Exterminate It! Antimalware

malpedia

Known threats:695,275 Last Update:March 17, 11:57

Testimonials

Exterminate it! Has ultimately eliminated Trojan Vundo at last. It's ability of eliminating virus was way beyond what I have expected, and way beyond some of the other programs I've used.

Dominik M.

File: Documents

Location of Documents and Associated Malware

Check whether Documents is present in the following locations:

Documents file locations that are Windows version independent:

  • C:\Documents

If you find Documents file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The Documents file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of Documents File^

File SizeFile Md5Last Seen
48703CF30E2D693330338B74064A15E8F8BBJul 5, 2010
791417C5F6827CB0286759B7A1F87AC0C5C1Jul 6, 2010
33D80249906DF052F68E30696869729A2FJul 8, 2010
10343A0CD49036D1E352D27FB11144C8C0D85Jul 14, 2010
13213D674D3D410694E396BA665BE5684C5Jul 17, 2010
392CC4D3CAF6D3EEBE7FC56F39EE09C266Jul 21, 2010
115EFEEDCDF2FF90AACAAB262413B3C4A0CJul 28, 2010
30572BA774D32FA0761A712DD55372B4AC16Aug 4, 2010
281051BCC2CF1BEDF378224B0A93E2877Aug 5, 2010
848546D13E21A2FC1C685E3A07B2BCFBD600Aug 10, 2010
289D6416A96B869B393531937ACC5FC3A8Aug 20, 2010
5123027A764EC031BA6B40865592FBA683Aug 21, 2010
568B1558E027C30CF0319E2EAC93F80A28Aug 22, 2010
209245F65845BE325340C6CEDBB586F78A9D0Aug 22, 2010
45245DDFF1AA1D926DD8DC5DEEAF49CBFE1Sep 11, 2010
24587699E4FDF47975881C346A804AA72D9891Sep 13, 2010
14998644288AF19690D6012897FDB37E45B7Sep 13, 2010
51A576FBAFE4D4BEB1D330C1FC8DB52420Sep 17, 2010
134158F1E70F12EAB56AC17FA8A0EDEF07582Sep 25, 2010
2150442C147873C614714B8067A5952FD2067Sep 29, 2010
13989E694B49A73C5A4A8F139A823375AB4Oct 7, 2010
140EAFBBDE95A527DB1854EDEA6FDFE93CFOct 7, 2010
250886E72D16C6D87DE0AFB8945AEF62C756Oct 18, 2010
44D151829EF3D6BE19816453B602F02B2EOct 22, 2010
325164753B8631BE9BC18823C1E32DA53D710Oct 22, 2010
1090C2FF09DCCBAB6222A7AB34631C3C54C5Oct 24, 2010
9240B889AA01F677CDBDF7A91C5FF91741Oct 28, 2010
682EA3DAF97269227339D729ED4DDF12A3Oct 31, 2010
56F08922C984D9565CA68489EB513AA489Nov 5, 2010
9076933E4F600E0901BC1D8A377E9EA8D3500Nov 6, 2010
6600B4EBADCAF0366E743E1618425C62AENov 7, 2010
106D8A512C109F5F7A778115E8E946C68ADNov 10, 2010
19726059A7993B19E97EE76243787664911A35Nov 12, 2010
1090CA18D3EED2FAB75FB91A67F593D76684Nov 15, 2010
597E196541BECF67F9402BB287D5C2EE2A8Nov 19, 2010
547D74BBEDB79D09B136EF87B020E85FEF2Nov 19, 2010
2C4103F122D27677C9DB144CAE1394A66Nov 23, 2010
42E83957BC7A514FBAA067FB08A6FE7627Nov 25, 2010
600B33D6E6C8DAB2311606B4CA2BD01C2ENov 25, 2010
1357B2206C277AB774CFB581028B2D4A8500Dec 2, 2010
122841A52B60B1E77062A95F0906FC6FE0E7Dec 5, 2010
498792DA0D2EE2CDFB4EC8479D129E4926Dec 13, 2010
64149431EEEF92CF37F055A9DD0D4A8D7FC5Dec 13, 2010
882B6C5813C4305977CC6C607C1EF6A886Dec 24, 2010
5705395CBD532D2A4BE888A8C1D94AF5CEJan 4, 2011
