Exterminate It! Antimalware

malpedia

Known threats:699,443 Last Update:August 10, 12:54

Testimonials

Hi!
I just wanted to thank you. My computer was frozen last night thanks to an online Easter card that was sent to me via the funcards site. I couldn't do anything but open windows.
I tried to open the exterminate it program that I purchased last year but the funcards site was blocking it, too!
I decided to purchase a new year of service (knowing my current one is going to expire sometime this month). It took two hours of searching, but exterminate it fixed my computer last night.
I have no idea how you all do it, but I would be lost without your service.
Thank you!!!

Valerie

File: drss.dat

Location of drss.dat and Associated Malware

Check whether drss.dat is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific drss.dat file locations:

  • C:\Documents And Settings\All Users\Application Data\Windows\drss.dat

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific drss.dat file locations:

  • C:\ProgramData\Windows\drss.dat

If you find drss.dat file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The drss.dat file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of drss.dat File^

File SizeFile Md5Last Seen
118784F562E6D35E90EF7FA572DD7C7EC03A40Jul 6, 2012
123904BE9E63958ED5EC396F25ABC22118130BJul 11, 2012
11110439A7D8A70B38381DE51443481A3439E6Jul 12, 2012
111104B655D926E2D04CD34C713F0C77093F34Jul 17, 2012
69632750150E3339224FD47DB930DBBB84722Jul 18, 2012
1152002193E4473835DC99966E11C1800A4FAFJul 24, 2012
1351683A21B694BB214875F79132ED3823E272Jul 26, 2012
11366455E3C7C043AED0DCFAE88C53921EFB2BJul 27, 2012
1382401B3A77EE73420570F3ED1808E3EA04E5Jul 28, 2012
67584067F5733134E2ED35EDAEC4BA2F09D12Jul 29, 2012
875529EDD747B42EDA72B9117CD2B2FE8EB9CJul 29, 2012
109568BC7E8384D05FF7DB1257E5FF70B654B8Aug 4, 2012
8652866096F2A7511B81A5435FC3A78ACF260Aug 8, 2012
1392640802A43ADB87D7CFD55EDFABAC819ACEAug 10, 2012
114176D9A0B0D159E95A2040D9A3218DDAF441Aug 12, 2012
983048794A3BDB40E0F447BD1FBA5A3E5C240Aug 16, 2012
88064875BDA0340367522DD58CAAA00AC0C7DAug 17, 2012
94208BC9F9C4B1C4EC682A5C6C137872ADCEBAug 22, 2012
135168289282488302819E2E23CB4DE0E8EED7Aug 25, 2012
942085E1627B834B3557241A88FA04CDE99EAAug 26, 2012
1382405929B936CB3B9103CE3CC6DB4E1B0C25Aug 29, 2012
88576F3989A98925D2AF097F2A5D243037111Aug 31, 2012
94208B0E9CD4861354959E38206D5EB887EC6Sep 16, 2012
972803AF7AECADA8D004838D6BBF84CFB4251Oct 5, 2012
94208D53278DE2DBF9F455A34B724DAD8B299Oct 21, 2012
114688F701918DC72B9DE34E66E261BFF06ECENov 30, 2012
8857696D9B2E2EC60B0FC18C5045B06BEB5BCDec 16, 2012
7065662A28440CD27E084403C7E5A69906508Dec 24, 2012
660481C432C3704D3DA17441643E05D2853EDJan 2, 2013
114688B291055431D5851A32951E66EFD50CB9Jan 2, 2013
13926491B740E872AB885BE5AE4C3A131DAD97Jan 3, 2013
139264C852DC2BC649B3CAADA85C4895E026C8Jan 18, 2013
138240502D2F39AE6C89BCC8B3BED2E23C7B43Jan 22, 2013
92160626ED844DBE9A222A46859C2BE03AAF3Feb 3, 2013
137216DF8ACCCAEF3E6FCD0D87AD5F62DFDB57Feb 10, 2013
82432D3058BADA3435E5557B0C8CAED3176B7Feb 17, 2013
96256B2AC1424CDD0451DFA235A9E9F608A79Mar 19, 2013
135168A3BA477A42E0DD6CD81B735DF414E363Mar 19, 2013
80896C7816DEF4780AE6FC32AA3F466EDC236Apr 15, 2013
1029123CD4EE17D671AD8E04016F3C05BEA234Apr 25, 2013
1116161F72B8D6D4A017B6735E7A82BC1AFEC4Apr 26, 2013
829442BC6EA182CB24E7A60FD5A7710C54E2BMay 24, 2013
111104D1CF1BBA490201749167E4C541698940Jun 3, 2013
8192057148E749CC6E0B31096ABDF93E0AD2BJul 22, 2013
82944309E5C7F312EB25DECB175E3A932CC4CJul 28, 2013
8499275C6E0AA3ECF7D07BC40C06E23D2C742Oct 13, 2013
9984047400EEA3BFCCC68F3501F33B418715EDec 24, 2013
988163E8BE91D179F50EACB664340C9475D63Mar 27, 2014
10035211CAC6124E437F16402192BADA4DB33BMar 6, 2015
94208E43A18A801271B63EE146753D29C39E9Jun 3, 2015
7168074F0BDFCA9947EEA637F6BFEEC93ABB8Sep 3, 2016
1095680CC010286010D174D1FB5D5AE6A9BCF9Mar 22, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove drss.dat^

  1. To enable deleting the drss.dat file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select drss.dat and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of drss.dat and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of drss.dat and Associated Malware.
  6. Notes:

    • The deletion of drss.dat will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of drss.dat will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a drss.dat malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type drss.dat. The name of the first found registry value referencing drss.dat is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to drss.dat, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of drss.dat and Associated Malware.