Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:November 20, 22:46

Testimonials

Every contact I have had with Exterminate It! team has been at the level of customer support that I expect or greater.

Arcelia T.

File: chat.url

Location of chat.url and Associated Malware

Check whether chat.url is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific chat.url file locations:

  • C:\Documents And Settings\USER_NAME\Favorites\favorites\dating\chat.url
  • C:\Documents And Settings\USER_NAME\Favorites\links\chat.url

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific chat.url file locations:

  • C:\Users\USER_NAME\Favorites\favorites\dating\chat.url
  • C:\Users\USER_NAME\Favorites\links\chat.url

If you find chat.url file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The chat.url file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of chat.url File^

File SizeFile Md5Last Seen
9429E7D445374FB6519F3D184EE80BFC5DMay 9, 2010
159D9511063BB2D62B7675E00BB865FB020May 16, 2010
162238C6A99D4ED9EDA342E8958C79BE571May 23, 2010
148EE46508C1BA764D45A27FF6AA8961735Jun 1, 2010
241EA1D4C1FDC1037AD3B19EC74A3F9011AJun 1, 2010
1366F49F5A317BF6667CC30FCAA8B73A8F8Jun 13, 2010
158D0F7E8EE28C58E4FA4C5FC18EC9956BFJun 28, 2010
14891CEF400FBE709961659A86B72D442FEJul 12, 2010
941E92FB7233D9C686481996E85E9B940AAug 3, 2010
121C474EF119E82FF2D955A6B37810BF090Aug 8, 2010
734C310B1EA5DF5084690A15C67F1C13E9Aug 21, 2010
1624B2E4BEFE5341671D2B0FBDDD65C6C9ASep 24, 2010
635FF9E330EF54C46AC9195FA1C91D1B6FOct 2, 2010
162C339F4D4810018B31981708897FDCD3AOct 11, 2010
948179625A0FD5A8F19F878D8C2E045599Oct 24, 2010
1576611C84EF3547766A73EAA8CA28EB732Nov 3, 2010
19085EE9A46A8AA27927B8119B62FB0FB43Nov 15, 2010
22535D09F1F7EC45310DDDC473DD8EE4222Nov 18, 2010
1904BF641AC40A6787CEAEFBD2A52B8D9B4Nov 20, 2010
1629B03D9CC78693E8BCDC28C2DE1B60BE2Dec 9, 2010
1626975E5477023B57886560D3AB5524BE0Jan 25, 2011
162BFC3017716F6C8355D33F2050E9922E4Jan 25, 2011
162151E205093C7734517663D167A17D9DCJan 31, 2011
162C04314C5191CD1CD7FC7545217381FFAFeb 10, 2011
1238821D2B3FF592245CEEA9C5265FFEC43Feb 13, 2011
187A0FA7F5ABFD9F215528B0FD6EBAC64CDFeb 21, 2011
14282AAB5F458C07C12A72D955DFDBB2B47Mar 2, 2011
16240771D6C46F2269425DC43054D06885FMar 30, 2011
589B78F99BD9CCFCF1653934CB9AF91CDBApr 25, 2011
16259778D05492979FD7BDFAD67CE062FEEApr 30, 2011
1675DAF5964DBDD680478348013487DCA6EMay 17, 2011
162E80C4EDAA924509494971F0549458E52May 18, 2011
121F2B29E2C30C70309B9245B1781FC3140May 25, 2011
172AC61E565BCCE156944A7A848077B4B0AJun 20, 2011
279FA25D48361E00ADB71D84C5CE133D147Jun 20, 2011
1620E39ABDA485841B2E4F5038407B3DF06Jun 21, 2011
258AE958B5B0C00B931720593755E9E5C98Jul 8, 2011
12361990BD1740506EF149270E7BAB8E879Aug 1, 2011
104B6909D078D67762E07B2C3F967CE2ADDSep 23, 2011
180B715D0AC094501ADD0CE3C537BE64B71Nov 10, 2011
120A17D066FF0E02B8495AD25AD66590BAEDec 23, 2011
2777C57CCC72C58C106FF87D46F7074ABA2Feb 15, 2012
119114508E5098669DEC6E697FD595E23A0EFeb 28, 2012
2291729E9A4A3C3479281397CAA273D6625Mar 23, 2012