580C4229381B92CD00E4465DE123E5847BJan 6, 2011
76787B1E6A6593050073607CB93CF59F4D278Jan 6, 2011
918122E8B3F21DC9C42392F665EADE4764Jan 9, 2011
10574E7FB4D538A83389DFA2DE82C39D16C3FJan 10, 2011
910BA5E25B6E5CA9337EBE7F45B8E4AC70BJan 13, 2011
48499181BC854BAC3923BD53BC75952A08Jan 22, 2011
231488E8DDA41EF1C137C0C771DDBB3D11A37FJan 26, 2011
666FEE26C21C6853DA43C340D375F582565Jan 29, 2011
166DC7A16550F2CE5A9EE01F055E9B4E7B7Feb 2, 2011
833CCC98252FBF828EFD8E0EE67444BD0DFeb 3, 2011
2147483647D41D8CD98F00B204E9800998ECF8427EMay 9, 2011
58ACE1EF0CF50C444FAB871A44DE12AD0BFeb 9, 2011
1666B0060D27EFE2BBAADB85BFE7ECBE5C1Feb 16, 2011
30951F7F9BEC0AC393B26EB03A1771C915Feb 18, 2011
9073B0CE289F75A103DFA3F5CDC9513970Feb 28, 2011
599DBEEDD4BFC43AFF098A4D0DC9BEEBEAMar 9, 2011
40864FA283E631C6CB7E6B7A35F7769D40Mar 14, 2011
176C10225101EA581E9460B31E076FFE0F7Mar 14, 2011
299818E95F7D6E683115AC3657E7371D0D67AAMar 17, 2011
15885A0373C673D42470E277726670F06F0Mar 26, 2011
70521BF0D75C5048F09B63F855140778CA0Mar 26, 2011
112F3B785F29F3A0105B224EDFE3E18AF5FMar 27, 2011
178E1E817373A193F2641C03D8ACC4D262BApr 3, 2011
220420E3AB8AC95203B014824737287E66AApr 3, 2011
41EAC09F2D1F9D4F5D27862C0F8F399BECApr 4, 2011
1076192822E55BC421FFB090CAC2D2052B46CBApr 10, 2011
135E45D060ED4E9EE524E980E33E7153D72Apr 10, 2011
27618888F6D06E8BAF68460D32E83CED1746DBApr 11, 2011
9808ED71EDA7D4FA18CF485AF5C18CBA3FApr 12, 2011
7168A11CD5728E781448DEFB6B586ACD586EApr 14, 2011
54916E8E3819C5195D605E8DF71DF929BDApr 25, 2011
5615888814375CC6CD7E0AA0A2FCEBD29Apr 25, 2011
2F3B25701FE362EC84616A93A45CE9998May 1, 2011
2868A893613438D14E4BEC5284E21AF346May 4, 2011
12131711549D86FD61D6C370CD7C4000023May 12, 2011
87BDB904902500628C6C510CD723800558May 16, 2011
403BB1E642BFCAE76E83D9886243DD2A2DEMay 19, 2011
87341BA821D5CE72A35C4D8A2A565D666E77May 24, 2011
48F5E9A73158CFDD2BA8CEDB77F5079FCAMay 30, 2011
169C897F9CF1DCDF6D322A620727F3BFED9May 31, 2011
4096E96994442EE60555AAAC434A8B32E4E7Jun 2, 2011
177FE07DE33C1C73CC6FE54CFA1EED1CB26Jun 7, 2011
424AF2CC134C1779EB2D7E32FBB5A12F5E5Jun 10, 2011
1651A50F91FA7015A72E4873C4BFED25E9FJun 14, 2011
260123E0C1D81FC593759B6E783D1BE34D4651Jun 16, 2011
18905C9FC3AEB422FE554BF2583195625D50Jun 17, 2011
148BA176A979E16424CE0F1CB1057F3BB04Jun 21, 2011
6309448187AB2B02F30454502305D8A37FB3A1Jun 23, 2011
211B90D2623E281241809657DCC5EF6D59Jun 24, 2011
2455DFF8D15A1E434DCAE167BBC865D012BJun 25, 2011
313F75ECB187F70482F6014EDA973A80163Jun 26, 2011
2754F8F8E8FF0FB1BB28C3FAD68EEB95C67Jul 22, 2011
600FA262C15313CC5C5FD0B05A7BA94CCDJul 23, 2011
177780107BAB3C97575E1A905C950A3737AJul 26, 2011
1654185A3C15A3DC587BF5E53EED5CBE49DJul 27, 2011
165B5AD201C3E52FB0E90A3A4319EB0A510Apr 8, 2012
932D4C4DABAD42FB63686DCC7C03FAC774Aug 16, 2011
36912391EC3ED14B6454F47615EE330A65BAug 18, 2011
206D496F5CF7E7787706BD2323949F7E3EBAug 29, 2011
78465855F2299B8363AD423E038C688D0304Sep 11, 2011
