Exterminate It! Antimalware

malpedia

Known threats:700,085 Last Update:March 01, 12:55

Testimonials

exterminate it remove the agent.nbo files without restart. i let it scan again, nothing found! great job!

now i surf since 5 minutes, no popups, it looks like the problem is solved!

big thanks to you and your team, you are the only company that give me response and realy help to remove this bad worm/malware!

i will place now links to our network to your homepage and email my friends and business partners that they know that there is a realy good company with a great tool and good programmers.

thanks.

regards,

m. s.

File: Crossbrowse

Location of Crossbrowse and Associated Malware

Check whether Crossbrowse is present in the following locations:

Crossbrowse file locations that are Windows version independent:

  • C:\Windows\System32\Tasks\Crossbrowse

If you find Crossbrowse file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The Crossbrowse file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of Crossbrowse File^

File SizeFile Md5Last Seen
4058EFA72F573F8FE29E62017824055D4D3FApr 15, 2015
40941255DF1FCE04EA189EC45A5F01BA12B1Apr 16, 2015
4086B1DB8276B204D53D504D9C999686A6CFApr 25, 2015
40780A46C461ABCEF55D5F4401E720CBCA2EMay 5, 2015
4062E65F284E8D1F89C86F90BD18D8825C32May 5, 2015
4072EE773C63247994E9BB2085E5A49C6409May 8, 2015
40700723988DFCD6AF00F348E9109A8F3BDBMay 9, 2015
408893E8FA97E4AFE9DF6E56958FE1816EF6May 16, 2015
405287758AA72CF9A4E4E038352ED6426871Jun 14, 2015
40586E35025956B651FB09E823AEC3B57F00Jun 19, 2015
40681B669C1571045FC5F5FD71B4F5287CB4Jun 19, 2015
410605B2D4B558A29105450F9C40157FDAAFJul 2, 2015
40888EEA12DA51D1D5388110367372ADDDE1Jul 2, 2015
405204843EED23F4C34C76DB25F2FF0E4F45Jul 11, 2015
404216A1A57F1E01232F0E5FEDE327172044Jul 18, 2015
4090D5199536CBBB1592D5CF2F7513DA72E8Jul 30, 2015
4064948D0E2F4EA16866814B21190752D244Aug 4, 2015
40767C4B9A13FBBAE493DBA513239A6ECC38Aug 21, 2015
41329084CF2CAC3C24456E995B06D28DBB0DAug 23, 2015
4116DFFB5FD165D0451C2928E13ED5B69D50Sep 6, 2015
40703B1868C7561090CC1253BF13536CE065Sep 7, 2015
41709614962F1AD81A3051DE5E352BD8D2AFSep 12, 2015
4058644B0F1676C9B94AA7AE65504D0D27FCSep 12, 2015
41006240C4F68F79D3DDD54B362A1490BA4DSep 15, 2015
4076FD8BF0C0DAFDE6D79794484C19D4E8DBSep 22, 2015
409666CDF54C706D5A55CD27A15E1180E637Sep 25, 2015
41320B88FFD1A2D0C9202BB04288FB5BB06BSep 25, 2015
4098097AA1CB195B5BA224B66702DA771101Sep 28, 2015
40980BE8B0C799A12E7C4D34B37E814FD223Sep 28, 2015
4102E8C602404C550800BA926D2A889FF319Sep 29, 2015
4088B11EDC6F1B70FF34CCD9B13CB08F1107Sep 29, 2015
41107E7A76A69E0D47B068B374EB20D3F846Oct 1, 2015
410859797A4CE14726B075B380A0CFE983F2Oct 1, 2015
4088E1B3066E6003752E0BB4A75F2B08C1B9Oct 5, 2015
420401348C4BCBA66D064A58B8BC7B934908Oct 6, 2015
4070C7CA330242B0395B73F1F6628713D528Oct 6, 2015
4198D4461E36A1FBDF087275F3B67315C143Oct 6, 2015
40647CD1E33178A97442FA0C0000CE81E364Oct 7, 2015
4194F1040FA4ECF3F487B512C628E43D547BOct 7, 2015
4070755B2E78979D8A9891CAA7263D03F550Oct 20, 2015
4100AABC0FBB3E0E8DCD3B82FF99623E317EOct 21, 2015
4064C8AC80CE7BEA9BDA50F86A48F821BADDOct 27, 2015
40641AF08EFB3CE60A855991A066A8E3D6C2Nov 5, 2015
4052B5A95E6E1AA63AD1FE9FF105AFF15E18Nov 11, 2015
4070F119404F5739F2DDA2FD0D0E7F532654Nov 12, 2015
41147F84AB509E63EA58A616289D2499307BDec 4, 2015
410264A048DB9593B3966A586B83B7B9AF1CDec 8, 2015
40768B11D4A8F29F3E4FA6D1C12B24B580B7Dec 11, 2015
41162EF0D0D89885FFE8A22BB5422BE2E616Dec 28, 2015
40942EFFEEBBFF56500E41CEB62F9513929EDec 30, 2015
408695DC7C66351DBD0E7ABEACA43487EA1FJan 2, 2016
4070BE9D5B8B8E16F18F84A0A5F657119C02Jan 20, 2016
409458EABDA715AE1B531ABF606B2B01A37EFeb 2, 2016
4080369EDBA9968E54C39733AE9E35925E4BFeb 11, 2016
40589FA6AE3762D750F0F2FA992017E69235Mar 9, 2016
4082C2CB85C3D3C4ED1B2E24B5A79C6D0D60Mar 20, 2016
411671FAFF0D27FC943BE5712BB7EE35CA10Apr 13, 2016
4064ECD0D903C18130C0ABF33667FDD7C254Apr 21, 2016
40887C251F482170CADC079577FB03119FD8May 3, 2016
4074BF34E9FE7D9AB107478228E455AE8595May 29, 2016
4064340BDAC4BB11DDC189851DBC80BA5931Jun 5, 2016
4104A0EDD3ED985E76BBD82CAFEEE4C2F1F4Jun 15, 2016
40981AFF63F918EDF2F0226713F3D1FE7359Jul 3, 2016
41022D63909A5979BBF830DADAFCA66E9066Aug 1, 2016
306443A5FC41A862048618F34AF96BDF1A55Sep 6, 2016
40706A6FAE8296709257BD61E1A3C2BFE27CDec 7, 2016
405039D64EA16ADDAFA83812D5EC6A3D58BADec 8, 2016
41108CE1C5E4C8EF15D6B97853B886DC618CDec 19, 2016
41043DCDB268453F6DD1B39ABF1667223FCEDec 20, 2016
40728FCAA167BD2C581C6AECE6C35B1DA2CBJan 7, 2017
3640F75493FAD106EFBBCE39787A3DF3F3C5Feb 12, 2017
4058AA9792B4482743103BB3E72CF3544B79Mar 28, 2017
4064243AD311923D153228EB207B56DD0865Apr 9, 2017
40763E5D806055E47C44050B610FA7FB42B6Apr 25, 2017
407046192B727AA1A4AC2E89579EB2D4BC28Jun 7, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove Crossbrowse^

  1. To enable deleting the Crossbrowse file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select Crossbrowse and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of Crossbrowse and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of Crossbrowse and Associated Malware.
  6. Notes:

    • The deletion of Crossbrowse will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of Crossbrowse will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a Crossbrowse malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type Crossbrowse. The name of the first found registry value referencing Crossbrowse is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to Crossbrowse, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of Crossbrowse and Associated Malware.