14FF4F60CCF95B032DSep 6, 2014
440A284359C3423A10F4D2B581806F269E9Sep 7, 2014
404D5E651545AC13C8AAEB0CB2AAC8FAD89Sep 11, 2014
410C684BE11FFB2CA67CE22984D9577A9E9Sep 13, 2014
4143845D9130AB9789A67D3E56BBC8D6394Sep 16, 2014
4382836479E18438263B44C6318B05052F3Sep 16, 2014
4241C579A8A98357463D29D82EE81C55A84Sep 17, 2014
42433BA4073567572071A8EC088F5C773D8Sep 22, 2014
3984988B4AA02B9A9BE4E2303579EE65E23Oct 16, 2014
4444814E449BE0DF7385293FD6940C71C28Oct 18, 2014
440F2A9156E4709E526CE91B2D11D13DF71Oct 18, 2014
446A500AE21EB7ACDDDC9CBAC09DC78C00DOct 20, 2014
42286DE95C3B5C6C6386DDD9545ED2D95DEOct 22, 2014
442E221B7C7EF019617EA1215B51E714A3BOct 28, 2014
42401D5E8533BA9F27F79722C53889B1CDCOct 29, 2014
392BA06A588DA427B145273146FA7AF0A83Oct 29, 2014
424888FA0A2786579A50CB18D5C916EC434Nov 5, 2014
412F4DFE545C9227A43A8ED7A7B2BF3A002Nov 5, 2014
43088E865863E458224D3801210F295BC00Nov 8, 2014
4280E5D9B21E604BA5D9878983DF2E9C16DNov 10, 2014
444D261952CB11B8157273A9D16A847EDE6Dec 7, 2014
426AB3BDACC884471E49DF56934B59888C2Jan 4, 2015
434EBF5BC5C9140CD937382BC8E8DF80E20Jan 6, 2015
4209A90B0FFCDA3E5285F26F82CA9A4364AJan 20, 2015
4283B5E285A6F4C4862E73F99580E4F8CF6Feb 22, 2015
40242C8B1DD1D38D19070B71E881E7BB423Mar 6, 2015
422A3347E0996B02E1E2964F325F99F8838Mar 14, 2015
422CC84434EC6E9C12DBE43D58458904582Mar 26, 2015
4786A2669FB07C796CA90CBBFCEB15E2005Apr 14, 2015
428B010BBE72A8FEE3445C733F83C7ABAB4Apr 16, 2015
470E51D5F44915AF7F0B2832A3DFCBCAD85Apr 21, 2015
406EB658BB424FA96D2C894885FEF6B7A70Apr 28, 2015
43801746B40367766699CDD7D99EA3BD902May 5, 2015
4382EF22D1C8EF5B26E4A92C12602FAC401Jun 25, 2015
4307AB70743FE281432460F3EB7AD1174A0Jul 13, 2015
4228570CB7AF6D311C2CD4DBE48CDA25148Oct 23, 2015
432251BBBE48B830FBB49442F7D5B0B4EB3Nov 21, 2015
424DD80D2D497DC16D6FE8255769D1538A4Mar 6, 2016
4449B898C865303AC906AAAC15CEAEEB243Apr 10, 2016
44668D6A2A8B00A08CA0A60B2BD042EF4C4May 17, 2016
436198845B7E0DCF211A05AFEA8EADF4F1CMay 19, 2016
4289F334CC23CB03E96CDD87446C965D862Jul 9, 2016
410B0F95E4F5C0E5FA34D244A9C0B979C8FJul 10, 2016
4289D0A45D0372AB221412262C2ECCB8406Jul 25, 2016
424BEC9E99265547D8E4A7898A278CB5BB5Jul 27, 2016
408EC1F1F36B48FEB2E3B857068EB186571Aug 11, 2016
4222B29B3532F28D072ACCA3D617037B7E3Aug 19, 2016
398945D2DA4F06F75E3B2398ABDFB1B9E38Aug 26, 2016
4100230EC49229BEE5A7E24A0449447C7CFSep 21, 2016
424921D6690A3A9409463502CD488AD93D8Jan 11, 2017
4228531B9701A2C10ECBAC667F148290FEBFeb 11, 2017
396CCBE12C22573AD3EDF40047048FD17DCFeb 23, 2017
402A1E3421B214AD799351BD97686C44404Feb 28, 2017
4202426E91D3AEC2107D9B894FF134BE57CMar 8, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove BlockAndSurf Update.job^

  1. To enable deleting the BlockAndSurf Update.job file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select BlockAndSurf Update.job and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of BlockAndSurf Update.job and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of BlockAndSurf Update.job and Associated Malware.
  6. Notes:

    • The deletion of BlockAndSurf Update.job will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of BlockAndSurf Update.job will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a BlockAndSurf Update.job malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type BlockAndSurf Update.job. The name of the first found registry value referencing BlockAndSurf Update.job is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to BlockAndSurf Update.job, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of BlockAndSurf Update.job and Associated Malware.