Exterminate It! Antimalware

malpedia

Known threats:699,443 Last Update:August 10, 12:54

Testimonials

I have had major computer issues in the last week. I was infected with the Darksma and Vundo downloader trojans. After researching the net for possible solutions, i found they are extremely difficult to remove. I tried a variety of spyware removal tools to no avail. To do it manually is near on impossible.
The symptoms are, computer runs slow, constant ad pop ups, hijacking of emails, theft of information and locking of a variety of functions.
I then found buried deep in a google search a link to Exterminate It. After reading it, I downloaded to do a free scan and a lot of stuff no other spyware had found showed up. So i went searching the locations and sure enough the files where there on my system. I tried removing them with no luck. So i spent the $25 usa to activate.
http://www.exterminate-it.com/
It removed all but 4. I was disappointed that the Trojans once again reloaded and my problems continued. So, i used the SUBMIT STATE service. I supplied all the info i could gather, pop up addys and what they were for , what others programs had found and Exterminate had missed etc. Within 24 hours i received and email telling me they had updated there system and to download it. I rescanned the system and it deleted all the previous locked files.
Darksma and Vundo downloader trojans have not done their re appearing act since and my comp is running normal again.

It's worth remembering the addy or downloading it to see what it finds. I had no problems doing so in anyway with this program. They done what they said they would on there web site in under the time frame.

Source

Administrator of Horse Racing Forums

File: chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage

Location of chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage and Associated Malware

Check whether chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage file locations:

  • C:\Documents And Settings\USER_NAME\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage
  • C:\Documents And Settings\USER_NAME\Local Settings\Application Data\Google\Chrome\User Data\ChromeDefaultData\Local Storage\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage
  • C:\Documents And Settings\USER_NAME\Application Data\Opera Software\Opera Stable\Local Storage\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage file locations:

  • C:\Users\USER_NAME\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage
  • C:\Users\USER_NAME\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Local Storage\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage
  • C:\Users\USER_NAME\AppData\Roaming\Opera Software\Opera Stable\Local Storage\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage

