Exterminate It! Antimalware


Known threats:699,742 Last Update:November 20, 22:46


Hi Jean,

all done. I presume it went smoothly as the computer has not disintegrated into a pile of twinkling dust.

Very many thanks for you help and patience at Exterminate-it. When I contacted Exterminate-it and loaded down your software I was on to my third antispyware company to solve a problem. Two companies had refunded subscription fees to my credit card rather than persevere to fix the problem.

Your team has guided me through the problem. My system has continued to operate through the whole procedure and you have been endearing patient with an old computer geek.

Keep up the excellent work,


File: cruises.url

Location of cruises.url and Associated Malware

Check whether cruises.url is present in the following locations:

cruises.url file locations that are Windows version independent:

  • [%DESKTOP%]\cruises.url

Windows 2000, Windows XP, Windows Server 2003 specific cruises.url file locations:

  • C:\Documents And Settings\USER_NAME\Favorites\ travel\cruises.url
  • C:\Documents And Settings\USER_NAME\Favorites\travel\cruises.url

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific cruises.url file locations:

  • C:\Users\USER_NAME\Favorites\ travel\cruises.url
  • C:\Users\USER_NAME\Favorites\travel\cruises.url

If you find cruises.url file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The cruises.url file is associated with malware only if found in the locations listed above.


Different Variations of cruises.url File^

File SizeFile Md5Last Seen
9408A7BE2324EC411A7833FCCCBB518EA6Nov 28, 2010
1392AD9E4F4059CEA390CAFDEECEA85D739Jun 13, 2010
2316F1499B7C026409A6F32FAC94B1AC20DSep 21, 2010
10542D145746E3DA282E3399D6C9EEF24C8Dec 1, 2010
8043555BF30CBE140B37CB59B3F93D99EDDec 24, 2010
111FE31BBE8E47AB3505790F67F4CE8B7EDMay 17, 2011
16015CBD00E920666BCB084FACCF9FCBC1DAug 21, 2011
235BB76C8E0209016D7768F991FDD91F1D0Sep 13, 2011
18663DC63933552FA660F4E505C9DE51F34Oct 18, 2011
8220C3774A55FB32E80E853E798E4F05CEMar 13, 2012
10505D9996745609A8CA2DD783288711277Mar 26, 2012
157E63B33D089DD532BEF5B355E42ED1F1FApr 13, 2012
1057B0264CEBA1B0D3763297568B29E52B4Nov 17, 2012
145637BE3EBDCC410760789FB4F6B43F147Jan 12, 2013
156125C376E5F0668438595B976D807B901Jul 5, 2013
61FD10E8164AFEAA94983B033E9C392B19Apr 10, 2012
882B738B0E33790539572AC4B65277C2F8Jan 15, 2010
1057AF67E52104AEB1255C03737C768123BFeb 4, 2010
17144C8AD4D97F92DB8D519A5B49A98B2F0Mar 25, 2010
143D416450C04D6B9C19CC765E37A1F3E84Mar 29, 2010

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove cruises.url^

  1. To enable deleting the cruises.url file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select cruises.url and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of cruises.url and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of cruises.url and Associated Malware.
  6. Notes:

    • The deletion of cruises.url will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of cruises.url will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a cruises.url malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type cruises.url. The name of the first found registry value referencing cruises.url is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to cruises.url, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of cruises.url and Associated Malware.