Exterminate It! Antimalware


Known threats:699,742 Last Update:November 20, 22:46


I have had major computer issues in the last week. I was infected with the Darksma and Vundo downloader trojans. After researching the net for possible solutions, i found they are extremely difficult to remove. I tried a variety of spyware removal tools to no avail. To do it manually is near on impossible.
The symptoms are, computer runs slow, constant ad pop ups, hijacking of emails, theft of information and locking of a variety of functions.
I then found buried deep in a google search a link to Exterminate It. After reading it, I downloaded to do a free scan and a lot of stuff no other spyware had found showed up. So i went searching the locations and sure enough the files where there on my system. I tried removing them with no luck. So i spent the $25 usa to activate.
It removed all but 4. I was disappointed that the Trojans once again reloaded and my problems continued. So, i used the SUBMIT STATE service. I supplied all the info i could gather, pop up addys and what they were for , what others programs had found and Exterminate had missed etc. Within 24 hours i received and email telling me they had updated there system and to download it. I rescanned the system and it deleted all the previous locked files.
Darksma and Vundo downloader trojans have not done their re appearing act since and my comp is running normal again.

It's worth remembering the addy or downloading it to see what it finds. I had no problems doing so in anyway with this program. They done what they said they would on there web site in under the time frame.


Administrator of Horse Racing Forums

File: chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage

Location of chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage and Associated Malware

Check whether chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage file locations:

  • C:\Documents And Settings\USER_NAME\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage file locations:

  • C:\Users\USER_NAME\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage

If you find chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage file is associated with malware only if found in the locations listed above.


Different Variations of chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage File^

File SizeFile Md5Last Seen
133120314730C484F7BE03DFB2FF82300A8BCApr 29, 2014
18432824AF640F7958E612617C9DFB13745AAJun 24, 2014
26624A829A2D8E43DAC52857900A593EF198FJun 24, 2014
9216FAD782936F4C4716E0238A380D617DABJun 26, 2014
131072D3D3856EA4012572FACD16CAD59E07FEAug 1, 2014
1740899DA3607F7EE01188E20738A6998141BAug 4, 2014
6656064C563CD15B81A55E1B505A7FE0CB8FEAug 9, 2014
19456B9170FDAE26D54B0316E2BFF9C097897Aug 25, 2014
20480B099031FCB6411F1B81BC55FC649AE76Sep 11, 2014
1536048F6C8BFE3978089875F4C5DA287520BSep 17, 2014
23552016408E805CC014125CFD55F6DCA3E8CSep 21, 2014
1945626E1209FFC529C5FA845D37C06ECA7ABSep 23, 2014
276485F448AE2C68074EAF5E28706F238005BOct 20, 2014
15360DD79F76D8B1A7300442D44E54BE53A06Oct 29, 2014
53821445F1596B1DCB3C51E94F4EE9910BDBEA7Dec 13, 2014
16384D707E711C8FE133561DEB363B2A0C084Dec 30, 2014
215048352C3E8D4D619946C824FBCF4C3373BJan 30, 2015
2191366F97AC5F845522ACC05552F210753B34Mar 31, 2015
459776CB4CFF72207BE26867703DD941394F96Apr 3, 2015
131072936C0D74FF0E872E52A350341CA4315BApr 24, 2015
1515521B25CE7A52EC96D66AECAF2C280E86D5Jul 17, 2015
24576579D1FDA90EAAE2CD6AB05BB2CEC656DSep 22, 2015
194562C26BF1E1264831A051EFDFEA7B1A623Sep 30, 2015
1146889A97CEDE4584C97677EDAA1E094695BBNov 7, 2015
1228878D0D648B89C2B5670BE291FEB8C3BFCDec 13, 2015
145408A6156416DA4FA2135B9CD723E656B7FADec 16, 2015
65331269B727108879893DDCEA070A6686C8B3Jan 13, 2016
1572864023ADCD68EB226C6168F0BF517EEC9EDFeb 2, 2016
20480A5F4BFBB5A093655D3AA402FC054BDB6Feb 10, 2016
1024043F9760CDF9BC7C05DAB9DC729B53A12Apr 25, 2016
16711680E5615636268C377686E302C1517096DMay 5, 2016
3492864C639DC828AA64615FCD74AC192B83B49May 19, 2016
2150433C54CDA46A0B27967E776122352EF03Jun 25, 2016
327680136ABCD73BF33C652FC3B0CB36F2FEBDJul 12, 2016
225287A04982D29EEBB67E58B5EF1F635CF4CAug 10, 2016
215048D2C3B4AC63038033D145A57E28329DFOct 16, 2016
425984F7891EAA4DC4D7189947450C0840AF0EOct 28, 2016
19456F2C12F541DE6311E0B6167AEFE490D5FDec 15, 2016
3072CBAA14688A7B0CF8D6AC92079191227BDec 19, 2016
1536013E12C2E0D6A98ABD12445030AF83D6EJan 25, 2017
12288194E03F831FF183CE0F6F43EDFA3D3FCFeb 19, 2017
1945657F685F6ADEE323CEBBF595A3B09011DFeb 22, 2017
292864817B8C553C3C50FA222A0336DA77F472Mar 3, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage^

  1. To enable deleting the chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage and Associated Malware.
  6. Notes:

    • The deletion of chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage. The name of the first found registry value referencing chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of chrome-extension_ehjkfdmkpocpileolmldepapdjbfegei_0.localstorage and Associated Malware.