Exterminate It! Antimalware


Known threats:699,742 Last Update:November 20, 22:46


exterminate it remove the agent.nbo files without restart. i let it scan again, nothing found! great job!

now i surf since 5 minutes, no popups, it looks like the problem is solved!

big thanks to you and your team, you are the only company that give me response and realy help to remove this bad worm/malware!

i will place now links to our network to your homepage and email my friends and business partners that they know that there is a realy good company with a great tool and good programmers.



m. s.

File: e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job

Location of e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job and Associated Malware

Check whether e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job is present in the following locations:

e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job file locations that are Windows version independent:

  • C:\Windows\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job

If you find e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job file is associated with malware only if found in the locations listed above.


Different Variations of e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job File^

File SizeFile Md5Last Seen
313207E75F71160E4DFE37F8FFDF319A5120Mar 23, 2015
3188AC58570A2E31A5BF154EA4292573D116Mar 31, 2015
3470621CC23C9A77997F935A795B6F5C93B5Apr 7, 2015
31646E8766991DA8D88023D28B67295B9161Apr 22, 2015
34608324534EF9BFB0FE2957EF4D3F704C3EMay 1, 2015
3472C740830A6329A1750169BE6A87E35B83May 2, 2015
31281551211AE43B1F40DED56430C5F33FFBMay 6, 2015
3466BEBB51E951EBEC830F349A97F7BE1EEEMay 6, 2015
34789628A575FF0B4FF583F603C24E75CC1FMay 8, 2015
315063D5533A1DE3947064F9E2807AC74CDCMay 11, 2015
3468B149B5CC8C708EB21FF90D45D174BF4FMay 11, 2015
3470A2528E25F9A39E6B384D93210EA757A1May 13, 2015
346866E6BF85C9C773D34327B98DF91D9E47May 18, 2015
3498F3AAA599C31379F39361236E9F4C546CMay 25, 2015
3146E47DF50DC7748E277721543F7705BC1DMay 30, 2015
3472DEA8BF0B6A1A7DA398F3FEC60B6AC15FJun 10, 2015
346839C0AA702079000F201150823CB11A53Jun 12, 2015
3462D8102592802A2E2FCB432A1AEEE7A427Aug 6, 2015
3502701BC8972E739CD53F4E70D648A6B5C4Aug 19, 2015
3502CC93B648A0F6236B0AD655290B3F7083Aug 23, 2015
34763430360BD559DBB8AB1E7D7450D791AEAug 26, 2015
3118613C52E4EA5325AF3BC238DB9E98471AAug 27, 2015
347413864440576A13540DE95437A9430B45Sep 20, 2015
3490DF20079FB281547DCBED71BA33328FCASep 25, 2015
347077DD05A1CDC0B97D4351F0241778052COct 4, 2015
34929E233831335035EF7FE2E65E7AF6D18CNov 21, 2015
3474D3540C76A376B25CF7428DD2950C4B4ADec 23, 2015
347277E90987F5CFD26B5B99C625AA0089F6Dec 28, 2015
3472AC02BCF7F40D929E761D0FCD7AC12990Jan 13, 2016
3454BE8DE830986D825252666009E80F79C9Mar 5, 2016
31183CBC73BCB3AC04DB7939A7AAD7AE4137Mar 13, 2016
3142902EDB738AFC4886A12719A65A6F5433Mar 24, 2016
313811C3AA6A71071D01334EDF2C3F6B48E7Apr 2, 2016
3488E463080541DEDA62ED4C8452D62B0957Apr 18, 2016
34723651B4E713C6C41501DBC1935A1EC7CBMay 12, 2016
34580B3458E4804AAF095403FD3E48179B2FMay 22, 2016
346696CB4614A0292EE2A63ACCDFD40ABFCFMay 24, 2016
3460D2BE09DBEEB4199444E2B150205C6347May 25, 2016
311866FBD4BE2EF33A150ADC8283B72DB042May 30, 2016
3472B232EC108F1146CFCCF1ACD123A7E756Jun 2, 2016
3472E87445F39E867B3866C1E624D6EFE09CJun 4, 2016
3118888FE406AE8E2B9C5EFB4335CDDCF647Jun 10, 2016
3142B39B05E5D83C55E4C34C2895C2453582Jun 13, 2016
34762C5A79D6959007B7DF73D5BDF65A4F5EAug 11, 2016
34682B17B8A5F0ADE21C1F3D06076C12BCF1Sep 10, 2016
31580E90E36196F6678F0A48544822A26834Oct 24, 2016
3456C1CC9CA15DFC39B278F70789150C0789Nov 12, 2016
31604BB03E7E1A4DD7F749E189B53CDB1EF1Nov 20, 2016
34687EE53E3E402D9A7D5AAFC7D102D93AEADec 25, 2016
3140CA31C8AA1090F211D2C0FCA5B543A7B0Jan 7, 2017
34546870B0C6307CC9C5D8534D01E27D3E16Feb 17, 2017
348455DE82B1D511C6C0A45BA60002BC0F5AApr 11, 2017
34662F4721D4C4DC98E458898849DF44554CApr 29, 2017
34588156A8FCB62AD0A94A35C0AB376B2047May 26, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job^

  1. To enable deleting the e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job and Associated Malware.
  6. Notes:

    • The deletion of e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job. The name of the first found registry value referencing e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job and Associated Malware.