9621E3F7D50E5D2B9090065EB682EEA0BFMar 30, 2012
212268A2D6E4460BD0CBE4680B2A24348A3Apr 6, 2012
1807351CC35410CF7C6B47A3156B7C0FC34Apr 13, 2012
162A446AF5A2E2F1E5ED9498E754E3D98ECApr 18, 2012
1623CB0B71E07F0BF4904F1AA76C97FFFABApr 21, 2012
187954184ED19F52A2DBAA4820B4C3F98C6May 20, 2012
667C23740A488217495085B7CB520F1B6EJun 10, 2012
941B8000FA136EFC6E5264872B44784D93Jul 2, 2012
18018255040702ED95FF8286C8C7EBB5C64Jul 8, 2012
102DC103526FF8C62F89CCD184FCADD4795Aug 3, 2012
207E96B60E0B44BE9EB97C55DA534389EB7Aug 30, 2012
120D89C083AE157C9889B53E7C5F73B96FCOct 17, 2012
119E709B44D77A73D90D92063845427E206Nov 2, 2012
2175B95B861932FEDDB35576861F578F892Dec 18, 2012
1914EAD3325BC0BEBFBFDDB24F4AFCC436EJan 4, 2013
138192E2E4DB88798276A1F58D70B15DB95Jan 12, 2013
112D2CEA17D3302903E62173CAC57DAE4E7Jan 23, 2013
1232DB9AACDE0E572347BCE48C7922BE713Mar 14, 2013
225CB1179C9F0E5ED0AE5C8EAFE4539E09CApr 12, 2013
1962E3B7BE82974414A8940B81BA42F6394Apr 18, 2013
935F6BE9302C84DBD77333641DCB801530Jul 3, 2013
1488237F70445994E32D03A0F11FD3F3F9FJul 27, 2013
948658CF21B8DEDEE75F3FB215C8917DE6Sep 5, 2013
487CCC09C62DDAD709931799FFDFC25396Feb 3, 2014
260AE8AB5D8D05DA748E6FD0BF477361FEBFeb 25, 2014
5622D2B39D3DB3D1858F18BE96232FA804Jan 23, 2015
196F905B2FE73882D19CD927100F6760441Jan 22, 2016
398B334124BEE3B821456A3DD4DD47FE787Feb 6, 2016
162B03527DF05A880A8F23BAC8340FE05D6Mar 8, 2016
547BDE6A25A0229DC972B23B4B834FA6E4Aug 3, 2016
14335A9BB033C9396FD87E518861CA72B04May 14, 2010
1505F9A9A995A1D73796F70C7D180B48E57Nov 5, 2011
150EAF386FBE949F9E3614ABD47C0D33E95Nov 23, 2011
195BE5D5999FF41B89D4B49254AD669E841May 2, 2013
152076EFDFEED521A83C37D9DF8939D1E8AMar 24, 2010
16226F6F2990047C9E24A54290156688850Dec 17, 2009
620B9109CEB58F564D75C044B4D5FA0EB5Jan 2, 2010
1544B7DFC66F3A46E21C8CE57925BF14BD2Jan 5, 2010
193A9A5AC66B6E7D360B526E18D42384B72Jan 18, 2010
94AAB1FBAAEFBDF63ED5616B7E86DE0799Jan 28, 2010
180515574FEECF7650FAD1BD4B0B82E3D59Jan 31, 2010
162C5FD168AC26D3193A72608333A4E60EAFeb 6, 2010
16281BBB0B34C003C8CAD4D03985EC184E6Feb 12, 2010
1627A1DCDE912A152AEF626C2276127B5C7Feb 17, 2010
180BCC8366AF3F5D84363016254B7A3E350Feb 20, 2010
88786EF553FFEA45684CB0567E0555BBB7Mar 8, 2010
216A72B574FBEE521E7DBF2202C1B8DC1E0May 4, 2010

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove chat.url^

  1. To enable deleting the chat.url file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select chat.url and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of chat.url and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of chat.url and Associated Malware.
  6. Notes:

    • The deletion of chat.url will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of chat.url will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a chat.url malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type chat.url. The name of the first found registry value referencing chat.url is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to chat.url, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of chat.url and Associated Malware.