If you find chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage File^

File SizeFile Md5Last Seen
3072C0C2DFA6F9469A0588B809C113C7A38EOct 20, 2015
307238603A4E825068F1DBC760DD5EF75C6FOct 20, 2015
3072312467931308EC228AB7C4A624CF9E73Oct 22, 2015
3072157CAEB11FD7F218A149762EE08EEAF3Oct 22, 2015
3072840226E86E2DCFD90FF568158953F231Oct 29, 2015
307261154EB8C2A1818CBB30D805B0649659Nov 3, 2015
3072CA7D71B9E357E14B16BA12116F2CA1C2Nov 8, 2015
3072251DB2E53DA4F874D627A3D74D9B33C1Nov 13, 2015
30729517B44D34D9811BB0F1222125EB32BBNov 15, 2015
307252F78BB382A1626F2F18C041C7068774Nov 18, 2015
3072D3809D855D34E2A04C46A2A573BE7BE6Nov 24, 2015
3072B53A5A72C978BB159A22A65B441062CADec 12, 2015
3072124D8F0E80F5467D89C92913EFF79069Dec 25, 2015
307284553793ABDC2EFC7B27ABB46385B4C5Dec 28, 2015
30721E00AF857D63F45AE837A24338332C8ADec 29, 2015
3072B440B3B2E83798FEE21FF157DF3B5483Jan 12, 2016
307267D2AAB0578EB25697719EB922C9D399Jan 12, 2016
3072415948CB54928AADABD295BC86CE869AJan 13, 2016
30727D104906458F9D76A9E87EA8BA9398EFJan 24, 2016
307255D64728CA37D838863521B6EB7AA960Feb 4, 2016
3072C7EEBC4F5CE375A50504A5C6298E67E3Feb 11, 2016
3072796244BE0581DDCA5998A78F7E97ACC1Feb 14, 2016
3072835E9BB2962ABC9E78CAE754EAE10263Mar 17, 2016
3072E502314C3E98E4655F07B4C785F0B0BEMar 19, 2016
30720C55C3C3FA7E124D6C91CD493F07046CMar 23, 2016
307208C9E1DD7BBEB38ECD86B9E1555C6B7DApr 10, 2016
30724506D6533AD6581EF57CD14830D66047Apr 24, 2016
307200813D8801B8BF4BD27C80847726982AMay 14, 2016
3072EBC2CF163A742C7B9D47D92E5BB3FF46May 19, 2016
30723FE0756369AA4BB00F3DFE51BC949252Jun 2, 2016
3072337B3743ED54E05E51BF3F06C11F3DBCJun 14, 2016
3072CEC2C569C109BB85C2FBDB81725912F0Jun 17, 2016
3072C94A2EA7135A26CA590A38E4263CD1B9Jun 25, 2016
30726F6B5578245F5014F31A8B4B47CA95B2Aug 12, 2016
3072E2F0BB2C2169B6B53E8FB5D6B9823A39Aug 23, 2016
307201528916C2A5A0A04073EBE8DD30784EOct 18, 2016
307260C15B52CE73AFB7C7957CD61179D68DNov 6, 2016
30720942CDDC97617C8EB2B73E78B74CEEB0Dec 3, 2016
30720196B7EF046024B7948C2C15EE947656Jan 27, 2017
3072F56BFC8400D827C9FE4767C492A055D1Feb 11, 2017
3072BDFCBA68AD0A01ABAAFB16C4A147AB67Mar 21, 2017
30722553201F50DA7E3C2965F53524C91E2CMar 29, 2017
3072AAA269E30750B6AC1BFDDFC29B741B2BApr 18, 2017
307283F5AF472F2721223AD789D222D1D930May 29, 2017
307282697F31430E2D6BE91CDFFB49102F67Jun 5, 2017
3072C1D87FC26E7A4D173899A375BB1F2889Nov 13, 2015
3072A8796A27CE3AD25E14BAFCEFC50427EBNov 13, 2015
3072A9FEF1647DE3A498494D9BB42BEA8B90Nov 17, 2015
3072F9FD59FBE5E14F927F60C256D4B78361Nov 29, 2015
307282DAF4AA923F91A7629CBEB08FE5473BDec 12, 2015
30725892EE2C86ADA201BCEC6407CDBD5EC6Dec 28, 2015
3072411C2C1A707A193BCB21A69715BE62BCJan 2, 2016
3072AA10105B13B3A707F6ADC0AD4B74B123Jan 17, 2016
30721828103E76085314EA12D6D2598469DFJan 22, 2016
307281E216AE7FF1BF6F37E80A9750FC6C87Feb 11, 2016
307215AEF3B9C7ED5DD7414E532A58BA9F2FFeb 14, 2016
30720BA9D538F2A751F1E66436704FA824A3Feb 15, 2016
30720044C48AD8854092E9ECA6870437B5B8Feb 18, 2016
3072C9F8EF17B71D9F2540E41502A7A35681Apr 1, 2016
30726DF78D0185F0880F40800C45C90F10B8May 11, 2016
3072EF488BBD3403E8144EBB617FF2445DF0May 12, 2016
3072357BEA242B69695C94B5185FF3221322May 23, 2016
307207DF44C61102F85D6FD442D6DE9A9EEBMay 30, 2016
307295C2145CD510F9612B4D596307878051Jun 1, 2016
30724542B473D941300A51E69D3FF398AD89Jun 20, 2016
307225AFC215E31493DFE3907E8FB1A5296DJun 23, 2016
3072FAA51D7D360257E5B807BEBA16ECE70EJun 25, 2016
30728B62821F10C14B6CDE29E1FFAB037C53Jul 15, 2016
30724B09F30B0772CA2F055926943B86E03EAug 28, 2016
307298FFDBAE71C4AC770A93EDF18B5251BESep 17, 2016
30724DC0EB47BE004FF16D8404E9CF25D0D3Nov 11, 2016
3072B97394FCF1F198DE3D052AC184711F6DDec 12, 2016
30722697C7C0BE78D85F4981269555536CD0Feb 7, 2017
3072E0D843882600AE6D1489E487C2EB3BC9Mar 11, 2017
30721268533CA74C5A3571A084FA0DFC5FD0Apr 5, 2017
3072779788CCE3C0172F784F5FD4E7885A77Jun 5, 2017
3072F9AEAB75B10059D0CF14FB0D2B15081FApr 14, 2018

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage^

  1. To enable deleting the chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage and Associated Malware.
  6. Notes:

    • The deletion of chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage. The name of the first found registry value referencing chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage and Associated Malware.