158A3413D328C3EDC08066D5C562165CF9CSep 17, 2011
56585159B242C01537AD3FC5F80A84487FA92Oct 7, 2011
28632D3C300F82013A03D0E1D5E55C415C392Oct 10, 2011
54C470AEDF6E14E0B8584B1CEE6C46F83DNov 8, 2011
29490031CBD8224FB18CE6D62765EE79E481CNov 8, 2011
373B75606CF53716A2D605EF2E41AE1DA4Nov 21, 2011
921654CE1CE62072DB70811E2E2BCBB2BF880ENov 24, 2011
78C6660CA8392D31DA9AFF1CE8EF21F8EFDec 3, 2011
165F9886FB50F31BCB007A87DBB6D8FB495Dec 5, 2011
14667551D54C346692D68B5E862BBEB07B20B0Dec 7, 2011
43BD434867C60C1D657D9F6CAF64D80FF9Jan 23, 2012
49AEB7F1A6545B7F3FC45E2B54F614713Jan 30, 2012
8147640C7C63F7B6DF9AC036920786DA6C29Jan 30, 2012
1568F0072CB81953F06D3B04203C8932FD3Mar 18, 2012
15990BA60812E9355F41839E57625DDE7923CMar 29, 2012
912EF9F78F66B5BE9A9091C258D6C0E8B3May 21, 2013
140D1F32F4DAA67F4FF194C0A740437A03EMay 6, 2012
165BED3DAA0E25E3D352E4AC65AF850EAB2Jun 14, 2012
27793ED415988090C233EA75398C3B3C7313AJul 27, 2012
2289547DDC641FAE7B54A98834A62D0CCA19CAug 3, 2012
291845350BCEE106FFC2A0A0728EE9F8F1FC0Mar 19, 2013
13050E73D8F63CC6786132738265D6236C966Mar 25, 2013
174785938C653EC8B188809F26861F8BF2C13Mar 30, 2013
2969680519EC71E5E08CC365F3B797EFAE384May 28, 2013
45716BBAC53176926701EE1613CBD21B7D651Jul 30, 2013
62DABC62083E670C9A77E601358BDD6ADDec 5, 2013
45215ECDF334A2666F649956FD2E596FDCCC8Jun 21, 2014
1202A0AF0AF51C32254D011C0AED584068CMay 29, 2015
24016FB96B61E5E570B1A21CE04815131AAJun 7, 2015
132D61826588F67D06B9ED8724704B3CECFOct 1, 2015
64944F3EE8F3EA858D12A7B6F8DDAE8B14B8EOct 16, 2015
164DB0A9CC39DF8E6F9E096BAAC3F37467FMay 4, 2016
248ED14E4B886F76321AC44EB5CF09C25E6Jun 26, 2017
983EC7FB2A52AED07C90531E308ABB4F47Dec 2, 2011
1972A7A4C3316D472D3DC65A679B6D04E109Jan 17, 2012
44DF5DC1ABC0D52F3C9E931E26A7C0065CMar 15, 2012
40036C022E219FF21E9C59BA646C789D95520Jun 23, 2013
48068DB60ADBEB84785A356E10A4818AB78Feb 27, 2015
385169B1FA2C05F9BF440F630127D87BD0982Aug 10, 2012
771236E9729D462D58CC2C53A2BE6522873438Aug 12, 2012
427171A2D9113B6C468BBF2A8A80D05D26B0ESep 5, 2013
60937F19383D2F37AC3DD31AE9E95501C6C19Feb 5, 2014
354B95A2083A835368E16EF2EFA3E27F11FDec 2, 2016

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove Documents^

  1. To enable deleting the Documents file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select Documents and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of Documents and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of Documents and Associated Malware.
  6. Notes:

    • The deletion of Documents will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of Documents will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a Documents malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type Documents. The name of the first found registry value referencing Documents is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to Documents, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of Documents and Associated Malware.